{
  "entrypoint_kind": "http_request_to_library_function",
  "entrypoint_detail": "POST /parse -> JSON.parseObject(attackerBody, Request.class), with no explicit SupportAutoType feature",
  "service_started": true,
  "healthcheck_passed": true,
  "target_path_reached": true,
  "runtime_stack": [
    "Docker internal network",
    "Eclipse Temurin JDK 8",
    "Spring Boot 2.7.18 LaunchedURLClassLoader",
    "fastjson2 2.0.62"
  ],
  "proof_artifacts": [
    "repro/payload.json",
    "logs/repro/build.log",
    "logs/repro/runtime_info.json",
    "logs/repro/plain_control_response.json",
    "logs/repro/positive_response.json",
    "logs/repro/positive_marker.json",
    "logs/repro/positive_artifact.log",
    "logs/repro/positive_target.log",
    "logs/repro/safemode_response.json",
    "logs/repro/safemode_marker.json",
    "logs/repro/safemode_artifact.log",
    "logs/repro/proof_summary.log"
  ],
  "notes": "confirmed remote attacker-controlled bytecode execution in fastjson2 2.0.62 on the default polymorphic parse path; startup SafeMode blocks it"
}