{
  "schema_version": 1,
  "updated_at": "2026-07-09T14:27:42.532476852Z",
  "accepted": [
    {
      "logical_path": "repro/reproduction_steps.sh",
      "stage": "repro",
      "role": "primary_reproducer",
      "destination": "public_evidence",
      "required_for_verdict": true,
      "publishable": true,
      "reason": "Auto-declared after repro stage deliverable validation",
      "sha256": "3730a5a7121b5f2abead6b70c29c1c090d4fc0003b2a11d6db6614b7ed093aac",
      "size_bytes": 12713,
      "content_type": "text/x-shellscript",
      "declared_by": "backfill"
    },
    {
      "logical_path": "repro/rca_report.md",
      "stage": "repro",
      "role": "root_cause_analysis",
      "destination": "public_evidence",
      "required_for_verdict": true,
      "publishable": true,
      "reason": "Auto-declared after repro stage deliverable validation",
      "sha256": "9a86a1cd534349daf6dca7bbde1581e2663f565ee83975ec76a2ec741b7a5da8",
      "size_bytes": 9508,
      "content_type": "text/markdown",
      "declared_by": "backfill"
    },
    {
      "logical_path": "repro/validation_verdict.json",
      "stage": "repro",
      "role": "validation_verdict",
      "destination": "public_evidence",
      "required_for_verdict": true,
      "publishable": true,
      "reason": "Auto-declared after repro stage deliverable validation",
      "sha256": "b2fc77036045bb27614cda887c716386adf038e0c281f5c00bd33f2a730e2bac",
      "size_bytes": 1024,
      "content_type": "application/json",
      "declared_by": "backfill"
    },
    {
      "logical_path": "repro/runtime_manifest.json",
      "stage": "repro",
      "role": "runtime_manifest",
      "destination": "public_evidence",
      "required_for_verdict": true,
      "publishable": true,
      "reason": "Auto-declared supplemental repro stage artifact",
      "sha256": "77ad8c6f09edfb81831027df8d9a8aaf2815cc22e3bae1757b431357ff8ea208",
      "size_bytes": 2008,
      "content_type": "application/json",
      "declared_by": "backfill"
    },
    {
      "logical_path": "logs/rce_marker_vuln_latest.txt",
      "stage": "repro",
      "role": "marker_output",
      "destination": "public_evidence",
      "required_for_verdict": true,
      "publishable": true,
      "reason": "The marker file written by the attacker's OS command (id) executed inside the Gravitino server JVM via H2 INIT — direct proof of code execution.",
      "sha256": "d92bd0d97533f166c17f05a656e5de5a4a69b9ff763d607fe7a896320980cf7b",
      "size_bytes": 54,
      "content_type": "text/plain",
      "declared_by": "backfill"
    },
    {
      "logical_path": "logs/vuln_attempt_1.log",
      "stage": "repro",
      "role": "request_response",
      "destination": "public_evidence",
      "required_for_verdict": true,
      "publishable": true,
      "reason": "Vulnerable 1.2.0 request/response: testConnection returned 200 {code:0} and marker created with id output.",
      "sha256": "7f79f4263e45ef3c8ffdc1002be889e2f756e94c1849e69971b286ef2e801215",
      "size_bytes": 331,
      "content_type": "text/plain",
      "declared_by": "backfill"
    },
    {
      "logical_path": "logs/fixed_attempt_1.log",
      "stage": "repro",
      "role": "request_response",
      "destination": "public_evidence",
      "required_for_verdict": true,
      "publishable": true,
      "reason": "Fixed 1.2.1 negative control: testConnection rejected with 'H2 JDBC URL is not allowed' at DataSourceUtils.createDataSource:54, no marker.",
      "sha256": "2f7a3424943427ba3850978cc96da33f4181e02ce82964e08e3997e6df929421",
      "size_bytes": 648,
      "content_type": "text/plain",
