{
  "contract": "changegate-gitlab-qc/v1",
  "gitlab": {
    "provider": "gitlab",
    "project_id": "87476475",
    "project_path": "midtown-intelligence-labs-group/changegate-releaseproof",
    "project_url": "https://gitlab.com/midtown-intelligence-labs-group/changegate-releaseproof",
    "commit_sha": "b22333d3b432a252f1f75966eb529ad509767d21",
    "branch": "review/releaseproof-delivery-20261017",
    "pipeline_source": "web",
    "pipeline_id": "2959586836",
    "pipeline_url": "https://gitlab.com/midtown-intelligence-labs-group/changegate-releaseproof/-/pipelines/2959586836",
    "job_id": "17261490880",
    "job_name": "releaseproof-audit",
    "job_url": "https://gitlab.com/midtown-intelligence-labs-group/changegate-releaseproof/-/jobs/17261490880"
  },
  "outcome": "COMPLETED_WITH_FINDINGS",
  "exit_code": 1,
  "provenance": "RUNNER_CONTEXT_AND_CHECKOUT_RECORDED_NOT_SIGNED_ATTESTATION",
  "started_at": "2026-10-18T03:22:21.457Z",
  "commands": [
    {
      "id": "npm-install-pin",
      "command": [
        "npm",
        "install",
        "--global",
        "npm@11.19.0",
        "--ignore-scripts",
        "--no-audit",
        "--no-fund"
      ],
      "exit_code": 0,
      "signal": null,
      "spawn_error": null,
      "stdout": {
        "path": "work/gitlab-qc/audit/npm-install-pin.stdout",
        "sha256": "0013fec2c58ea3288c31c049b2a484cb2d0f95b12bdccf43583909ec0abd0bfa",
        "byte_count": 27
      },
      "stderr": {
        "path": "work/gitlab-qc/audit/npm-install-pin.stderr",
        "sha256": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
        "byte_count": 0
      }
    },
    {
      "id": "npm-version",
      "command": [
        "npm",
        "--version"
      ],
      "exit_code": 0,
      "signal": null,
      "spawn_error": null,
      "stdout": {
        "path": "work/gitlab-qc/audit/npm-version.stdout",
        "sha256": "005206ab803f8881d8227540b7980b37e723b69a8849edb31734a90b7e7964e2",
        "byte_count": 8
      },
      "stderr": {
        "path": "work/gitlab-qc/audit/npm-version.stderr",
        "sha256": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
        "byte_count": 0
      }
    },
    {
      "id": "audit-regressions",
      "command": [
        "node",
        "--test",
        "releaseproof/dependency-audit.test.mjs"
      ],
      "exit_code": 0,
      "signal": null,
      "spawn_error": null,
      "stdout": {
        "path": "work/gitlab-qc/audit/audit-regressions.stdout",
        "sha256": "2d725ffd880ce840fb160e8d651162a24cf3f9e3912909e9d6836d10d6b896b1",
        "byte_count": 3185
      },
      "stderr": {
        "path": "work/gitlab-qc/audit/audit-regressions.stderr",
        "sha256": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
        "byte_count": 0
      }
    },
    {
      "id": "full",
      "command": [
        "npm",
        "audit",
        "--json",
        "--package-lock-only",
        "--include=dev",
        "--audit-level=info",
        "--registry=https://registry.npmjs.org"
      ],
      "exit_code": 1,
      "signal": null,
      "spawn_error": null,
      "stdout": {
        "path": "work/gitlab-qc/audit/full.stdout",
        "sha256": "d98fcdda73433af1787172059d21578e44029ed19aabce02e4d0cd7d8a80ee0f",
        "byte_count": 3021
      },
      "stderr": {
        "path": "work/gitlab-qc/audit/full.stderr",
        "sha256": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
        "byte_count": 0
      },
      "audit": {
        "outcome": "COMPLETED_WITH_FINDINGS",
        "counts": {
          "info": 0,
          "low": 0,
          "moderate": 0,
          "high": 5,
