{
  "entrypoint_kind": "endpoint",
  "entrypoint_detail": "POST /api/tunnel/tailscale-install (unauthenticated JSON sudoPassword)",
  "service_started": true,
  "healthcheck_passed": true,
  "target_path_reached": true,
  "runtime_stack": [
    "9router npm package (Next.js standalone server)",
    "HTTP curl client",
    "child_process.spawn",
    "sudo -S sh"
  ],
  "proof_artifacts": [
    "logs/reproduction_steps.log",
    "logs/vuln_1_response.txt",
    "logs/vuln_1_server.log",
    "logs/vuln_1_sudo_shim.log",
    "artifacts/vuln_1_http_code.txt",
    "artifacts/vuln_1_marker.txt",
    "logs/vuln_2_response.txt",
    "logs/vuln_2_sudo_shim.log",
    "artifacts/vuln_2_http_code.txt",
    "artifacts/vuln_2_marker.txt",
    "logs/fixed_1_response.txt",
    "logs/fixed_1_server.log",
    "artifacts/fixed_1_http_code.txt",
    "artifacts/fixed_1_marker.txt",
    "logs/fixed_2_response.txt",
    "artifacts/fixed_2_http_code.txt",
    "artifacts/fixed_2_marker.txt",
    "artifacts/vuln_middleware_matcher.txt",
    "artifacts/fixed_middleware_matcher.txt",
    "artifacts/vuln_install_code.txt",
    "artifacts/fixed_install_code.txt"
  ],
  "notes": "strategy=noprompt-sudo-precondition; vuln_command_markers=2/2 fixed_401_no_marker=2/2; PATH-local sudo supplies documented no-prompt precondition in this constrained sandbox"
}