{
  "schema_version": 1,
  "updated_at": "2026-07-08T04:47:40.109393712Z",
  "accepted": [
    {
      "logical_path": "repro/proof.log",
      "stage": "repro",
      "role": "proof_log",
      "destination": "public_evidence",
      "required_for_verdict": true,
      "publishable": true,
      "reason": "Referenced by runtime_manifest.proof_artifacts",
      "sha256": "fee04f45daa29c9f345884328aea7554393cf50d2d2b56bf271bdaf407a92544",
      "size_bytes": 32,
      "content_type": "text/plain",
      "declared_by": "backfill"
    },
    {
      "logical_path": "logs/reproduction_steps.log",
      "stage": "repro",
      "role": "proof_log",
      "destination": "public_evidence",
      "required_for_verdict": true,
      "publishable": true,
      "reason": "Referenced by runtime_manifest.proof_artifacts",
      "sha256": "ec0b0a3dece03863d5dde7956ad43476fb6937d2a886995bc182c33922914e91",
      "size_bytes": 1500,
      "content_type": "text/plain",
      "declared_by": "backfill"
    },
    {
      "logical_path": "repro/runtime_manifest.json",
      "stage": "repro",
      "role": "runtime_manifest",
      "destination": "public_evidence",
      "required_for_verdict": true,
      "publishable": true,
      "reason": "Auto-declared supplemental repro stage artifact",
      "sha256": "690384bbdb0a68d7b1e947c263be6042fac316786f7d5db67eba56e55856e59b",
      "size_bytes": 681,
      "content_type": "application/json",
      "declared_by": "backfill"
    },
    {
      "logical_path": "repro/reproduction_steps.sh",
      "stage": "repro",
      "role": "primary_reproducer",
      "destination": "public_evidence",
      "required_for_verdict": true,
      "publishable": true,
      "reason": "Auto-declared after repro stage deliverable validation",
      "sha256": "624d5b8acb0150c89c52aa355bdfe2de1d4c9c45e45daf22ad9e307d24fa38a0",
      "size_bytes": 11484,
      "content_type": "text/x-shellscript",
      "declared_by": "backfill"
    },
    {
      "logical_path": "repro/rca_report.md",
      "stage": "repro",
      "role": "root_cause_analysis",
      "destination": "public_evidence",
      "required_for_verdict": true,
      "publishable": true,
      "reason": "Auto-declared after repro stage deliverable validation",
      "sha256": "5573b38e2a16adad94b034136ed7d6e379dc89b30fd57fd89f852ee13b67b50e",
      "size_bytes": 7343,
      "content_type": "text/markdown",
      "declared_by": "backfill"
    },
    {
      "logical_path": "repro/validation_verdict.json",
      "stage": "repro",
      "role": "validation_verdict",
      "destination": "public_evidence",
      "required_for_verdict": true,
      "publishable": true,
      "reason": "Auto-declared after repro stage deliverable validation",
      "sha256": "e7753eadf628d913c8b073d66bc609da20043c10f592a4a440f8b40a875746c8",
      "size_bytes": 824,
      "content_type": "application/json",
      "declared_by": "backfill"
    },
    {
      "logical_path": "artifacts/malmod_ModSiUWLcoD/malmod.zip",
      "stage": "repro",
      "role": "proof_log",
      "destination": "public_evidence",
      "required_for_verdict": true,
      "publishable": true,
      "reason": "Referenced by runtime_manifest.proof_artifacts",
      "sha256": "4f782834b494cae979285a33916895bbc31ff779b0c7ffa2068d9301965af9b6",
      "size_bytes": 1443,
      "declared_by": "backfill"
    },
    {
      "logical_path": "vuln_variant/reproduction_steps.sh",
      "stage": "vuln_variant",
      "role": "primary_reproducer",
      "destination": "variant_candidate",
      "required_for_verdict": true,
      "publishable": true,
      "reason": "Auto-declared after vuln_variant stage deliverable validation",
      "sha256": "5aae9f2fa76fcdacab22d1a19ec788e85b4f01bf875cb5ee5751bfc6f6f74a80",
      "size_bytes": 8977,
      "content_type": "text/x-shellscript",
      "declared_by": "backfill"
    },
    {
      "logical_path": "logs/vuln_variant_reproduction_steps.log",
      "stage": "vuln_variant",
      "role": "proof_log",
      "destination": "variant_candidate",
      "required_for_verdict": true,
      "publishable": true,
      "reason": "Referenced by runtime_manifest.proof_artifacts",
      "sha256": "1c07989ce2afb4ab849c0ee8dd4e9d10e43916c4555cb12af6704a095ea60765",
      "size_bytes": 1403,
      "content_type": "text/plain",
      "declared_by": "backfill"
    },
    {
      "logical_path": "vuln_variant/proof.log",
      "stage": "vuln_variant",
      "role": "proof_log",
      "destination": "variant_candidate",
      "required_for_verdict": true,
      "publishable": true,
      "reason": "Referenced by runtime_manifest.proof_artifacts",
      "sha256": "7772b1fce72be1f3362d76ac4101edf4782cc2c60778782c96bfdd80fa8ded4b",
      "size_bytes": 42,
      "content_type": "text/plain",
      "declared_by": "backfill"
    },
    {
      "logical_path": "vuln_variant/variant_manifest.json",
      "stage": "vuln_variant",
      "role": "variant_manifest",
