{
  "entrypoint_detail": "real Horilla /media/<path> HTTP route",
  "entrypoint_kind": "endpoint",
  "healthcheck_passed": true,
  "notes": "Two clean exact-commit matrices passed: vulnerable authenticated traversal and unauthenticated Referer composition read only harmless outside-root canaries; fixed controls returned 404 while in-root controls remained live. Requests originated in distinct attacker containers and preserved raw targets.",
  "proof_artifacts": [
    "logs/reproduction_steps.log",
    "logs/http-proof/source_identity.log",
    "logs/http-proof/modified_files.log",
    "logs/http-proof/matrix_summary.json",
    "logs/clean_execution_1.log",
    "logs/clean_execution_2.log",
    "logs/http-proof/run_1_vulnerable/result.json",
    "logs/http-proof/run_1_vulnerable/server.log",
    "logs/http-proof/run_1_vulnerable/provision_identity.log",
    "logs/http-proof/run_1_vulnerable/generated_migrations_inventory.log",
    "logs/http-proof/run_1_vulnerable/runtime_binding.log",
    "logs/http-proof/run_1_vulnerable/target_container_identity.log",
    "logs/http-proof/run_1_vulnerable/attacker_container_identity.log",
    "logs/http-proof/run_1_vulnerable/request_authenticated_escape.json",
    "logs/http-proof/run_1_vulnerable/request_unauthenticated_escape.json",
    "logs/http-proof/run_1_vulnerable/response_authenticated_escape.json",
    "logs/http-proof/run_1_vulnerable/response_unauthenticated_escape.json",
    "logs/http-proof/run_1_fixed/result.json",
    "logs/http-proof/run_1_fixed/server.log",
    "logs/http-proof/run_1_fixed/provision_identity.log",
    "logs/http-proof/run_1_fixed/generated_migrations_inventory.log",
    "logs/http-proof/run_1_fixed/runtime_binding.log",
    "logs/http-proof/run_1_fixed/target_container_identity.log",
    "logs/http-proof/run_1_fixed/attacker_container_identity.log",
    "logs/http-proof/run_1_fixed/request_authenticated_escape.json",
    "logs/http-proof/run_1_fixed/request_unauthenticated_escape.json",
    "logs/http-proof/run_1_fixed/response_authenticated_escape.json",
    "logs/http-proof/run_1_fixed/response_unauthenticated_escape.json",
    "logs/http-proof/run_2_vulnerable/result.json",
    "logs/http-proof/run_2_vulnerable/server.log",
    "logs/http-proof/run_2_vulnerable/provision_identity.log",
    "logs/http-proof/run_2_vulnerable/generated_migrations_inventory.log",
    "logs/http-proof/run_2_vulnerable/runtime_binding.log",
    "logs/http-proof/run_2_vulnerable/target_container_identity.log",
    "logs/http-proof/run_2_vulnerable/attacker_container_identity.log",
    "logs/http-proof/run_2_vulnerable/request_authenticated_escape.json",
    "logs/http-proof/run_2_vulnerable/request_unauthenticated_escape.json",
    "logs/http-proof/run_2_vulnerable/response_authenticated_escape.json",
    "logs/http-proof/run_2_vulnerable/response_unauthenticated_escape.json",
    "logs/http-proof/run_2_fixed/result.json",
    "logs/http-proof/run_2_fixed/server.log",
    "logs/http-proof/run_2_fixed/provision_identity.log",
    "logs/http-proof/run_2_fixed/generated_migrations_inventory.log",
    "logs/http-proof/run_2_fixed/runtime_binding.log",
    "logs/http-proof/run_2_fixed/target_container_identity.log",
    "logs/http-proof/run_2_fixed/attacker_container_identity.log",
    "logs/http-proof/run_2_fixed/request_authenticated_escape.json",
    "logs/http-proof/run_2_fixed/request_unauthenticated_escape.json",
    "logs/http-proof/run_2_fixed/response_authenticated_escape.json",
    "logs/http-proof/run_2_fixed/response_unauthenticated_escape.json"
  ],
  "runtime_stack": [
    "Docker",
    "Python 3.10",
    "Django 4.2",
    "Horilla 1.5.0 and 1.6.0"
  ],
  "service_started": true,
  "target_path_reached": true
}