{
  "schema_version": 1,
  "updated_at": "2026-07-08T04:47:28.864015806Z",
  "accepted": [
    {
      "logical_path": "repro/reproduction_steps.sh",
      "stage": "repro",
      "role": "primary_reproducer",
      "destination": "public_evidence",
      "required_for_verdict": true,
      "publishable": true,
      "reason": "Auto-declared after repro stage deliverable validation",
      "sha256": "af54ab2d7af712e1866ed5adff175d984fa1c9cd2f83da3ae3927637693b0636",
      "size_bytes": 24153,
      "content_type": "text/x-shellscript",
      "declared_by": "backfill"
    },
    {
      "logical_path": "repro/rca_report.md",
      "stage": "repro",
      "role": "root_cause_analysis",
      "destination": "public_evidence",
      "required_for_verdict": true,
      "publishable": true,
      "reason": "Auto-declared after repro stage deliverable validation",
      "sha256": "13516af2f08b11599f1267b29c8576512a98dcfbd5ed079805e8814519e96567",
      "size_bytes": 10863,
      "content_type": "text/markdown",
      "declared_by": "backfill"
    },
    {
      "logical_path": "repro/runtime_manifest.json",
      "stage": "repro",
      "role": "runtime_manifest",
      "destination": "public_evidence",
      "required_for_verdict": true,
      "publishable": true,
      "reason": "Auto-declared supplemental repro stage artifact",
      "sha256": "86aecd37d678a879989c116c5065d192587f475dd65dcd73f520f62c41ec2bd5",
      "size_bytes": 1081,
      "content_type": "application/json",
      "declared_by": "backfill"
    },
    {
      "logical_path": "repro/validation_verdict.json",
      "stage": "repro",
      "role": "validation_verdict",
      "destination": "public_evidence",
      "required_for_verdict": true,
      "publishable": true,
      "reason": "Auto-declared after repro stage deliverable validation",
      "sha256": "4762f28874fc5365162dbbe193431fbde50f60ba76750dc902620e3bbbc8ea91",
      "size_bytes": 1012,
      "content_type": "application/json",
      "declared_by": "backfill"
    },
    {
      "logical_path": "repro/artifacts/idor_response_vuln.json",
      "stage": "repro",
      "role": "request_response",
      "destination": "private_only",
      "required_for_verdict": true,
      "publishable": true,
      "reason": "The vulnerable /api/v1/responses response: status completed, model=victim flow UUID, output contains the attacker probe executed through the victim flow.",
      "sha256": "f15100bf3986cb2788f21c844e63eb04178d35bc9bdd774a61644e8a05a0af1f",
      "size_bytes": 718,
      "content_type": "application/json",
      "declared_by": "backfill"
    },
    {
      "logical_path": "repro/artifacts/idor_response_fixed.json",
      "stage": "repro",
      "role": "request_response",
      "destination": "private_only",
      "required_for_verdict": true,
      "publishable": true,
      "reason": "Fixed-commit negative control: same request returns error.code flow_not_found, proving the divergence is the missing ownership check.",
      "sha256": "9843d11061a2c73dbbbf3b186b2019d935cb60f7b1e5b0e45b58fcb2628da36c",
      "size_bytes": 141,
      "content_type": "application/json",
      "declared_by": "backfill"
    },
    {
      "logical_path": "repro/artifacts/summary.json",
      "stage": "repro",
      "role": "marker_output",
      "destination": "private_only",
      "required_for_verdict": true,
      "publishable": true,
      "reason": "Structured classification: idor_confirmed=true, ownership victim 200 / attacker 404, vulnerable executed, fixed blocked.",
      "sha256": "50e996825d930c3ff0d04a1a514ad71d4f74be5cea4ac4d8f2da105309334695",
      "size_bytes": 386,
