[09:45:48] Waiting for dependencies
[09:46:07] Dependencies ready
[09:46:32] Platform healthy
[09:46:32] Negative-control process instance: negpass:container-be11eface766
HTTP 200
{"errors":[{"message":"ejs:1\n >> 1| <?- ({}[____safe____property({toString:()=>\"constructor\"})][____safe____property({toString:()=>\"constructor\"})])('return process.getBuiltinModule(\"child_process\").execSync(\"echo pruvaFixed1785923147 >/tmp/pruva_rce_pruvaFixed1785923147.txt\").toString()')() ?>\n\nForbidden property access {\"propertyName\":\"constructor\"}","locations":[{"line":1,"column":53}],"path":["jsonMapperTest"],"extensions":{"code":"INTERNAL_SERVER_ERROR"},"name":"INTERNAL_SERVER_ERROR"}],"data":{"jsonMapperTest":null}}
[09:46:32] rejected=true marker_present=false
{
  "schema_version": 1,
  "process_instance": "negpass:container-be11eface766",
  "marker": "pruvaFixed1785923147",
  "target_path_reached": true,
  "marker_present": false,
  "payload_rejected_by_verifier": true,
  "detail": "Original CVE-2026-39980 computed-key payload against fresh opencti/platform:6.9.5 process: rejected with VerifierIllegalAccessError Forbidden property access {propertyName:constructor}; no marker file created."
}
[09:46:32] === NEGATIVE CONTROL PASS: original payload rejected, no marker ===