      "declared_by": "backfill"
    },
    {
      "logical_path": "logs/reproduction_steps.log",
      "stage": "repro",
      "role": "proof_log",
      "destination": "public_evidence",
      "required_for_verdict": true,
      "publishable": true,
      "reason": "Referenced by runtime_manifest.proof_artifacts",
      "sha256": "53b80ac1e5cebc4d7823e56075ec8f25594d1825c347561a86b507c79950b77b",
      "size_bytes": 1590,
      "content_type": "text/plain",
      "declared_by": "backfill"
    },
    {
      "logical_path": "logs/vuln_version.json",
      "stage": "repro",
      "role": "proof_log",
      "destination": "public_evidence",
      "required_for_verdict": true,
      "publishable": true,
      "reason": "Referenced by runtime_manifest.proof_artifacts",
      "sha256": "961593d20945d5df479b0436e51b7b59576d85fb79e683592eda2fbf712b2ed7",
      "size_bytes": 131,
      "content_type": "application/json",
      "declared_by": "backfill"
    },
    {
      "logical_path": "logs/vuln_attempt_1.log",
      "stage": "repro",
      "role": "proof_log",
      "destination": "public_evidence",
      "required_for_verdict": true,
      "publishable": true,
      "reason": "Referenced by runtime_manifest.proof_artifacts",
      "sha256": "7f79f4263e45ef3c8ffdc1002be889e2f756e94c1849e69971b286ef2e801215",
      "size_bytes": 331,
      "content_type": "text/plain",
      "declared_by": "backfill"
    },
    {
      "logical_path": "logs/vuln_attempt_2.log",
      "stage": "repro",
      "role": "proof_log",
      "destination": "public_evidence",
      "required_for_verdict": true,
      "publishable": true,
      "reason": "Referenced by runtime_manifest.proof_artifacts",
      "sha256": "05c7a0baf724cb5d1886036c66e314f469d5eb704810f915192196caa9f393f5",
      "size_bytes": 331,
      "content_type": "text/plain",
      "declared_by": "backfill"
    },
    {
      "logical_path": "logs/rce_marker_vuln_latest.txt",
      "stage": "repro",
      "role": "proof_log",
      "destination": "public_evidence",
      "required_for_verdict": true,
      "publishable": true,
      "reason": "Referenced by runtime_manifest.proof_artifacts",
      "sha256": "d92bd0d97533f166c17f05a656e5de5a4a69b9ff763d607fe7a896320980cf7b",
      "size_bytes": 54,
      "content_type": "text/plain",
      "declared_by": "backfill"
    },
    {
      "logical_path": "logs/vuln_server.log",
      "stage": "repro",
      "role": "proof_log",
      "destination": "public_evidence",
      "required_for_verdict": true,
      "publishable": true,
      "reason": "Referenced by runtime_manifest.proof_artifacts",
      "sha256": "8fc7ffef3aca83d980365213262307d0c7cc71af4bbe3357b33bb833c2e8515c",
      "size_bytes": 34056,
      "content_type": "text/plain",
      "declared_by": "backfill"
    },
    {
      "logical_path": "logs/fixed_version.json",
      "stage": "repro",
      "role": "proof_log",
      "destination": "public_evidence",
      "required_for_verdict": true,
      "publishable": true,
      "reason": "Referenced by runtime_manifest.proof_artifacts",
      "sha256": "8a2f7651982cb198fac8fbeac330de4a1778fa4aa147cbc3f2434196495d2707",
      "size_bytes": 131,
      "content_type": "application/json",
      "declared_by": "backfill"
    },
    {
      "logical_path": "logs/fixed_attempt_1.log",
      "stage": "repro",
      "role": "proof_log",
      "destination": "public_evidence",
      "required_for_verdict": true,
      "publishable": true,
      "reason": "Referenced by runtime_manifest.proof_artifacts",
      "sha256": "2f7a3424943427ba3850978cc96da33f4181e02ce82964e08e3997e6df929421",