      "content_type": "application/json",
      "declared_by": "backfill"
    },
    {
      "logical_path": "logs/reproduction_steps.log",
      "stage": "repro",
      "role": "proof_log",
      "destination": "public_evidence",
      "required_for_verdict": true,
      "publishable": true,
      "reason": "Referenced by runtime_manifest.proof_artifacts",
      "sha256": "970dfed5d29fcd00f22dd23d936c54df9143449c5bc917fe6d074bc95ac27e4f",
      "size_bytes": 3365,
      "content_type": "text/plain",
      "declared_by": "backfill"
    },
    {
      "logical_path": "logs/langflow_server_vuln.log",
      "stage": "repro",
      "role": "proof_log",
      "destination": "public_evidence",
      "required_for_verdict": true,
      "publishable": true,
      "reason": "Referenced by runtime_manifest.proof_artifacts",
      "sha256": "04145023d92406335b26c3f3e1993c4430f1588dc858092d8171655c0f7d2a7b",
      "size_bytes": 3302,
      "content_type": "text/plain",
      "declared_by": "backfill"
    },
    {
      "logical_path": "logs/langflow_server_fixed.log",
      "stage": "repro",
      "role": "proof_log",
      "destination": "public_evidence",
      "required_for_verdict": true,
      "publishable": true,
      "reason": "Referenced by runtime_manifest.proof_artifacts",
      "sha256": "b0d6354c424b65cd13d39b924cb05533d644bf5cb9d97bafdb041a9b5acc5369",
      "size_bytes": 2523,
      "content_type": "text/plain",
      "declared_by": "backfill"
    },
    {
      "logical_path": "repro/artifacts/victim_register.json",
      "stage": "repro",
      "role": "proof_log",
      "destination": "public_evidence",
      "required_for_verdict": true,
      "publishable": true,
      "reason": "Referenced by runtime_manifest.proof_artifacts",
      "sha256": "f4051e377900f879d1d179e2b4d19f0a9d56f84a39582fe75c9469b0b371cb6a",
      "size_bytes": 332,
      "content_type": "application/json",
      "declared_by": "backfill"
    },
    {
      "logical_path": "repro/artifacts/attacker_register.json",
      "stage": "repro",
      "role": "proof_log",
      "destination": "public_evidence",
      "required_for_verdict": true,
      "publishable": true,
      "reason": "Referenced by runtime_manifest.proof_artifacts",
      "sha256": "7ad51b61311b59ad5e6b83918bb3e9c1e72c74cf9cf30abb59412e0fdd95e2d5",
      "size_bytes": 334,
      "content_type": "application/json",
      "declared_by": "backfill"
    },
    {
      "logical_path": "repro/artifacts/victim_flow_create.json",
      "stage": "repro",
      "role": "proof_log",
      "destination": "public_evidence",
      "required_for_verdict": true,
      "publishable": true,
      "reason": "Referenced by runtime_manifest.proof_artifacts",
      "sha256": "2d341c1bdfb2ae088788571a7d1b9197ce3417a9f28c5aff2cb65fc6c594950b",
      "size_bytes": 21950,
      "content_type": "application/json",
      "declared_by": "backfill"
    },
    {
      "logical_path": "repro/artifacts/ownership_victim_get.txt",
      "stage": "repro",
      "role": "proof_log",
      "destination": "public_evidence",
      "required_for_verdict": true,
      "publishable": true,
      "reason": "Referenced by runtime_manifest.proof_artifacts",
      "sha256": "b1a2ca12926d965fa452ea09db2d71e7b73c8fa4d90a4a7af31388072851cf99",
      "size_bytes": 62,
      "content_type": "text/plain",
      "declared_by": "backfill"
    },
    {
      "logical_path": "repro/artifacts/ownership_attacker_get.txt",
      "stage": "repro",
      "role": "proof_log",
      "destination": "public_evidence",
      "required_for_verdict": true,
      "publishable": true,
      "reason": "Referenced by runtime_manifest.proof_artifacts",
