ToolsRoam-Code 102 MCP Tools Architecture IntelligenceGitHub·high signalXBlueskyLinkedInCopy linkBlast radius analysis, anti-pattern detection, vulnerability reachability. 353 stars, 18.6/day, 19 days old. Offline operation.SourceSource pageGitHub↳ Follow the threadPolicy dependency / Stack layerCodex makes Code Mode wrappers transparent to Guardian policy and adds read-only policy to MCP tool requestsGitHubStack layer / Threat patternThree new advisories land on the most-used community GitLab MCP server, including a five-way bypass of its read-only mode and project allow-listGitHub Advisory DatabasePolicy dependency / Stack layerOrdewell uses a read-only coding agent as planner, then spawns per-task agent sessions gated by a marker-based verdict engineGitHubStack layer / ContrastHierarchos-Native trains 143 Transformer architectures on Rust and Vulkan with no CUDA or PyTorchGitHub / necat101 (via r/LocalLLaMA)Stack layer / Threat patternClaude Code v2.1.274 closes two Bash permission escapes and stops MCP errors printing resolved secretsGitHubStack layer / Threat patternPattern: the MCP security story has moved from individual servers to the SDKs everyone builds onGitHub Security AdvisoriesStack layer / Threat patternClaude Code was printing MCP secrets resolved from ${VAR} placeholders into error messagesClaude Code ChangelogStack layer / ContrastClaude Code makes the v2 MCP client and 2026-07-28 negotiation the default on Bedrock, Vertex and FoundryGitHub