PROJECT THREE - TOOLS, THE MODEL CONTEXT PROTOCOL (MCP), AND SAFETY

PRACTICE LAB CONNECTION Stage 3 deliverables. You now have hooks.py, mcp_client.py, mini_mcp_server.py, mcp_client_config.json, mcp_demo.py, make_injection_data.py, an idempotent write_report, an approval step, and resume_injection_test.txt in sample_data. Intentional bugs to find. There are three: the injected instruction in resume_injection_test.txt, the missing idempotency check in write_report, and the optional poisoned tool description. Acceptance criteria for Stage 3. First, running the lab on resume_injection_test.txt gives a normal, unmanipulated report and a logged security event saying the attempt was detected and ignored. Second, write_report cannot replace an existing report without a logged approval. Third, your written note says where the idempotency bug was found and how it was fixed. Save a version-control checkpoint labeled stage3.