      "sha256": "26f0b9b58261850054c1a6f5b9e16dbb5c6e16ccb6ebabd4def395c164c9f4ae",
      "size_bytes": 64,
      "content_type": "text/plain",
      "declared_by": "backfill"
    },
    {
      "logical_path": "repro/artifacts/idor_response_vuln.json",
      "stage": "repro",
      "role": "proof_log",
      "destination": "public_evidence",
      "required_for_verdict": true,
      "publishable": true,
      "reason": "Referenced by runtime_manifest.proof_artifacts",
      "sha256": "f15100bf3986cb2788f21c844e63eb04178d35bc9bdd774a61644e8a05a0af1f",
      "size_bytes": 718,
      "content_type": "application/json",
      "declared_by": "backfill"
    },
    {
      "logical_path": "repro/artifacts/idor_response_fixed.json",
      "stage": "repro",
      "role": "proof_log",
      "destination": "public_evidence",
      "required_for_verdict": true,
      "publishable": true,
      "reason": "Referenced by runtime_manifest.proof_artifacts",
      "sha256": "9843d11061a2c73dbbbf3b186b2019d935cb60f7b1e5b0e45b58fcb2628da36c",
      "size_bytes": 141,
      "content_type": "application/json",
      "declared_by": "backfill"
    },
    {
      "logical_path": "repro/artifacts/summary.json",
      "stage": "repro",
      "role": "proof_log",
      "destination": "public_evidence",
      "required_for_verdict": true,
      "publishable": true,
      "reason": "Referenced by runtime_manifest.proof_artifacts",
      "sha256": "50e996825d930c3ff0d04a1a514ad71d4f74be5cea4ac4d8f2da105309334695",
      "size_bytes": 386,
      "content_type": "application/json",
      "declared_by": "backfill"
    },
    {
      "logical_path": "vuln_variant/artifacts/variant_response_vuln.json",
      "stage": "vuln_variant",
      "role": "primary_reproducer",
      "destination": "public_evidence",
      "required_for_verdict": true,
      "publishable": true,
      "reason": "Primary reproducer evidence: the vulnerable /api/v2/workflows response with status=completed and the attacker-injected probe in outputs.ChatOutput-J6aor.content, proving the victim flow was executed by the attacker (IDOR).",
      "sha256": "d6c24dc228cf097c32ccbab37d6216e4e6620b00bb76bee51e952fb093c538aa",
      "size_bytes": 446,
      "content_type": "application/json",
      "declared_by": "backfill"
    },
    {
      "logical_path": "vuln_variant/artifacts/variant_response_fixed.json",
      "stage": "vuln_variant",
      "role": "fix_verification",
      "destination": "public_evidence",
      "required_for_verdict": true,
      "publishable": true,
      "reason": "Fix-coverage evidence: the same /api/v2/workflows request on the fixed build (b0afe3d2d6) returns HTTP 404 FLOW_NOT_FOUND, proving the fix closes this variant (not a bypass).",
      "sha256": "e6e340117108b8c6632b8650d19968d169cc1bb2e7c34bceccfba4324844d634",
      "size_bytes": 232,
      "content_type": "application/json",
      "declared_by": "backfill"
    },
    {
      "logical_path": "vuln_variant/artifacts/summary.json",
      "stage": "vuln_variant",
      "role": "validation_verdict",
      "destination": "public_evidence",
      "required_for_verdict": true,
      "publishable": true,
      "reason": "Structured variant classification (alternate trigger, not bypass; reproduced on vulnerable, blocked on fixed).",
      "sha256": "71dace770d1ea536e1bd6d3bd300ca90139faa47e74cc4f0495a466e94b2f8eb",
      "size_bytes": 763,
      "content_type": "application/json",
      "declared_by": "backfill"
    },
    {
      "logical_path": "logs/vuln_variant/reproduction_steps.log",
      "stage": "vuln_variant",
      "role": "proof_log",
      "destination": "variant_candidate",
