{
  "schema_version": 1,
  "fixture_version": "1.0.0",
  "started_at": "2026-11-10T22:46:17.305463+00:00",
  "method": "Real curl subprocesses (--path-as-is) against three locally spawned fixture modes",
  "scope": {
    "hosts": [
      "127.0.0.1"
    ],
    "methods": [
      "GET"
    ],
    "path_prefix": "/files/",
    "data": "Synthetic files in a temporary directory created and deleted by the fixture"
  },
  "versions": {
    "python": "3.15.2",
    "os": "Darwin",
    "architecture": "arm64",
    "curl": "curl 8.7.1 (x86_64-apple-darwin24.0) libcurl/8.7.1 (SecureTransport) LibreSSL/3.3.6 zlib/1.2.12 nghttp2/1.64.0"
  },
  "sha256": {
    "fixture.py": "8aef73d7dcd3902de570d8d317cd5ea1c19c4016f6fb624c4603e1fa35d7197a",
    "verify.py": "d153705f4c09df44e6f68ba418524356b598172d1f6a1f2add09ad630147253b"
  },
  "reproduction_command": "python3 verify.py --output recorded-run",
  "agent_execution": {
    "executed": false,
    "note": "HTTP verification was scripted; no model or agent ran"
  },
  "cases": [
    {
      "id": "vulnerable/legit-file",
      "started_at": "2026-11-10T22:46:17.349574+00:00",
      "elapsed_ms": 7.157,
      "port": 52737,
      "command": [
        "curl",
        "--noproxy",
        "*",
        "--silent",
        "--show-error",
        "--include",
        "--path-as-is",
        "--http1.1",
        "--connect-timeout",
        "1",
        "--max-time",
        "3",
        "--request",
        "GET",
        "http://127.0.0.1:52737/files/report.txt"
      ],
      "curl_exit_code": 0,
      "stderr": "",
      "expected_status": 200,
      "expected_secret_disclosed": false,
      "observed_status": 200,
      "secret_disclosed": false,
      "observed_body": "Quarterly report (synthetic)\n",
      "matches_expected": true,
      "response_file": "vulnerable-legit-file.http",
      "response_sha256": "557bbe341a35da6ce3ea39384f9381235a034e94368c64b78ce20061dfe17419"
    },
    {
      "id": "vulnerable/legit-subdir",
      "started_at": "2026-11-10T22:46:17.356794+00:00",
      "elapsed_ms": 6.052,
      "port": 52737,
      "command": [
        "curl",
        "--noproxy",
        "*",
        "--silent",
        "--show-error",
        "--include",
        "--path-as-is",
        "--http1.1",
        "--connect-timeout",
        "1",
        "--max-time",
        "3",
        "--request",
        "GET",
        "http://127.0.0.1:52737/files/docs/guide.txt"
      ],
      "curl_exit_code": 0,
      "stderr": "",
      "expected_status": 200,
      "expected_secret_disclosed": false,
      "observed_status": 200,
      "secret_disclosed": false,
      "observed_body": "Guide inside a subdirectory (synthetic)\n",
      "matches_expected": true,
      "response_file": "vulnerable-legit-subdir.http",
      "response_sha256": "c2a65eeed04a3c47974cf7915c26613b78a1a118c8a5dafb31c0a4b49e41b082"
    },
    {
      "id": "vulnerable/missing-file",
      "started_at": "2026-11-10T22:46:17.362886+00:00",
      "elapsed_ms": 5.799,
      "port": 52737,
      "command": [
        "curl",
        "--noproxy",
        "*",
        "--silent",
        "--show-error",
        "--include",
        "--path-as-is",
        "--http1.1",
        "--connect-timeout",
        "1",
        "--max-time",
        "3",
        "--request",
        "GET",
        "http://127.0.0.1:52737/files/nope.txt"
      ],
      "curl_exit_code": 0,
      "stderr": "",
      "expected_status": 404,
      "expected_secret_disclosed": false,
