ProvenanceGuard catches MCP answers that cite the wrong source
ProvenanceGuard gives MCP agents a second check for answers that contain a true fact but attribute it to the wrong record, policy, or tool. It reads the agent’s captured trace, keeps each tool output tied to its source ID, then checks every claim against the source the answer names or implies before issuing an answer-level allow or block decision. That closes a gap that pooled evidence can hide: supported somewhere is not supported by the cited source.