{"schema":"changegate.human-transferred-qc-evidence.v1","evidence_kind":"Saved assessment from completed private ReleaseProof QC; collected through the human-operated Owner-backed GitLab connector. Not a live Duo retrieval.","source":{"project_id":"87476475","commit_sha":"1e386861925fae282682b22113f9a18b798ed2d9","pipeline_id":"2943433979","pipeline_status":"failed","assessment_job_id":"17147505081","captured_at_utc":"2026-10-13T18:46:13.610Z"},"application_validation":{"id":17147505077,"name":"application-validation","status":"success","stage":"validate","allow_failure":false,"pipeline_id":2943433979,"commit_sha":"1e386861925fae282682b22113f9a18b798ed2d9","web_url":"https://gitlab.com/midtown-intelligence-labs-group/changegate-releaseproof/-/jobs/17147505077","finished_at":"2026-10-13T16:56:01.920Z"},"assessment":{"project":"87476475","sha":"1e386861925fae282682b22113f9a18b798ed2d9","pipeline":"2943433979","results":{"sast":{"execution":{"status":"SUCCEEDED","issues":[],"job":"17147505078","exit":0,"target_exit":0},"coverage":{"status":"COMPLETE","issues":[]},"findings":{"status":"KNOWN","count":0,"ids":[]},"analyzer":{"id":"semgrep","name":"Semgrep","url":"https://gitlab.com/gitlab-org/security-products/analyzers/semgrep","vendor":{"name":"GitLab"},"version":"6.27.0"},"scanner":{"id":"semgrep","name":"Semgrep","url":"https://github.com/returntocorp/semgrep","vendor":{"name":"GitLab"},"version":"1.178.0"}},"secrets":{"execution":{"status":"SUCCEEDED","issues":[],"job":"17147505079","exit":0},"coverage":{"status":"COMPLETE","issues":[]},"findings":{"status":"KNOWN","count":0,"ids":[]},"analyzer":{"id":"secrets","name":"secrets","url":"https://gitlab.com/gitlab-org/security-products/analyzers/secrets","vendor":{"name":"GitLab"},"version":"7.40.0"},"scanner":{"id":"gitleaks","name":"Gitleaks","url":"https://github.com/gitleaks/gitleaks","vendor":{"name":"GitLab"},"version":"8.30.1"}},"dependencies_full":{"execution":{"status":"SUCCEEDED","issues":[],"job":"17147505080","exit":0},"coverage":{"status":"COMPLETE","issues":[]},"findings":{"status":"KNOWN","count":5,"records":["@next/eslint-plugin-next","braces","eslint-config-next","fast-glob","micromatch"],"advisory_ids":["GHSA-vfj7-8cjw-p6xm"],"severity_counts":{"info":0,"low":0,"moderate":0,"high":5,"critical":0,"total":5}},"command_exit":1},"dependencies_production":{"execution":{"status":"SUCCEEDED","issues":[],"job":"17147505080","exit":0},"coverage":{"status":"COMPLETE","issues":[]},"findings":{"status":"KNOWN","count":0,"records":[],"advisory_ids":[],"severity_counts":{"info":0,"low":0,"moderate":0,"high":0,"critical":0,"total":0}},"command_exit":0}},"coverage_complete":true,"findings_present":true,"status":"FINDINGS","historical_unknowns":["diagnostic_artifact_capture_time","lifecycle_approval_configuration_comparison"],"historical_audit_waiver":false,"g0":"OPEN / NOT APPROVED","g1":"CLOSED"},"interpretation_boundary":{"overall_validation":"UNVERIFIED","source_acquisition":"human_read_connector","autonomous_private_access_proven":false,"release_authorized":false,"deployment_authorized":false,"frozen_verifier_v0_4":"UNCHANGED; NOT RUN on this QC report; historical output remains separate."}}