      "size_bytes": 648,
      "content_type": "text/plain",
      "declared_by": "backfill"
    },
    {
      "logical_path": "logs/fixed_attempt_2.log",
      "stage": "repro",
      "role": "proof_log",
      "destination": "public_evidence",
      "required_for_verdict": true,
      "publishable": true,
      "reason": "Referenced by runtime_manifest.proof_artifacts",
      "sha256": "e9fc53bb3e484939448b45e978e964d8cde4002f274b4862846d8a7b02be6360",
      "size_bytes": 648,
      "content_type": "text/plain",
      "declared_by": "backfill"
    },
    {
      "logical_path": "logs/fixed_server.log",
      "stage": "repro",
      "role": "proof_log",
      "destination": "public_evidence",
      "required_for_verdict": true,
      "publishable": true,
      "reason": "Referenced by runtime_manifest.proof_artifacts",
      "sha256": "c2571eb1ca4a75ad7decfbc972b8fafa56e318e3f25e9e07503abc07ca8615fd",
      "size_bytes": 33436,
      "content_type": "text/plain",
      "declared_by": "backfill"
    },
    {
      "logical_path": "vuln_variant/reproduction_steps.sh",
      "stage": "repro",
      "role": "primary_reproducer",
      "destination": "public_evidence",
      "required_for_verdict": true,
      "publishable": true,
      "reason": "Self-contained bypass reproducer: starts fixed 1.2.1 server, sends unauthenticated lakehouse-paimon testConnection with malicious H2 INIT URL, proves RCE on the fixed version. Exit 0 = bypass confirmed.",
      "sha256": "24d85c42b7c4a1ed653b2732ed74dc36e8633e3627ec371c5481d4a364983a11",
      "size_bytes": 12241,
      "content_type": "text/x-shellscript",
      "declared_by": "backfill"
    },
    {
      "logical_path": "logs/vuln_variant/rce_marker_paimon_fixed_latest.txt",
      "stage": "repro",
      "role": "marker_output",
      "destination": "public_evidence",
      "required_for_verdict": true,
      "publishable": true,
      "reason": "Marker file written by the attacker's OS command (id) inside the FIXED 1.2.1 server JVM via H2 INIT/CREATE ALIAS reached through the lakehouse-paimon jdbc metastore bypass. Direct proof of RCE on the patched version.",
      "sha256": "d92bd0d97533f166c17f05a656e5de5a4a69b9ff763d607fe7a896320980cf7b",
      "size_bytes": 54,
      "content_type": "text/plain",
      "declared_by": "backfill"
    },
    {
      "logical_path": "logs/vuln_variant/paimon_fixed_server.log",
      "stage": "repro",
      "role": "runtime_manifest",
      "destination": "public_evidence",
      "required_for_verdict": true,
      "publishable": true,
      "reason": "Fixed-server log showing the bypass stack (PaimonCatalogOperations.initialize -> PaimonCatalogOps -> CatalogUtils -> JdbcCatalogFactory.create -> JdbcCatalog.<init>) and zero DataSourceUtils H2-block messages, proving the request never hit the patched sink.",
      "sha256": "6897d877d6f74ea5313255a372d9ff9897bc3e919a8b0d592807d75b558cf1e1",
      "size_bytes": 62690,
      "content_type": "text/plain",
      "declared_by": "backfill"
    },
    {
      "logical_path": "vuln_variant/validation_verdict.json",
      "stage": "judge",
      "role": "validation_verdict",
      "destination": "public_evidence",
      "required_for_verdict": true,
      "publishable": true,
      "reason": "Structured final verdict for the variant stage: bypass_confirmed on fixed 1.2.1 (commit e88bffcfc...), code_execution, fixed_version_marker_created=true, fixed_version_datasourceutils_block_fired=false.",
      "sha256": "485480532f65199ffd817242c95719891489bbcf24b85d8a9db33534adcfe979",
      "size_bytes": 2614,
      "content_type": "application/json",
