{
  "repository": "HKUDS/Vibe-Trading",
  "commit_source": "git_rev_parse",
  "commit_sha": "54f944743efee7b9cbaaeafb5966c583d0d4ac66",
  "submitted_target": {
    "target_kind": "git_tag",
    "commit_sha": "8cebccb9b301f962d11bf0fa8c6be9bf7d7e12f2",
    "version": "0.1.9",
    "ref": "v0.1.9",
    "display": "HKUDS/Vibe-Trading v0.1.9 (vulnerable baseline, commit 8cebccb)"
  },
  "variant_target": {
    "target_kind": "git_tag",
    "commit_sha": "54f944743efee7b9cbaaeafb5966c583d0d4ac66",
    "version": "0.1.10",
    "ref": "v0.1.10",
    "display": "HKUDS/Vibe-Trading v0.1.10 (fixed target under test, commit 54f9447)"
  },
  "tested_revisions": {
    "vulnerable_baseline": {
      "ref": "v0.1.9",
      "commit_sha": "8cebccb9b301f962d11bf0fa8c6be9bf7d7e12f2",
      "worktree": "bundle/artifacts/vt-vuln",
      "git_rev_parse": "8cebccb9b301f962d11bf0fa8c6be9bf7d7e12f2"
    },
    "fixed_target": {
      "ref": "v0.1.10",
      "commit_sha": "54f944743efee7b9cbaaeafb5966c583d0d4ac66",
      "worktree": "bundle/artifacts/vt-fixed",
      "git_rev_parse": "54f944743efee7b9cbaaeafb5966c583d0d4ac66"
    }
  },
  "resolution_method": "Isolated git worktrees (git worktree add --detach) under bundle/artifacts/ at tags v0.1.9 and v0.1.10; the shared project-cache clone remained at v0.1.10 (54f9447) and was not mutated.",
  "notes": "The variant/partial-bypass was confirmed against the FIXED v0.1.10 (commit 54f9447). The vulnerable v0.1.9 (commit 8cebccb) was used only as the baseline control. Exact commits captured via git rev-parse HEAD in each worktree."
}