{
  "entrypoint_kind": "endpoint",
  "entrypoint_detail": "POST /mcp via Publish reverse proxy on 127.0.0.1:6808 with anonymous Publish enabled, followed by real SiYuan Electron desktop loading the MCP-planted plugin",
  "service_started": true,
  "healthcheck_passed": true,
  "target_path_reached": true,
  "runtime_stack": [
    "siyuan-kernel",
    "publish-reverse-proxy",
    "mcp-json-rpc",
    "siyuan-electron-desktop",
    "xvfb"
  ],
  "proof_artifacts": [
    "logs/repro/reproduction_steps.log",
    "logs/repro/source-v3.7.1-mcp-server.go",
    "logs/repro/source-v3.7.2-mcp-server.go",
    "logs/repro/siyuan-vuln-anon.log",
    "logs/repro/mcp-init-response.log",
    "logs/repro/mcp-write-response.log",
    "logs/repro/mcp-read-response.log",
    "logs/repro/mcp-conf-response.log",
    "logs/repro/mcp-plugin-json-write-response.log",
    "logs/repro/mcp-plugin-index-write-response.log",
    "logs/repro/mcp-petals-write-response.log",
    "logs/repro/siyuan-desktop-rce.log",
    "logs/repro/siyuan-desktop-rce-app.log",
    "logs/repro/desktop-rce-marker.log",
    "logs/repro/siyuan-vuln-auth.log",
    "logs/repro/mcp-auth-control-response.log",
    "logs/repro/siyuan-fixed-anon.log",
    "logs/repro/mcp-fixed-control-response.log",
    "logs/repro/command-exec-negative-control.json",
    "logs/repro/desktop-rce-marker-1785131179-1.log"
  ],
  "notes": "Vulnerable v3.7.1 allows unauthenticated Publish-proxied /mcp file reads/writes and MCP-planted desktop plugin command execution; Publish auth and fixed v3.7.2 block unauthenticated /mcp before planting."
}