{
  "entrypoint_kind": "api_remote",
  "entrypoint_detail": "Unauthenticated Conductor REST API: POST /api/metadata/workflow + POST /api/workflow/{name} (no auth) on host-network conductor at http://172.20.0.1:8080. Tested variants: A=INLINE+python, B=LAMBDA+JS, C=INLINE+graaljs, D=INLINE+javascript(Java.type bypass).",
  "service_started": true,
  "healthcheck_passed": true,
  "target_path_reached": true,
  "runtime_stack": [
    "conductoross/conductor:3.22.3 (vulnerable, commit c969d9b82d4f37e92dffe2fa85da026af32956b3)",
    "conductoross/conductor:3.30.2 (fixed, commit 2bea5078f916c0d529cd0f32a55f79425b65a5b8)",
    "Docker --network host"
  ],
  "proof_artifacts": [
    "logs/vuln_variant_steps.log",
    "logs/vuln_variant_A.log",
    "logs/vuln_variant_B.log",
    "logs/vuln_variant_C.log",
    "logs/variant_vuln_container.log",
    "logs/variant_fixed_container.log",
    "artifacts/vuln_variant_A.json",
    "artifacts/vuln_variant_B.json",
    "artifacts/vuln_variant_C.json",
    "artifacts/vuln_variant_marker_check.txt",
    "artifacts/fixed_variant_A.json",
    "artifacts/fixed_variant_B.json",
    "artifacts/fixed_variant_C.json",
    "artifacts/fixed_variant_D.json",
    "artifacts/fixed_variant_marker_check.txt",
    "artifacts/variant_summary.json",
    "logs/vuln_variant/fixed_version.txt",
    "logs/vuln_variant/vuln_version.txt"
  ],
  "variant_results": {
    "vulnerable_3.22.3": {
      "A_python": {"rce_confirmed": true, "task_status": "COMPLETED", "output": "uid=0(root) gid=0(root) groups=0(root)\\nPRUVA_VAR_RCE_<ts>\\nmuramasa\\n"},
      "B_lambda": {"rce_confirmed": true, "task_status": "COMPLETED", "output": "uid=0(root) gid=0(root) groups=0(root)\\nPRUVA_VAR_RCE_<ts>\\nmuramasa\\n"},
      "C_graaljs": {"rce_confirmed": true, "task_status": "COMPLETED", "output": "uid=0(root) gid=0(root) groups=0(root)\\nPRUVA_VAR_RCE_<ts>\\nmuramasa\\n"},
      "marker_file_present": true
    },
    "fixed_3.30.2": {
      "A_python": {"rce_confirmed": false, "task_status": "FAILED_WITH_TERMINAL_ERROR"},
      "B_lambda": {"rce_confirmed": false, "task_status": "FAILED"},
      "C_graaljs": {"rce_confirmed": false, "task_status": "FAILED_WITH_TERMINAL_ERROR"},
      "D_java_type": {"rce_confirmed": false, "task_status": "FAILED_WITH_TERMINAL_ERROR"},
      "marker_file_present": false
    }
  },
  "notes": "All 3 variants reproduced on vulnerable (3/3 RCE confirmed, marker file present). All 4 variants blocked on fixed (0/4, no marker file). Bypass not found. Fix is complete."
}