      "destination": "variant_candidate",
      "required_for_verdict": true,
      "publishable": true,
      "reason": "Auto-declared after vuln_variant stage deliverable validation",
      "sha256": "aad0fa899f07f204cb48f9db0f56a8a182f81620e0d96c25b6824ea58781f982",
      "size_bytes": 3445,
      "content_type": "application/json",
      "declared_by": "backfill"
    },
    {
      "logical_path": "vuln_variant/validation_verdict.json",
      "stage": "vuln_variant",
      "role": "validation_verdict",
      "destination": "variant_candidate",
      "required_for_verdict": true,
      "publishable": true,
      "reason": "Auto-declared after vuln_variant stage deliverable validation",
      "sha256": "4535a2a370b51e9cb07eeddcb551cd1b189930002004922c41b22dd3c144eb16",
      "size_bytes": 3402,
      "content_type": "application/json",
      "declared_by": "backfill"
    },
    {
      "logical_path": "vuln_variant/source_identity.json",
      "stage": "vuln_variant",
      "role": "source_identity",
      "destination": "variant_candidate",
      "required_for_verdict": false,
      "publishable": true,
      "reason": "Auto-declared supplemental vuln_variant stage artifact",
      "sha256": "877ab14caaa993323636d476f03b774bad33c66ccf5996f9feb00630c9e4966c",
      "size_bytes": 938,
      "content_type": "application/json",
      "declared_by": "backfill"
    },
    {
      "logical_path": "vuln_variant/runtime_manifest.json",
      "stage": "vuln_variant",
      "role": "runtime_manifest",
      "destination": "variant_candidate",
      "required_for_verdict": true,
      "publishable": true,
      "reason": "Auto-declared supplemental vuln_variant stage artifact",
      "sha256": "210acaa813e26a9c75445ef3f56b88513b9620ff3b76d501fae87935ad4ec4a4",
      "size_bytes": 872,
      "content_type": "application/json",
      "declared_by": "backfill"
    },
    {
      "logical_path": "vuln_variant/patch_analysis.md",
      "stage": "vuln_variant",
      "role": "patch_analysis",
      "destination": "variant_candidate",
      "required_for_verdict": true,
      "publishable": true,
      "reason": "Auto-declared after vuln_variant stage deliverable validation",
      "sha256": "8987e1ee905ae8bafb9da67c8634255e1eec83edf796522fd6e5ff51c84a2b64",
      "size_bytes": 7346,
      "content_type": "text/markdown",
      "declared_by": "backfill"
    },
    {
      "logical_path": "vuln_variant/rca_report.md",
      "stage": "vuln_variant",
      "role": "summary_report",
      "destination": "public_evidence",
      "required_for_verdict": true,
      "publishable": true,
      "reason": "Variant RCA report summarizing the language-pack and layout-pack import alternate triggers.",
      "sha256": "131482cf65b47ff499dca22ad3df64f8edbefa1f9d1d0cb445837a3dd92a532f",
      "size_bytes": 10414,
      "content_type": "text/markdown",
      "declared_by": "backfill"
    },
    {
      "logical_path": "vuln_variant/root_cause_equivalence.json",
      "stage": "vuln_variant",
      "role": "other",
      "destination": "public_evidence",
      "required_for_verdict": true,
      "publishable": true,
      "reason": "Explanation of why the language/layout variants share the same root cause as the parent module-import vulnerability.",
      "sha256": "15d3f120303241f646d65838f3e23ae9254591fd735b1fd2fb72c00bdb5c97b6",
      "size_bytes": 2435,
      "content_type": "application/json",
      "declared_by": "backfill"
    },
    {
      "logical_path": "vuln_variant/rca_report.md",
      "stage": "vuln_variant",
      "role": "root_cause_analysis",
      "destination": "variant_candidate",
      "required_for_verdict": true,
      "publishable": true,
      "reason": "Auto-declared after vuln_variant stage deliverable validation",
      "sha256": "131482cf65b47ff499dca22ad3df64f8edbefa1f9d1d0cb445837a3dd92a532f",
      "size_bytes": 10414,
      "content_type": "text/markdown",
      "declared_by": "backfill"
    },
    {
      "logical_path": "vuln_variant/root_cause_equivalence.json",
      "stage": "vuln_variant",
      "role": "root_cause_analysis",
      "destination": "variant_candidate",
      "required_for_verdict": false,
      "publishable": true,
      "reason": "Auto-declared supplemental vuln_variant stage artifact",
      "sha256": "15d3f120303241f646d65838f3e23ae9254591fd735b1fd2fb72c00bdb5c97b6",
      "size_bytes": 2435,
      "content_type": "application/json",
      "declared_by": "backfill"
    },
    {
      "logical_path": "vuln_variant/reproduction_steps.sh",
      "stage": "vuln_variant",
      "role": "proof_log",
      "destination": "variant_candidate",
      "required_for_verdict": true,
      "publishable": true,
      "reason": "Referenced by runtime_manifest.proof_artifacts",
      "sha256": "5aae9f2fa76fcdacab22d1a19ec788e85b4f01bf875cb5ee5751bfc6f6f74a80",
      "size_bytes": 8977,
      "content_type": "text/x-shellscript",
      "declared_by": "backfill"
    }
  ],
  "rejected": []
}