      "observed_status": 404,
      "secret_disclosed": false,
      "observed_body": "{\"error\": \"not_found\"}\n",
      "matches_expected": true,
      "response_file": "vulnerable-missing-file.http",
      "response_sha256": "30795d7c04eb7ff32df323d5242c49bdb26dc051726a84983e176b5ea3ac11c9"
    },
    {
      "id": "vulnerable/dotdot",
      "started_at": "2026-11-10T22:46:17.368727+00:00",
      "elapsed_ms": 6.01,
      "port": 52737,
      "command": [
        "curl",
        "--noproxy",
        "*",
        "--silent",
        "--show-error",
        "--include",
        "--path-as-is",
        "--http1.1",
        "--connect-timeout",
        "1",
        "--max-time",
        "3",
        "--request",
        "GET",
        "http://127.0.0.1:52737/files/../secret.txt"
      ],
      "curl_exit_code": 0,
      "stderr": "",
      "expected_status": 200,
      "expected_secret_disclosed": true,
      "observed_status": 200,
      "secret_disclosed": true,
      "observed_body": "SYNTHETIC-SECRET-0001: not a real credential\n",
      "matches_expected": true,
      "response_file": "vulnerable-dotdot.http",
      "response_sha256": "c305ff5c3429a9c5227843aa7710c7a2b625b5e564c384e95859c5bbeec9f874"
    },
    {
      "id": "vulnerable/encoded-dotdot",
      "started_at": "2026-11-10T22:46:17.374782+00:00",
      "elapsed_ms": 6.258,
      "port": 52737,
      "command": [
        "curl",
        "--noproxy",
        "*",
        "--silent",
        "--show-error",
        "--include",
        "--path-as-is",
        "--http1.1",
        "--connect-timeout",
        "1",
        "--max-time",
        "3",
        "--request",
        "GET",
        "http://127.0.0.1:52737/files/..%2fsecret.txt"
      ],
      "curl_exit_code": 0,
      "stderr": "",
      "expected_status": 200,
      "expected_secret_disclosed": true,
      "observed_status": 200,
      "secret_disclosed": true,
      "observed_body": "SYNTHETIC-SECRET-0001: not a real credential\n",
      "matches_expected": true,
      "response_file": "vulnerable-encoded-dotdot.http",
      "response_sha256": "c305ff5c3429a9c5227843aa7710c7a2b625b5e564c384e95859c5bbeec9f874"
    },
    {
      "id": "vulnerable/absolute-path",
      "started_at": "2026-11-10T22:46:17.381076+00:00",
      "elapsed_ms": 6.403,
      "port": 52737,
      "command": [
        "curl",
        "--noproxy",
        "*",
        "--silent",
        "--show-error",
        "--include",
        "--path-as-is",
        "--http1.1",
        "--connect-timeout",
        "1",
        "--max-time",
        "3",
        "--request",
        "GET",
        "http://127.0.0.1:52737/files/%2Fvar%2Ffolders%2Fbv%2F1kt12mw94_sbpfvm9xw5lw380000gn%2FT%2Fpt-fixture-jorskkjr%2Fsecret.txt"
      ],
      "curl_exit_code": 0,
      "stderr": "",
      "expected_status": 200,
      "expected_secret_disclosed": true,
      "observed_status": 200,
      "secret_disclosed": true,
      "observed_body": "SYNTHETIC-SECRET-0001: not a real credential\n",
      "matches_expected": true,
      "response_file": "vulnerable-absolute-path.http",
      "response_sha256": "c305ff5c3429a9c5227843aa7710c7a2b625b5e564c384e95859c5bbeec9f874"
    },
    {
      "id": "vulnerable/nested-dotdot",
      "started_at": "2026-11-10T22:46:17.387535+00:00",
      "elapsed_ms": 6.674,
      "port": 52737,
      "command": [
        "curl",
        "--noproxy",
        "*",
        "--silent",
        "--show-error",
        "--include",
        "--path-as-is",
