MCP Went Stateless the Same Season It Got 106 Zero-Days Found in It. That's Not a Coincidence.

The July 2026 spec rewrite reads like an architecture upgrade. Read it next to the CVE list and it reads like triage. I spent a chunk of this spring watching MCP servers get popped in ways that were a