{
  "entrypoint_kind": "cli_command",
  "entrypoint_detail": "GOOGLE_APPLICATION_CREDENTIALS external_account JSON -> Google::Auth->default() / DefaultCredentials->from_env() -> make_creds -> ExternalAccountCredentials::Pluggable -> fetch_access_token executes credential_source.executable.command via system()",
  "service_started": false,
  "healthcheck_passed": false,
  "target_path_reached": true,
  "runtime_stack": [
    "perl",
    "Google-Auth"
  ],
  "target_identity": {
    "repository_url": "https://github.com/GoogleCloudPlatform/google-auth-library-perl",
    "commit_sha": "913fb1780202c1ee9dd640c28c01549903f8e23a",
    "target_digest": "0cfd1e70243d592e8ee97776e055c8a9cc6bda03f669d242e15a2989c80fb1ea",
    "platform": "linux",
    "architecture": "x86_64"
  },
  "proof_artifacts": [
    "logs/reproduction_steps.log",
    "logs/attempt_vuln_1.log",
    "logs/attempt_vuln_2.log",
    "logs/attempt_fixed_1.log",
    "logs/attempt_fixed_2.log",
    "logs/attempt_fixed_allow1.log",
    "repro/markers/vuln_1.marker",
    "repro/markers/vuln_2.marker",
    "repro/markers/fixed_allow1.marker",
    "repro/adc/vuln_1.json",
    "repro/adc/vuln_2.json",
    "repro/adc/fixed_1.json",
    "repro/adc/fixed_2.json",
    "repro/adc/fixed_allow1.json",
    "repro/observations/vuln_1.json",
    "repro/observations/vuln_2.json",
    "repro/observations/fixed_1.json",
    "repro/observations/fixed_2.json",
    "repro/observations/fixed_allow1.json",
    "repro/trigger.pl"
  ],
  "notes": "Vulnerable build executed attacker-controlled command from external_account JSON (2/2 attempts); fixed 0.06 blocked it without opt-in (2/2) and reproduced with opt-in gate set (1/1)."
}