      "declared_by": "backfill"
    },
    {
      "logical_path": "vuln_variant/variant_manifest.json",
      "stage": "vuln_variant",
      "role": "variant_manifest",
      "destination": "variant_candidate",
      "required_for_verdict": true,
      "publishable": true,
      "reason": "Auto-declared after vuln_variant stage deliverable validation",
      "sha256": "3e80f2af195f13ebb5e2a9d81b039542e2390da203d40f7b665cb03b3dc0a302",
      "size_bytes": 5471,
      "content_type": "application/json",
      "declared_by": "backfill"
    },
    {
      "logical_path": "vuln_variant/patch_analysis.md",
      "stage": "vuln_variant",
      "role": "patch_analysis",
      "destination": "variant_candidate",
      "required_for_verdict": true,
      "publishable": true,
      "reason": "Auto-declared after vuln_variant stage deliverable validation",
      "sha256": "11d6e84c4207eb7c614d7ea12911b810026fd65fef68c79325759c11f2dfd5ae",
      "size_bytes": 9117,
      "content_type": "text/markdown",
      "declared_by": "backfill"
    },
    {
      "logical_path": "vuln_variant/rca_report.md",
      "stage": "vuln_variant",
      "role": "root_cause_analysis",
      "destination": "variant_candidate",
      "required_for_verdict": true,
      "publishable": true,
      "reason": "Auto-declared after vuln_variant stage deliverable validation",
      "sha256": "6e3c6c97abd04886f81c92e2eeb164bca473882b6441835a7485d6d8c07e674e",
      "size_bytes": 15021,
      "content_type": "text/markdown",
      "declared_by": "backfill"
    },
    {
      "logical_path": "vuln_variant/source_identity.json",
      "stage": "vuln_variant",
      "role": "source_identity",
      "destination": "variant_candidate",
      "required_for_verdict": false,
      "publishable": true,
      "reason": "Auto-declared supplemental vuln_variant stage artifact",
      "sha256": "0bb0fdaff85951f9f15e2e7919dd613e6563f4a2ef01febb2e53b542f1034ef7",
      "size_bytes": 2369,
      "content_type": "application/json",
      "declared_by": "backfill"
    },
    {
      "logical_path": "vuln_variant/runtime_manifest.json",
      "stage": "repro",
      "role": "runtime_manifest",
      "destination": "private_only",
      "required_for_verdict": false,
      "publishable": false,
      "reason": "Runtime evidence manifest summarizing both server runs, marker contents, server stack, and idempotency.",
      "sha256": "d8f97bff49394b5841e48d92b93af0b2d69f9e473cd07f6c7e83790497e94162",
      "size_bytes": 3949,
      "content_type": "application/json",
      "declared_by": "backfill"
    },
    {
      "logical_path": "vuln_variant/root_cause_equivalence.json",
      "stage": "vuln_variant",
      "role": "root_cause_analysis",
      "destination": "variant_candidate",
      "required_for_verdict": false,
      "publishable": true,
      "reason": "Auto-declared supplemental vuln_variant stage artifact",
      "sha256": "540df5e17546a3306ad5e1570b3fe2e115df21e00faa713c2280bc68254fb582",
      "size_bytes": 3067,
      "content_type": "application/json",
      "declared_by": "backfill"
    },
    {
      "logical_path": "vuln_variant/reproduction_steps.sh",
      "stage": "vuln_variant",
      "role": "primary_reproducer",
      "destination": "variant_candidate",
      "required_for_verdict": true,
      "publishable": true,
      "reason": "Auto-declared after vuln_variant stage deliverable validation",
      "sha256": "24d85c42b7c4a1ed653b2732ed74dc36e8633e3627ec371c5481d4a364983a11",
      "size_bytes": 12241,
      "content_type": "text/x-shellscript",
      "declared_by": "backfill"
