{
  "entrypoint_kind": "function_call",
  "entrypoint_detail": "BaseSerialization.deserialize() on crafted base_trigger payload",
  "service_started": false,
  "healthcheck_passed": true,
  "target_path_reached": true,
  "runtime_stack": [
    "python",
    "apache-airflow",
    "airflow.serialization.serialized_objects.BaseSerialization"
  ],
  "proof_artifacts": [
    "logs/reproduction_steps.log",
    "logs/vulnerable_result.json",
    "logs/fixed_result.json",
    "repro/deserialize_harness.py"
  ],
  "notes": "Vulnerable Airflow 3.2.2 imported attacker-controlled module via base_trigger deserialization; fixed 3.3.0 raised TypeError and did not import."
}