{
  "entrypoint_kind": "api_remote",
  "entrypoint_detail": "POST /api/ds/query with SQL expression INTO clause",
  "service_started": true,
  "healthcheck_passed": true,
  "target_path_reached": true,
  "runtime_stack": ["docker", "grafana:11.6.0"],
  "proof_artifacts": [
    "repro/rca_report.md",
    "repro/validation_verdict.json",
    "logs/grafana_logs.log"
  ],
  "notes": "Based on testing Grafana v11.6.0 Docker image with sqlExpressions enabled: Login succeeded at /login, feature toggle confirmed enabled. SQL expression INTO clauses were blocked with error 'blocked node sqlparser.Variables - not supported in queries'. Simple SELECT queries worked correctly. No files were created via INTO clauses. Evidence suggests vulnerability may be patched in tested Docker image or requires Enterprise plugin component for full exploit chain."
}