      "required_for_verdict": true,
      "publishable": true,
      "reason": "Referenced by runtime_manifest.proof_artifacts",
      "sha256": "294f8e2036b4d2b7652853c8cb416ed99da7d8bf931d7c8b08b453c815e58e01",
      "size_bytes": 14182,
      "content_type": "text/plain",
      "declared_by": "backfill"
    },
    {
      "logical_path": "vuln_variant/validation_verdict.json",
      "stage": "vuln_variant",
      "role": "validation_verdict",
      "destination": "variant_candidate",
      "required_for_verdict": true,
      "publishable": true,
      "reason": "Auto-declared after vuln_variant stage deliverable validation",
      "sha256": "bfcbabf329a341883dce0e10644dac19bf358bd3118c0d515bb8e3d22fe3f9b8",
      "size_bytes": 1458,
      "content_type": "application/json",
      "declared_by": "backfill"
    },
    {
      "logical_path": "vuln_variant/variant_manifest.json",
      "stage": "vuln_variant",
      "role": "variant_manifest",
      "destination": "variant_candidate",
      "required_for_verdict": true,
      "publishable": true,
      "reason": "Auto-declared after vuln_variant stage deliverable validation",
      "sha256": "fa1faa0119b13e6b419018a23a04825791dacaf2694ed7470a8eb29448b92f76",
      "size_bytes": 5158,
      "content_type": "application/json",
      "declared_by": "backfill"
    },
    {
      "logical_path": "vuln_variant/reproduction_steps.sh",
      "stage": "vuln_variant",
      "role": "primary_reproducer",
      "destination": "variant_candidate",
      "required_for_verdict": true,
      "publishable": true,
      "reason": "Auto-declared after vuln_variant stage deliverable validation",
      "sha256": "724a8e03c295aa5362ad7a7a8c5200a19d682cec17075862da85203715683ad0",
      "size_bytes": 24588,
      "content_type": "text/x-shellscript",
      "declared_by": "backfill"
    },
    {
      "logical_path": "vuln_variant/rca_report.md",
      "stage": "vuln_variant",
      "role": "summary_report",
      "destination": "public_evidence",
      "required_for_verdict": true,
      "publishable": true,
      "reason": "Variant RCA report following the variant template (alternate trigger via /api/v2/workflows, not a bypass).",
      "sha256": "0977c41a110570c0a8230551cb83e18c5baf03af378c8888afef8c479a35bbc8",
      "size_bytes": 13416,
      "content_type": "text/markdown",
      "declared_by": "backfill"
    },
    {
      "logical_path": "vuln_variant/patch_analysis.md",
      "stage": "vuln_variant",
      "role": "patch_analysis",
      "destination": "variant_candidate",
      "required_for_verdict": true,
      "publishable": true,
      "reason": "Auto-declared after vuln_variant stage deliverable validation",
      "sha256": "42f7ad8341782950560d98e5512f0d040497d8b29bdffd05ae8719e27a486b62",
      "size_bytes": 10357,
      "content_type": "text/markdown",
      "declared_by": "backfill"
    },
    {
      "logical_path": "vuln_variant/source_identity.json",
      "stage": "vuln_variant",
      "role": "source_identity",
      "destination": "variant_candidate",
      "required_for_verdict": false,
      "publishable": true,
      "reason": "Auto-declared supplemental vuln_variant stage artifact",
      "sha256": "4f19fcc5c230f9543d2aa2f5164b93f9b2ecd616b5868ba83ee3eda5f064a155",
      "size_bytes": 2473,
      "content_type": "application/json",
      "declared_by": "backfill"
    },
    {
      "logical_path": "vuln_variant/root_cause_equivalence.json",
      "stage": "vuln_variant",
      "role": "root_cause_analysis",
      "destination": "variant_candidate",
      "required_for_verdict": false,
      "publishable": true,
      "reason": "Auto-declared supplemental vuln_variant stage artifact",
