go install builds report their version: A binary installed with go install …/cmd/scout@vX.Y.Z used to report dev, so attestations named an instrument nobody could reproduce. scout now reports the module version the Go toolchain embeds.
protocol.get_stream no longer waits out the timeout: scout stops at the headers instead of reading an idle event stream for 30 seconds. Against the reference everything server, the protocol phase drops from about a minute to milliseconds, with the same verdicts and score.
scout-mcp ships: An MCP server over stdio exposes scout as three read-only tools, so an agent can check a server and verify an attestation. It evaluates loopback endpoints only unless you allowlist more.