MCP AUDIT - SECURITY DIFF
Baseline: origin/main
Current:  HEAD
Target: <TMP>/head

Tools
~ fetch_status

Blocking regressions
+ fetch_status: network allowlisted_hosts -> unrestricted_outbound
+ MCP003 fetch_status: finding none -> high

Warnings
+ MCP007 fetch_status: finding none -> medium

Improvements
(none)

Risk: 0 -> 45
Blocking regressions: 2
Result: FAIL
