{
  "artifact_sha256": {
    "repro/fixed-1-client.json": "01ef554722849570e84ced68fd2b0ea61a3dd7991676939fb1cd67d92859f3c7",
    "repro/fixed-1-serial-observation.log": "a5db77a2d4e673768b430fe804efa585f33d3f85090e803aadaaa87de9ee8f0b",
    "repro/fixed-1-ssh-state.log": "1201beedc7d865a8f006937f21cee526495de3d241c65bc21a4c8047f1f3ed32",
    "repro/fixed-2-client.json": "e2fd6d5b6dea337033f85ac0e32975217a76618577a542e041141cb19b1b07df",
    "repro/fixed-2-serial-observation.log": "03cfe330d6ebcddd8625ecc97b0afe3694761a22588631d1a097d1bd5425f4c8",
    "repro/fixed-2-ssh-state.log": "e11417fc1033b31baf53492b90903b34334fe4db38ea629127629589d2f655fa",
    "repro/proof-summary.log": "63dfbcd16b3efe2f7a6c839f9c0ecd3374db83f5503104e7e1a9349ed73751ca",
    "repro/vuln-1-client.json": "5ebe6238e5527bd88f3d5f14f9688f67ba4b91ff74f341463ac67178236e79ea",
    "repro/vuln-1-serial-observation.log": "ea260cb11a3aa88a0c4c13ecc98ffea5ede76df7ad618bfa5430efc5d9b93da7",
    "repro/vuln-1-ssh-state.log": "1acdcbbde72e73a57330472fbfd79b7b501aee2d8eb655752b527352e88f280b",
    "repro/vuln-2-client.json": "e2f00d73d63f6996acfdd6b9e6c9771cb13be51d60c48abd2ce4dfbd4297e4fb",
    "repro/vuln-2-serial-observation.log": "0aa12f492a600fdf68932e15455079059e39921783fd4fe4cb32f3ec06b6bf72",
    "repro/vuln-2-ssh-state.log": "0325d213797ee6967dace1a34f7f46c0d9ad1a92d9cbdc5e449134e26ca988e4"
  },
  "entrypoint_detail": "real TCP SSH service on official RouterOS CHR 7.23.3; fixed control 7.23.4",
  "entrypoint_kind": "tcp_peer",
  "healthcheck_passed": true,
  "notes": "Two clean vulnerable and two clean fixed guest attempts. Vulnerable sessions performed one rejected -2 authentication attempt, rekeyed while still unauthenticated, and dispatched exec; serial RouterOS CLI independently verified managed-file markers. Fixed controls rejected the same sequence with no marker. Fixed image SHA-256: 0d32a8da0950dee71e751281c39063f2bebee4b542291aedecc9dbfbe5d60c9d",
  "proof_artifacts": [
    "repro/proof-summary.log",
    "repro/vuln-1-client.json",
    "repro/vuln-2-client.json",
    "repro/vuln-1-ssh-state.log",
    "repro/vuln-2-ssh-state.log",
    "repro/vuln-1-serial-observation.log",
    "repro/vuln-2-serial-observation.log",
    "repro/fixed-1-client.json",
    "repro/fixed-2-client.json",
    "repro/fixed-1-ssh-state.log",
    "repro/fixed-2-ssh-state.log",
    "repro/fixed-1-serial-observation.log",
    "repro/fixed-2-serial-observation.log"
  ],
  "runtime_stack": [
    "qemu-system-x86_64",
    "official RouterOS CHR 7.23.3",
    "RouterOS SSH"
  ],
  "service_started": true,
  "target_identity": {
    "architecture": "x86_64",
    "platform": "linux",
    "repository_url": "https://download.mikrotik.com/routeros/7.23.3/chr-7.23.3.img.zip",
    "runtime_digest": "646764fb0a53e9b5a056cb9cf7420eb1629031096c7268c99fb9216c07f8e98c",
    "target_digest": "646764fb0a53e9b5a056cb9cf7420eb1629031096c7268c99fb9216c07f8e98c"
  },
  "target_path_reached": true
}