{
  "entrypoint_kind": "tcp_peer",
  "entrypoint_detail": "Production path: org.apache.logging.log4j.server.TcpSocketServer.createSerializedSocketServer() from apache/logging-log4j-samples@672a1555c7f5670e7affcc7b9984a90b492eb322 accepts localhost TCP and invokes ObjectInputStreamLogEventBridge -> FilteredObjectInputStream(socket.getInputStream()).readObject(); Log4j API/Core 2.26.1@dd0f9d255e24e6bcc13bd2641407a409c0524803",
  "service_started": true,
  "healthcheck_passed": true,
  "target_path_reached": true,
  "runtime_stack": [
    "openjdk 25.0.4+7-1-26.04-Ubuntu",
    "apache/logging-log4j-samples log4j-server@672a1555c7f5670e7affcc7b9984a90b492eb322",
    "log4j-api-2.26.1 sha256:f1810a4704ccce019d02bba029dc02a4f2ac0c997f647b465e7d409c1927f822",
    "log4j-core-2.26.1 sha256:2ec8c3bf5a6d7c89be8620116a2fc973f7dda1ad0261ad393c4d4726edfd3dcb",
    "commons-collections-3.2.1 sha256:87363a4c94eaabeefd8b930cb059f66b64c9f7d632862f23de3012da7660047b"
  ],
  "target_identity": {
    "repository_url": "https://github.com/apache/logging-log4j2",
    "commit_sha": "dd0f9d255e24e6bcc13bd2641407a409c0524803",
    "target_digest": "7310f18dd2601851bcc37b1963906cbd86f417a18b196251c8fe64a6b3b18673",
    "runtime_digest": "98b16715ef49ca21a5b32b7184a718cb9110ddc5269b06be0c3e3167467df639",
    "platform": "linux",
    "architecture": "x86_64",
    "entrypoint_repository_url": "https://github.com/apache/logging-log4j-samples",
    "entrypoint_commit_sha": "672a1555c7f5670e7affcc7b9984a90b492eb322",
    "entrypoint_source_sha256": "5eacc00b5db3f9df8ee8c2577a815edf4987c987a3f662423f82e1fc6de81cc9",
    "entrypoint_classes_sha256": "3e31ef00cd1feff530ce31e83098b2684e69f8f595038c24f7357e23fe8dda68",
    "log4j_api_sha256": "f1810a4704ccce019d02bba029dc02a4f2ac0c997f647b465e7d409c1927f822",
    "log4j_core_sha256": "2ec8c3bf5a6d7c89be8620116a2fc973f7dda1ad0261ad393c4d4726edfd3dcb"
  },
  "proof_artifacts": [
    "logs/target_identity.txt",
    "logs/payload_identity.txt",
    "logs/fix.patch",
    "logs/receiver_control.log",
    "logs/receiver_tier1_a1.log",
    "logs/tier1_marker_a1.txt",
    "logs/receiver_tier2_a1.log",
    "logs/tier2_rce_marker_a1.txt",
    "logs/capability_observation_a1.json",
    "logs/receiver_tier2_a2.log",
    "logs/tier2_rce_marker_a2.txt",
    "logs/capability_observation_a2.json",
    "logs/receiver_fixed_a1.log",
    "logs/receiver_fixed_a2.log",
    "logs/negative_control_observation.json",
    "logs/receiver_mitigation.log"
  ],
  "artifact_sha256": {
    "logs/target_identity.txt": "7587f54b3d31bf614697c83e560ed294b74b5f94088ae2caa49a17ccba59d89d",
    "logs/payload_identity.txt": "29d437140b31b8bd21b635d50204276297e819df34f36660689b96f1b7327bf0",
    "logs/fix.patch": "b0b3d58f560d61f132256652561294c7d79e339f4d15d6d459b5847af5a55172",
    "logs/receiver_control.log": "edf10a340c17bb1c665b486d72d3c974329b9019ba8e15268253aee2b1480158",
    "logs/receiver_tier1_a1.log": "94aad6eff9aa537c6acec54d558f85bd322213f53ad543244e34310201f1e6a8",
    "logs/tier1_marker_a1.txt": "c38af201c1da4331294f30faddd89484529349e353a9515305ab6374e4fd0c2e",
    "logs/receiver_tier2_a1.log": "79d75da6cdaf618156104d12314b498476ea4554866c21ec73d0b4026786643d",
    "logs/tier2_rce_marker_a1.txt": "95bdff0fb28872baaec8492c889c7a804fef2a30ee4cbf65159d6be43651f2c2",
    "logs/capability_observation_a1.json": "8cd90bc82fbd3814f7a348a9e389c36629f0a6883ab6dfd95d913fdc3efcb169",
    "logs/receiver_tier2_a2.log": "697810e4bdeb8583b787dc3b561ca1cc2e8fa6adfb9b0bd627762ab6e1ec8a73",
    "logs/tier2_rce_marker_a2.txt": "f676b4a597854dc090c9c3e56abde9e35a80a0a22270fa4d7b4ace79fa2f16e7",
    "logs/capability_observation_a2.json": "38da02e670209e2b39c16d293a0362d6872c0dcde950c9e69e62a22c54b70014",
    "logs/receiver_fixed_a1.log": "66e3d738ec0db19d68ebfdc63c670dcbb9a6ee30e7a538d929c4e795f81a40f3",
    "logs/receiver_fixed_a2.log": "f9ab9dcb961a15ddbb2c00130b15293e3a8ea03e7a120840c1091d7bf4fdafd1",
    "logs/negative_control_observation.json": "8ded65200b617b4e3f9567bf8483ffbdc119bff9f97e837c195d663e0e4b9531",
    "logs/receiver_mitigation.log": "da8ca6f41e321bb9d8980ea625e098fa78cf70fafccdd5bca3b95f178535ad0f"
  },
  "notes": "production-path TCP proof: direct FOIS rejection; MarshalledObject bypass x2; receiver-side Runtime.exec x2; same tier2 input rejected by patched product x2; JEP 290 mitigation rejected it"
}