{
  "entrypoint_kind": "endpoint",
  "entrypoint_detail": "POST /api/2.0/mlflow/webhooks/{id}/test on default mlflow server",
  "service_started": true,
  "healthcheck_passed": true,
  "target_path_reached": true,
  "runtime_stack": [
    "docker",
    "mlflow 3.13.0",
    "uvicorn",
    "sqlite",
    "HTTPS redirector",
    "private HTTP canary"
  ],
  "target_identity": {
    "repository_url": "https://github.com/mlflow/mlflow",
    "commit_sha": "8a774946bc19b59cecf3c54a733ebab52aa766f5",
    "target_digest": "c4bf6e71b4ed040103889c25abeae72c3576d1d75c6e25e730c2ad7d40651b6f",
    "runtime_digest": "b2136d49f882fdc9c48bdb95514a8a23804e8756524135c3f09f7a553a3ac58b",
    "platform": "linux",
    "architecture": "x86_64"
  },
  "proof_artifacts": [
    "logs/repro/image-identities.txt",
    "logs/repro/vuln/create-request.json",
    "logs/repro/vuln/create-response.json",
    "logs/repro/vuln/create-wire.txt",
    "logs/repro/vuln/test-request.json",
    "logs/repro/vuln/test-response.json",
    "logs/repro/vuln/test-wire.txt",
    "logs/repro/vuln/mlflow-service.log",
    "logs/repro/vuln/redirector.log",
    "logs/repro/vuln/canary.log",
    "logs/repro/vuln/canary-private-requests-before.txt",
    "logs/repro/vuln/canary-private-requests-after.txt",
    "logs/repro/fixed/create-request.json",
    "logs/repro/fixed/create-response.json",
    "logs/repro/fixed/create-wire.txt",
    "logs/repro/fixed/test-request.json",
    "logs/repro/fixed/test-response.json",
    "logs/repro/fixed/test-wire.txt",
    "logs/repro/fixed/mlflow-service.log",
    "logs/repro/fixed/redirector.log",
    "logs/repro/fixed/canary.log",
    "logs/repro/fixed/canary-private-requests-before.txt",
    "logs/repro/fixed/canary-private-requests-after.txt",
    "logs/repro/final-redirector.log",
    "logs/repro/final-canary.log"
  ],
  "artifact_sha256": {
    "logs/repro/image-identities.txt": "9b8c03f41cbdfa547854018cf18a2615df77cb0ccdfd1149b83a2c9f69d93754",
    "logs/repro/vuln/create-request.json": "67d628b52ee65881b7bf4c5ec357ee862e93e0d53d2c58da138786f3651204c4",
    "logs/repro/vuln/create-response.json": "6259d46a8c86fe90e8490d72bfc2847fd63dd2f84414cfe25b1eaccdf0bb950e",
    "logs/repro/vuln/create-wire.txt": "ef2b883d06ed8e1148b68d41b3ba7f5b72f86c87480ce29f9922f22730c125ea",
    "logs/repro/vuln/test-request.json": "bdf0c2e02ad9fa8d46d5bee99deff22af097e5fe35cfe04ed3ef25982d18fdc4",
    "logs/repro/vuln/test-response.json": "61432da2529df198e267d905c481ca20faabf5ba2dceb5a5dabf1c724e034014",
    "logs/repro/vuln/test-wire.txt": "b475c1b218fe756004396b8ef7998e40d5c1fd443156bbbf6b16e9f6a2ea3896",
    "logs/repro/vuln/mlflow-service.log": "26386b55eb341c0eea6046e671f3dda222315964464d604ccd5450233fd1bbe8",
    "logs/repro/vuln/redirector.log": "17e043f224a37d5c80b593b838107bf7f1f88ecb13c7fb758dcc769ce9da5dce",
    "logs/repro/vuln/canary.log": "ef046b7573ff0227d13c16a2f6f2f0dc7632fe3660e2bdf67c472f746e19d6dc",
    "logs/repro/vuln/canary-private-requests-before.txt": "9a271f2a916b0b6ee6cecb2426f0b3206ef074578be55d9bc94f6f3fe3ab86aa",
    "logs/repro/vuln/canary-private-requests-after.txt": "4355a46b19d348dc2f57c046f8ef63d4538ebb936000f3c9ee954a27460dd865",
    "logs/repro/fixed/create-request.json": "505f05a21b8a38d7c382ab36bd8c209f5379091eb24102d632c778be061f9d7c",
    "logs/repro/fixed/create-response.json": "7c4a2289d4fe9a5b7006a11ec7996592e619531802e375b60dd3601661dfe5d2",
    "logs/repro/fixed/create-wire.txt": "5412c5696d640a49b6018c54136a6a5f8a5ed113bc983f89ba006a4bd1372f97",
    "logs/repro/fixed/test-request.json": "587f00bae8f1d4b9e7766524dd8d84ed610ccbf5d16e7c29ad0b3a127cf09314",
    "logs/repro/fixed/test-response.json": "b1231ebda04f2370c31ed82df44e3d96ad82a4fb685e272e0ecc7705cd6db7dc",
    "logs/repro/fixed/test-wire.txt": "d58e78969a812616d1f46fe186f80b3152d8d7f74b17962314eb81f44120b318",
    "logs/repro/fixed/mlflow-service.log": "432d93efd204a6550be1b5dc885f8b50403fac53d026a76878fbae56908212d4",
    "logs/repro/fixed/redirector.log": "b22be9f16d5ccd8a3597c69798ab154dc4400e09264781959b36ce3d0abe20c7",
    "logs/repro/fixed/canary.log": "ef046b7573ff0227d13c16a2f6f2f0dc7632fe3660e2bdf67c472f746e19d6dc",
    "logs/repro/fixed/canary-private-requests-before.txt": "4355a46b19d348dc2f57c046f8ef63d4538ebb936000f3c9ee954a27460dd865",
    "logs/repro/fixed/canary-private-requests-after.txt": "4355a46b19d348dc2f57c046f8ef63d4538ebb936000f3c9ee954a27460dd865",
    "logs/repro/final-redirector.log": "b22be9f16d5ccd8a3597c69798ab154dc4400e09264781959b36ce3d0abe20c7",
    "logs/repro/final-canary.log": "ef046b7573ff0227d13c16a2f6f2f0dc7632fe3660e2bdf67c472f746e19d6dc"
  },
  "notes": "The vulnerable default API reflected the private canary; the fixed API rejected the same redirect procedure. No authentication plugin was enabled."
}