        "--http1.1",
        "--connect-timeout",
        "1",
        "--max-time",
        "3",
        "--request",
        "GET",
        "http://127.0.0.1:52737/files/....//secret.txt"
      ],
      "curl_exit_code": 0,
      "stderr": "",
      "expected_status": 404,
      "expected_secret_disclosed": false,
      "observed_status": 404,
      "secret_disclosed": false,
      "observed_body": "{\"error\": \"not_found\"}\n",
      "matches_expected": true,
      "response_file": "vulnerable-nested-dotdot.http",
      "response_sha256": "30795d7c04eb7ff32df323d5242c49bdb26dc051726a84983e176b5ea3ac11c9"
    },
    {
      "id": "vulnerable/double-encoded",
      "started_at": "2026-11-10T22:46:17.394254+00:00",
      "elapsed_ms": 6.217,
      "port": 52737,
      "command": [
        "curl",
        "--noproxy",
        "*",
        "--silent",
        "--show-error",
        "--include",
        "--path-as-is",
        "--http1.1",
        "--connect-timeout",
        "1",
        "--max-time",
        "3",
        "--request",
        "GET",
        "http://127.0.0.1:52737/files/%252e%252e%252fsecret.txt"
      ],
      "curl_exit_code": 0,
      "stderr": "",
      "expected_status": 404,
      "expected_secret_disclosed": false,
      "observed_status": 404,
      "secret_disclosed": false,
      "observed_body": "{\"error\": \"not_found\"}\n",
      "matches_expected": true,
      "response_file": "vulnerable-double-encoded.http",
      "response_sha256": "30795d7c04eb7ff32df323d5242c49bdb26dc051726a84983e176b5ea3ac11c9"
    },
    {
      "id": "naive/legit-file",
      "started_at": "2026-11-10T22:46:17.440894+00:00",
      "elapsed_ms": 7.117,
      "port": 52746,
      "command": [
        "curl",
        "--noproxy",
        "*",
        "--silent",
        "--show-error",
        "--include",
        "--path-as-is",
        "--http1.1",
        "--connect-timeout",
        "1",
        "--max-time",
        "3",
        "--request",
        "GET",
        "http://127.0.0.1:52746/files/report.txt"
      ],
      "curl_exit_code": 0,
      "stderr": "",
      "expected_status": 200,
      "expected_secret_disclosed": false,
      "observed_status": 200,
      "secret_disclosed": false,
      "observed_body": "Quarterly report (synthetic)\n",
      "matches_expected": true,
      "response_file": "naive-legit-file.http",
      "response_sha256": "557bbe341a35da6ce3ea39384f9381235a034e94368c64b78ce20061dfe17419"
    },
    {
      "id": "naive/legit-subdir",
      "started_at": "2026-11-10T22:46:17.448064+00:00",
      "elapsed_ms": 7.63,
      "port": 52746,
      "command": [
        "curl",
        "--noproxy",
        "*",
        "--silent",
        "--show-error",
        "--include",
        "--path-as-is",
        "--http1.1",
        "--connect-timeout",
        "1",
        "--max-time",
        "3",
        "--request",
        "GET",
        "http://127.0.0.1:52746/files/docs/guide.txt"
      ],
      "curl_exit_code": 0,
      "stderr": "",
      "expected_status": 200,
      "expected_secret_disclosed": false,
      "observed_status": 200,
      "secret_disclosed": false,
      "observed_body": "Guide inside a subdirectory (synthetic)\n",
      "matches_expected": true,
      "response_file": "naive-legit-subdir.http",
      "response_sha256": "c2a65eeed04a3c47974cf7915c26613b78a1a118c8a5dafb31c0a4b49e41b082"
    },
    {
      "id": "naive/missing-file",
      "started_at": "2026-11-10T22:46:17.455746+00:00",
