{
  "run_id": "20261107T125926Z-cisco-mcp-scan-yara",
  "created": "2026-11-07T13:05:09.810392+00:00",
  "note": "Published evidence package of a private lab run, built by analysis/export-package.py. Files listed under 'sanitized' differ from the lab originals as described; their raw SHA-256 values allow a later check against the originals. Files under 'not_published' stay private.",
  "versions": {
    "kernel": "7.0.0-42-generic",
    "virsh_daemon": "Compiled against library: libvirt 12.0.0 Using library: libvirt 12.0.0 Using API: QEMU 12.0.0 Running hypervisor: QEMU 10.2.1 Running against daemon: 12.0.0",
    "base_image": "debian-13-genericcloud-amd64-20261026-2643",
    "mitmproxy": "12.3.1"
  },
  "method_version": "0.1",
  "reach_method": "reach-v0.1",
  "tool": {
    "package": "cisco-ai-mcp-scanner",
    "version": "v4.8.6",
    "commit": "5d147dc7e3635606e41104112fa297b45444b05c",
    "install": "pip install of the source tree vendored at the pinned commit, in a virtual environment of the tool user; dependencies from the bundled uv.lock with their hashes (pip --require-hashes), downloaded through the lab proxy during the install phase"
  },
  "gateway_ruleset_sha256": "f3872e4525ceb6b2918d152bfb6a1ea913b62462f2c1471863ebe1af1e2b2080",
  "allowlist": {
    "hosts_run": [
      "target"
    ],
    "hosts_driver": [],
    "mode": "names: the lab resolver fills the allow sets when it resolves an allowed name; the proxy checks the name per sender"
  },
  "declared_hosts": [],
  "sensors": {
    "declared": [
      "fs",
      "net",
      "exec",
      "cred",
      "persist"
    ],
    "built": [
      "fs",
      "net",
      "exec",
      "cred",
      "persist"
    ],
    "no_evidence": []
  },
  "canaries_seeded": true,
  "dns": {
    "log_present": true,
    "sinkhole": "198.18.0.1"
  },
  "model": null,
  "preflight": {
    "mode": "build",
    "failures": 0,
    "host_agent_exception": true,
    "host_agent_note": "a Claude Code session ran on the lab host as the operator's tool; the lab machines cannot open connections to the host"
  },
  "provenance": {
    "golden_images_sha256": {
      "gateway": "1856355a5a2bf6e3080082625526e7b8c54cae90fee2f7548ed53fecd88e2193",
      "driver": "f14881c1cbcb4e762fa9ad0cf605fb978d32074837ae1947ca3f4f967de463dc",
      "runner-min": "277b22bdb43567ff73dcbbee95e4bc7bc2d471b7d4b5407b64b13cb7540462fc",
      "target": "357dd21f57d22547f42a2351554b191cf4ca3ec8733f95e98eae199c6f7a3e2e"
    },
    "source_tree_sha256": "a4673853dd2a53ec70c2c0b2010faed7a2453d5a94da630fc91f0f8928456f5f",
    "lockfile": {
      "used": true,
      "lockfile_sha256": "9e57c9ac0eac96188ba2ac44f422ab0a02f6a6b74dd2fb3763c4190982a8fde3",
      "packages_installed": 99,
      "hashes": 1739
    }
  },
  "tool_user": "tool (uid 1001), no sudo",
  "files": {
    "blocked.jsonl": "fa4c5b8f74ea463aac65fb397b57cdf0be07dae689dd7e885d292da586bb14fc",
    "declared.json": "533c113c0389ad9ef26e7d79419bc8211479489182f60b37cd3c1fb1dbfaa2f1",
    "dns.jsonl": "06554466cecd14c4f098eaa7a3154bd93f085bdf65c47463b3b03c670dcf820f",
    "egress.jsonl": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
    "findings.jsonl": "38c975b0cb6407806f9a23a4b1d1b24f11467634cc9b6964efa0b3620dbd74f4",
    "fs-diff.json": "10adc8307b205ac94c44019718c7a166b86cb293e41e06f52eec1954af8d8730",
    "gateway-sets.txt": "c4da9ef400e835150075596c3c302b3875c13c176e18b16c50872f420e59d4e0",
    "hitl-events.jsonl": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
    "host-events.jsonl": "a76168c86c8c100c9c3afd51bb859cb89cf1087c908213d548bd137d8fed64d5",
    "install-egress.jsonl": "688725a12db77153a69cdccafdbf46a8410b5f4e2290edaadb2ebfb5397aaf2f",
    "scanner-output.json": "0812f899fd38cf50b70f21a07fd6dc7a6b87d807cc461bbb844c9f990bca966c",
    "score.json": "7412f736197ed83df079596623f9d03df4586a3cd7ffef4f530af8a5ba9af925",
    "target-access.txt": "2dc1685123597a36321643a56e66a7111812b87095df9385b4d8954238c5f2b8",
    "tool-cmd.sh": "0fbcb2b8d1763bfbe48551ac23f31617b44acb8e5eb80c86a2784c9b88030507",
    "tool-stderr.txt": "0de3bb8622c0289de4f199e8fab47ccade21577281c958c78779c90d4cb8dff1"
  },
  "sanitized": {
    "scanner-output.json": {
      "from": "raw/tool-stdout.txt",
