{
  "entrypoint_kind": "local_kernel_runtime",
  "entrypoint_detail": "unprivileged user -> unshare(user+net ns) -> nlmon netlink tap -> NFQUEUE(nfnetlink_queue) netlink message built by skb_zerocopy() -> tc pedit + mirred redirect to lo -> XFRM ESP transport decrypt in place over splice()d page-cache frags",
  "service_started": true,
  "healthcheck_passed": true,
  "target_path_reached": true,
  "runtime_stack": [
    "linux-kernel-6.12.111",
    "qemu-kvm",
    "nfnetlink_queue",
    "nlmon",
    "xfrm-esp",
    "tc-pedit-mirred",
    "nftables-queue"
  ],
  "target_identity": {
    "repository_url": "https://github.com/torvalds/linux",
    "commit_sha": "b819bf73ee69da09487c3defe5e11a5365452d9d",
    "target_digest": "f380eddad4388d95b206fa340d11e70d8256e543fac1bb872ae16084be763afd",
    "runtime_digest": "a3442fd44f07c05151bbac8ecf6eb6b620afd23770630e0e0e160501580959b7",
    "platform": "linux",
    "architecture": "x86_64"
  },
  "proof_artifacts": [
    "logs/attempts/fixed_att1.log",
    "logs/attempts/fixed_att2.log",
    "logs/attempts/vuln_att1.log",
    "logs/attempts/vuln_att2.log",
    "logs/evidence/negctl_fixed_att1.json",
    "logs/evidence/negctl_fixed_att2.json",
    "logs/evidence/root_marker_vuln_att1.txt",
    "logs/evidence/root_marker_vuln_att2.txt",
    "logs/kernel_identity.txt",
    "repro/proof_summary.txt"
  ],
  "artifact_sha256": {
    "logs/attempts/fixed_att1.log": "b6c104f4a2cb6cc31348d459f0e7178a36b0c38dbece2836496ce4e464e2ef04",
    "logs/attempts/fixed_att2.log": "4fb96f802094fd40c92f56349de80877bac6752bd02b6122df1230ee6b81c573",
    "logs/attempts/vuln_att1.log": "ed93bd9368d4c1a20131ce2c76f271f5d36b3aa829aee2c7674c4de0c565b745",
    "logs/attempts/vuln_att2.log": "8ce16ce90862bf62658b6e30dab5f248c460d3da155312a46e0c1515b2f41ac4",
    "logs/evidence/negctl_fixed_att1.json": "eb8c975b16c8edbeceaa9f08230b6fa9fe8c42d06c0c9964a3549479eadee64d",
    "logs/evidence/negctl_fixed_att2.json": "d0bb6ba3ae90f66d067ede763c559d0227b4c57a7b55edd50f8f928ee7760b3e",
    "logs/evidence/root_marker_vuln_att1.txt": "072cf0d92032a977d9b4d9b9cc6bd802fbd17c563a292752ea7d21581e1c10de",
    "logs/evidence/root_marker_vuln_att2.txt": "96b0e7a4451b5996221b0d2cc870be7e53b54bac2037deb7350f547c8025146f",
    "logs/kernel_identity.txt": "b6b1e66c16b8adafbb73d846360731ff605f7967ee5a080b0f7354dbfbf69f5c",
    "repro/proof_summary.txt": "c76b9eda425683245956fd115b5d79ccc1ab1cfe2ed2e107a1df01d32a9c156b"
  },
  "notes": "status=confirmed vuln_ok=true fixed_ok=true; two vulnerable boots must corrupt the page cache and escalate to uid 0, two fixed boots must fail closed"
}