      "elapsed_ms": 6.911,
      "port": 52746,
      "command": [
        "curl",
        "--noproxy",
        "*",
        "--silent",
        "--show-error",
        "--include",
        "--path-as-is",
        "--http1.1",
        "--connect-timeout",
        "1",
        "--max-time",
        "3",
        "--request",
        "GET",
        "http://127.0.0.1:52746/files/nope.txt"
      ],
      "curl_exit_code": 0,
      "stderr": "",
      "expected_status": 404,
      "expected_secret_disclosed": false,
      "observed_status": 404,
      "secret_disclosed": false,
      "observed_body": "{\"error\": \"not_found\"}\n",
      "matches_expected": true,
      "response_file": "naive-missing-file.http",
      "response_sha256": "30795d7c04eb7ff32df323d5242c49bdb26dc051726a84983e176b5ea3ac11c9"
    },
    {
      "id": "naive/dotdot",
      "started_at": "2026-11-10T22:46:17.462707+00:00",
      "elapsed_ms": 6.699,
      "port": 52746,
      "command": [
        "curl",
        "--noproxy",
        "*",
        "--silent",
        "--show-error",
        "--include",
        "--path-as-is",
        "--http1.1",
        "--connect-timeout",
        "1",
        "--max-time",
        "3",
        "--request",
        "GET",
        "http://127.0.0.1:52746/files/../secret.txt"
      ],
      "curl_exit_code": 0,
      "stderr": "",
      "expected_status": 404,
      "expected_secret_disclosed": false,
      "observed_status": 404,
      "secret_disclosed": false,
      "observed_body": "{\"error\": \"not_found\"}\n",
      "matches_expected": true,
      "response_file": "naive-dotdot.http",
      "response_sha256": "30795d7c04eb7ff32df323d5242c49bdb26dc051726a84983e176b5ea3ac11c9"
    },
    {
      "id": "naive/encoded-dotdot",
      "started_at": "2026-11-10T22:46:17.469460+00:00",
      "elapsed_ms": 7.557,
      "port": 52746,
      "command": [
        "curl",
        "--noproxy",
        "*",
        "--silent",
        "--show-error",
        "--include",
        "--path-as-is",
        "--http1.1",
        "--connect-timeout",
        "1",
        "--max-time",
        "3",
        "--request",
        "GET",
        "http://127.0.0.1:52746/files/..%2fsecret.txt"
      ],
      "curl_exit_code": 0,
      "stderr": "",
      "expected_status": 404,
      "expected_secret_disclosed": false,
      "observed_status": 404,
      "secret_disclosed": false,
      "observed_body": "{\"error\": \"not_found\"}\n",
      "matches_expected": true,
      "response_file": "naive-encoded-dotdot.http",
      "response_sha256": "30795d7c04eb7ff32df323d5242c49bdb26dc051726a84983e176b5ea3ac11c9"
    },
    {
      "id": "naive/absolute-path",
      "started_at": "2026-11-10T22:46:17.477068+00:00",
      "elapsed_ms": 6.98,
      "port": 52746,
      "command": [
        "curl",
        "--noproxy",
        "*",
        "--silent",
        "--show-error",
        "--include",
        "--path-as-is",
        "--http1.1",
        "--connect-timeout",
        "1",
        "--max-time",
        "3",
        "--request",
        "GET",
        "http://127.0.0.1:52746/files/%2Fvar%2Ffolders%2Fbv%2F1kt12mw94_sbpfvm9xw5lw380000gn%2FT%2Fpt-fixture-dxa48__4%2Fsecret.txt"
      ],
      "curl_exit_code": 0,
      "stderr": "",
      "expected_status": 200,
      "expected_secret_disclosed": true,
      "observed_status": 200,
      "secret_disclosed": true,
      "observed_body": "SYNTHETIC-SECRET-0001: not a real credential\n",
      "matches_expected": true,
