Echo Show 15 Multimodal Acoustic & X-Ray Home Triage

Real-time 2048-point Radix-2 Cooley-Tukey FFT diagnoses mechanical appliance faults from raw audio harmonics, stages verified Amazon Prime OEM parts, locks out lethal 240V/CO hazards, and blocks poisoned third-party repair bulletins via ConsentGate IFC.

Select Household Fault Signature:
AMAZON ECHO SHOW 15 • MULTIMODAL DIAGNOSTIC WALL HUB • MCP 2025-11-25
RADIX-2 COOLEY-TUKEY FFT (N=2048, BLACKMAN-HARRIS)

Washer Drain Pump Impeller Cavitation

Confidence: 99%
f₀: 120 Hz f_fault: 784 Hz THD: 38.4% Crest: 5.8 dB
Fundamental (f₀) 120 Hz
Dominant Fault Peak 784 Hz
Secondary Harmonic 1568 Hz
Harmonic Distortion 38.4%
Crest Factor 5.8 dB
Spectral Centroid 912 Hz
INTERACTIVE X-RAY SUB-ASSEMBLY SCHEMATIC

Whirlpool / Maytag Front-Load Washer

MODERATE_DIY
Fault Locus: Drain Pump Impeller & Volute Housing

Detected 120 Hz stator hum coupled with 784 Hz / 1,568 Hz impeller blade cavitation harmonics.

ALEXA+ AGENT SKILL & SAFETY LATTICE

Triage, OEM Part & Safety Gate

IFC VERIFIED
AMAZON PRIME OEM MATCH

Whirlpool OEM Drain Pump Assembly

Part #: WPW10348269 • Same-Day Prime
$28.40 Saves $186.60
⏱️ DIY Time: 25 min 🔧 Difficulty: Easy
Guided Resolution & Safety Steps:
    "I isolated a 784 Hz cavitation harmonic on your washer's drain pump impeller. You can fix this in 25 minutes with OEM part WPW10348269 for $28.40, saving $186 over a technician dispatch."

    Cross-Tool Indirect Prompt Injection Firewall (Confused Deputy Arena)

    Test how ConsentGate MCP halts untrusted external content (emails, calendar invites, courier notes, scraped repair manuals) from invoking high-consequence smart locks, alarms, or payments.

    Test Attack Families:

    1. Multi-Turn Voice & Ingestion Context

    Session Input
    UNPROTECTED ALEXA+ AGENT (No IFC Proxy)
    ⚠️ SILENT EXPLOIT EXECUTED
    ECHO SHOW 15 + CONSENTGATE MCP (2025-11-25)
    🛡️ INTERCEPTED AT MCP TRANSPORT
    PROVENANCE DIFF Confused Deputy Escalation
    🗣️ Verified User Voice Intent

    "Alexa, check my calendar..."

    Authorized: read_calendar_invite
    🦠 Untrusted Taint Trigger

    Source: read_calendar_invite

    Blocked Call: unlock_front_door
    🎙️ Voice Step-Up Required: Speak confirmation code to authorize: "Echo Falcon"

    Dual Reproducible Benchmark: 112 Noisy PCM Waveforms + 108 Multi-Turn Attacks

    Every metric below is computed directly in code from 2048-point Radix-2 FFT periodograms across 4 AWGN noise levels and 108 formal IFC security traces.

    Suite A: Radix-2 FFT Acoustic Fault Classification Across AWGN Noise Tiers (112 PCM Signals)

    Overall Accuracy: 96.4% | Lethal Hazard Recall: 100.0%
    Unprotected Baseline Agent
    0.0%
    0 / 72 attacks blocked (100% hijacked)
    Heuristic Keyword Filter
    6.9%
    Catches literal "ignore previous" only
    ConsentGate IFC Lattice (2025-11-25)
    100.0%
    72 / 72 attacks intercepted | Wilson 95% CI: [94.9%–100%]
    Benign Control False Positive Rate
    0.0%
    36 / 36 legitimate multi-step commands allowed

    Per-Family Breakdown & 108-Scenario Trace Explorer

    ID Family Scenario Title User Voice Utterance Target Tool Baseline Heuristic ConsentGate IFC Action

    Formal Information-Flow Policy Lattice \((\tau, \kappa, \sigma)\)

    Inspect the deterministic capability signatures assigned to all 16 Alexa+ MCP tools (Acoustic DSP, Smart Home, Ring Security, and Amazon Commerce).

    Tool Capability Signatures Registry (16 Tools)

    Engine.TOOL_REGISTRY
    MCP Tool Name Category Trust Level (\(\tau\)) Consequence (\(\kappa\)) Sensitivity (\(\sigma\))

    Formal Non-Interference Rules

    Transport Enforcement

    Rule 1: Life-Safety & High-Voltage Hazard Lockout (\(\text{FFT} \to \text{Safety Shutoff}\))

    If Radix-2 FFT spectral analysis detects 240V Contactor Plasma Arcing (\(>3.8\text{ kHz}\) ratio \(>22\%\)) or UL-2034 Carbon Monoxide Temporal-4 (\(3,104\text{ Hz}\) 4-pulse cadence), DIY self-repair is deterministically locked out and emergency smart-breaker / evacuation relays fire immediately.

    Rule 2: Confused Deputy Escalation Gate (\(\tau = \text{UNTRUSTED} \to \kappa = \text{HIGH}\))

    If session taint vector \(T(s) \neq \emptyset\) and target tool has \(\kappa(t) = \text{IRREVERSIBLE\_HIGH}\), execution is halted unless \(t \in \text{IntentAnchor}(\text{VoiceUtterance})\) or verified via cryptographic VoiceConsentToken.

    Rule 3: Counterfeit Part & Exfiltration Guard (\(\sigma = \text{CRITICAL\_SECRET} \to \text{Sink}\))

    Blocks poisoned external repair bulletins from substituting unverified third-party ASINs or leaking data from get_household_vault to external endpoints.

    Live MCP 2025-11-25 Streamable HTTP Protocol Inspector

    Inspect real-time JSON-RPC 2.0 traffic, Mcp-Session-Id headers, and test acoustic DSP & security tools directly.

    JSON-RPC 2.0 Streamable HTTP Frame Log

    POST /mcp & SSE

    Terminal Verification Commands (curl)

    Self-Hosted Server 
    # 1. Initialize MCP 2025-11-25 Session
curl -X POST http://localhost:8080/mcp \
  -H "Content-Type: application/json" \
  -H "MCP-Protocol-Version: 2025-11-25" \
  -d '{"jsonrpc":"2.0","id":1,"method":"initialize","params":{"protocolVersion":"2025-11-25"}}'

# 2. Run Radix-2 FFT Acoustic Appliance Diagnosis via MCP
curl -X POST http://localhost:8080/mcp \
  -H "Content-Type: application/json" \
  -H "Mcp-Session-Id: sess_demo_01" \
  -d '{"jsonrpc":"2.0","id":2,"method":"tools/call","params":{"name":"analyze_acoustic_signature","arguments":{"faultPreset":"washer_drain_cavitation","snrDb":20}}}'

# 3. Evaluate High-Consequence Tool Under Taint (Blocked!)
curl -X POST http://localhost:8080/mcp \
  -H "Content-Type: application/json" \
  -H "Mcp-Session-Id: sess_demo_01" \
  -d '{"jsonrpc":"2.0","id":3,"method":"tools/call","params":{"name":"evaluate_tool_execution","arguments":{"toolName":"unlock_front_door","args":{"door":"front_main"}}}}'