{
  "_pruva_terminal_reconciliation": {
    "authored_artifact_closure_sha256": "1003e4693164e2397ad2f2cfd46ed0cff46e8cd031ed4cfa287925b43c541806",
    "authored_runtime_manifest_sha256": "7a977c0f29da4562cb887ef0ca3a15ab8c1e4841ae6a923ad3c9ff702e5dd106",
    "authored_verdict_sha256": "93d130a440e499ee36b8eb1e0d56a097f54676e6a4b880d954ea44cbea390705",
    "claim_matching": "evaluated",
    "schema_version": 2,
    "status": "completed"
  },
  "accepted_exploit_knowledge_record_ids": [
    "1eedc323-20d1-436b-b908-ba1a41b2165b"
  ],
  "attacker_controlled_input": "A privileged CRIU checkpoint archive supplied as ContainerConfig.image together with a restricted destination ContainerConfig",
  "claim_outcome": "confirmed",
  "claimed_impact_class": "privilege_escalation",
  "claimed_surface": "api_remote",
  "crash_observed": false,
  "end_to_end_target_reached": true,
  "evidence_scope": "production_path",
  "exploit_chain_demonstrated": true,
  "exploitability_confidence": "high",
  "inferred": false,
  "observed_impact_class": "privilege_escalation",
  "read_write_primitive_observed": false,
  "repro_result": "confirmed",
  "sanitizer_used": false,
  "trigger_path": "crictl CreateContainer -> CRI-O CRImportCheckpoint -> StartContainer -> runc/CRIU restore",
  "validated_surface": "api_remote"
}