{
  "action": "review",
  "emergencyEligible": true,
  "id": "GPR-005",
  "limitations": [
    "MCP discovery and enforcement vary by harness and event surface."
  ],
  "matcher": {
    "kind": "mcp",
    "value": "unreviewed-mcp-server"
  },
  "reviewedAt": "2026-08-09",
  "risk": "high",
  "schemaVersion": "guard-policy-recipe/v1",
  "slug": "review-new-mcp-servers",
  "summary": "Require review when a supported harness attempts to use an MCP server that has not been reviewed.",
  "templateId": "review-new-mcp-servers",
  "tests": [
    {
      "expected": "review",
      "label": "matching synthetic case",
      "matcherKind": "mcp",
      "value": "unreviewed-mcp-server"
    },
    {
      "expected": "unmatched",
      "label": "different benign synthetic case",
      "matcherKind": "mcp",
      "value": "benign-unreviewed-mcp-server"
    }
  ],
  "threatSlugs": [
    "mcp-tool-poisoning"
  ],
  "title": "Review new MCP servers"
}