{ "study": "right-the-first-time", "generatedBy": "scripts/research-export-blind.mjs", "appCommit": "cfc80ead", "firstRun": "2026-09-24T23:43:59.623Z", "lastRun": "2026-09-25T23:40:51.369Z", "checks": 51, "total": { "found": 317, "missed": 33, "wrong": 11, "findingCases": 350, "cleanCases": 352, "cases": 702, "recall": 0.905714, "recallCI": [ 0.870544, 0.932075 ], "falseAlarmRate": 0.03125, "falseAlarmCI": [ 0.017537, 0.055084 ], "precision": 0.966463, "precisionCI": [ 0.940954, 0.981173 ] }, "totalLater": { "found": 333, "missed": 17, "wrong": 2, "findingCases": 350, "cleanCases": 352, "cases": 702, "recall": 0.951429, "recallCI": [ 0.923598, 0.969456 ], "falseAlarmRate": 0.005682, "falseAlarmCI": [ 0.00156, 0.020477 ], "precision": 0.99403, "precisionCI": [ 0.978496, 0.998361 ] }, "bySurface": [ { "surface": "website", "checks": 33, "found": 231, "missed": 17, "wrong": 8, "findingCases": 248, "cleanCases": 250, "cases": 498, "recall": 0.931452, "recallCI": [ 0.892975, 0.956765 ], "falseAlarmRate": 0.032, "falseAlarmCI": [ 0.016302, 0.061863 ], "precision": 0.966527, "precisionCI": [ 0.935351, 0.982943 ] }, { "surface": "repository", "checks": 18, "found": 86, "missed": 16, "wrong": 3, "findingCases": 102, "cleanCases": 102, "cases": 204, "recall": 0.843137, "recallCI": [ 0.760288, 0.901078 ], "falseAlarmRate": 0.029412, "falseAlarmCI": [ 0.010052, 0.082932 ], "precision": 0.966292, "precisionCI": [ 0.905525, 0.988471 ] } ], "sets": [ { "set": "set-1", "runAt": null, "commit": "b734a272", "dirty": null, "detectorSha256": "772b998f50f647bb8e246d83979fed006246a71a790d9e17c6688f8795684986", "checks": 9, "first": { "found": 25, "missed": 2, "wrong": 1, "findingCases": 27, "cleanCases": 27, "cases": 54, "recall": 0.925926, "recallCI": [ 0.7663, 0.979446 ], "falseAlarmRate": 0.037037, "falseAlarmCI": [ 0.006568, 0.182839 ], "precision": 0.961538, "precisionCI": [ 0.811068, 0.993178 ] }, "after": { "label": "shipped", "commit": "07f48758", "found": 27, "missed": 0, "wrong": 0, "findingCases": 27, "cleanCases": 27, "cases": 54, "recall": 1, "recallCI": [ 0.875441, 1 ], "falseAlarmRate": 0, "falseAlarmCI": [ 0, 0.124559 ], "precision": 1, "precisionCI": [ 0.875441, 1 ] } }, { "set": "set-2", "runAt": null, "commit": "425cb687", "dirty": null, "detectorSha256": "6b5981435c5e3c0fb1589c57b6fda70e07dbfb1c04971253782f6a34dace34a6", "checks": 9, "first": { "found": 26, "missed": 1, "wrong": 1, "findingCases": 27, "cleanCases": 27, "cases": 54, "recall": 0.962963, "recallCI": [ 0.817161, 0.993432 ], "falseAlarmRate": 0.037037, "falseAlarmCI": [ 0.006568, 0.182839 ], "precision": 0.962963, "precisionCI": [ 0.817161, 0.993432 ] }, "after": { "label": "shipped", "commit": "07f48758", "found": 27, "missed": 0, "wrong": 0, "findingCases": 27, "cleanCases": 27, "cases": 54, "recall": 1, "recallCI": [ 0.875441, 1 ], "falseAlarmRate": 0, "falseAlarmCI": [ 0, 0.124559 ], "precision": 1, "precisionCI": [ 0.875441, 1 ] } }, { "set": "set-3", "runAt": "2026-09-24T23:43:59.623Z", "commit": "87b1b767", "dirty": true, "detectorSha256": "f70976969c0ee376f5f14b86b2f7035eb61b87a53bb49c08c5eb0edb6750b2c0", "checks": 11, "first": { "found": 42, "missed": 2, "wrong": 6, "findingCases": 44, "cleanCases": 44, "cases": 88, "recall": 0.954545, "recallCI": [ 0.848647, 0.987445 ], "falseAlarmRate": 0.136364, "falseAlarmCI": [ 0.064029, 0.267097 ], "precision": 0.875, "precisionCI": [ 0.752993, 0.94143 ] }, "after": { "label": "after-fixes", "commit": "87b1b767", "found": 44, "missed": 0, "wrong": 2, "findingCases": 44, "cleanCases": 44, "cases": 88, "recall": 1, "recallCI": [ 0.919702, 1 ], "falseAlarmRate": 0.045455, "falseAlarmCI": [ 0.012555, 0.151353 ], "precision": 0.956522, "precisionCI": [ 0.854675, 0.987995 ] } }, { "set": "set-4", "runAt": "2026-09-25T00:05:43.931Z", "commit": "87b1b767", "dirty": true, "detectorSha256": "02c3b5155339cf70ca25f5196eb0a5c731658aeaec7f4827e1a12baa3cb09317", "checks": 9, "first": { "found": 36, "missed": 0, "wrong": 0, "findingCases": 36, "cleanCases": 36, "cases": 72, "recall": 1, "recallCI": [ 0.903578, 1 ], "falseAlarmRate": 0, "falseAlarmCI": [ 0, 0.096422 ], "precision": 1, "precisionCI": [ 0.903578, 1 ] }, "after": null }, { "set": "modules-holdout", "runAt": "2026-09-25T00:07:07.973Z", "commit": "b1620948", "dirty": false, "detectorSha256": "02c3b5155339cf70ca25f5196eb0a5c731658aeaec7f4827e1a12baa3cb09317", "checks": 12, "first": { "found": 43, "missed": 5, "wrong": 2, "findingCases": 48, "cleanCases": 48, "cases": 96, "recall": 0.895833, "recallCI": [ 0.778323, 0.954679 ], "falseAlarmRate": 0.041667, "falseAlarmCI": [ 0.011502, 0.139759 ], "precision": 0.955556, "precisionCI": [ 0.851722, 0.987726 ] }, "after": { "label": "after-fixes", "commit": "b1620948", "found": 47, "missed": 1, "wrong": 0, "findingCases": 48, "cleanCases": 48, "cases": 96, "recall": 0.979167, "recallCI": [ 0.891005, 0.996313 ], "falseAlarmRate": 0, "falseAlarmCI": [ 0, 0.074103 ], "precision": 1, "precisionCI": [ 0.92444, 1 ] } }, { "set": "set-5", "runAt": "2026-09-25T00:36:44.142Z", "commit": "be09dbf1", "dirty": true, "detectorSha256": "c0082c91464af80dc7e4c242f18d8acf55981de1c3a338d894a96226e18b8b95", "checks": 11, "first": { "found": 42, "missed": 2, "wrong": 1, "findingCases": 44, "cleanCases": 44, "cases": 88, "recall": 0.954545, "recallCI": [ 0.848647, 0.987445 ], "falseAlarmRate": 0.022727, "falseAlarmCI": [ 0.004023, 0.11808 ], "precision": 0.976744, "precisionCI": [ 0.879407, 0.995883 ] }, "after": { "label": "after-fixes", "commit": "be09dbf1", "found": 44, "missed": 0, "wrong": 0, "findingCases": 44, "cleanCases": 44, "cases": 88, "recall": 1, "recallCI": [ 0.919702, 1 ], "falseAlarmRate": 0, "falseAlarmCI": [ 0, 0.080298 ], "precision": 1, "precisionCI": [ 0.919702, 1 ] } }, { "set": "modules-final", "runAt": "2026-09-25T00:36:43.467Z", "commit": "be09dbf1", "dirty": true, "detectorSha256": "c0082c91464af80dc7e4c242f18d8acf55981de1c3a338d894a96226e18b8b95", "checks": 12, "first": { "found": 46, "missed": 2, "wrong": 0, "findingCases": 48, "cleanCases": 48, "cases": 96, "recall": 0.958333, "recallCI": [ 0.860241, 0.988498 ], "falseAlarmRate": 0, "falseAlarmCI": [ 0, 0.074103 ], "precision": 1, "precisionCI": [ 0.922924, 1 ] }, "after": { "label": "after-fixes", "commit": "be09dbf1", "found": 48, "missed": 0, "wrong": 0, "findingCases": 48, "cleanCases": 48, "cases": 96, "recall": 1, "recallCI": [ 0.925897, 1 ], "falseAlarmRate": 0, "falseAlarmCI": [ 0, 0.074103 ], "precision": 1, "precisionCI": [ 0.925897, 1 ] } }, { "set": "round2-blind", "runAt": "2026-09-25T21:06:29.570Z", "commit": "224d45d3", "dirty": true, "detectorSha256": "323a504fabbbbb8821a3d2ff3c7d59e2bafa154e1ff4958a4b215ce9b7745691", "checks": 18, "first": { "found": 53, "missed": 19, "wrong": 0, "findingCases": 72, "cleanCases": 72, "cases": 144, "recall": 0.736111, "recallCI": [ 0.624239, 0.824064 ], "falseAlarmRate": 0, "falseAlarmCI": [ 0, 0.050653 ], "precision": 1, "precisionCI": [ 0.932416, 1 ] }, "after": { "label": "second", "commit": "224d45d3", "found": 56, "missed": 16, "wrong": 0, "findingCases": 72, "cleanCases": 72, "cases": 144, "recall": 0.777778, "recallCI": [ 0.669088, 0.858327 ], "falseAlarmRate": 0, "falseAlarmCI": [ 0, 0.050653 ], "precision": 1, "precisionCI": [ 0.935804, 1 ] } }, { "set": "round3-blind", "runAt": "2026-09-25T23:40:51.369Z", "commit": "cfc80ead", "dirty": false, "detectorSha256": "dcf3c10b2def76f452ed1d40a33f9f9191f82b4d81b55f20afeb6c6a5b86a147", "checks": 1, "first": { "found": 4, "missed": 0, "wrong": 0, "findingCases": 4, "cleanCases": 6, "cases": 10, "recall": 1, "recallCI": [ 0.5101, 1 ], "falseAlarmRate": 0, "falseAlarmCI": [ 0, 0.390343 ], "precision": 1, "precisionCI": [ 0.5101, 1 ] }, "after": { "label": "second", "commit": "6f3bfad7", "found": 4, "missed": 0, "wrong": 0, "findingCases": 4, "cleanCases": 6, "cases": 10, "recall": 1, "recallCI": [ 0.5101, 1 ], "falseAlarmRate": 0, "falseAlarmCI": [ 0, 0.390343 ], "precision": 1, "precisionCI": [ 0.5101, 1 ] } } ], "byCheck": [ { "check": "cache-leak", "surface": "website", "question": "Can a shared cache hand one visitor’s sign-in to another?", "sets": [ "modules-holdout", "modules-final" ], "found": 8, "missed": 0, "wrong": 0, "findingCases": 8, "cleanCases": 8, "cases": 16, "recall": 1, "recallCI": [ 0.675584, 1 ], "falseAlarmRate": 0, "falseAlarmCI": [ 0, 0.324416 ], "precision": 1, "precisionCI": [ 0.675584, 1 ], "later": { "found": 8, "missed": 0, "wrong": 0, "findingCases": 8, "cleanCases": 8, "cases": 16, "recall": 1, "recallCI": [ 0.675584, 1 ], "falseAlarmRate": 0, "falseAlarmCI": [ 0, 0.324416 ], "precision": 1, "precisionCI": [ 0.675584, 1 ] } }, { "check": "ci-injection", "surface": "repository", "question": "Can a stranger run commands in your GitHub Actions?", "sets": [ "modules-holdout", "modules-final" ], "found": 8, "missed": 0, "wrong": 0, "findingCases": 8, "cleanCases": 8, "cases": 16, "recall": 1, "recallCI": [ 0.675584, 1 ], "falseAlarmRate": 0, "falseAlarmCI": [ 0, 0.324416 ], "precision": 1, "precisionCI": [ 0.675584, 1 ], "later": { "found": 8, "missed": 0, "wrong": 0, "findingCases": 8, "cleanCases": 8, "cases": 16, "recall": 1, "recallCI": [ 0.675584, 1 ], "falseAlarmRate": 0, "falseAlarmCI": [ 0, 0.324416 ], "precision": 1, "precisionCI": [ 0.675584, 1 ] } }, { "check": "committed-secrets", "surface": "repository", "question": "Are secret keys written into your repository?", "sets": [ "set-1", "set-2", "set-4" ], "found": 10, "missed": 0, "wrong": 2, "findingCases": 10, "cleanCases": 10, "cases": 20, "recall": 1, "recallCI": [ 0.72246, 1 ], "falseAlarmRate": 0.2, "falseAlarmCI": [ 0.056681, 0.509843 ], "precision": 0.833333, "precisionCI": [ 0.551964, 0.953036 ], "later": { "found": 10, "missed": 0, "wrong": 0, "findingCases": 10, "cleanCases": 10, "cases": 20, "recall": 1, "recallCI": [ 0.72246, 1 ], "falseAlarmRate": 0, "falseAlarmCI": [ 0, 0.27754 ], "precision": 1, "precisionCI": [ 0.72246, 1 ] } }, { "check": "compromised-actions", "surface": "repository", "question": "Do your workflows use an action release known to be malicious?", "sets": [ "round2-blind" ], "found": 1, "missed": 3, "wrong": 0, "findingCases": 4, "cleanCases": 4, "cases": 8, "recall": 0.25, "recallCI": [ 0.045586, 0.699364 ], "falseAlarmRate": 0, "falseAlarmCI": [ 0, 0.4899 ], "precision": 1, "precisionCI": [ 0.206543, 1 ], "later": { "found": 1, "missed": 3, "wrong": 0, "findingCases": 4, "cleanCases": 4, "cases": 8, "recall": 0.25, "recallCI": [ 0.045586, 0.699364 ], "falseAlarmRate": 0, "falseAlarmCI": [ 0, 0.4899 ], "precision": 1, "precisionCI": [ 0.206543, 1 ] } }, { "check": "compromised-script-hosts", "surface": "website", "question": "Do your pages load scripts from hijacked domains?", "sets": [ "modules-holdout", "modules-final" ], "found": 7, "missed": 1, "wrong": 0, "findingCases": 8, "cleanCases": 8, "cases": 16, "recall": 0.875, "recallCI": [ 0.529105, 0.977583 ], "falseAlarmRate": 0, "falseAlarmCI": [ 0, 0.324416 ], "precision": 1, "precisionCI": [ 0.645661, 1 ], "later": { "found": 8, "missed": 0, "wrong": 0, "findingCases": 8, "cleanCases": 8, "cases": 16, "recall": 1, "recallCI": [ 0.675584, 1 ], "falseAlarmRate": 0, "falseAlarmCI": [ 0, 0.324416 ], "precision": 1, "precisionCI": [ 0.675584, 1 ] } }, { "check": "cookie-flags", "surface": "website", "question": "Can scripts or other sites read your session cookies?", "sets": [ "set-3", "set-5" ], "found": 8, "missed": 0, "wrong": 1, "findingCases": 8, "cleanCases": 8, "cases": 16, "recall": 1, "recallCI": [ 0.675584, 1 ], "falseAlarmRate": 0.125, "falseAlarmCI": [ 0.022417, 0.470895 ], "precision": 0.888889, "precisionCI": [ 0.564994, 0.98011 ], "later": { "found": 8, "missed": 0, "wrong": 0, "findingCases": 8, "cleanCases": 8, "cases": 16, "recall": 1, "recallCI": [ 0.675584, 1 ], "falseAlarmRate": 0, "falseAlarmCI": [ 0, 0.324416 ], "precision": 1, "precisionCI": [ 0.675584, 1 ] } }, { "check": "cors", "surface": "website", "question": "Does your API answer requests from any website?", "sets": [ "set-3", "set-5" ], "found": 6, "missed": 2, "wrong": 0, "findingCases": 8, "cleanCases": 8, "cases": 16, "recall": 0.75, "recallCI": [ 0.40927, 0.928522 ], "falseAlarmRate": 0, "falseAlarmCI": [ 0, 0.324416 ], "precision": 1, "precisionCI": [ 0.609657, 1 ], "later": { "found": 8, "missed": 0, "wrong": 0, "findingCases": 8, "cleanCases": 8, "cases": 16, "recall": 1, "recallCI": [ 0.675584, 1 ], "falseAlarmRate": 0, "falseAlarmCI": [ 0, 0.324416 ], "precision": 