diff --git a/src/server/contractToolHandler.ts b/src/server/contractToolHandler.ts
index 0ad6fcd16..e813f060f 100644
--- a/src/server/contractToolHandler.ts
+++ b/src/server/contractToolHandler.ts
@@ -70,6 +70,7 @@ export const createEvidenceToolHandler =
                 result.error,
                 partial.evidence_id,
                 recorded,
+                contract.returnsTargetContent,
               );
           }
           return server.delivery.toCallToolResult(result, contract);
diff --git a/tests/boundary/mcp/packetCaptureMcp.test.ts b/tests/boundary/mcp/packetCaptureMcp.test.ts
index 3d7322baf..e11b60d3e 100644
--- a/tests/boundary/mcp/packetCaptureMcp.test.ts
+++ b/tests/boundary/mcp/packetCaptureMcp.test.ts
@@ -90,6 +90,9 @@ it.each(["cancelled", "cleanup"])(
       arguments: input,
     });
     expect(response.isError).toBe(true);
+    expect(response._meta).toEqual({
+      provenance: { untrusted_content: true, source: "analysis_target" },
+    });
     expect(parseMcpToolError(response)).toMatchObject({
       error: {
         details: {