[week-05] 25512089

[ChanArun]

What I built

• Implemented an MCP negotiation market using Streamable HTTP
• Added bearer-token authentication and negotiation/role binding
• Added server-side enforcement for turn-taking and price limits
• Ran the required prompt_inject and server_inject experiments

Results

• prompt_inject: 12/12 correct, 0 violations
• server_inject: 12/12 correct, 0 violations
• Server-enforced condition refused 3 unauthorized price attempts
• All 3 refusals were followed by a valid move in the same turn

Files included

• market_server.py
• host.py
• runner.py
• auth_probe.py
• scenarios.json
• results.csv
• auth_checks.txt
• 6 experiment logs
• REPORT.md

Verification

python scripts/check_week05.py submissions/25512089/week-05

Result: all checks passed