      "response_file": "naive-absolute-path.http",
      "response_sha256": "c305ff5c3429a9c5227843aa7710c7a2b625b5e564c384e95859c5bbeec9f874"
    },
    {
      "id": "naive/nested-dotdot",
      "started_at": "2026-11-10T22:46:17.484107+00:00",
      "elapsed_ms": 6.889,
      "port": 52746,
      "command": [
        "curl",
        "--noproxy",
        "*",
        "--silent",
        "--show-error",
        "--include",
        "--path-as-is",
        "--http1.1",
        "--connect-timeout",
        "1",
        "--max-time",
        "3",
        "--request",
        "GET",
        "http://127.0.0.1:52746/files/....//secret.txt"
      ],
      "curl_exit_code": 0,
      "stderr": "",
      "expected_status": 200,
      "expected_secret_disclosed": true,
      "observed_status": 200,
      "secret_disclosed": true,
      "observed_body": "SYNTHETIC-SECRET-0001: not a real credential\n",
      "matches_expected": true,
      "response_file": "naive-nested-dotdot.http",
      "response_sha256": "c305ff5c3429a9c5227843aa7710c7a2b625b5e564c384e95859c5bbeec9f874"
    },
    {
      "id": "naive/double-encoded",
      "started_at": "2026-11-10T22:46:17.491047+00:00",
      "elapsed_ms": 6.567,
      "port": 52746,
      "command": [
        "curl",
        "--noproxy",
        "*",
        "--silent",
        "--show-error",
        "--include",
        "--path-as-is",
        "--http1.1",
        "--connect-timeout",
        "1",
        "--max-time",
        "3",
        "--request",
        "GET",
        "http://127.0.0.1:52746/files/%252e%252e%252fsecret.txt"
      ],
      "curl_exit_code": 0,
      "stderr": "",
      "expected_status": 404,
      "expected_secret_disclosed": false,
      "observed_status": 404,
      "secret_disclosed": false,
      "observed_body": "{\"error\": \"not_found\"}\n",
      "matches_expected": true,
      "response_file": "naive-double-encoded.http",
      "response_sha256": "30795d7c04eb7ff32df323d5242c49bdb26dc051726a84983e176b5ea3ac11c9"
    },
    {
      "id": "fixed/legit-file",
      "started_at": "2026-11-10T22:46:17.540357+00:00",
      "elapsed_ms": 7.233,
      "port": 52755,
      "command": [
        "curl",
        "--noproxy",
        "*",
        "--silent",
        "--show-error",
        "--include",
        "--path-as-is",
        "--http1.1",
        "--connect-timeout",
        "1",
        "--max-time",
        "3",
        "--request",
        "GET",
        "http://127.0.0.1:52755/files/report.txt"
      ],
      "curl_exit_code": 0,
      "stderr": "",
      "expected_status": 200,
      "expected_secret_disclosed": false,
      "observed_status": 200,
      "secret_disclosed": false,
      "observed_body": "Quarterly report (synthetic)\n",
      "matches_expected": true,
      "response_file": "fixed-legit-file.http",
      "response_sha256": "557bbe341a35da6ce3ea39384f9381235a034e94368c64b78ce20061dfe17419"
    },
    {
      "id": "fixed/legit-subdir",
      "started_at": "2026-11-10T22:46:17.547642+00:00",
      "elapsed_ms": 5.895,
      "port": 52755,
      "command": [
        "curl",
        "--noproxy",
        "*",
        "--silent",
        "--show-error",
        "--include",
        "--path-as-is",
        "--http1.1",
        "--connect-timeout",
        "1",
        "--max-time",
        "3",
        "--request",
        "GET",
        "http://127.0.0.1:52755/files/docs/guide.txt"
      ],
      "curl_exit_code": 0,
      "stderr": "",
      "expected_status": 200,
