{
  "schema": "coulomb.native-reset-role-refresh.v1",
  "observed_at": "2026-10-31T13:23:16.597535+00:00",
  "data": "synthetic",
  "status": "native_role_refresh_verified",
  "images": {
    "lldap": "sha256:9e605a66c02514bfcffd1b67cafb1e98d50992216bb2871d7ae44622047dd09d",
    "authelia": "sha256:bd97cff4fcbf715b5ff1f9ae286afbe6033afce385302520b0368122d43a6f54",
    "client": "sha256:512819463a1902b43a615beee14be7bf97e6a05e016385082b9380692ad1a8cd"
  },
  "production_access": false,
  "provider_smtp_contacted": false,
  "owner_runtime_or_permission_change_performed": false,
  "no_ports_host_mounts_or_external_routes": true,
  "backend_container_flags_verified_before_fixture_import": true,
  "source_manifest_sha256": "f3c6d7b5a286d15d3049bba7e4c543052388f6a95a5e3254414f3b51da1285d0",
  "findings": {
    "scenarios": [
      {
        "bind_role": "lldap_strict_readonly",
        "same_authelia_process": true,
        "status": "reset_refused",
        "only_loopback_interface": true,
        "external_routes_absent": true,
        "old_password_initially_accepted": true,
        "new_password_initially_refused": true,
        "native_first_factor": true,
        "interactive_service_login_refused": true,
        "reset_http_status": 200,
        "reset_response_status": "KO",
        "native_identity_finish": true,
        "reset_without_verified_challenge_refused": true,
        "consumed_identity_token_replay_refused": true,
        "old_password_accepted_after": true,
        "new_password_accepted_after": false
      },
      {
        "bind_role": "lldap_password_manager",
        "same_authelia_process": true,
        "status": "reset_completed",
        "only_loopback_interface": true,
        "external_routes_absent": true,
        "old_password_initially_accepted": true,
        "new_password_initially_refused": true,
        "native_first_factor": true,
        "interactive_service_login_refused": true,
        "reset_http_status": 200,
        "reset_response_status": null,
        "native_identity_finish": true,
        "reset_without_verified_challenge_refused": true,
        "consumed_identity_token_replay_refused": true,
        "old_password_accepted_after": false,
        "new_password_accepted_after": true
      },
      {
        "bind_role": "lldap_strict_readonly",
        "same_authelia_process": true,
        "status": "reset_refused",
        "only_loopback_interface": true,
        "external_routes_absent": true,
        "old_password_initially_accepted": true,
        "new_password_initially_refused": true,
        "native_first_factor": true,
        "interactive_service_login_refused": true,
        "reset_http_status": 200,
        "reset_response_status": "KO",
        "native_identity_finish": true,
        "reset_without_verified_challenge_refused": true,
        "consumed_identity_token_replay_refused": true,
        "old_password_accepted_after": true,
        "new_password_accepted_after": false
      }
    ],
    "cleanup_verified": true
  }
}