      "sha256": "abd72bc9df4c1957fa80c4deed6669cbe47fc5511bbc9d0365ada6d3e0ef11e7",
      "size_bytes": 2551,
      "content_type": "application/json",
      "declared_by": "backfill"
    },
    {
      "logical_path": "vuln_variant/runtime_manifest.json",
      "stage": "vuln_variant",
      "role": "runtime_manifest",
      "destination": "variant_candidate",
      "required_for_verdict": true,
      "publishable": true,
      "reason": "Auto-declared supplemental vuln_variant stage artifact",
      "sha256": "1cf6b2898a5cde3404929cec71de278053d1c3dba025ffdb59f0d2eadd289b07",
      "size_bytes": 1297,
      "content_type": "application/json",
      "declared_by": "backfill"
    },
    {
      "logical_path": "vuln_variant/artifacts/ownership_victim_get.txt",
      "stage": "vuln_variant",
      "role": "request_response",
      "destination": "warm_safe_cache",
      "required_for_verdict": false,
      "publishable": true,
      "reason": "Corroborates the trust boundary: victim GET /api/v1/flows/{id} -> 200 (owner) vs attacker -> 404 (no access).",
      "sha256": "b1e79671a28513fab5cdc69753bc2487577694679d8d626d25593ae2bc6dbf9c",
      "size_bytes": 62,
      "content_type": "text/plain",
      "declared_by": "backfill"
    },
    {
      "logical_path": "vuln_variant/artifacts/victim_flow_create.json",
      "stage": "vuln_variant",
      "role": "request_response",
      "destination": "warm_safe_cache",
      "required_for_verdict": false,
      "publishable": true,
      "reason": "Victim flow creation response containing VICTIM_FLOW_ID and the victim user_id (proves the attacker has no ownership of the target flow).",
      "sha256": "3d40616e321b6411caba9d4c06a93b36db46788e7c56e5a4f4ff8894fe312535",
      "size_bytes": 21956,
      "content_type": "application/json",
      "declared_by": "backfill"
    },
    {
      "logical_path": "vuln_variant/rca_report.md",
      "stage": "vuln_variant",
      "role": "root_cause_analysis",
      "destination": "variant_candidate",
      "required_for_verdict": true,
      "publishable": true,
      "reason": "Auto-declared after vuln_variant stage deliverable validation",
      "sha256": "0977c41a110570c0a8230551cb83e18c5baf03af378c8888afef8c479a35bbc8",
      "size_bytes": 13416,
      "content_type": "text/markdown",
      "declared_by": "backfill"
    },
    {
      "logical_path": "logs/vuln_variant/langflow_server_vuln.log",
      "stage": "vuln_variant",
      "role": "proof_log",
      "destination": "variant_candidate",
      "required_for_verdict": true,
      "publishable": true,
      "reason": "Referenced by runtime_manifest.proof_artifacts",
      "sha256": "4dc2939ae4a20e4753c2a6ee348f002eb5feb3fe2d916d4d0afb0a798c590d09",
      "size_bytes": 3712,
      "content_type": "text/plain",
      "declared_by": "backfill"
    },
    {
      "logical_path": "logs/vuln_variant/langflow_server_fixed.log",
      "stage": "vuln_variant",
      "role": "proof_log",
      "destination": "variant_candidate",
      "required_for_verdict": true,
      "publishable": true,
      "reason": "Referenced by runtime_manifest.proof_artifacts",
      "sha256": "f69798b1cbae0cbbf1f0a2818102221de04443b56ec58e22e8d3fdad25e0006e",
      "size_bytes": 2523,
      "content_type": "text/plain",
      "declared_by": "backfill"
    },
    {
      "logical_path": "vuln_variant/artifacts/victim_register.json",
      "stage": "vuln_variant",
      "role": "proof_log",
      "destination": "variant_candidate",
      "required_for_verdict": true,
      "publishable": true,
      "reason": "Referenced by runtime_manifest.proof_artifacts",
