{ "version": "1.0.0", "id": "254099c9-d866-4dc5-804d-00e312f03aac", "timestamp": "2026-09-20T02:01:06.132Z", "durationMs": 122, "cliVersion": "0.1.0-alpha.1", "scannerCommit": "2086b26b2122f822872f38b860d6af36f56fa247", "scanMode": "full-active", "scoringFormulaVersion": "v4.0", "calibrationStatus": "CALIBRATED", "transport": { "type": "stdio", "command": "bun", "args": [ "scripts/gerfach/fixture.mjs" ], "protocol": "mcp" }, "server": { "serverInfo": { "name": "gerfach-portfolio-local-fixture", "version": "1.0.0" }, "protocolVersion": "2025-11-05", "capabilities": { "tools": { "listChanged": true } }, "tools": [ { "name": "write_file", "description": "Write text into a temporary local fixture directory. Intentionally inconsistent read-only annotation.", "inputSchema": { "type": "object", "properties": { "path": { "type": "string" }, "content": { "type": "string" } }, "required": [ "path", "content" ], "additionalProperties": false, "$schema": "http://json-schema.org/draft-07/schema#" }, "annotations": { "readOnlyHint": true, "destructiveHint": false, "openWorldHint": false }, "sourceProtocol": "mcp", "nativeType": "tool" } ], "resources": [], "prompts": [], "protocol": "mcp" }, "modules": [ { "moduleId": "state-oracle", "moduleName": "State Oracle (filesystem diff)", "moduleVersion": "1.0.0", "durationMs": 1, "checks": [ { "id": "STATE-ORACLE-001", "name": "State oracle diff", "status": "PASS", "message": "Probed 1 write-pair tool(s); workdir delta did not contain any probe canary." } ], "findings": [] } ], "findings": [], "summary": { "totalChecks": 1, "passed": 1, "warnings": 0, "checksWithFailStatus": 0, "skipped": 0, "errors": 0, "findingsBySeverity": { "CRITICAL": 0, "HIGH": 0, "MEDIUM": 0, "LOW": 0, "INFO": 0 }, "securityScore": 100, "rawScore": 100, "penaltyPoints": 0 }, "riskProfile": { "exposure": 0.613, "exploitChainDepth": 0, "severityDensity": 0, "capabilityRisk": 0, "trustViolation": 0, "compositeRiskScore": 0.148, "umriScalar": 83.98, "riskLevel": "LOW", "ssvcLabel": "Track", "_scanTier": "schema-rich", "_inputs": { "toolCount": 1, "totalParams": 2, "unconstrainedParams": 2, "chainFindings": 0, "dualUseFindings": 0, "capConcentrationFindings": 0, "dangerousCapabilities": [], "rugPullCriticals": 0, "rugPullHighs": 0, "descInjectionFindings": 0, "ipiFindings": 0, "namespacePoisoningFindings": 0, "findingsBySeverity": { "CRITICAL": 0, "HIGH": 0, "MEDIUM": 0, "LOW": 0, "INFO": 0 }, "weightedFindingSum": 0, "cwas": 1, "totalToolRisk": 0 } }, "schemaHash": { "schemaHash": "4f89c79e22cc85191706d71912f71bdb8542a6576f5a1b3831d7c2975e8d5c44", "toolHashes": { "write_file": "4f89c79e22cc85191706d71912f71bdb8542a6576f5a1b3831d7c2975e8d5c44" }, "toolCount": 1 }, "provenance": { "cliFlags": [ "--active", "--format=terminal", "--protocol=mcp", "--transport=stdio", "--timeout=30000", "--probe-timeout=5000", "--llm-output-token-limit=8192", "--modules=state-oracle", "--output=/after.json", "--chamber-run-dir=/portfolio-after", "--context=sandboxed" ], "configHash": "11a5f3b1aa47b3df", "runtimeVersion": "bun v24.3.0", "platform": "darwin-arm64", "envSnapshot": {} }, "peavReport": { "timestamp": "2026-09-20T02:01:06.127Z", "durationMs": 3, "results": [ { "toolName": "write_file", "hasEvidence": false, "signals": [], "responseTimeMs": 3, "callErrored": false } ], "toolsWithEvidence": [], "toolsNeedingFuzz": [ "write_file" ] }, "chamberSummary": { "runDir": "/portfolio-after", "networkName": "portfolio_after_net", "captureRoot": "/portfolio-after/captures", "captures": { "http": { "count": 0, "capturePath": "/portfolio-after/captures/http/requests.jsonl" }, "dns": { "count": 