          "critical": 0,
          "total": 5
        }
      }
    },
    {
      "id": "production",
      "command": [
        "npm",
        "audit",
        "--json",
        "--package-lock-only",
        "--omit=dev",
        "--audit-level=info",
        "--registry=https://registry.npmjs.org"
      ],
      "exit_code": 0,
      "signal": null,
      "spawn_error": null,
      "stdout": {
        "path": "work/gitlab-qc/audit/production.stdout",
        "sha256": "3327e75f5e3ff68e63c584b6bc1f0515f0ce45b349e426fa4105288381b10495",
        "byte_count": 364
      },
      "stderr": {
        "path": "work/gitlab-qc/audit/production.stderr",
        "sha256": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
        "byte_count": 0
      },
      "audit": {
        "outcome": "COMPLETED_NO_FINDINGS",
        "counts": {
          "info": 0,
          "low": 0,
          "moderate": 0,
          "high": 0,
          "critical": 0,
          "total": 0
        }
      }
    }
  ],
  "not_run": [],
  "artifacts": [],
  "source_inputs": [
    {
      "path": ".gitlab-ci.yml",
      "sha256": "2667e3dea10a5e9f1e569e91f376b8e683016ab6d988555668920252c07778b4",
      "byte_count": 9448
    },
    {
      "path": "package.json",
      "sha256": "24af190062a7cd607dc9b06fce7de529a2bd19506a08b110239862fd9299949d",
      "byte_count": 1018
    },
    {
      "path": "package-lock.json",
      "sha256": "020c3c30055ed074ee388bbdcbb51a10289dc581086893df22b735738674a401",
      "byte_count": 252002
    },
    {
      "path": ".nvmrc",
      "sha256": "7e8a2fa94951112b894a3dbe3d05efef5e9263741fa49125f0a70f40fedab4cc",
      "byte_count": 8
    },
    {
      "path": ".npm-version",
      "sha256": "005206ab803f8881d8227540b7980b37e723b69a8849edb31734a90b7e7964e2",
      "byte_count": 8
    },
    {
      "path": "scripts/private-integration.test.mjs",
      "sha256": "ab4c543cc80a0deeae1dfd711b95ff49629e81c06892e69b7543dffb2b4eed44",
      "byte_count": 6875
    },
    {
      "path": "releaseproof/gitlab-qc.mjs",
      "sha256": "a38293d1cb82b63ef0cec282f2a204265e406608bca3a9e8b52c63cbd3c9c802",
      "byte_count": 11928
    },
    {
      "path": "releaseproof/gitlab-qc-plan.mjs",
      "sha256": "a158c2805946b19865b6240fed3a46239795a180f38db878738f0b421ba5133e",
      "byte_count": 6191
    },
    {
      "path": "releaseproof/hosted-smoke.mjs",
      "sha256": "f1da24a5a06a97af66f4ffaf027cb8c21900e6233d574cbd9960ff90b30c37e0",
      "byte_count": 30780
    },
    {
      "path": "public/releaseproof-duo-recording/evidence.json",
      "sha256": "11434e5dbb8eb90fa4a00161fc8026a43c2d62618e0797234faf7e20854b73c1",
      "byte_count": 2094
    },
    {
      "path": "public/releaseproof-duo-recording/response.json",
      "sha256": "1d3623d8221cc2d95d649e73732a819cd5708a3b51ef96b07698c1c74660cc69",
      "byte_count": 4939
    },
    {
      "path": "public/releaseproof-duo-recording/recording.json",
      "sha256": "039dd352a07070036779e0d8776407b76ff5e13e1bb3551359c9bcf67265e8bb",
      "byte_count": 2151
    }
  ],
  "historical_recording": {
    "session_id": 9631970,
    "flow_version": "1.2.0",
    "newly_invoked": false
  },
  "generated_evidence": "NEW_SYNTHETIC_BYTES_WITH_NATIVE_GITLAB_SIDECAR; github FIELDS REMAIN null",
  "advisory_snapshot": "NOT_ESTABLISHED: full and production audits are separate registry requests",
  "human_release": {
    "status": "PENDING",
    "approved": false
  },
  "deployment": {
    "authorized": false,
    "action": "NONE"
  },
  "gates": {
    "g0": "OPEN / NOT APPROVED",
    "g1": "CLOSED"
  },
  "finished_at": "2026-10-18T03:22:34.003Z"
}