    },
    {
      "logical_path": "vuln_variant/validation_verdict.json",
      "stage": "vuln_variant",
      "role": "validation_verdict",
      "destination": "variant_candidate",
      "required_for_verdict": true,
      "publishable": true,
      "reason": "Auto-declared after vuln_variant stage deliverable validation",
      "sha256": "485480532f65199ffd817242c95719891489bbcf24b85d8a9db33534adcfe979",
      "size_bytes": 2614,
      "content_type": "application/json",
      "declared_by": "backfill"
    },
    {
      "logical_path": "vuln_variant/runtime_manifest.json",
      "stage": "vuln_variant",
      "role": "runtime_manifest",
      "destination": "variant_candidate",
      "required_for_verdict": true,
      "publishable": true,
      "reason": "Auto-declared supplemental vuln_variant stage artifact",
      "sha256": "d8f97bff49394b5841e48d92b93af0b2d69f9e473cd07f6c7e83790497e94162",
      "size_bytes": 3949,
      "content_type": "application/json",
      "declared_by": "backfill"
    },
    {
      "logical_path": "coding/proposed_fix.diff",
      "stage": "coding",
      "role": "proposed_fix",
      "destination": "protection_artifact",
      "required_for_verdict": true,
      "publishable": true,
      "reason": "Auto-declared after coding stage deliverable validation",
      "sha256": "8f66939dec96e67b148d91924d91cb1b3ebeeeaa90d1ee0bc3657b555e214ef3",
      "size_bytes": 5054,
      "content_type": "text/x-diff",
      "declared_by": "backfill"
    },
    {
      "logical_path": "coding/verify_fix.sh",
      "stage": "coding",
      "role": "fix_verification",
      "destination": "protection_artifact",
      "required_for_verdict": true,
      "publishable": true,
      "reason": "Auto-declared after coding stage deliverable validation",
      "sha256": "46f9c0e09ec259846241f3e2d61b56b8729ed0fb422f351ce2a1797b2dc15de5",
      "size_bytes": 5581,
      "content_type": "text/x-shellscript",
      "declared_by": "backfill"
    },
    {
      "logical_path": "coding/summary_report.md",
      "stage": "coding",
      "role": "summary_report",
      "destination": "protection_artifact",
      "required_for_verdict": true,
      "publishable": true,
      "reason": "Auto-declared after coding stage deliverable validation",
      "sha256": "78a969f1dc03175018263daccb715cb2869a3fd27ab4c07179251f43e897e011",
      "size_bytes": 9611,
      "content_type": "text/markdown",
      "declared_by": "backfill"
    },
    {
      "logical_path": "coding/H2BlockTest.java",
      "stage": "coding",
      "role": "other",
      "destination": "protection_artifact",
      "required_for_verdict": false,
      "publishable": true,
      "reason": "JUnit-free test exercising the real patched DataSourceUtils.createDataSource H2 guard against CVE/variant/encoded/case-insensitive payloads and legit mysql/pg/mariadb configs. Required by verify_fix.sh.",
      "sha256": "31e8bd461a96d96870a6ab506f83176d8b4d913c0ab7c06d574e68dcd122e76f",
      "size_bytes": 4825,
      "declared_by": "backfill"
    },
    {
      "logical_path": "coding/PaimonH2BlockTest.java",
      "stage": "coding",
      "role": "other",
      "destination": "protection_artifact",
      "required_for_verdict": false,
      "publishable": true,
      "reason": "Test exercising the real patched Paimon CatalogUtils.checkPaimonConfig H2 guard (via reflection) for the lakehouse-paimon JDBC-metastore bypass. Required by verify_fix.sh.",
      "sha256": "084aa247b182bcf63f1c32e88e9d1eb8b04f7be702b38a32c2eee4784ada478b",
      "size_bytes": 4915,
      "declared_by": "backfill"
    }
  ],
  "rejected": []
}