0, "capturePath": "/portfolio-after/captures/dns/queries.jsonl" }, "smtp": { "count": 0, "capturePath": "/portfolio-after/captures/smtp/sessions.jsonl" }, "metadata": { "count": 0, "capturePath": "/portfolio-after/captures/metadata/requests.jsonl" }, "netflow": { "count": 0, "capturePath": "/portfolio-after/captures/netflow/flows.jsonl" } }, "confirmedExfil": [], "ipiRelays": [], "severityCounts": { "critical": 0, "high": 0, "medium": 0, "low": 0 } }, "chamberReachability": { "status": "not-testable", "verified": false, "checkedAt": "2026-09-20T02:01:06.124Z", "method": "none", "captureFile": "/portfolio-after/captures/http/requests.jsonl", "reason": "No URL-like tool parameter was available for chamber reachability verification." }, "killChainSummary": { "chains": [ { "id": "KC-CHAMBER-BLOCKED-001", "title": "Chamber evidence path was not verified", "status": "blocked", "impact": "unknown", "severity": "INFO", "protocol": "mcp", "toolNames": [], "findingIds": [], "proofTypes": [], "proofArtifacts": [], "stages": [ { "kind": "entrypoint", "status": "partial", "label": "Entrypoint surface: 1 discovered tool(s).", "findingIds": [], "evidence": { "protocol": "mcp", "toolCount": 1 } }, { "kind": "attacker-control", "status": "partial", "label": "The scanner could not identify or complete a reachability probe." }, { "kind": "capability", "status": "partial", "label": "Target behavior may still be probeable, but chamber placement was not proven." }, { "kind": "chamber-sensor", "status": "blocked", "label": "Reachability status: not-testable.", "evidence": { "reason": "No URL-like tool parameter was available for chamber reachability verification.", "method": "none", "captureFile": "/portfolio-after/captures/http/requests.jsonl" } }, { "kind": "proof", "status": "blocked", "label": "No chamber-backed proof can be claimed until target-to-chamber reachability is verified." }, { "kind": "impact", "status": "blocked", "label": "Absence of chamber captures should not be interpreted as absence of exploitability." } ], "summary": "The scan used a chamber, but the target did not prove it could reach chamber sensors. Treat chamber-backed negative results as blocked, not clean.", "whatWorked": [], "whatDidNotWork": [ "No URL-like tool parameter was available for chamber reachability verification." ] } ], "total": 1, "completed": 0, "partial": 0, "blocked": 1, "highestSeverity": "INFO", "proofTypes": [] }, "egressMatrix": { "destinations": [ "chamber-direct", "localhost", "rfc1918", "cloud-metadata", "public-internet", "dns", "unclassified" ], "sinks": [ "http", "metadata", "dns", "smtp", "netflow" ], "cells": [ [ { "destination": "chamber-direct", "sink": "http", "verified": false, "canaries": [], "variants": [], "findingIds": [] }, { "destination": "chamber-direct", "sink": "metadata", "verified": false, "canaries": [], "variants": [], "findingIds": [] }, { "destination": "chamber-direct", "sink": "dns", "verified": false, "canaries": [], "variants": [], "findingIds": [] }, { "destination": "chamber-direct", "sink": "smtp", "verified": false, "canaries": [], "variants": [], "findingIds": [] }, { "destination": "chamber-direct", "sink": "netflow", "verified": false, "canaries": [], "variants": [], "findingIds": [] } ], [ { "destination": "localhost", "sink": "http", "verified": false, "canaries": [], "variants": [], "findingIds": [] }, { "destination": "localhost", "sink": "metadata", "verified": false, "canaries": [], "variants": [], "findingIds": [] }, { "destination": "localhost", "sink": "dns", "verified": false, "canaries": [], "variants": [], "findingIds": [] }, { "destination": "localhost", "sink": "smtp", "verified": false, "canaries": [], "variants": [], "findingIds": [] }, { "destination": "localhost", "sink": "netflow", "verified": false, "canaries": [], "variants": [], "findingIds": [] } ], [ { "destination": "rfc1918", "sink": "http", "verified": false, "canaries": [], "variants": [], "findingIds": [] }, { "destination": "rfc1918", "sink": "metadata", "verified": false, "canaries": [], "variants": [], "findingIds": [] }, { "destination": "rfc1918", "sink": "dns", "verified": false, "canaries": [], "variants": [], "findingIds": [] }, { "destination": "rfc1918", "sink": "smtp", "verified": false, "canaries": [], "variants": [], "findingIds": [] }, { "destination": "rfc1918", "sink": "netflow", "verified": false, "canaries": [], "variants": [], "findingIds": [] } ], [ { "destination": "cloud-metadata", "sink": "http", "verified": false, "canaries": [], "variants": [], "findingIds": [] }, { "destination": "cloud-metadata", "sink": "metadata", "verified": false, "canaries": [], "variants": [], "findingIds": [] }, { "destination": "cloud-metadata", "sink": "dns", "verified": false, "canaries": [], "variants": [], "findingIds": [] }, { "destination": "cloud-metadata", "sink": "smtp", "verified": false, "canaries": [], "variants": [], "findingIds": [] }, { "destination": "cloud-metadata", "sink": "netflow", "verified": false, "canaries": [], "variants": [], "findingIds": [] } ], [ { "destination": "public-internet", "sink": "http", "verified": false, "canaries": [], "variants": [], "findingIds": [] }, { "destination": "public-internet", "sink": "metadata", "verified": false, "canaries": [], "variants": [], "findingIds": [] }, { "destination": "public-internet", "sink": "dns", "verified": false, "canaries": [], "variants": [], "findingIds": [] }, { "destination": "public-internet", "sink": "smtp", "verified": false, "canaries": [], "variants": [], "findingIds": [] }, { "destination": "public-internet", "sink": "netflow", "verified": false, "canaries": [], "variants": [], "findingIds": [] } ], [ { "destination": "dns", "sink": "http", "verified": false, "canaries": [], "variants": [], "findingIds": [] }, { "destination": "dns", "sink": "metadata", "verified": false, "canaries": [], "variants": [], "findingIds": [] }, { "destination": "dns", "sink": "dns", "verified": false, "canaries": [], "variants": [], "findingIds": [] }, { "destination": "dns", "sink": "smtp", "verified": false, "canaries": [], "variants": [], "findingIds": [] }, { "destination": "dns", "sink": "netflow", "verified": false, "canaries": [], "variants": [], "findingIds": [] } ], [ { "destination": "unclassified", "sink": "http", "verified": false, "canaries": [], "variants": [], "findingIds": [] }, { "destination": "unclassified", "sink": "metadata", "verified": false, "canaries": [], "variants": [], "findingIds": [] }, { "destination": "unclassified", "sink": "dns", "verified": false, "canaries": [], "variants": [], "findingIds": [] }, { "destination": "unclassified", "sink": "smtp", "verified": false, "canaries": [], "variants": [], "findingIds": [] }, { "destination": "unclassified", "sink": "netflow", "verified": false, "canaries": [], "variants": [], "findingIds": [] } ] ], "reachedDestinations": [], "activeSinks": [], "verifiedCellCount": 0 }, "_contextDisclaimer": "[SANDBOX — scores not comparable to production targets]. This scan was run against a target declared as sandboxed/non-production. Risk scores reflect schema-level analysis only and do not account for the absence of real execution capability in sandboxed environments." }