{
  "schema_version": 1,
  "updated_at": "2026-07-08T04:47:28.904820817Z",
  "accepted": [
    {
      "logical_path": "repro/reproduction_steps.sh",
      "stage": "repro",
      "role": "primary_reproducer",
      "destination": "public_evidence",
      "required_for_verdict": true,
      "publishable": true,
      "reason": "Auto-declared after repro stage deliverable validation",
      "sha256": "57fc798ba5e549c949f70873a6650c66c0c5e7f96912b87ee3ba86d07a22abef",
      "size_bytes": 9057,
      "content_type": "text/x-shellscript",
      "declared_by": "backfill"
    },
    {
      "logical_path": "repro/rca_report.md",
      "stage": "repro",
      "role": "root_cause_analysis",
      "destination": "public_evidence",
      "required_for_verdict": true,
      "publishable": true,
      "reason": "Auto-declared after repro stage deliverable validation",
      "sha256": "bc1b5b840a17c6a0ade14782159ae4678c4e78caef42aff977781526d04089ff",
      "size_bytes": 9983,
      "content_type": "text/markdown",
      "declared_by": "backfill"
    },
    {
      "logical_path": "repro/validation_verdict.json",
      "stage": "repro",
      "role": "validation_verdict",
      "destination": "public_evidence",
      "required_for_verdict": true,
      "publishable": true,
      "reason": "Auto-declared after repro stage deliverable validation",
      "sha256": "e4f54c8574459f8d870267e5761726c2d8b7a6461ada85f98ee3d195861f7691",
      "size_bytes": 725,
      "content_type": "application/json",
      "declared_by": "backfill"
    },
    {
      "logical_path": "repro/runtime_manifest.json",
      "stage": "repro",
      "role": "runtime_manifest",
      "destination": "public_evidence",
      "required_for_verdict": true,
      "publishable": true,
      "reason": "Auto-declared supplemental repro stage artifact",
      "sha256": "972a03d3f4a179cf13d60193fcab277ff457b2d3f70fc66c0918d421f2af0c19",
      "size_bytes": 545,
      "content_type": "application/json",
      "declared_by": "backfill"
    },
    {
      "logical_path": "logs/reproduction_steps.log",
      "stage": "repro",
      "role": "proof_log",
      "destination": "public_evidence",
      "required_for_verdict": true,
      "publishable": true,
      "reason": "Full transcript of the latest successful reproduction run including vulnerable RCE and fixed 403 rejection.",
      "sha256": "e9cee470d320a5bc8328d0ebeaeeeee0c0008e80c073679670bc7e9dcc1ec456",
      "size_bytes": 6283,
      "content_type": "text/plain",
      "declared_by": "backfill"
    },
    {
      "logical_path": "logs/vuln_poc.log",
      "stage": "repro",
      "role": "proof_log",
      "destination": "public_evidence",
      "required_for_verdict": true,
      "publishable": true,
      "reason": "Referenced by runtime_manifest.proof_artifacts",
      "sha256": "f2a747414fe991f41d356001f897064807dc2e05d69ee54086a0c9584ca48a3f",
      "size_bytes": 1667,
      "content_type": "text/plain",
      "declared_by": "backfill"
    },
    {
      "logical_path": "logs/fixed_poc.log",
      "stage": "repro",
      "role": "proof_log",
      "destination": "public_evidence",
      "required_for_verdict": true,
      "publishable": true,
      "reason": "Referenced by runtime_manifest.proof_artifacts",
      "sha256": "088b268fad5dc70aa293cc4d7f6d639c6d928fa6726d1a967f9f11d68c29538d",
      "size_bytes": 652,
      "content_type": "text/plain",
      "declared_by": "backfill"
    },
    {
      "logical_path": "logs/vuln_compose.log",
      "stage": "repro",
      "role": "proof_log",
      "destination": "public_evidence",
      "required_for_verdict": true,
      "publishable": true,
      "reason": "Referenced by runtime_manifest.proof_artifacts",
      "sha256": "c2d2f938138ce7cbb9cb9f555c1d394ef23bda464bb1f762fff4bb40b41b23cc",
      "size_bytes": 1072,
      "content_type": "text/plain",
      "declared_by": "backfill"
    },
    {
      "logical_path": "logs/fixed_compose.log",
      "stage": "repro",
      "role": "proof_log",
      "destination": "public_evidence",
      "required_for_verdict": true,
      "publishable": true,
      "reason": "Referenced by runtime_manifest.proof_artifacts",
      "sha256": "97c014456d07b4b63436fccbc6b8ab0bdc716a328f4fa271cc25117935baad51",
      "size_bytes": 1097,
      "content_type": "text/plain",
      "declared_by": "backfill"
    },
    {
      "logical_path": "logs/variant_vuln_test.log",
      "stage": "vuln_variant",
      "role": "proof_log",
      "destination": "variant_candidate",
      "required_for_verdict": true,
      "publishable": true,
      "reason": "Referenced by runtime_manifest.proof_artifacts",
      "sha256": "41c52dcf5511e41eeeeaebe7dde8d552b5c9f6718547a030d69a4c872b7f63bc",
      "size_bytes": 1661,
      "content_type": "text/plain",
      "declared_by": "backfill"
    },
    {
      "logical_path": "logs/variant_fixed_test.log",
      "stage": "vuln_variant",
      "role": "proof_log",
      "destination": "variant_candidate",
      "required_for_verdict": true,
      "publishable": true,
      "reason": "Referenced by runtime_manifest.proof_artifacts",
      "sha256": "5b01fe05e4b011f13885f393abb57c9acf919c691854a7189c492cb134971e7d",
