{
  "entrypoint_kind": "open_document",
  "entrypoint_detail": "GUI: chat -> open_preview tool -> [Open Preview] / store restore -> preview-pane.tsx <webview partition=persist:hermes-preview> guest -> scripted window.open + synthetic ctrl+meta clicks (no gesture), incl. sandboxed iframe without allow-popups",
  "service_started": true,
  "healthcheck_passed": true,
  "target_path_reached": true,
  "runtime_stack": [
    "electron",
    "xvfb",
    "hermes-python-backend",
    "mock-openai-provider",
    "esbuild-renderer-static-server",
    "local-attacker-http"
  ],
  "target_identity": {
    "repository_url": "https://github.com/NousResearch/hermes-agent",
    "commit_sha": "e3fab0437ee50ebe511cec57b9ac36f0c2803268",
    "target_digest": "20b36c40d0a41f2e94f3b96ad990b05e6fafde83b56cda7e3480c1ee84735000",
    "platform": "linux",
    "architecture": "x86_64"
  },
  "proof_artifacts": [
    "logs/fixed_attempt_1.diag.log",
    "logs/fixed_attempt_1.json",
    "logs/fixed_attempt_1.log",
    "logs/fixed_attempt_1.main.jsonl",
    "logs/fixed_attempt_1.requests.json",
    "logs/fixed_attempt_2.diag.log",
    "logs/fixed_attempt_2.json",
    "logs/fixed_attempt_2.log",
    "logs/fixed_attempt_2.main.jsonl",
    "logs/fixed_attempt_2.requests.json",
    "logs/vulnerable_attempt_1.diag.log",
    "logs/vulnerable_attempt_1.json",
    "logs/vulnerable_attempt_1.log",
    "logs/vulnerable_attempt_1.main.jsonl",
    "logs/vulnerable_attempt_1.requests.json",
    "logs/vulnerable_attempt_2.diag.log",
    "logs/vulnerable_attempt_2.json",
    "logs/vulnerable_attempt_2.log",
    "logs/vulnerable_attempt_2.main.jsonl",
    "logs/vulnerable_attempt_2.requests.json"
  ],
  "artifact_sha256": {
    "logs/fixed_attempt_1.diag.log": "8fdd1f596142de4d6e032eab6b442e27a7eb011c4c8ccd6ca4f59bfad2318109",
    "logs/fixed_attempt_1.json": "f59fea9be0052c804441ec8ac9d4be06efb1e7e8fd5cfc490d41436528eee639",
    "logs/fixed_attempt_1.log": "892f110ea9d18d0d1ab69faf52dd66f637396d5cd73ec851ae4122a813624388",
    "logs/fixed_attempt_1.main.jsonl": "727dcaf2f61e7bd7161cb55d91e89ffa3ec1b99682512ae0ad87fb8f0deb2f9c",
    "logs/fixed_attempt_1.requests.json": "fab984c86d1b62c421643f65e33a164cec6e589fe63ddc1d82e22094478abe43",
    "logs/fixed_attempt_2.diag.log": "d2be7a5d8eb16ce45caf5331c7b375147be7abb2b87b86bda3fa085b7a27d7c3",
    "logs/fixed_attempt_2.json": "a3397e6eeaed889b0ffc3741cab2a205514bf85ef4647329b6b0b7a51339b2ad",
    "logs/fixed_attempt_2.log": "a20e497f00fe0776c8f8edeab359f1e56f83dbe417460b8982eee6201711a881",
    "logs/fixed_attempt_2.main.jsonl": "7cead3d72e01a097eeb0386ee1c9192ae5fd2510a186af49eafe5e0d2d115cbf",
    "logs/fixed_attempt_2.requests.json": "4e041eeefe03ad79a49e85ad1b66932593ccc7a6420b45e67b1f78466738db34",
    "logs/vulnerable_attempt_1.diag.log": "b0b6d4b3b1940d7c0baf0ef79c1493131806fbdb85db40846ce2bcce2ea07953",
    "logs/vulnerable_attempt_1.json": "9aff1c5cbae0321fd339aa42d7d17ceb47582a317a2d3084b7bf6e4385b9486d",
    "logs/vulnerable_attempt_1.log": "3f1fd1e0f5a0c76997dbe23d748dde1e71f86b44add9468e86d201899995e22d",
    "logs/vulnerable_attempt_1.main.jsonl": "4e8e442cfd9079648ecf3ad36efe5733595564a36a689e6f1f278ac64bf7d51a",
    "logs/vulnerable_attempt_1.requests.json": "a260df7ab739d24ef9de116c03a8be7ea5775a417a3a28aef707bca032ee49a2",
    "logs/vulnerable_attempt_2.diag.log": "daf43d475af76892e1bd35728a0f35438f4fd3f7a6f54bb2cff0a43760e6b2bd",
    "logs/vulnerable_attempt_2.json": "754b469a015fcd712c42929fb43bf46652c9b6338dc48c782e8c426d6f8dd0a5",
    "logs/vulnerable_attempt_2.log": "4402dc6f0044de1217e20ccba2bbc936989bf3191889594add98057e5abd191f",
    "logs/vulnerable_attempt_2.main.jsonl": "950e0bac7fdd73c9fd56a44ddcad39ef8735a8824b31fc0e1161be6747fae40e",
    "logs/vulnerable_attempt_2.requests.json": "f361d67c8640ff58fccb11cdf520bf35a54688f3821f2784667488c88f9793a9"
  },
  "notes": "vulnerable(40.10.2)=['A_REAL_WINDOW_SPAWNED_CVE_BYPASS', 'A_REAL_WINDOW_SPAWNED_CVE_BYPASS'] fixed(41.10.3)=['A_REAL_WINDOW_SPAWNED_GENERIC_ONLY', 'A_REAL_WINDOW_SPAWNED_GENERIC_ONLY'] confirmed=True"
}