      "raw_sha256": "eb481180b937dd6dcb2b92f8f7cb26207a9da3463b04f49b672d0dc34791d27a",
      "change": "tool_description of the 3 probe tools replaced by the SHA-256 of the original bait text; JSON re-indented"
    },
    "score.json": {
      "from": "sensors/score.json",
      "raw_sha256": "fb2f852bebed38bd8000e3adcddbf3af57672a7b231e6e43b049da91ec6a3fc2",
      "change": "absolute host path in scored_against replaced by the fixture path"
    },
    "tool-stderr.txt": {
      "from": "raw/tool-stderr.txt",
      "raw_sha256": "9cd5d09eaccc4003b6cdd131487d2532f4f8a9803c7b0214c37e7250d4df3a86",
      "change": "ANSI colour codes removed and CRLF line endings (from ssh) normalised to LF, as git stores text; lines unchanged"
    },
    "gateway-sets.txt": {
      "from": "sensors/gw-nft.txt",
      "raw_sha256": "6e6afc69ba585ad64b90c0eb1e54eea080a23def0034b07690f57a8bd99b5f08",
      "change": "lines 1-11 only: the allow sets run_allow and run_tgt at run time; the rest of the gateway ruleset is not published"
    }
  },
  "not_published": {
    "allowlist-driver.txt": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
    "allowlist.txt": "a0ea45890e662e2f4f2825592ca70966415492af243286274be408ca83fb3c86",
    "approver-policy.json": "812826812fa601526a7b239c3e189c5882c302b6c6b979016d79c04784f27de4",
    "diff/driver.json": "c018c4b88c23b8a9e67ee02c21fa4efa8fdd90a3af8e188a88dfbf3dfed8a48f",
    "diff/gateway.json": "d7f44f4a8fedbfe63b0932a94618fa9df4dd66fb86a321978240136161e0eb4e",
    "diff/runner.json": "582d8baddde8a88421bc41dcf1414d21752937722372359978f50b539c86e2f3",
    "diff/target.json": "39e28b37e660d0c5525aff87f9b368861376edd439426b217792564e0b8d1707",
    "dns-servers.txt": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
    "pcap/labctl0.pcap": "cda9889132cc4d41dd48159140d6fc9fb67f00f34109271de16d61edeea05eeb",
    "pcap/labrun0.pcap": "44da47f2787749cd3ed4aa6cd28843d73b7b847c9d1ab6daa9a088c0ebdaf1dc",
    "pcap/labtgt0.pcap": "5feaf015510b4a2d0ff35dbd82b48222f031d2ad6c379efc61db16f083efe92e",
    "pcap/labwan0.pcap": "704e5e5b3234433c01fcfd1b20a306e77e985038120492dc53965c3edd38a4ea",
    "preflight.json": "a4d15794eddd731614115ebe1fdd522db80664fa9e3874c21aac09063c823720",
    "preflight.log": "32092120d2b2d7fa671bb3a919a277d9a9b280606c6459fcd381ce002a015e09",
    "profile.yaml": "a316e6ac6185397761adb947b5bb02013aea319d22fc718033f40f2e7042e453",
    "proxy-policy.json": "83a6b8a1ca5704d2d92383b383c07a622015f10562f8b8044a53914b830e3030",
    "raw/allowlist-all.txt": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
    "raw/canaries.txt": "83462be97914bd4a3aa2af096829cd4ac13b6b5331bec8ec23e738a05c1ac16c",
    "raw/fs-diff-raw.csv": "52c661f18b83cc36dca50e65ce334aacf1a071354c2b74ba46cffa0727f4ab52",
    "raw/install-lock.json": "1fd35281871c5a292d559539a78de560fbdaea47800cfb0c46eefd867b833dd4",
    "raw/install-pip-freeze.txt": "24d24d19c973db17f342490051bd55c1fa93bb1ebdd302e8b969824e67b67a4a",
    "raw/install-source-tree.json": "8dfa2b4dee6c72104d5073a6cf25d78e3dcee5a793431ce561c8fbb85c39863a",
    "raw/runner-audit.log": "25b95de39f881599846298d627621c494864b94723f2292dd94b7fab21384896",
    "raw/runner-tmp-fstype.txt": "f23f0177ae6d4b7017fcaacd265360c0a7aa662f35571247acd86b32f6675ba7",
    "raw/seed/aws-credentials": "5c454bc5e1dacd8a5b9b7cc8857e65b8f2b6d4e8bfe401241cce633f13a34f61",
    "raw/seed/netrc": "405d972e4164c244fb08555b7e735a56bafdcda78177cbae29710fd2a9596e93",
    "raw/seed/npmrc": "1a835bf0d00b246195fef771e214f4855d1f70b46b4ce3de52e5b7e399a76035",
    "raw/tool-status.json": "d381036c5b3d80a5ccd604f90b0fc03ce683fe3ad3e129fb23954bbf00847754",
    "sensors/dns.log": "1eff0b4c30d175c2c80f3af2adf5925906f1e5c3e294fa6b53419f874178dee4",
    "sensors/egress.flows": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
    "sensors/gw-sets.txt": "e1c470d23957ff8214ff90d91ea085a0cefdd68c40d823aa8ae85cd6b18693e5",
    "sensors/install-dns.log": "50c9f4e268705f2f957a094a0b487eb468808efd910c69509a4b331320a0b0a3",
    "sensors/install-fs-diff.json": "0083aed3d6aecd5d3e600ec46d4dadaec796f3d47a196f3b45388d95d6e299a1",
    "target-url.txt": "ad5213731608f65c05064f0f3df4d517de0aeb2eac7d0c4adc7cf801e432b86f",
    "task.txt": "73efbb202c70f0bbcc7031f6c6b540b8075e4b15567f5972eed363f8a6842733"
  }
}