{
  "entrypoint_kind": "endpoint",
  "entrypoint_detail": "index.php?option=com_sppagebuilder&task=asset.uploadCustomIcon and candidate alternate tasks",
  "service_started": true,
  "healthcheck_passed": true,
  "target_path_reached": false,
  "runtime_stack": [
    "joomla",
    "mysql",
    "sp-page-builder"
  ],
  "proof_artifacts": [
    "logs/variant_vuln_test.log",
    "logs/variant_fixed_test.log",
    "logs/variant_vuln_poc_control.log",
    "logs/variant_fixed_poc_control.log"
  ],
  "notes": "Variant search tested control endpoint, alternate task name, direct unpack, admin editor.icons, and loadCustomIcons. No unauthenticated RCE path bypassed the 6.6.2 guard."
}