Lighthouse

Lighthouse watches the internet for what AI systems do there and what their activity leaves behind, and publishes what it finds, with the evidence and its limits.

Studies LH006

Is there a public record of what was installed, past the download?

The answer so far. Yes, in part: a published container image is a public record of installed state, and it reaches past the download to the installation, though not to a run. Inside each image's layers the installer's own record, a site-packages/mcp-<version>.dist-info directory, says which version of mcp was installed, and the image's configuration says when it was built. For the images read here that record could be read anonymously from the registry without pulling the image, by streaming the image's upper layers and stopping at the directory, between 25 and 211 MB of compressed data per image (observation; data/image_mcp.csv).

Study, version 0.2, 26 September 2026 studies/LH006/LH006.md

From studies/LH006/ in the repository, last changed 9 November 2026.