{
  "schema_version": 1,
  "entrypoint_kind": "endpoint",
  "entrypoint_detail": "real Horilla GET /media/<path> URLconf route",
  "service_started": true,
  "healthcheck_passed": true,
  "target_path_reached": true,
  "attacker_process_distinct": true,
  "transport": "raw TCP HTTP via Python HTTPConnection.putrequest to a Django WSGI target process",
  "runtime_stack": [
    "Python 3.14 worker",
    "Django WSGI reference server",
    "Horilla exact git-archive base.views/base.urls/horilla.urls",
    "cached Horilla dependencies"
  ],
  "tested_targets": [
    {
      "role": "submitted",
      "commit_sha": "61bd5173220d19925ad8220db9152a75c881ea73",
      "declared_runtime": "Horilla 1.5.0 / Django 4.2.23"
    },
    {
      "role": "fixed",
      "commit_sha": "b3bd29d15819cbece45c58e6268ddd0614e387d6",
      "declared_runtime": "Horilla 1.6.0 / Django 4.2.24"
    },
    {
      "role": "newer_release",
      "commit_sha": "b8cbf0af11d105e6e8c3708c3156322248f93e77",
      "declared_runtime": "Horilla release/v2.1.0 / Django 5.2 compatibility namespace"
    },
    {
      "role": "latest_v1",
      "commit_sha": "11c4e3a2596c58f2381bda4c6bbc319a4430b097",
      "declared_runtime": "Horilla current 1.x / Django 4.2.24"
    },
    {
      "role": "latest_v2",
      "commit_sha": "a971ff98662904f798819415203ccb26bc4b0db3",
      "declared_runtime": "Horilla current v2 / Django 5.2 compatibility namespace"
    }
  ],
  "runtime_accommodations": [
    "Signed-cookie sessions avoided a disposable database dependency for unauthenticated route testing.",
    "AttendanceMiddleware was omitted because it is unrelated to protected_media and queries application tables on every request.",
    "Optional ABI-bound document/data/image modules were stubbed to load exact target URL/view modules under the worker Python ABI.",
    "Current v2 used a narrow Django 5.2 namespace over cached 4.2 code because no 5.2 cache or network was available; safe_join and affected target source remained exact/hash-bound."
  ],
  "proof_artifacts": [
    "logs/vuln_variant/reproduction_steps.log",
    "logs/vuln_variant/matrix_summary.json",
    "logs/vuln_variant/source_identity.log",
    "logs/vuln_variant/candidate_matrix.json",
    "logs/vuln_variant/runtime_submitted/result.json",
    "logs/vuln_variant/runtime_fixed/result.json",
    "logs/vuln_variant/runtime_newer_release/result.json",
    "logs/vuln_variant/runtime_latest_v1/result.json",
    "logs/vuln_variant/runtime_latest_v2/result.json",
    "logs/vuln_variant/runtime_fixed/runtime_binding.json",
    "logs/vuln_variant/runtime_latest_v1/runtime_binding.json",
    "logs/vuln_variant/runtime_latest_v2/runtime_binding.json"
  ],
  "notes": "Two consecutive final-script executions passed. Each used fresh ports and canaries. Exact private-canary reads were observed on fixed/current targets while plain outside-root traversal was rejected there."
}