1, "precisionCI": [ 0.675584, 1 ] } }, { "check": "csp-weakness", "surface": "website", "question": "Would your Content Security Policy stop an injected script?", "sets": [ "modules-holdout", "modules-final" ], "found": 8, "missed": 0, "wrong": 0, "findingCases": 8, "cleanCases": 8, "cases": 16, "recall": 1, "recallCI": [ 0.675584, 1 ], "falseAlarmRate": 0, "falseAlarmCI": [ 0, 0.324416 ], "precision": 1, "precisionCI": [ 0.675584, 1 ], "later": { "found": 8, "missed": 0, "wrong": 0, "findingCases": 8, "cleanCases": 8, "cases": 16, "recall": 1, "recallCI": [ 0.675584, 1 ], "falseAlarmRate": 0, "falseAlarmCI": [ 0, 0.324416 ], "precision": 1, "precisionCI": [ 0.675584, 1 ] } }, { "check": "dangling-subdomains", "surface": "website", "question": "Do old subdomains point at services that are gone?", "sets": [ "set-1", "set-2", "set-4" ], "found": 10, "missed": 0, "wrong": 0, "findingCases": 10, "cleanCases": 10, "cases": 20, "recall": 1, "recallCI": [ 0.72246, 1 ], "falseAlarmRate": 0, "falseAlarmCI": [ 0, 0.27754 ], "precision": 1, "precisionCI": [ 0.72246, 1 ], "later": { "found": 10, "missed": 0, "wrong": 0, "findingCases": 10, "cleanCases": 10, "cases": 20, "recall": 1, "recallCI": [ 0.72246, 1 ], "falseAlarmRate": 0, "falseAlarmCI": [ 0, 0.27754 ], "precision": 1, "precisionCI": [ 0.72246, 1 ] } }, { "check": "dev-server-exposed", "surface": "website", "question": "Is your app running in development mode?", "sets": [ "modules-holdout", "modules-final" ], "found": 8, "missed": 0, "wrong": 1, "findingCases": 8, "cleanCases": 8, "cases": 16, "recall": 1, "recallCI": [ 0.675584, 1 ], "falseAlarmRate": 0.125, "falseAlarmCI": [ 0.022417, 0.470895 ], "precision": 0.888889, "precisionCI": [ 0.564994, 0.98011 ], "later": { "found": 8, "missed": 0, "wrong": 0, "findingCases": 8, "cleanCases": 8, "cases": 16, "recall": 1, "recallCI": [ 0.675584, 1 ], "falseAlarmRate": 0, "falseAlarmCI": [ 0, 0.324416 ], "precision": 1, "precisionCI": [ 0.675584, 1 ] } }, { "check": "domain-expiry", "surface": "website", "question": "Is your domain registration close to expiring?", "sets": [ "set-1", "set-2", "set-4" ], "found": 10, "missed": 0, "wrong": 0, "findingCases": 10, "cleanCases": 10, "cases": 20, "recall": 1, "recallCI": [ 0.72246, 1 ], "falseAlarmRate": 0, "falseAlarmCI": [ 0, 0.27754 ], "precision": 1, "precisionCI": [ 0.72246, 1 ], "later": { "found": 10, "missed": 0, "wrong": 0, "findingCases": 10, "cleanCases": 10, "cases": 20, "recall": 1, "recallCI": [ 0.72246, 1 ], "falseAlarmRate": 0, "falseAlarmCI": [ 0, 0.27754 ], "precision": 1, "precisionCI": [ 0.72246, 1 ] } }, { "check": "email-auth", "surface": "website", "question": "Can someone send email that claims to come from you?", "sets": [ "set-1", "set-2", "set-4" ], "found": 9, "missed": 1, "wrong": 0, "findingCases": 10, "cleanCases": 10, "cases": 20, "recall": 0.9, "recallCI": [ 0.595844, 0.982124 ], "falseAlarmRate": 0, "falseAlarmCI": [ 0, 0.27754 ], "precision": 1, "precisionCI": [ 0.700847, 1 ], "later": { "found": 10, "missed": 0, "wrong": 0, "findingCases": 10, "cleanCases": 10, "cases": 20, "recall": 1, "recallCI": [ 0.72246, 1 ], "falseAlarmRate": 0, "falseAlarmCI": [ 0, 0.27754 ], "precision": 1, "precisionCI": [ 0.72246, 1 ] } }, { "check": "env-in-client-bundle", "surface": "repository", "question": "Does your build copy every environment variable into the browser code?", "sets": [ "round2-blind" ], "found": 3, "missed": 1, "wrong": 0, "findingCases": 4, "cleanCases": 4, "cases": 8, "recall": 0.75, "recallCI": [ 0.300636, 0.954414 ], "falseAlarmRate": 0, "falseAlarmCI": [ 0, 0.4899 ], "precision": 1, "precisionCI": [ 0.438494, 1 ], "later": { "found": 3, "missed": 1, "wrong": 0, "findingCases": 4, "cleanCases": 4, "cases": 8, "recall": 0.75, "recallCI": [ 0.300636, 0.954414 ], "falseAlarmRate": 0, "falseAlarmCI": [ 0, 0.4899 ], "precision": 1, "precisionCI": [ 0.438494, 1 ] } }, { "check": "exposed-admin-tools", "surface": "website", "question": "Are admin panels or status pages open to anyone?", "sets": [ "round2-blind" ], "found": 4, "missed": 0, "wrong": 0, "findingCases": 4, "cleanCases": 4, "cases": 8, "recall": 1, "recallCI": [ 0.5101, 1 ], "falseAlarmRate": 0, "falseAlarmCI": [ 0, 0.4899 ], "precision": 1, "precisionCI": [ 0.5101, 1 ], "later": { "found": 4, "missed": 0, "wrong": 0, "findingCases": 4, "cleanCases": 4, "cases": 8, "recall": 1, "recallCI": [ 0.5101, 1 ], "falseAlarmRate": 0, "falseAlarmCI": [ 0, 0.4899 ], "precision": 1, "precisionCI": [ 0.5101, 1 ] } }, { "check": "exposed-artifacts", "surface": "website", "question": "Are backups, database exports or folder listings reachable?", "sets": [ "set-3", "set-5" ], "found": 7, "missed": 1, "wrong": 0, "findingCases": 8, "cleanCases": 8, "cases": 16, "recall": 0.875, "recallCI": [ 0.529105, 0.977583 ], "falseAlarmRate": 0, "falseAlarmCI": [ 0, 0.324416 ], "precision": 1, "precisionCI": [ 0.645661, 1 ], "later": { "found": 8, "missed": 0, "wrong": 0, "findingCases": 8, "cleanCases": 8, "cases": 16, "recall": 1, "recallCI": [ 0.675584, 1 ], "falseAlarmRate": 0, "falseAlarmCI": [ 0, 0.324416 ], "precision": 1, "precisionCI": [ 0.675584, 1 ] } }, { "check": "exposed-credential-files", "surface": "website", "question": "Can files with passwords or keys be downloaded?", "sets": [ "round2-blind" ], "found": 4, "missed": 0, "wrong": 0, "findingCases": 4, "cleanCases": 4, "cases": 8, "recall": 1, "recallCI": [ 0.5101, 1 ], "falseAlarmRate": 0, "falseAlarmCI": [ 0, 0.4899 ], "precision": 1, "precisionCI": [ 0.5101, 1 ], "later": { "found": 4, "missed": 0, "wrong": 0, "findingCases": 4, "cleanCases": 4, "cases": 8, "recall": 1, "recallCI": [ 0.5101, 1 ], "falseAlarmRate": 0, "falseAlarmCI": [ 0, 0.4899 ], "precision": 1, "precisionCI": [ 0.5101, 1 ] } }, { "check": "exposed-files", "surface": "website", "question": "Can anyone download files like .env or .git?", "sets": [ "set-3", "set-5" ], "found": 8, "missed": 0, "wrong": 1, "findingCases": 8, "cleanCases": 8, "cases": 16, "recall": 1, "recallCI": [ 0.675584, 1 ], "falseAlarmRate": 0.125, "falseAlarmCI": [ 0.022417, 0.470895 ], "precision": 0.888889, "precisionCI": [ 0.564994, 0.98011 ], "later": { "found": 8, "missed": 0, "wrong": 0, "findingCases": 8, "cleanCases": 8, "cases": 16, "recall": 