{
  "status": "passed",
  "local_only": true,
  "real_image_digest": null,
  "synthetic_digest_used_only_to_check_rendering": true,
  "checks": [
    "production rendering unchanged except empty fail-closed allowlist",
    "unknown/malformed digest fails",
    "HTTP allowlist fails schema",
    "exact14 URLs roundtrip",
    "strategy resources PVC retained",
    "dedicated ESO mapping preserves current fields/store",
    "metadata sanitizer excludes userinfo/query secrets/fragments",
    "kubectl failure output discarded",
    "exact pod SQL real payload URL keys readonly fixture and anonymous filtering",
    "legacy Forgejo branch URL accepted without weakening credential query refusal"
  ],
  "helm_calls": [
    {
      "command": [
        "helm",
        "template",
        "reuse",
        "/tmp/cust81-apps-reader-owner/charts/reuse-surface",
        "-f",
        "/tmp/cust81-apps-reader-owner/helm/reuse-surface-values.yaml"
      ],
      "exit_code": 0,
      "expected_success": true
    },
    {
      "command": [
        "helm",
        "template",
        "reuse",
        "/tmp/cust81-apps-reader-owner/charts/reuse-surface",
        "-f",
        "/tmp/cust81-apps-reader-owner/helm/reuse-surface-values.yaml",
        "-f",
        "/tmp/cust81-apps-reader-owner/docs/assessments/cust81-private-reader/private-reader-values.r1.yaml"
      ],
      "exit_code": 1,
      "expected_success": false
    },
    {
      "command": [
        "helm",
        "template",
        "reuse",
        "/tmp/cust81-apps-reader-owner/charts/reuse-surface",
        "-f",
        "/tmp/cust81-apps-reader-owner/helm/reuse-surface-values.yaml",
        "-f",
        "/tmp/cust81-apps-reader-owner/docs/assessments/cust81-private-reader/private-reader-values.r1.yaml",
        "--set",
        "image.digest=sha256:bad"
      ],
      "exit_code": 1,
      "expected_success": false
    },
    {
      "command": [
        "helm",
        "template",
        "reuse",
        "/tmp/cust81-apps-reader-owner/charts/reuse-surface",
        "-f",
        "/tmp/cust81-apps-reader-owner/helm/reuse-surface-values.yaml",
        "-f",
        "/tmp/cust81-apps-reader-owner/docs/assessments/cust81-private-reader/private-reader-values.r1.yaml",
        "--set-json",
        "authSourceAllowlist={\"BAD\":[\"http://attacker.invalid\"]}",
        "--set",
        "image.digest=sha256:0000000000000000000000000000000000000000000000000000000000000000"
      ],
      "exit_code": 1,
      "expected_success": false
    },
    {
      "command": [
        "helm",
        "template",
        "reuse",
        "/tmp/cust81-apps-reader-owner/charts/reuse-surface",
        "-f",
        "/tmp/cust81-apps-reader-owner/helm/reuse-surface-values.yaml",
        "-f",
        "/tmp/cust81-apps-reader-owner/docs/assessments/cust81-private-reader/private-reader-values.r1.yaml",
        "--set",
        "image.digest=sha256:0000000000000000000000000000000000000000000000000000000000000000"
      ],
      "exit_code": 0,
      "expected_success": true
    }
  ]
}