{
  "entrypoint_kind": "library_api",
  "entrypoint_detail": "jest harness exercising @sigstore/verify getTLogTimestamp() and Verifier.verify() on a real cert-signed sigstore bundle (inclusionProof-only, attacker-chosen integratedTime)",
  "service_started": false,
  "healthcheck_passed": true,
  "target_path_reached": true,
  "runtime_stack": [
    "node",
    "jest",
    "@swc/jest",
    "@sigstore/verify",
    "@sigstore/bundle",
    "@sigstore/core",
    "@sigstore/protobuf-specs"
  ],
  "proof_artifacts": [
    "logs/canonical.log",
    "logs/control.log",
    "logs/canonical_jest.log",
    "logs/control_jest.log",
    "repro/harness_test.ts"
  ],
  "notes": "vulnerable_commit=7845532f9d17f6f765363dbee82b01bd159fb52b (parent of fix f074710, @sigstore/verify 3.1.0); fixed_commit=f074710a91ea9260a9ac2142345634579843a3cd (@sigstore/verify 3.1.1). confirmed=True. canonical.log contains [CALLSITE_HIT]+[PROOF_MARKER] (incl. expired-cert accepted via unauthenticated integratedTime); control.log contains [NC_MARKER] (getTLogTimestamp=undefined, TIMESTAMP_ERROR)."
}