1, "recallCI": [ 0.675584, 1 ], "falseAlarmRate": 0, "falseAlarmCI": [ 0, 0.324416 ], "precision": 1, "precisionCI": [ 0.675584, 1 ] } }, { "check": "exposed-keys", "surface": "website", "question": "Are secret keys or passwords in what browsers download?", "sets": [ "set-3", "set-5" ], "found": 8, "missed": 0, "wrong": 1, "findingCases": 8, "cleanCases": 8, "cases": 16, "recall": 1, "recallCI": [ 0.675584, 1 ], "falseAlarmRate": 0.125, "falseAlarmCI": [ 0.022417, 0.470895 ], "precision": 0.888889, "precisionCI": [ 0.564994, 0.98011 ], "later": { "found": 8, "missed": 0, "wrong": 0, "findingCases": 8, "cleanCases": 8, "cases": 16, "recall": 1, "recallCI": [ 0.675584, 1 ], "falseAlarmRate": 0, "falseAlarmCI": [ 0, 0.324416 ], "precision": 1, "precisionCI": [ 0.675584, 1 ] } }, { "check": "firebase-open-db", "surface": "website", "question": "Can your Firebase database be read without signing in?", "sets": [ "modules-holdout", "modules-final" ], "found": 6, "missed": 2, "wrong": 0, "findingCases": 8, "cleanCases": 8, "cases": 16, "recall": 0.75, "recallCI": [ 0.40927, 0.928522 ], "falseAlarmRate": 0, "falseAlarmCI": [ 0, 0.324416 ], "precision": 1, "precisionCI": [ 0.609657, 1 ], "later": { "found": 8, "missed": 0, "wrong": 0, "findingCases": 8, "cleanCases": 8, "cases": 16, "recall": 1, "recallCI": [ 0.675584, 1 ], "falseAlarmRate": 0, "falseAlarmCI": [ 0, 0.324416 ], "precision": 1, "precisionCI": [ 0.675584, 1 ] } }, { "check": "firebase-rules", "surface": "repository", "question": "Do your Firebase rules let strangers read or change data?", "sets": [ "modules-holdout", "modules-final" ], "found": 7, "missed": 1, "wrong": 0, "findingCases": 8, "cleanCases": 8, "cases": 16, "recall": 0.875, "recallCI": [ 0.529105, 0.977583 ], "falseAlarmRate": 0, "falseAlarmCI": [ 0, 0.324416 ], "precision": 1, "precisionCI": [ 0.645661, 1 ], "later": { "found": 8, "missed": 0, "wrong": 0, "findingCases": 8, "cleanCases": 8, "cases": 16, "recall": 1, "recallCI": [ 0.675584, 1 ], "falseAlarmRate": 0, "falseAlarmCI": [ 0, 0.324416 ], "precision": 1, "precisionCI": [ 0.675584, 1 ] } }, { "check": "framework-versions", "surface": "website", "question": "Does your app run a framework version with known flaws?", "sets": [ "round2-blind" ], "found": 2, "missed": 2, "wrong": 0, "findingCases": 4, "cleanCases": 4, "cases": 8, "recall": 0.5, "recallCI": [ 0.150036, 0.849964 ], "falseAlarmRate": 0, "falseAlarmCI": [ 0, 0.4899 ], "precision": 1, "precisionCI": [ 0.342372, 1 ], "later": { "found": 3, "missed": 1, "wrong": 0, "findingCases": 4, "cleanCases": 4, "cases": 8, "recall": 0.75, "recallCI": [ 0.300636, 0.954414 ], "falseAlarmRate": 0, "falseAlarmCI": [ 0, 0.4899 ], "precision": 1, "precisionCI": [ 0.438494, 1 ] } }, { "check": "graphql-introspection", "surface": "website", "question": "Does your GraphQL API describe itself to strangers?", "sets": [ "modules-holdout", "modules-final" ], "found": 7, "missed": 1, "wrong": 0, "findingCases": 8, "cleanCases": 8, "cases": 16, "recall": 0.875, "recallCI": [ 0.529105, 0.977583 ], "falseAlarmRate": 0, "falseAlarmCI": [ 0, 0.324416 ], "precision": 1, "precisionCI": [ 0.645661, 1 ], "later": { "found": 7, "missed": 1, "wrong": 0, "findingCases": 8, "cleanCases": 8, "cases": 16, "recall": 0.875, "recallCI": [ 0.529105, 0.977583 ], "falseAlarmRate": 0, "falseAlarmCI": [ 0, 0.324416 ], "precision": 1, "precisionCI": [ 0.645661, 1 ] } }, { "check": "https-redirect", "surface": "website", "question": "Does your http address switch to https?", "sets": [ "modules-holdout", "modules-final" ], "found": 8, "missed": 0, "wrong": 0, "findingCases": 8, "cleanCases": 8, "cases": 16, "recall": 1, "recallCI": [ 0.675584, 1 ], "falseAlarmRate": 0, "falseAlarmCI": [ 0, 0.324416 ], "precision": 1, "precisionCI": [ 0.675584, 1 ], "later": { "found": 8, "missed": 0, "wrong": 0, "findingCases": 8, "cleanCases": 8, "cases": 16, "recall": 1, "recallCI": [ 0.675584, 1 ], "falseAlarmRate": 0, "falseAlarmCI": [ 0, 0.324416 ], "precision": 1, "precisionCI": [ 0.675584, 1 ] } }, { "check": "insecure-forms", "surface": "website", "question": "Do forms send passwords unencrypted or in the address?", "sets": [ "modules-holdout", "modules-final" ], "found": 7, "missed": 1, "wrong": 0, "findingCases": 8, "cleanCases": 8, "cases": 16, "recall": 0.875, "recallCI": [ 0.529105, 0.977583 ], "falseAlarmRate": 0, "falseAlarmCI": [ 0, 0.324416 ], "precision": 1, "precisionCI": [ 0.645661, 1 ], "later": { "found": 8, "missed": 0, "wrong": 0, "findingCases": 8, "cleanCases": 8, "cases": 16, "recall": 1, "recallCI": [ 0.675584, 1 ], "falseAlarmRate": 0, "falseAlarmCI": [ 0, 0.324416 ], "precision": 1, "precisionCI": [ 0.675584, 1 ] } }, { "check": "mixed-content", "surface": "website", "question": "Do secure pages load anything over an insecure connection?", "sets": [ "set-3", "set-5" ], "found": 7, "missed": 1, "wrong": 1, "findingCases": 8, "cleanCases": 8, "cases": 16, "recall": 0.875, "recallCI": [ 0.529105, 0.977583 ], "falseAlarmRate": 0.125, "falseAlarmCI": [ 0.022417, 0.470895 ], "precision": 0.875, "precisionCI": [ 0.529105, 0.977583 ], "later": { "found": 8, "missed": 0, "wrong": 0, "findingCases": 8, "cleanCases": 8, "cases": 16, "recall": 1, "recallCI": [ 0.675584, 1 ], "falseAlarmRate": 0, "falseAlarmCI": [ 0, 0.324416 ], "precision": 1, "precisionCI": [ 0.675584, 1 ] } }, { "check": "next-action-origins", "surface": "repository", "question": "Can other websites trigger your app’s actions?", "sets": [ "round2-blind" ], "found": 0, "missed": 4, "wrong": 0, "findingCases": 4, "cleanCases": 4, "cases": 8, "recall": 0, "recallCI": [ 0, 0.4899 ], "falseAlarmRate": 0, "falseAlarmCI": [ 0, 0.4899 ], "precision": null, "precisionCI": null, "later": { "found": 0, "missed": 4, "wrong": 0, "findingCases": 4, "cleanCases": 4, "cases": 8, "recall": 0, "recallCI": [ 0, 0.4899 ], "falseAlarmRate": 0, "falseAlarmCI": [ 0, 0.4899 ], "precision": null, "precisionCI": null } }, { "check": "next-image-proxy", "surface": "repository", "question": "Can anyone use your app to fetch images from any website?", "sets": [ "round2-blind" ], "found": 3, "missed": 1, "wrong": 0, "findingCases": 4, "cleanCases": 4, "cases": 8, "recall": 0.75, "recallCI": [ 0.300636, 0.954414 ], "falseAlarmRate": 0, "falseAlarmCI": [ 0, 0.4899 ], "precision": 1, "precisionCI": [ 0.438494, 1 ], "later": { "found": 4, "missed": 0, "wrong": 0, "findingCases": 4, "cleanCases": 4, "cases": 8, "recall": 1, "recallCI": [ 0.5101, 1 ], "falseAlarmRate": 0, "falseAlarmCI": [ 0, 0.4899 ], "precision": 1, "precisionCI": [ 0.5101, 1 ] } }, { "check": "next-svg-images", "surface": "repository", "question": "Can SVG images you serve run scripts?", "sets": [ "round2-blind" ], "found": 1, "missed": 3, "wrong": 0, "findingCases": 4, "cleanCases": 4, "cases": 8, "recall": 0.25, "recallCI": [ 0.045586, 0.699364 ], "falseAlarmRate": 0, "falseAlarmCI": [ 0, 0.4899 ], "precision": 1, "precisionCI": [ 0.206543, 1 ], "later": { "found": 1, "missed": 3, "wrong": 0, "findingCases": 4, "cleanCases": 4, "cases": 8, "recall": 0.25, "recallCI": [ 0.045586, 0.699364 ], "falseAlarmRate": 0, "falseAlarmCI": [ 0, 0.4899 ], "precision": 1, "precisionCI": [ 0.206543, 1 ] } }, { "check": "noindex", "surface": "website", "question": "Are search engines told what they may list?", "sets": [ "set-3", "set-5" ], "found": 8, "missed": 0, "wrong": 0, "findingCases": 8, "cleanCases": 8, "cases": 16, "recall": 1, "recallCI": [ 0.675584, 1 ], "falseAlarmRate": 0, "falseAlarmCI": [ 0, 0.324416 ], "precision": 1, "precisionCI": [ 0.675584, 1 ], "later": { "found": 8, "missed": 0, "wrong": 0, "findingCases": 8, "cleanCases": 8, "cases": 16, "recall": 1, "recallCI": [ 0.675584, 1 ], "falseAlarmRate": 0, "falseAlarmCI": [ 0, 0.324416 ], "precision": 1, "precisionCI": [ 0.675584, 1 ] } }, { "check": "open-redirect", "surface": "website", "question": "Can a link on your address send visitors on to any other website?", "sets": [ "round3-blind" ], "found": 4, "missed": 0, "wrong": 0, "findingCases": 4, "cleanCases": 6, "cases": 10, "recall": 1, "recallCI": [ 0.5101, 1 ], "falseAlarmRate": 0, "falseAlarmCI": [ 0, 0.390343 ], "precision": 1, "precisionCI": [ 0.5101, 1 ], "later": { "found": 4, "missed": 0, "wrong": 0, "findingCases": 4, "cleanCases": 6, "cases": 10, "recall": 1, "recallCI": [ 0.5101, 1 ], "falseAlarmRate": 0, "falseAlarmCI": [ 0, 0.390343 ], "precision": 1, "precisionCI": [ 0.5101, 1 ] } }, { "check": "open-storage-listing", "surface": "website", "question": "Does your file storage list its files to anyone?", "sets": [ "round2-blind" ], "found": 3, "missed": 1, "wrong": 0, "findingCases": 4, "cleanCases": 4, "cases": 8, "recall": 0.75, "recallCI": [ 0.300636, 0.954414 ], "falseAlarmRate": 0, "falseAlarmCI": [ 0, 0.4899 ], "precision": 1, "precisionCI": [ 0.438494, 1 ], "later": { "found": 4, "missed": 0, "wrong": 0, "findingCases": 4, "cleanCases": 4, "cases": 8, "recall": 1, "recallCI": [ 0.5101, 1 ], "falseAlarmRate": 0, "falseAlarmCI": [ 0, 0.4899 ], "precision": 1, "precisionCI": [ 0.5101, 1 ] } }, { "check": "public-env-secrets", "surface": "repository", "question": "Are private keys named so they ship to the browser?", "sets": [ "modules-holdout", "modules-final" ], "found": 8, "missed": 0, "wrong": 1, "findingCases": 8, "cleanCases": 8, "cases": 16, "recall": 1, "recallCI": [ 0.675584, 1 ], "falseAlarmRate": 0.125, "falseAlarmCI": [ 0.022417, 0.470895 ], "precision": 0.888889, "precisionCI": [ 0.564994, 0.98011 ], "later": { "found": 8, "missed": 0, "wrong": 0, "findingCases": 8, "cleanCases": 8, "cases": 16, "recall": 1, "recallCI": [ 0.675584, 1 ], "falseAlarmRate": 0, "falseAlarmCI": [ 0, 0.324416 ], "precision": 1, "precisionCI": [ 0.675584, 1 ] } }, { "check": "public-folder-secrets", "surface": "repository", "question": "Are keys or database dumps in the folder your site publishes?", "sets": [ "round2-blind" ], "found": 3, "missed": 1, "wrong": 0, "findingCases": 4, "cleanCases": 4, "cases": 8, "recall": 0.75, "recallCI": [ 0.300636, 0.954414 ], "falseAlarmRate": 0, "falseAlarmCI": [ 0, 0.4899 ], "precision": 1, "precisionCI": [ 0.438494, 1 ], "later": { "found": 3, "missed": 1, "wrong": 0, "findingCases": 4, "cleanCases": 4, "cases": 8, "recall": 0.75, "recallCI": [ 0.300636, 0.954414 ], "falseAlarmRate": 0, "falseAlarmCI": [ 0, 0.4899 ], "precision": 1, "precisionCI": [ 0.438494, 1 ] } }, { "check": "reachability", "surface": "website", "question": "Does your app answer, and how fast?", "sets": [ "set-3", "set-5" ], "found": 8, "missed": 0, "wrong": 2, "findingCases": 8, "cleanCases": 8, "cases": 16, "recall": 1, "recallCI": [ 0.675584, 1 ], "falseAlarmRate": 0.25, "falseAlarmCI": [ 0.071478, 0.59073 ], "precision": 0.8, "precisionCI": [ 0.490157, 0.943319 ], "later": { "found": 8, "missed": 0, "wrong": 2, "findingCases": 8, "cleanCases": 8, "cases": 16, "recall": 1, "recallCI": [ 0.675584, 1 ], "falseAlarmRate": 0.25, "falseAlarmCI": [ 0.071478, 0.59073 ], "precision": 0.8, "precisionCI": [ 0.490157, 0.943319 ] } }, { "check": "secrets-in-urls", "surface": "website", "question": "Are keys or tokens written into your page’s links?", "sets": [ "modules-holdout", "modules-final" ], "found": 7, "missed": 1, "wrong": 0, "findingCases": 8, "cleanCases": 8, "cases": 16, "recall": 0.875, "recallCI": [ 0.529105, 0.977583 ], "falseAlarmRate": 0, "falseAlarmCI": [ 0, 0.324416 ], "precision": 1, "precisionCI": [ 0.645661, 1 ], "later": { "found": 8, "missed": 0, "wrong": 0, "findingCases": 8, "cleanCases": 8, "cases": 16, "recall": 1, "recallCI": [ 0.675584, 1 ], "falseAlarmRate": 0, "falseAlarmCI": [ 0, 0.324416 ], "precision": 1, "precisionCI": [ 0.675584, 1 ] } }, { "check": "security-headers", "surface": "website", "question": "Do your pages ask browsers to protect them?", "sets": [ "set-3", "set-5" ], "found": 8, "missed": 0, "wrong": 1, "findingCases": 8, "cleanCases": 8, "cases": 16, "recall": 1, "recallCI": [ 0.675584, 1 ], "falseAlarmRate": 0.125, "falseAlarmCI": [ 0.022417, 0.470895 ], "precision": 0.888889, "precisionCI": [ 0.564994, 0.98011 ], "later": { "found": 8, "missed": 0, "wrong": 0, "findingCases": 8, "cleanCases": 8, "cases": 16, "recall": 1, "recallCI": [ 0.675584, 1 ], "falseAlarmRate": 0, "falseAlarmCI": [ 0, 0.324416 ], "precision": 1, "precisionCI": [ 0.675584, 1 ] } }, { "check": "sri-missing", "surface": "website", "question": "Do files from other websites load without a fingerprint?", "sets": [ "round2-blind" ], "found": 4, "missed": 0, "wrong": 