{
  "_pruva_terminal_reconciliation": {
    "authored_artifact_closure_sha256": "860bb983acc2ec9047b8405cf9bdaf42576b06ba079c6d1d76c31a6a1e7f252d",
    "authored_runtime_manifest_sha256": "d70e0441f262710af54f100fe5902ed644da16db5c84da6d0a0532172d2dc7c4",
    "authored_verdict_sha256": "499ce951ab56032eb3541bcad9cc3591d4df68113337bd7d4c4082c65e0bbeb6",
    "claim_matching": "evaluated",
    "schema_version": 2,
    "status": "completed"
  },
  "accepted_exploit_knowledge_record_ids": [
    "cef1faab-c77f-4f95-9e0a-bd888cbde687",
    "e0bdf30a-6df3-4755-bf04-a96ece239e49"
  ],
  "attacker_controlled_input": "Unauthenticated SVG upload whose <image xlink:href> carries an explicit msl: coder prefix naming an attacker-uploaded MSL script at a blob path recovered from the signed disk token",
  "claim_outcome": "confirmed",
  "claimed_impact_class": "code_execution",
  "claimed_surface": "api_remote",
  "crash_observed": false,
  "end_to_end_target_reached": true,
  "evidence_scope": "production_path",
  "exploit_chain_demonstrated": true,
  "exploitability_confidence": "high",
  "inferred": false,
  "observed_impact_class": "code_execution",
  "read_write_primitive_observed": true,
  "repro_result": "confirmed",
  "sanitizer_used": false,
  "trigger_path": "POST /uploads (Active Storage attach) -> analyzer runs at attach time -> MiniMagick identify -> ImageMagick SVG coder -> MSL coder -> <read>/<write> of attacker-named files -> arbitrary file write, exfiltration through the attacker's own blob, code execution via a written template",
  "validated_surface": "api_remote"
}