      "sha256": "fc472adc5482185766a6711d94c0971eca092e44f4e6bc9c230e852f9cbf936a",
      "size_bytes": 334,
      "content_type": "application/json",
      "declared_by": "backfill"
    },
    {
      "logical_path": "vuln_variant/artifacts/attacker_register.json",
      "stage": "vuln_variant",
      "role": "proof_log",
      "destination": "variant_candidate",
      "required_for_verdict": true,
      "publishable": true,
      "reason": "Referenced by runtime_manifest.proof_artifacts",
      "sha256": "25214ffe14ce85e3e39c6e4a0cd44154553564742ecccc139b7c524af5a27f74",
      "size_bytes": 336,
      "content_type": "application/json",
      "declared_by": "backfill"
    },
    {
      "logical_path": "vuln_variant/artifacts/victim_flow_create.json",
      "stage": "vuln_variant",
      "role": "proof_log",
      "destination": "variant_candidate",
      "required_for_verdict": true,
      "publishable": true,
      "reason": "Referenced by runtime_manifest.proof_artifacts",
      "sha256": "3d40616e321b6411caba9d4c06a93b36db46788e7c56e5a4f4ff8894fe312535",
      "size_bytes": 21956,
      "content_type": "application/json",
      "declared_by": "backfill"
    },
    {
      "logical_path": "vuln_variant/artifacts/ownership_victim_get.txt",
      "stage": "vuln_variant",
      "role": "proof_log",
      "destination": "variant_candidate",
      "required_for_verdict": true,
      "publishable": true,
      "reason": "Referenced by runtime_manifest.proof_artifacts",
      "sha256": "b1e79671a28513fab5cdc69753bc2487577694679d8d626d25593ae2bc6dbf9c",
      "size_bytes": 62,
      "content_type": "text/plain",
      "declared_by": "backfill"
    },
    {
      "logical_path": "vuln_variant/artifacts/ownership_attacker_get.txt",
      "stage": "vuln_variant",
      "role": "proof_log",
      "destination": "variant_candidate",
      "required_for_verdict": true,
      "publishable": true,
      "reason": "Referenced by runtime_manifest.proof_artifacts",
      "sha256": "b9f8b4e628a3468baa1e59e6f62f3b7c1c2f22e1c94418584f1a4d43c02b848b",
      "size_bytes": 64,
      "content_type": "text/plain",
      "declared_by": "backfill"
    },
    {
      "logical_path": "vuln_variant/artifacts/variant_response_vuln.json",
      "stage": "vuln_variant",
      "role": "proof_log",
      "destination": "variant_candidate",
      "required_for_verdict": true,
      "publishable": true,
      "reason": "Referenced by runtime_manifest.proof_artifacts",
      "sha256": "d6c24dc228cf097c32ccbab37d6216e4e6620b00bb76bee51e952fb093c538aa",
      "size_bytes": 446,
      "content_type": "application/json",
      "declared_by": "backfill"
    },
    {
      "logical_path": "vuln_variant/artifacts/variant_response_fixed.json",
      "stage": "vuln_variant",
      "role": "proof_log",
      "destination": "variant_candidate",
      "required_for_verdict": true,
      "publishable": true,
      "reason": "Referenced by runtime_manifest.proof_artifacts",
      "sha256": "e6e340117108b8c6632b8650d19968d169cc1bb2e7c34bceccfba4324844d634",
      "size_bytes": 232,
      "content_type": "application/json",
      "declared_by": "backfill"
    },
    {
      "logical_path": "vuln_variant/artifacts/summary.json",
      "stage": "vuln_variant",
      "role": "proof_log",
      "destination": "variant_candidate",
      "required_for_verdict": true,
      "publishable": true,
      "reason": "Referenced by runtime_manifest.proof_artifacts",
      "sha256": "71dace770d1ea536e1bd6d3bd300ca90139faa47e74cc4f0495a466e94b2f8eb",
      "size_bytes": 763,
      "content_type": "application/json",
      "declared_by": "backfill"
    }
  ],
  "rejected": []
}