Key Management and Trust Boundaries

Signed receipts on MCP tool calls: 20 lines buys you evidence, not trust

A dev.to tutorial wraps MCP handlers so every tool call returns an Ed25519-signed receipt. The signature covers the wire. It does not cover the process doing the signing.