{
  "artifact_sha256": {
    "repro/proof/current/apt.log": "6e6db6086a03cd690b333ef2b72609a4bb7befe3759e9d492c8129cd8b161c8e",
    "repro/proof/current/fixed-1-service.log": "6b53902ad66b59ef3b60504c9aea94dfec04e64dd66ab46916f834aca58183ea",
    "repro/proof/current/fixed-1.txt": "be5d87b438f5c7f5e40b338ea8b7cc2991d29b2e12787acb12139d90b2e55c10",
    "repro/proof/current/fixed-2-service.log": "7a45ff2f8ac3e19a93a9d0c40f6b14a7b8521bc3d7e2fba44b31720c884064f2",
    "repro/proof/current/fixed-2.txt": "dba4e9faca571d1d9c5160699b865954b455630648cddc4746fdb7857ed659b5",
    "repro/proof/current/source-identity.txt": "386b8b0ec7f764fd70822b7e4d98c5103a8bb90f4f0c9d8f1072fefae25ec513",
    "repro/proof/current/source-process-status.txt": "8422d40db859fc76f84b537c94d8f0978d7f6e81bc639972aae6c36562be9e0c",
    "repro/proof/current/source-service.log": "7822662ad798d09d2a84dc32782c20c00a8b293cca972801a4fa2c855dac26f6",
    "repro/proof/current/tool-versions.txt": "1deb6db10b04c4c6298405ee89099fe5ad52722e5e2587675abb987fbc9e10ce",
    "repro/proof/current/vulnerable-1-process-status.txt": "8422d40db859fc76f84b537c94d8f0978d7f6e81bc639972aae6c36562be9e0c",
    "repro/proof/current/vulnerable-1-service.log": "8add4f49a79bff8153599bd0927f774ae98f379f5eb11340f9965cf048739d24",
    "repro/proof/current/vulnerable-1.txt": "f29b889637a49d44db1c8a357ee0e1e7bd0ad5b6b0a1238d347bb067b7f52559",
    "repro/proof/current/vulnerable-2-process-status.txt": "8422d40db859fc76f84b537c94d8f0978d7f6e81bc639972aae6c36562be9e0c",
    "repro/proof/current/vulnerable-2-service.log": "f6a4cb6a71f1e5f1f1303f5affe09ebc2301eca955d4717ec71d1fcfde8bcba9",
    "repro/proof/current/vulnerable-2.txt": "0ef6209ce7b546f114a7a99809e5ef13eae58d26f61e97a0a93c46a186ab54d9"
  },
  "entrypoint_detail": "CRI RuntimeService CreateContainer endpoint with a local checkpoint archive as ContainerConfig.image",
  "entrypoint_kind": "endpoint",
  "healthcheck_passed": true,
  "notes": "Two vulnerable API restore attempts retained root/full capabilities despite a restricted destination request; two fixed-default controls rejected restore.",
  "proof_artifacts": [
    "repro/proof/current/apt.log",
    "repro/proof/current/fixed-1-service.log",
    "repro/proof/current/fixed-1.txt",
    "repro/proof/current/fixed-2-service.log",
    "repro/proof/current/fixed-2.txt",
    "repro/proof/current/source-identity.txt",
    "repro/proof/current/source-process-status.txt",
    "repro/proof/current/source-service.log",
    "repro/proof/current/tool-versions.txt",
    "repro/proof/current/vulnerable-1-process-status.txt",
    "repro/proof/current/vulnerable-1-service.log",
    "repro/proof/current/vulnerable-1.txt",
    "repro/proof/current/vulnerable-2-process-status.txt",
    "repro/proof/current/vulnerable-2-service.log",
    "repro/proof/current/vulnerable-2.txt"
  ],
  "runtime_stack": [
    "crictl",
    "CRI gRPC RuntimeService",
    "CRI-O",
    "conmon",
    "runc",
    "CRIU"
  ],
  "service_started": true,
  "target_identity": {
    "architecture": "x86_64",
    "commit_sha": "6e902ee2a9f7ce535855c68c92c6838f087f578f",
    "platform": "linux",
    "repository_url": "https://github.com/cri-o/cri-o.git",
    "target_digest": "ab309adf2bdab41f3187734d0d8d82d1b525b477561f40ae60695a4d345a0a33"
  },
  "target_path_reached": true
}