0, "findingCases": 4, "cleanCases": 4, "cases": 8, "recall": 1, "recallCI": [ 0.5101, 1 ], "falseAlarmRate": 0, "falseAlarmCI": [ 0, 0.4899 ], "precision": 1, "precisionCI": [ 0.5101, 1 ], "later": { "found": 4, "missed": 0, "wrong": 0, "findingCases": 4, "cleanCases": 4, "cases": 8, "recall": 1, "recallCI": [ 0.5101, 1 ], "falseAlarmRate": 0, "falseAlarmCI": [ 0, 0.4899 ], "precision": 1, "precisionCI": [ 0.5101, 1 ] } }, { "check": "subdomain-takeover", "surface": "website", "question": "Can someone claim one of your subdomains?", "sets": [ "round2-blind" ], "found": 2, "missed": 2, "wrong": 0, "findingCases": 4, "cleanCases": 4, "cases": 8, "recall": 0.5, "recallCI": [ 0.150036, 0.849964 ], "falseAlarmRate": 0, "falseAlarmCI": [ 0, 0.4899 ], "precision": 1, "precisionCI": [ 0.342372, 1 ], "later": { "found": 2, "missed": 2, "wrong": 0, "findingCases": 4, "cleanCases": 4, "cases": 8, "recall": 0.5, "recallCI": [ 0.150036, 0.849964 ], "falseAlarmRate": 0, "falseAlarmCI": [ 0, 0.4899 ], "precision": 1, "precisionCI": [ 0.342372, 1 ] } }, { "check": "supabase-anon-uploads", "surface": "repository", "question": "Can people upload files without signing in?", "sets": [ "round2-blind" ], "found": 4, "missed": 0, "wrong": 0, "findingCases": 4, "cleanCases": 4, "cases": 8, "recall": 1, "recallCI": [ 0.5101, 1 ], "falseAlarmRate": 0, "falseAlarmCI": [ 0, 0.4899 ], "precision": 1, "precisionCI": [ 0.5101, 1 ], "later": { "found": 4, "missed": 0, "wrong": 0, "findingCases": 4, "cleanCases": 4, "cases": 8, "recall": 1, "recallCI": [ 0.5101, 1 ], "falseAlarmRate": 0, "falseAlarmCI": [ 0, 0.4899 ], "precision": 1, "precisionCI": [ 0.5101, 1 ] } }, { "check": "supabase-auth", "surface": "website", "question": "Can strangers sign up as someone else, or without an account?", "sets": [ "set-1", "set-2", "set-4" ], "found": 10, "missed": 0, "wrong": 0, "findingCases": 10, "cleanCases": 10, "cases": 20, "recall": 1, "recallCI": [ 0.72246, 1 ], "falseAlarmRate": 0, "falseAlarmCI": [ 0, 0.27754 ], "precision": 1, "precisionCI": [ 0.72246, 1 ], "later": { "found": 10, "missed": 0, "wrong": 0, "findingCases": 10, "cleanCases": 10, "cases": 20, "recall": 1, "recallCI": [ 0.72246, 1 ], "falseAlarmRate": 0, "falseAlarmCI": [ 0, 0.27754 ], "precision": 1, "precisionCI": [ 0.72246, 1 ] } }, { "check": "supabase-auth-users-exposed", "surface": "repository", "question": "Can the browser read your users’ sign-in records?", "sets": [ "round2-blind" ], "found": 4, "missed": 0, "wrong": 0, "findingCases": 4, "cleanCases": 4, "cases": 8, "recall": 1, "recallCI": [ 0.5101, 1 ], "falseAlarmRate": 0, "falseAlarmCI": [ 0, 0.4899 ], "precision": 1, "precisionCI": [ 0.5101, 1 ], "later": { "found": 4, "missed": 0, "wrong": 0, "findingCases": 4, "cleanCases": 4, "cases": 8, "recall": 1, "recallCI": [ 0.5101, 1 ], "falseAlarmRate": 0, "falseAlarmCI": [ 0, 0.4899 ], "precision": 1, "precisionCI": [ 0.5101, 1 ] } }, { "check": "supabase-definer-views", "surface": "repository", "question": "Do database views show rows your rules hide?", "sets": [ "round2-blind" ], "found": 4, "missed": 0, "wrong": 0, "findingCases": 4, "cleanCases": 4, "cases": 8, "recall": 1, "recallCI": [ 0.5101, 1 ], "falseAlarmRate": 0, "falseAlarmCI": [ 0, 0.4899 ], "precision": 1, "precisionCI": [ 0.5101, 1 ], "later": { "found": 4, "missed": 0, "wrong": 0, "findingCases": 4, "cleanCases": 4, "cases": 8, "recall": 1, "recallCI": [ 0.5101, 1 ], "falseAlarmRate": 0, "falseAlarmCI": [ 0, 0.4899 ], "precision": 1, "precisionCI": [ 0.5101, 1 ] } }, { "check": "supabase-exposed-functions", "surface": "repository", "question": "Can anyone call a database function that skips your rules?", "sets": [ "round2-blind" ], "found": 3, "missed": 1, "wrong": 0, "findingCases": 4, "cleanCases": 4, "cases": 8, "recall": 0.75, "recallCI": [ 0.300636, 0.954414 ], "falseAlarmRate": 0, "falseAlarmCI": [ 0, 0.4899 ], "precision": 1, "precisionCI": [ 0.438494, 1 ], "later": { "found": 3, "missed": 1, "wrong": 0, "findingCases": 4, "cleanCases": 4, "cases": 8, "recall": 0.75, "recallCI": [ 0.300636, 0.954414 ], "falseAlarmRate": 0, "falseAlarmCI": [ 0, 0.4899 ], "precision": 1, "precisionCI": [ 0.438494, 1 ] } }, { "check": "supabase-metadata-policies", "surface": "repository", "question": "Do your database rules trust a field users can edit?", "sets": [ "round2-blind" ], "found": 4, "missed": 0, "wrong": 0, "findingCases": 4, "cleanCases": 4, "cases": 8, "recall": 1, "recallCI": [ 0.5101, 1 ], "falseAlarmRate": 0, "falseAlarmCI": [ 0, 0.4899 ], "precision": 1, "precisionCI": [ 0.5101, 1 ], "later": { "found": 4, "missed": 0, "wrong": 0, "findingCases": 4, "cleanCases": 4, "cases": 8, "recall": 1, "recallCI": [ 0.5101, 1 ], "falseAlarmRate": 0, "falseAlarmCI": [ 0, 0.4899 ], "precision": 1, "precisionCI": [ 0.5101, 1 ] } }, { "check": "supabase-policies", "surface": "repository", "question": "Do your database rules let anyone change other people’s data?", "sets": [ "set-1", "set-2", "set-4" ], "found": 9, "missed": 1, "wrong": 0, "findingCases": 10, "cleanCases": 10, "cases": 20, "recall": 0.9, "recallCI": [ 0.595844, 0.982124 ], "falseAlarmRate": 0, "falseAlarmCI": [ 0, 0.27754 ], "precision": 1, "precisionCI": [ 0.700847, 1 ], "later": { "found": 10, "missed": 0, "wrong": 0, "findingCases": 10, "cleanCases": 10, "cases": 20, "recall": 1, "recallCI": [ 0.72246, 1 ], "falseAlarmRate": 0, "falseAlarmCI": [ 0, 0.27754 ], "precision": 1, "precisionCI": [ 0.72246, 1 ] } }, { "check": "supabase-rls", "surface": "website", "question": "Can your database tables be read without signing in?", "sets": [ "set-3", "set-5" ], "found": 8, "missed": 0, "wrong": 0, "findingCases": 8, "cleanCases": 8, "cases": 16, "recall": 1, "recallCI": [ 0.675584, 1 ], "falseAlarmRate": 0, "falseAlarmCI": [ 0, 0.324416 ], "precision": 1, "precisionCI": [ 0.675584, 1 ], "later": { "found": 8, "missed": 0, "wrong": 0, "findingCases": 8, "cleanCases": 8, "cases": 16, "recall": 1, "recallCI": [ 0.675584, 1 ], "falseAlarmRate": 0, "falseAlarmCI": [ 0, 0.324416 ], "precision": 1, "precisionCI": [ 0.675584, 1 ] } }, { "check": "supabase-storage", "surface": "website", "question": "Does your file storage show strangers what it holds?", "sets": [ "set-1", "set-2", "set-4" ], "found": 