{
  "entrypoint_kind": "endpoint",
  "entrypoint_detail": "real Horilla /media/<path> HTTP route (Django runserver, re_path ^media/(?P<path>.*)$ -> base.views.protected_media)",
  "service_started": true,
  "healthcheck_passed": true,
  "target_path_reached": true,
  "runtime_stack": [
    "Django runserver (SQLite + LocMem, no DATABASE_URL/REDIS_URL)",
    "Horilla HR application"
  ],
  "proof_artifacts": [
    "logs/repro/1.6.0_oracle_run1.json",
    "logs/repro/1.6.0_oracle_run2.json",
    "logs/repro/1.6.0_observed_paths_run1.txt",
    "logs/repro/1.6.0_observed_paths_run2.txt",
    "logs/repro/1.6.0_dotseg_bypass_run1.resp.body",
    "logs/repro/1.6.0_dotseg_bypass_run2.resp.body",
    "logs/repro/1.6.0_direct_private_run1.resp.hdr",
    "logs/repro/1.6.0_direct_private_run2.resp.hdr",
    "logs/repro/1.6.0_server.log",
    "logs/repro/1.6.0_modified_files.txt",
    "logs/repro/1.6.0_head.txt",
    "logs/repro/dev_v2.0_oracle_run1.json",
    "logs/repro/dev_v2.0_oracle_run2.json",
    "logs/repro/dev_v2.0_observed_paths_run1.txt",
    "logs/repro/dev_v2.0_observed_paths_run2.txt",
    "logs/repro/dev_v2.0_dotseg_bypass_run1.resp.body",
    "logs/repro/dev_v2.0_dotseg_bypass_run2.resp.body",
    "logs/repro/dev_v2.0_direct_private_run1.resp.hdr",
    "logs/repro/dev_v2.0_direct_private_run2.resp.hdr",
    "logs/repro/dev_v2.0_server.log",
    "logs/repro/dev_v2.0_modified_files.txt",
    "logs/repro/dev_v2.0_head.txt",
    "logs/repro/1.5.0_oracle_run1.json",
    "logs/repro/1.5.0_oracle_run2.json",
    "logs/repro/1.5.0_observed_paths_run1.txt",
    "logs/repro/1.5.0_observed_paths_run2.txt",
    "logs/repro/1.5.0_dotseg_bypass_run1.resp.body",
    "logs/repro/1.5.0_dotseg_bypass_run2.resp.body",
    "logs/repro/1.5.0_direct_private_run1.resp.hdr",
    "logs/repro/1.5.0_direct_private_run2.resp.hdr",
    "logs/repro/1.5.0_server.log",
    "logs/repro/1.5.0_modified_files.txt",
    "logs/repro/1.5.0_head.txt",
    "logs/reproduction_steps.log"
  ],
  "notes": "confirmed -- 1.6.0 + dev/v2.0 full oracle on both runs; 1.5.0 control 4 on both runs; dot segments preserved verbatim (curl --path-as-is); no cookie/Authorization sent; per ref the app is migrated once (fresh empty DB) and the server started once, with new random canaries per run."
}