Third-party design provenance

T3MP3ST

Pentest MCP's production campaign design is informed by Pliny's T3MP3ST, reviewed at commit 29824d5625ede419ac8cdae418c8f4c72c6270f7 (tag v1.0.0). T3MP3ST is licensed under AGPL-3.0-or-later.

The adopted design ideas are the bounded ReAct loop, duplicate-call guard, bounded concurrency, crash recovery journal, strict tool-call boundary, protected evidence context, and tool-evidence gate. Pentest MCP implements these concepts against its own MCP catalog, engagement scope engine, evidence store, and analyst publication workflow.