      "expected_secret_disclosed": false,
      "observed_status": 200,
      "secret_disclosed": false,
      "observed_body": "Guide inside a subdirectory (synthetic)\n",
      "matches_expected": true,
      "response_file": "fixed-legit-subdir.http",
      "response_sha256": "c2a65eeed04a3c47974cf7915c26613b78a1a118c8a5dafb31c0a4b49e41b082"
    },
    {
      "id": "fixed/missing-file",
      "started_at": "2026-11-10T22:46:17.553582+00:00",
      "elapsed_ms": 6.564,
      "port": 52755,
      "command": [
        "curl",
        "--noproxy",
        "*",
        "--silent",
        "--show-error",
        "--include",
        "--path-as-is",
        "--http1.1",
        "--connect-timeout",
        "1",
        "--max-time",
        "3",
        "--request",
        "GET",
        "http://127.0.0.1:52755/files/nope.txt"
      ],
      "curl_exit_code": 0,
      "stderr": "",
      "expected_status": 404,
      "expected_secret_disclosed": false,
      "observed_status": 404,
      "secret_disclosed": false,
      "observed_body": "{\"error\": \"not_found\"}\n",
      "matches_expected": true,
      "response_file": "fixed-missing-file.http",
      "response_sha256": "30795d7c04eb7ff32df323d5242c49bdb26dc051726a84983e176b5ea3ac11c9"
    },
    {
      "id": "fixed/dotdot",
      "started_at": "2026-11-10T22:46:17.560196+00:00",
      "elapsed_ms": 7.039,
      "port": 52755,
      "command": [
        "curl",
        "--noproxy",
        "*",
        "--silent",
        "--show-error",
        "--include",
        "--path-as-is",
        "--http1.1",
        "--connect-timeout",
        "1",
        "--max-time",
        "3",
        "--request",
        "GET",
        "http://127.0.0.1:52755/files/../secret.txt"
      ],
      "curl_exit_code": 0,
      "stderr": "",
      "expected_status": 403,
      "expected_secret_disclosed": false,
      "observed_status": 403,
      "secret_disclosed": false,
      "observed_body": "{\"error\": \"forbidden\"}\n",
      "matches_expected": true,
      "response_file": "fixed-dotdot.http",
      "response_sha256": "d53aa449b6549c01d510dde7e0d4fecf7a53239fcd0a14b42cf7f3b55c357201"
    },
    {
      "id": "fixed/encoded-dotdot",
      "started_at": "2026-11-10T22:46:17.567279+00:00",
      "elapsed_ms": 6.236,
      "port": 52755,
      "command": [
        "curl",
        "--noproxy",
        "*",
        "--silent",
        "--show-error",
        "--include",
        "--path-as-is",
        "--http1.1",
        "--connect-timeout",
        "1",
        "--max-time",
        "3",
        "--request",
        "GET",
        "http://127.0.0.1:52755/files/..%2fsecret.txt"
      ],
      "curl_exit_code": 0,
      "stderr": "",
      "expected_status": 403,
      "expected_secret_disclosed": false,
      "observed_status": 403,
      "secret_disclosed": false,
      "observed_body": "{\"error\": \"forbidden\"}\n",
      "matches_expected": true,
      "response_file": "fixed-encoded-dotdot.http",
      "response_sha256": "d53aa449b6549c01d510dde7e0d4fecf7a53239fcd0a14b42cf7f3b55c357201"
    },
    {
      "id": "fixed/absolute-path",
      "started_at": "2026-11-10T22:46:17.573559+00:00",
      "elapsed_ms": 6.548,
      "port": 52755,
      "command": [
        "curl",
        "--noproxy",
        "*",
        "--silent",
        "--show-error",
        "--include",
        "--path-as-is",
        "--http1.1",
        "--connect-timeout",
        "1",
        "--max-time",
        "3",
        "--request",
