We found an attack class in MCP tool-call receipts, built a linter for it | Hacker News Reader