{
  "entrypoint_kind": "function_call",
  "entrypoint_detail": "sap_cloud_sdk.destination._http.TokenProvider.get_token(tenant_subdomain=<attacker-controlled>)",
  "service_started": true,
  "healthcheck_passed": true,
  "target_path_reached": true,
  "runtime_stack": [
    "python",
    "sap-cloud-sdk",
    "requests-oauthlib",
    "http.server attacker capture endpoint"
  ],
  "target_identity": {
    "repository_url": "https://pypi.org/project/sap-cloud-sdk/",
    "target_digest": "01c096915454bc85beeddd125c5f0d12e3f3ffa6dbbcffe68e3428244c6987a4",
    "platform": "linux",
    "architecture": "x86_64"
  },
  "proof_artifacts": [
    "logs/attacker_server.log",
    "logs/healthcheck.txt",
    "logs/harness_vuln_result.json",
    "logs/harness_fixed_result.json",
    "logs/proof_vuln_capture.jsonl",
    "logs/proof_fixed_capture.jsonl"
  ],
  "artifact_sha256": {
    "logs/attacker_server.log": "4fbaf0c13ef32b101bc98924f8b663f187bc857b4b081b037f5342f08e064a65",
    "logs/healthcheck.txt": "c11e3f4837efde2441e23a7b9da02131f53bf59fddeb7147c4ab81afe400460f",
    "logs/harness_vuln_result.json": "d5512c8f5f7985fefd02bacc9d65f246cf95d00eef69dd014accc9dc8a214c34",
    "logs/harness_fixed_result.json": "523c01fbee50d70e69d23f4cc27645582992fd8ebef3e56a58c26593a4fb11c2",
    "logs/proof_vuln_capture.jsonl": "971807d7697938139c2a11ac463503d12ba49dcbfb219aa6776cb96f874fa12c",
    "logs/proof_fixed_capture.jsonl": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855"
  },
  "notes": "confirmed: sap-cloud-sdk 0.45.1 sent OAuth2 client credentials to attacker-controlled server via malicious tenant_subdomain; 0.45.2 rejects it with ValueError and sends nothing"
}