{"schema_version": 1, "updated_at": "2026-07-05T14:09:28.414387822Z", "entries": [{"logical_path": "repro/reproduction_steps.sh", "stage": "repro", "role": "primary_reproducer", "destination": "public_evidence", "required_for_verdict": true, "publishable": true, "reason": "Auto-declared after repro stage deliverable validation", "declared_by": "stage_validator"}, {"logical_path": "repro/rca_report.md", "stage": "repro", "role": "root_cause_analysis", "destination": "public_evidence", "required_for_verdict": true, "publishable": true, "reason": "Auto-declared after repro stage deliverable validation", "declared_by": "stage_validator"}, {"logical_path": "repro/validation_verdict.json", "stage": "repro", "role": "validation_verdict", "destination": "public_evidence", "required_for_verdict": true, "publishable": true, "reason": "Auto-declared after repro stage deliverable validation", "declared_by": "stage_validator"}, {"logical_path": "repro/runtime_manifest.json", "stage": "repro", "role": "runtime_manifest", "destination": "public_evidence", "required_for_verdict": true, "publishable": true, "reason": "Auto-declared supplemental repro stage artifact", "declared_by": "stage_validator"}, {"logical_path": "logs/rce_id_output.txt", "stage": "repro", "role": "crash_trace", "destination": "public_evidence", "required_for_verdict": true, "publishable": true, "reason": "Direct RCE proof \u2014 output of the id command executed via the installed webshell", "declared_by": "agent_tool"}, {"logical_path": "logs/exploit_evidence.txt", "stage": "repro", "role": "marker_output", "destination": "public_evidence", "required_for_verdict": false, "publishable": true, "reason": "Structured evidence summary documenting the privilege escalation and RCE steps", "declared_by": "agent_tool"}, {"logical_path": "logs/reproduction_steps.log", "stage": "repro", "role": "proof_log", "destination": "public_evidence", "required_for_verdict": true, "publishable": true, "reason": "Referenced by runtime_manifest.proof_artifacts", "declared_by": "runtime_manifest"}, {"logical_path": "logs/exploit_evidence.txt", "stage": "repro", "role": "proof_log", "destination": "public_evidence", "required_for_verdict": true, "publishable": true, "reason": "Referenced by runtime_manifest.proof_artifacts", "declared_by": "runtime_manifest"}, {"logical_path": "logs/rce_id_output.txt", "stage": "repro", "role": "proof_log", "destination": "public_evidence", "required_for_verdict": true, "publishable": true, "reason": "Referenced by runtime_manifest.proof_artifacts", "declared_by": "runtime_manifest"}, {"logical_path": "logs/rce_whoami_output.txt", "stage": "repro", "role": "proof_log", "destination": "public_evidence", "required_for_verdict": true, "publishable": true, "reason": "Referenced by runtime_manifest.proof_artifacts", "declared_by": "runtime_manifest"}, {"logical_path": "vuln_variant/reproduction_steps.sh", "stage": "vuln_variant", "role": "primary_reproducer", "destination": "variant_candidate", "required_for_verdict": true, "publishable": true, "reason": "Auto-declared after vuln_variant stage deliverable validation", "declared_by": "stage_validator"}, {"logical_path": "logs/vuln_variant/rce_id_output.txt", "stage": "vuln_variant", "role": "crash_trace", "destination": "public_evidence", "required_for_verdict": true, "publishable": true, "reason": "Direct RCE proof output via the variant sink: uid=33(www-data) gid=33(www-data) groups=33(www-data).", "declared_by": "agent_tool"}, {"logical_path": "logs/vuln_variant/exploit_evidence.txt", "stage": "vuln_variant", "role": "marker_output", "destination": "public_evidence", "required_for_verdict": true, "publishable": true, "reason": "Structured evidence summary of the variant run: escalation (roles [2,5]->[2,4]), variant sink endpoints, webshell-on-disk confirmation, and RCE output.", "declared_by": "agent_tool"}, {"logical_path": "logs/vuln_variant/reproduction_steps.log", "stage": "vuln_variant", "role": "proof_log", "destination": "variant_candidate", "required_for_verdict": true, "publishable": true, "reason": "Referenced by runtime_manifest.proof_artifacts", "declared_by": "runtime_manifest"}, {"logical_path": "vuln_variant/variant_manifest.json", "stage": "vuln_variant", "role": "variant_manifest", "destination": "variant_candidate", "required_for_verdict": true, "publishable": true, "reason": "Auto-declared after vuln_variant stage deliverable validation", "declared_by": "stage_validator"}, {"logical_path": "vuln_variant/validation_verdict.json", "stage": "vuln_variant", "role": "validation_verdict", "destination": "variant_candidate", "required_for_verdict": true, "publishable": true, "reason": "Auto-declared after vuln_variant stage deliverable validation", "declared_by": "stage_validator"}, {"logical_path": "vuln_variant/source_identity.json", "stage": "vuln_variant", "role": "source_identity", "destination": "variant_candidate", "required_for_verdict": false, "publishable": true, "reason": "Auto-declared supplemental vuln_variant stage artifact", "declared_by": "stage_validator"}, {"logical_path": "vuln_variant/rca_report.md", "stage": "vuln_variant", "role": "root_cause_analysis", "destination": "variant_candidate", "required_for_verdict": true, "publishable": true, "reason": "Auto-declared after vuln_variant stage deliverable validation", "declared_by": "stage_validator"}, {"logical_path": "vuln_variant/patch_analysis.md", "stage": "vuln_variant", "role": "patch_analysis", "destination": "variant_candidate", "required_for_verdict": true, "publishable": true, "reason": "Auto-declared after vuln_variant stage deliverable validation", "declared_by": "stage_validator"}, {"logical_path": "vuln_variant/runtime_manifest.json", "stage": "vuln_variant", "role": "runtime_manifest", "destination": "variant_candidate", "required_for_verdict": true, "publishable": true, "reason": "Auto-declared supplemental vuln_variant stage artifact", "declared_by": "stage_validator"}, {"logical_path": "vuln_variant/root_cause_equivalence.json", "stage": "vuln_variant", "role": "root_cause_analysis", "destination": "variant_candidate", "required_for_verdict": false, "publishable": true, "reason": "Auto-declared supplemental vuln_variant stage artifact", "declared_by": "stage_validator"}, {"logical_path": "logs/vuln_variant/exploit_evidence.txt", "stage": "vuln_variant", "role": "proof_log", "destination": "variant_candidate", "required_for_verdict": true, "publishable": true, "reason": "Referenced by runtime_manifest.proof_artifacts", "declared_by": "runtime_manifest"}, {"logical_path": "logs/vuln_variant/rce_id_output.txt", "stage": "vuln_variant", "role": "proof_log", "destination": "variant_candidate", "required_for_verdict": true, "publishable": true, "reason": "Referenced by runtime_manifest.proof_artifacts", "declared_by": "runtime_manifest"}, {"logical_path": "logs/vuln_variant/rce_whoami_output.txt", "stage": "vuln_variant", "role": "proof_log", "destination": "variant_candidate", "required_for_verdict": true, "publishable": true, "reason": "Referenced by runtime_manifest.proof_artifacts", "declared_by": "runtime_manifest"}, {"logical_path": "logs/vuln_variant/fixed_version.txt", "stage": "vuln_variant", "role": "proof_log", "destination": "variant_candidate", "required_for_verdict": true, "publishable": true, "reason": "Referenced by runtime_manifest.proof_artifacts", "declared_by": "runtime_manifest"}]}