{
  "entrypoint_kind": "library_api",
  "entrypoint_detail": "globalThis.crypto.subtle.verify for Ed25519 with small-order public key and low-order R component",
  "service_started": false,
  "healthcheck_passed": false,
  "target_path_reached": true,
  "runtime_stack": [
    "nodejs-v27.0.0-pre",
    "openssl-bundled"
  ],
  "proof_artifacts": [
    "logs/vuln_test_output.log",
    "logs/fixed_test_output.log",
    "repro/ed25519_forgery_test.js"
  ],
  "notes": "Vulnerable and fixed Node.js binaries built from same base commit, differing only in crypto_sig.cc small-order point check (fix 29890721). Vulnerable build returns true for forged Ed25519 signatures with identity/order-8 points; fixed build returns false."
}