{
  "entrypoint_kind": "cli_command",
  "entrypoint_detail": "awslabs.aws-api-mcp-server stdio startup with failed read-operations index, then MCP call_aws tool request",
  "service_started": true,
  "healthcheck_passed": true,
  "target_path_reached": true,
  "runtime_stack": [
    "python",
    "awslabs.aws-api-mcp-server",
    "MCP stdio",
    "botocore",
    "local fake AWS HTTP endpoint"
  ],
  "proof_artifacts": [
    "logs/reproduction_steps.log",
    "logs/repro/vulnerable_attempt_1.json",
    "logs/repro/vulnerable_attempt_2.json",
    "logs/repro/fixed_attempt_1.json",
    "logs/repro/fixed_attempt_2.json",
    "logs/repro/vulnerable_attempt_1_server.log",
    "logs/repro/fixed_attempt_1_server.log"
  ],
  "notes": "Confirmed: vulnerable commit continues after read-operations index startup failure and a denyList-blocked call_aws request reaches the fake AWS HTTP endpoint; fixed commit fails closed before the downstream boundary."
}