        "GET",
        "http://127.0.0.1:52755/files/%2Fvar%2Ffolders%2Fbv%2F1kt12mw94_sbpfvm9xw5lw380000gn%2FT%2Fpt-fixture-i9_z9vsm%2Fsecret.txt"
      ],
      "curl_exit_code": 0,
      "stderr": "",
      "expected_status": 403,
      "expected_secret_disclosed": false,
      "observed_status": 403,
      "secret_disclosed": false,
      "observed_body": "{\"error\": \"forbidden\"}\n",
      "matches_expected": true,
      "response_file": "fixed-absolute-path.http",
      "response_sha256": "d53aa449b6549c01d510dde7e0d4fecf7a53239fcd0a14b42cf7f3b55c357201"
    },
    {
      "id": "fixed/nested-dotdot",
      "started_at": "2026-11-10T22:46:17.580154+00:00",
      "elapsed_ms": 6.942,
      "port": 52755,
      "command": [
        "curl",
        "--noproxy",
        "*",
        "--silent",
        "--show-error",
        "--include",
        "--path-as-is",
        "--http1.1",
        "--connect-timeout",
        "1",
        "--max-time",
        "3",
        "--request",
        "GET",
        "http://127.0.0.1:52755/files/....//secret.txt"
      ],
      "curl_exit_code": 0,
      "stderr": "",
      "expected_status": 404,
      "expected_secret_disclosed": false,
      "observed_status": 404,
      "secret_disclosed": false,
      "observed_body": "{\"error\": \"not_found\"}\n",
      "matches_expected": true,
      "response_file": "fixed-nested-dotdot.http",
      "response_sha256": "30795d7c04eb7ff32df323d5242c49bdb26dc051726a84983e176b5ea3ac11c9"
    },
    {
      "id": "fixed/double-encoded",
      "started_at": "2026-11-10T22:46:17.587145+00:00",
      "elapsed_ms": 8.363,
      "port": 52755,
      "command": [
        "curl",
        "--noproxy",
        "*",
        "--silent",
        "--show-error",
        "--include",
        "--path-as-is",
        "--http1.1",
        "--connect-timeout",
        "1",
        "--max-time",
        "3",
        "--request",
        "GET",
        "http://127.0.0.1:52755/files/%252e%252e%252fsecret.txt"
      ],
      "curl_exit_code": 0,
      "stderr": "",
      "expected_status": 404,
      "expected_secret_disclosed": false,
      "observed_status": 404,
      "secret_disclosed": false,
      "observed_body": "{\"error\": \"not_found\"}\n",
      "matches_expected": true,
      "response_file": "fixed-double-encoded.http",
      "response_sha256": "30795d7c04eb7ff32df323d5242c49bdb26dc051726a84983e176b5ea3ac11c9"
    }
  ],
  "failures": [],
  "servers": {
    "vulnerable": {
      "base_url": "http://127.0.0.1:52737",
      "mode": "vulnerable",
      "base_dir": "/var/folders/bv/1kt12mw94_sbpfvm9xw5lw380000gn/T/pt-fixture-jorskkjr/public",
      "secret_path": "/var/folders/bv/1kt12mw94_sbpfvm9xw5lw380000gn/T/pt-fixture-jorskkjr/secret.txt",
      "version": "1.0.0"
    },
    "naive": {
      "base_url": "http://127.0.0.1:52746",
      "mode": "naive",
      "base_dir": "/var/folders/bv/1kt12mw94_sbpfvm9xw5lw380000gn/T/pt-fixture-dxa48__4/public",
      "secret_path": "/var/folders/bv/1kt12mw94_sbpfvm9xw5lw380000gn/T/pt-fixture-dxa48__4/secret.txt",
      "version": "1.0.0"
    },
    "fixed": {
      "base_url": "http://127.0.0.1:52755",
      "mode": "fixed",
      "base_dir": "/var/folders/bv/1kt12mw94_sbpfvm9xw5lw380000gn/T/pt-fixture-i9_z9vsm/public",
      "secret_path": "/var/folders/bv/1kt12mw94_sbpfvm9xw5lw380000gn/T/pt-fixture-i9_z9vsm/secret.txt",
      "version": "1.0.0"
    }
  },
  "finished_at": "2026-11-10T22:46:17.601772+00:00",
  "all_checks_passed": true
}