{
  "entrypoint_kind": "api_remote",
  "entrypoint_detail": "Unauthenticated Conductor REST API: POST /api/metadata/workflow + POST /api/workflow/{name} (no auth) on host-network conductor at http://172.20.0.1:8080",
  "service_started": true,
  "healthcheck_passed": true,
  "target_path_reached": true,
  "runtime_stack": [
    "conductoross/conductor:3.22.3 (vulnerable)",
    "conductoross/conductor:3.30.2 (fixed negative control)",
    "Docker --network host"
  ],
  "proof_artifacts": [
    "logs/reproduction_steps.log",
    "logs/vuln_container.log",
    "logs/vuln_exploit.log",
    "artifacts/vuln_health.json",
    "artifacts/vuln_metadata_http.txt",
    "artifacts/vuln_exploit.json",
    "artifacts/vuln_marker_check.txt",
    "logs/fixed_container.log",
    "logs/fixed_exploit.log",
    "artifacts/fixed_exploit.json",
    "artifacts/fixed_marker_check.txt"
  ],
  "notes": "vulnerable_task_status=COMPLETED fixed_task_status=FAILED_WITH_TERMINAL_ERROR | vuln_cmd_output='uid=0(root) gid=0(root) groups=0(root)\\nPRUVA_RCE_CONFIRMED_1783233078\\nmuramasa\\nPRETTY_NAME=\"Debian GNU/Linux 13 (trixie)' | fixed_cmd_output='' | overall_confirmed=true"
}