      "size_bytes": 1172,
      "content_type": "text/plain",
      "declared_by": "backfill"
    },
    {
      "logical_path": "vuln_variant/variant_manifest.json",
      "stage": "vuln_variant",
      "role": "variant_manifest",
      "destination": "variant_candidate",
      "required_for_verdict": true,
      "publishable": true,
      "reason": "Auto-declared after vuln_variant stage deliverable validation",
      "sha256": "0438f039149875fcd3919896a54d1c5ba3ae06d6bfbfa4fe2f50659d44485078",
      "size_bytes": 3082,
      "content_type": "application/json",
      "declared_by": "backfill"
    },
    {
      "logical_path": "vuln_variant/validation_verdict.json",
      "stage": "vuln_variant",
      "role": "validation_verdict",
      "destination": "variant_candidate",
      "required_for_verdict": true,
      "publishable": true,
      "reason": "Auto-declared after vuln_variant stage deliverable validation",
      "sha256": "69377a9abb9a4fdf2bbe7d6724343d90174159a7e1c7552b4576aaac0638a7aa",
      "size_bytes": 980,
      "content_type": "application/json",
      "declared_by": "backfill"
    },
    {
      "logical_path": "vuln_variant/patch_analysis.md",
      "stage": "vuln_variant",
      "role": "patch_analysis",
      "destination": "variant_candidate",
      "required_for_verdict": true,
      "publishable": true,
      "reason": "Auto-declared after vuln_variant stage deliverable validation",
      "sha256": "711b103f163780c4a866083adc68c54b4cd377b6593b8735672c760b68620fc0",
      "size_bytes": 6992,
      "content_type": "text/markdown",
      "declared_by": "backfill"
    },
    {
      "logical_path": "vuln_variant/reproduction_steps.sh",
      "stage": "vuln_variant",
      "role": "primary_reproducer",
      "destination": "variant_candidate",
      "required_for_verdict": true,
      "publishable": true,
      "reason": "Auto-declared after vuln_variant stage deliverable validation",
      "sha256": "c196b426b06d72a053f33714f76fbf72edbe52216a11122af3864845366ef536",
      "size_bytes": 14783,
      "content_type": "text/x-shellscript",
      "declared_by": "backfill"
    },
    {
      "logical_path": "vuln_variant/rca_report.md",
      "stage": "vuln_variant",
      "role": "root_cause_analysis",
      "destination": "variant_candidate",
      "required_for_verdict": true,
      "publishable": true,
      "reason": "Auto-declared after vuln_variant stage deliverable validation",
      "sha256": "794434d177b787f478f974a275a1bc11faeac59022b9f86ae4087538d81d60c5",
      "size_bytes": 9544,
      "content_type": "text/markdown",
      "declared_by": "backfill"
    },
    {
      "logical_path": "vuln_variant/runtime_manifest.json",
      "stage": "vuln_variant",
      "role": "runtime_manifest",
      "destination": "variant_candidate",
      "required_for_verdict": true,
      "publishable": true,
      "reason": "Auto-declared supplemental vuln_variant stage artifact",
      "sha256": "b1796419162281059f9619e16b2085481e3a8d512152106a343e266c286db7cd",
      "size_bytes": 682,
      "content_type": "application/json",
      "declared_by": "backfill"
    },
    {
      "logical_path": "vuln_variant/root_cause_equivalence.json",
      "stage": "vuln_variant",
      "role": "other",
      "destination": "public_evidence",
      "required_for_verdict": false,
      "publishable": true,
      "reason": "Explains why the tested candidates do or do not share the same root cause as the original CVE.",
      "sha256": "0974bf16281fbc254bd69e7455a33a5995010621a67520a8391d7df5f29f9bff",
      "size_bytes": 1479,
      "content_type": "application/json",
      "declared_by": "backfill"
    },
    {
      "logical_path": "vuln_variant/root_cause_equivalence.json",
      "stage": "vuln_variant",
      "role": "root_cause_analysis",
      "destination": "variant_candidate",
      "required_for_verdict": false,
      "publishable": true,
      "reason": "Auto-declared supplemental vuln_variant stage artifact",
      "sha256": "0974bf16281fbc254bd69e7455a33a5995010621a67520a8391d7df5f29f9bff",
      "size_bytes": 1479,
      "content_type": "application/json",
      "declared_by": "backfill"
    },
    {
      "logical_path": "logs/variant_vuln_poc_control.log",
      "stage": "vuln_variant",
      "role": "proof_log",
      "destination": "variant_candidate",
      "required_for_verdict": true,
      "publishable": true,
      "reason": "Referenced by runtime_manifest.proof_artifacts",
      "sha256": "6ec344e4eaf4b69c50b8e9d9b8b7ce635c66ffd5e4475a419c94c7a07bc6a55b",
      "size_bytes": 1667,
      "content_type": "text/plain",
      "declared_by": "backfill"
    },
    {
      "logical_path": "logs/variant_fixed_poc_control.log",
      "stage": "vuln_variant",
      "role": "proof_log",
      "destination": "variant_candidate",
      "required_for_verdict": true,
      "publishable": true,
      "reason": "Referenced by runtime_manifest.proof_artifacts",
      "sha256": "088b268fad5dc70aa293cc4d7f6d639c6d928fa6726d1a967f9f11d68c29538d",
      "size_bytes": 652,
      "content_type": "text/plain",
      "declared_by": "backfill"
    }
  ],
  "rejected": []
}