{
  "schema": "evy.r76.public-synthetic-path.v1",
  "sourceResultSha256": "eccbd51484e63782b26c61d3f63e7b3f453b93e8d0183294a5d8ea0195090642",
  "candidateSha256": "5469b3989a45174d6dc31e53f5775014465a90e2180e694c33f2d1a92c3d2a70",
  "candidatePromoted": false,
  "cases": [
    {
      "id": "03_sender_read_is_not_guard",
      "label": "Source-controlled command",
      "synthetic": true,
      "fixtureSha256": "973a848875776791208a2def09ff2c8d75488f7e97531aac36912c09aafafa28",
      "verdict": "IPC_UNTRUSTED_TO_SINK",
      "impact": "HIGH",
      "flow": "FLOW_OBSERVED",
      "runtimeExploitationVerified": false
    },
    {
      "id": "04_receiver_constant_command",
      "label": "Constant-command alternative",
      "synthetic": true,
      "fixtureSha256": "6e5dd0a13088303bfbba6177f61fd9a834d553229c6f5b785af409160c0deed9",
      "verdict": "IPC_SINK_NO_UNTRUSTED_FLOW",
      "impact": "NONE",
      "flow": "NO_FLOW_OBSERVED",
      "runtimeExploitationVerified": false
    },
    {
      "id": "05_opaque_receiver_call",
      "label": "Unknown effects",
      "synthetic": true,
      "fixtureSha256": "07857934649c5681c3cd28e1f6662c5039571b40132aef52ba111e47cb2df9bf",
      "verdict": "REVIEW_FLOW_UNKNOWN",
      "impact": "UNKNOWN",
      "flow": "NO_FLOW_OBSERVED",
      "runtimeExploitationVerified": false
    }
  ],
  "limits": [
    "Static bounded fixture analysis, not an exploited application",
    "The alternatives are distinct fixtures, not a customer remediation",
    "NO_FLOW_OBSERVED does not certify safety",
    "Unknown effects require review; not automatically safe",
    "Publicly exposed cases cannot serve as future reserved validation"
  ]
}