{
  "artifact_sha256": {
    "repro/evidence/fixed_attempt_1_request.txt": "5fdbc9edd60c22329672df5c96057852eb85e7c943a01e4d56fdaca7ad89266b",
    "repro/evidence/fixed_attempt_1_response_body.txt": "9d409dad7d4a8009e239d11a58ef7a922e5d0a0c8c1a7c44d0915d00428018ad",
    "repro/evidence/fixed_attempt_1_response_headers.txt": "720d4fff559a6f71b12e3ce647a8002a0112a791ac15f0306976675ad83f7c59",
    "repro/evidence/fixed_attempt_1_server.log": "e35fe78bcb19bf859e3366a53316565b444b917a028305fac1413cdc54015541",
    "repro/evidence/fixed_attempt_1_status.txt": "f8bf41177a5f5e808a7ccb648b51080b031f15ca8018d91a576263d6cc626eb6",
    "repro/evidence/fixed_attempt_2_request.txt": "ca99d4e59ab31f98f49b88014be52b5e7a8ed45f70c67252f31c98ae774f5c9a",
    "repro/evidence/fixed_attempt_2_response_body.txt": "9d409dad7d4a8009e239d11a58ef7a922e5d0a0c8c1a7c44d0915d00428018ad",
    "repro/evidence/fixed_attempt_2_response_headers.txt": "720d4fff559a6f71b12e3ce647a8002a0112a791ac15f0306976675ad83f7c59",
    "repro/evidence/fixed_attempt_2_server.log": "3870559a3139249e8f48cb8e67b1de9afb73f037f4a36df3de62089fc5b81f79",
    "repro/evidence/fixed_attempt_2_status.txt": "f8bf41177a5f5e808a7ccb648b51080b031f15ca8018d91a576263d6cc626eb6",
    "repro/evidence/source_fix.diff": "2bd89ad2e924b6c145b8bdb57efe999c75182e37aecbd9a41fbb07f02ace07f6",
    "repro/evidence/target_identity.txt": "14a54767b5b76f2f1971037b2966e9782cda53a2ee01e15fae85d41d0e777b4a",
    "repro/evidence/vulnerable_attempt_1_request.txt": "4f12725ca84e1a2761efc1b1439d0600784ecbc058641f54dd9435c79421b037",
    "repro/evidence/vulnerable_attempt_1_response_body.txt": "ab399efc1ab2d6f9ecbcd1cbe8a21900bba44c6c8adc657ce7970980745af66f",
    "repro/evidence/vulnerable_attempt_1_response_headers.txt": "59eee69a19dd9c06317fb307c9fc4b04e021d2f8bf4dd74dd5574f814f600cc3",
    "repro/evidence/vulnerable_attempt_1_server.log": "455d15192e4cb88ab9b64572e4346e259412dd64bec24a586ef7b88b7e48f86c",
    "repro/evidence/vulnerable_attempt_1_status.txt": "c11e3f4837efde2441e23a7b9da02131f53bf59fddeb7147c4ab81afe400460f",
    "repro/evidence/vulnerable_attempt_2_request.txt": "de535c6544094103167aa075332d5c15413968501eb7f80c5b3d1282f7a4bbcc",
    "repro/evidence/vulnerable_attempt_2_response_body.txt": "ab399efc1ab2d6f9ecbcd1cbe8a21900bba44c6c8adc657ce7970980745af66f",
    "repro/evidence/vulnerable_attempt_2_response_headers.txt": "59eee69a19dd9c06317fb307c9fc4b04e021d2f8bf4dd74dd5574f814f600cc3",
    "repro/evidence/vulnerable_attempt_2_server.log": "b98ec344448644f17ff0a1c6fa74b7667e45e5fd7a4347c3ce9f16d7c985fb8e",
    "repro/evidence/vulnerable_attempt_2_status.txt": "c11e3f4837efde2441e23a7b9da02131f53bf59fddeb7147c4ab81afe400460f"
  },
  "entrypoint_detail": "h3 serveStatic static file handler HTTP endpoint",
  "entrypoint_kind": "endpoint",
  "healthcheck_passed": true,
  "notes": "Two vulnerable and two fixed h3 HTTP endpoint attempts; target_digest is SHA-256 of the exact vulnerable h3@1.15.5 npm archive.",
  "proof_artifacts": [
    "repro/evidence/source_fix.diff",
    "repro/evidence/target_identity.txt",
    "repro/evidence/vulnerable_attempt_1_request.txt",
    "repro/evidence/vulnerable_attempt_1_response_headers.txt",
    "repro/evidence/vulnerable_attempt_1_response_body.txt",
    "repro/evidence/vulnerable_attempt_1_status.txt",
    "repro/evidence/vulnerable_attempt_1_server.log",
    "repro/evidence/vulnerable_attempt_2_request.txt",
    "repro/evidence/vulnerable_attempt_2_response_headers.txt",
    "repro/evidence/vulnerable_attempt_2_response_body.txt",
    "repro/evidence/vulnerable_attempt_2_status.txt",
    "repro/evidence/vulnerable_attempt_2_server.log",
    "repro/evidence/fixed_attempt_1_request.txt",
    "repro/evidence/fixed_attempt_1_response_headers.txt",
    "repro/evidence/fixed_attempt_1_response_body.txt",
    "repro/evidence/fixed_attempt_1_status.txt",
    "repro/evidence/fixed_attempt_1_server.log",
    "repro/evidence/fixed_attempt_2_request.txt",
    "repro/evidence/fixed_attempt_2_response_headers.txt",
    "repro/evidence/fixed_attempt_2_response_body.txt",
    "repro/evidence/fixed_attempt_2_status.txt",
    "repro/evidence/fixed_attempt_2_server.log"
  ],
  "runtime_stack": [
    "node",
    "h3@1.15.5",
    "h3@1.15.6"
  ],
  "service_started": true,
  "target_identity": {
    "architecture": "x86_64",
    "platform": "linux",
    "repository_url": "https://github.com/h3js/h3",
    "runtime_digest": "41a74efb34cbde5c7632cdac0cf8bd1a14d0b8d73dc1e82755014d9a9ce70f5c",
    "target_digest": "f99c479e7c12d0ad30c01e32fb76415a5eb8bf5f90ac0a036baf14d3f8432a7d"
  },
  "target_path_reached": true
}