Bound public model work requests

[vahid-ahmadi]

What changed

• publishes MCP schema bounds for expensive OBR and SVAR inputs
• limits OBR shock periods to 1-40 quarters
• limits SVAR forecast horizons to 1-40 quarters
• limits SVAR posterior draws to 50-10,000
• enforces the same bounds in the core adapters before importing or running a model
• adds regression tests for schemas and direct adapter bypasses

Why

The public, no-key MCP endpoint accepted unbounded integer work requests. A malformed or abusive request could trigger excessive model computation even when callers bypassed the MCP layer.

Validation

• 52 focused core/wiring tests passed
• Ruff passed on all changed Python files
• git diff --check passed

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
macromod	Ready	Preview, Comment	Jul 26, 2026 1:43pm