10, "missed": 0, "wrong": 0, "findingCases": 10, "cleanCases": 10, "cases": 20, "recall": 1, "recallCI": [ 0.72246, 1 ], "falseAlarmRate": 0, "falseAlarmCI": [ 0, 0.27754 ], "precision": 1, "precisionCI": [ 0.72246, 1 ], "later": { "found": 10, "missed": 0, "wrong": 0, "findingCases": 10, "cleanCases": 10, "cases": 20, "recall": 1, "recallCI": [ 0.72246, 1 ], "falseAlarmRate": 0, "falseAlarmCI": [ 0, 0.27754 ], "precision": 1, "precisionCI": [ 0.72246, 1 ] } }, { "check": "terraform-state", "surface": "repository", "question": "Is infrastructure state with passwords in your repository?", "sets": [ "round2-blind" ], "found": 4, "missed": 0, "wrong": 0, "findingCases": 4, "cleanCases": 4, "cases": 8, "recall": 1, "recallCI": [ 0.5101, 1 ], "falseAlarmRate": 0, "falseAlarmCI": [ 0, 0.4899 ], "precision": 1, "precisionCI": [ 0.5101, 1 ], "later": { "found": 4, "missed": 0, "wrong": 0, "findingCases": 4, "cleanCases": 4, "cases": 8, "recall": 1, "recallCI": [ 0.5101, 1 ], "falseAlarmRate": 0, "falseAlarmCI": [ 0, 0.4899 ], "precision": 1, "precisionCI": [ 0.5101, 1 ] } }, { "check": "tls", "surface": "website", "question": "Is the certificate valid, trusted and far from expiring?", "sets": [ "set-3", "set-5" ], "found": 8, "missed": 0, "wrong": 0, "findingCases": 8, "cleanCases": 8, "cases": 16, "recall": 1, "recallCI": [ 0.675584, 1 ], "falseAlarmRate": 0, "falseAlarmCI": [ 0, 0.324416 ], "precision": 1, "precisionCI": [ 0.675584, 1 ], "later": { "found": 8, "missed": 0, "wrong": 0, "findingCases": 8, "cleanCases": 8, "cases": 16, "recall": 1, "recallCI": [ 0.675584, 1 ], "falseAlarmRate": 0, "falseAlarmCI": [ 0, 0.324416 ], "precision": 1, "precisionCI": [ 0.675584, 1 ] } }, { "check": "vulnerable-dependencies", "surface": "repository", "question": "Do the libraries you install have known flaws?", "sets": [ "set-1", "set-2", "set-4" ], "found": 10, "missed": 0, "wrong": 0, "findingCases": 10, "cleanCases": 10, "cases": 20, "recall": 1, "recallCI": [ 0.72246, 1 ], "falseAlarmRate": 0, "falseAlarmCI": [ 0, 0.27754 ], "precision": 1, "precisionCI": [ 0.72246, 1 ], "later": { "found": 10, "missed": 0, "wrong": 0, "findingCases": 10, "cleanCases": 10, "cases": 20, "recall": 1, "recallCI": [ 0.72246, 1 ], "falseAlarmRate": 0, "falseAlarmCI": [ 0, 0.27754 ], "precision": 1, "precisionCI": [ 0.72246, 1 ] } }, { "check": "vulnerable-libraries", "surface": "website", "question": "Do your pages load libraries with known flaws?", "sets": [ "set-1", "set-2", "set-4" ], "found": 9, "missed": 1, "wrong": 0, "findingCases": 10, "cleanCases": 10, "cases": 20, "recall": 0.9, "recallCI": [ 0.595844, 0.982124 ], "falseAlarmRate": 0, "falseAlarmCI": [ 0, 0.27754 ], "precision": 1, "precisionCI": [ 0.700847, 1 ], "later": { "found": 10, "missed": 0, "wrong": 0, "findingCases": 10, "cleanCases": 10, "cases": 20, "recall": 1, "recallCI": [ 0.72246, 1 ], "falseAlarmRate": 0, "falseAlarmCI": [ 0, 0.27754 ], "precision": 1, "precisionCI": [ 0.72246, 1 ] } } ], "database": { "checks": [ "firebase-open-db", "firebase-rules", "supabase-anon-uploads", "supabase-auth", "supabase-auth-users-exposed", "supabase-definer-views", "supabase-exposed-functions", "supabase-metadata-policies", "supabase-policies", "supabase-rls", "supabase-storage" ], "supabaseChecks": 9, "firebaseChecks": 2, "found": 69, "missed": 5, "wrong": 0, "findingCases": 74, "cleanCases": 74, "cases": 148, "recall": 0.932432, "recallCI": [ 0.851386, 0.970796 ], "falseAlarmRate": 0, "falseAlarmCI": [ 0, 0.049352 ], "precision": 1, "precisionCI": [ 0.947261, 1 ], "bySurface": [ { "surface": "website", "found": 34, "missed": 2, "wrong": 0, "findingCases": 36, "cleanCases": 36, "cases": 72, "recall": 0.944444, "recallCI": [ 0.81855, 0.98463 ], "falseAlarmRate": 0, "falseAlarmCI": [ 0, 0.096422 ], "precision": 1, "precisionCI": [ 0.898482, 1 ] }, { "surface": "repository", "found": 35, "missed": 3, "wrong": 0, "findingCases": 38, "cleanCases": 38, "cases": 76, "recall": 0.921053, "recallCI": [ 0.792003, 0.972786 ], "falseAlarmRate": 0, "falseAlarmCI": [ 0, 0.091813 ], "precision": 1, "precisionCI": [ 0.901096, 1 ] } ] }, "perimeter": { "sets": [ "set-1", "set-2" ], "first": { "found": 51, "missed": 3, "wrong": 2, "findingCases": 54, "cleanCases": 54, "cases": 108, "recall": 0.944444, "recallCI": [ 0.848925, 0.980927 ], "falseAlarmRate": 0.037037, "falseAlarmCI": [ 0.010216, 0.125354 ], "precision": 0.962264, "precisionCI": [ 0.872455, 0.98959 ] }, "shipped": { "found": 54, "missed": 0, "wrong": 0, "findingCases": 54, "cleanCases": 54, "cases": 108, "recall": 1, "recallCI": [ 0.933584, 1 ], "falseAlarmRate": 0, "falseAlarmCI": [ 0, 0.066416 ], "precision": 1, "precisionCI": [ 0.933584, 1 ] } }, "sim": { "ranAt": "2026-09-25T21:28:50.223Z", "set": "round2-blind", "cases": 144, "variants": 311, "changed": 0, "transforms": 7 }, "misses": [ { "set": "set-1", "id": "libs-03", "check": "vulnerable-libraries", "later": "found" }, { "set": "set-1", "id": "mail-05", "check": "email-auth", "later": "found" }, { "set": "set-2", "id": "sb-rules-03", "check": "supabase-policies", "later": "found" }, { "set": "set-3", "id": "artifacts-07", "check": "exposed-artifacts", "later": "found" }, { "set": "set-3", "id": "cors-05", "check": "cors", "later": "found" }, { "set": "modules-holdout", "id": "compromised-script-hosts-04", "check": "compromised-script-hosts", "later": "found" }, { "set": "modules-holdout", "id": "firebase-open-db-02", "check": "firebase-open-db", "later": "found" }, { "set": "modules-holdout", "id": "firebase-rules-04", "check": "firebase-rules", "later": "found" }, { "set": "modules-holdout", "id": "graphql-introspection-01", "check": "graphql-introspection", "later": "missed" }, { "set": "modules-holdout", "id": "insecure-forms-04", "check": "insecure-forms", "later": "found" }, { "set": "set-5", "id": "cors-02", "check": "cors", "later": "found" }, { "set": "set-5", "id": "mixed-02", "check": "mixed-content", "later": "found" }, { "set": "modules-final", "id": "firebasedb-04", "check": "firebase-open-db", "later": "found" }, { "set": "modules-final", "id": "urlkeys-02", "check": "secrets-in-urls", "later": "found" }, { "set": "round2-blind", "id": "action-origins-01", "check": "next-action-origins", "later": "missed" }, { "set": "round2-blind", "id": "action-origins-02", "check": "next-action-origins", "later": "missed" }, { "set": "round2-blind", "id": "action-origins-03", "check": "next-action-origins", "later": "missed" }, { "set": "round2-blind", "id": "action-origins-04", "check": "next-action-origins", "later": "missed" }, { "set": "round2-blind", "id": "compromised-actions-01", "check": "compromised-actions", "later": "missed" }, { "set": "round2-blind", "id": "compromised-actions-02", "check": "compromised-actions", "later": "missed" }, { "set": "round2-blind", "id": "compromised-actions-03", "check": "compromised-actions", "later": "missed" }, { "set": "round2-blind", "id": "env-bundle-01", "check": "env-in-client-bundle", "later": "missed" }, { "set": "round2-blind", "id": "exposed-functions-03", "check": "supabase-exposed-functions", "later": "missed" }, { "set": "round2-blind", "id": "framework-versions-02", "check": "framework-versions", "later": "missed" }, { "set": "round2-blind", "id": "framework-versions-04", "check": "framework-versions", "later": "found" }, { "set": "round2-blind", "id": "image-proxy-04", "check": "next-image-proxy", "later": "found" }, { "set": "round2-blind", "id": "public-secrets-03", "check": "public-folder-secrets", "later": "missed" }, { "set": "round2-blind", "id": "storage-listing-01", "check": "open-storage-listing", "later": "found" }, { "set": "round2-blind", "id": "svg-images-01", "check": "next-svg-images", "later": "missed" }, { "set": "round2-blind", "id": "svg-images-02", "check": "next-svg-images", "later": "missed" }, { "set": "round2-blind", "id": "svg-images-04", "check": "next-svg-images", "later": "missed" }, { "set": "round2-blind", "id": "takeover-01", "check": "subdomain-takeover", "later": "missed" }, { "set": "round2-blind", "id": "takeover-04", "check": "subdomain-takeover", "later": "missed" } ], "missesFixed": 16, "wrongs": [ { "set": "set-1", "id": "repo-keys-04", "check": "committed-secrets", "later": "clean" }, { "set": "set-2", "id": "repo-keys-05", "check": "committed-secrets", "later": "clean" }, { "set": "set-3", "id": "cookies-06", "check": "cookie-flags", "later": "clean" }, { "set": "set-3", "id": "headers-08", "check": "security-headers", "later": "clean" }, { "set": "set-3", "id": "keys-08", "check": "exposed-keys", "later": "clean" }, { "set": "set-3", "id": "mixed-04", "check": "mixed-content", "later": "clean" }, { "set": "set-3", "id": "reach-02", "check": "reachability", "later": "wrong" }, { "set": "set-3", "id": "reach-08", "check": "reachability", "later": "wrong" }, { "set": "modules-holdout", "id": "dev-server-exposed-05", "check": "dev-server-exposed", "later": "clean" }, { "set": "modules-holdout", "id": "public-env-secrets-08", "check": "public-env-secrets", "later": "clean" }, { "set": "set-5", "id": "files-08", "check": "exposed-files", "later": "clean" } ], "notEvaluated": [ { "set": "round2-blind", "id": "framework-versions-02", "check": "framework-versions", "verdict": "missed", "note": "Not evaluated: this check requires owner consent for targeted probes." }, { "set": "round3-blind", "id": "redirect-10", "check": "open-redirect", "verdict": "clean", "note": "Not evaluated: this check requires owner consent for targeted probes." } ], "wrongsFixed": 9, "unpinned": 5, "sources": [ { "path": "docs/audits/2026-09-23-the-whole-perimeter/coverage-set-1-first.json", "sha256": "f4daa545ae0c58e040227bf8b3e85170b55b66cd022deae9a8644fb364777d47" }, { "path": "docs/audits/2026-09-23-the-whole-perimeter/coverage-set-1-shipped.json", "sha256": "869398d5b86c1690f97390da845d9ca333ae14781f040ed4d94376c2db8f43a6" }, { "path": "bench/coverage/set-1/deps-01/case.json", "sha256": "2421591eeda409b874300eff5ec0b05d57ba2e812dc3c021460e397e2592c319" }, { "path": "bench/coverage/set-1/deps-02/case.json", "sha256": "e39665969a87db7b5228e67e1d79231bafd0ffae10fddf6d8d82061112c1f0e4" }, { "path": "bench/coverage/set-1/deps-03/case.json", "sha256": "0a671abe04e39e6690a0c9db2dd1fda62e82ee14664a5a25854964634aa9e514" }, { "path": "bench/coverage/set-1/deps-04/case.json", "sha256": "95db527f51eec080eb3c9ac2533491706dc79979801b3d12a2da47046882b681" }, { "path": "bench/coverage/set-1/deps-05/case.json", "sha256": "ece833b9323584f6adfea4e05f530f17900a484aded3d6afb5cd4a575dff83b5" }, { "path": "bench/coverage/set-1/deps-06/case.json", "sha256": "c1eae5dbb29d7e88b341dfa84c33765561ab84cba33c5bd0d25595d14bad86b3" }, { "path": "bench/coverage/set-1/libs-01/case.json", "sha256": "ba7d0e2de81b999370632e52ea5acbf224b2cd7b7dd088e94d123c74449171a1" }, { "path": "bench/coverage/set-1/libs-02/case.json", "sha256": "1e7dbae832595fd2b6e8d5d1699116f67627c0c39308995d959bc59cabdbed21" }, { "path": "bench/coverage/set-1/libs-03/case.json", "sha256": "2ad0b3dcb061c2d06721232aa1d8d07606bb8934409c06c9ba032850d622382c" }, { "path": "bench/coverage/set-1/libs-04/case.json", "sha256": "d36215d71b5ab2094bfd8243b8c1291a09dc75bd263b56fed53a09667a65731e" }, { "path": "bench/coverage/set-1/libs-05/case.json", "sha256": "262a3f653705b421cb6a0df9c437fae04e339b90d9e4628695dc2928048208d6" }, { "path": "bench/coverage/set-1/libs-06/case.json", "sha256": "9ab820663d9ee40607bed99ec98609c6a95e7c97cca742fde19622c43a17d5b2" }, { "path": "bench/coverage/set-1/mail-01/case.json", "sha256": "1370f7cbf9bb36102f55cb17343aedd32ac78fbb2532a7c1a5c8f9ef0ac52b15" }, { "path": "bench/coverage/set-1/mail-02/case.json", "sha256": "5ac897dc62d24db8b2a781973410ddcff250bb3e25b3deae84a98319871c7ed6" }, { "path": "bench/coverage/set-1/mail-03/case.json", "sha256": "78f88d787e4eec623b2656438d394cb5ab432448670692737c6d59fffd6493b7" }, { "path": "bench/coverage/set-1/mail-04/case.json", "sha256": "b38a64cb549d474d92eed2d8166b01ce11f1efabf1fab3bb58a2923e1e5870c2" }, { "path": "bench/coverage/set-1/mail-05/case.json", "sha256": "d3e1f7fa76edb24ab16334e1d0ed9c8647bfbe1de256820892b4fffe9102c462" }, { "path": "bench/coverage/set-1/mail-06/case.json", "sha256": "f6ea564e92b6e55a84c019842953969bc4a6b59274602f8b364c3e73eea40dc6" }, { "path": "bench/coverage/set-1/renewal-01/case.json", "sha256": "f7f6b7afc18d7db332ea2d979d5acbdfb8d1aa45e95088690b1f2a8f6be662b6" }, { "path": "bench/coverage/set-1/renewal-02/case.json", "sha256": "1e1072a03f699e4e7dae4172d5e4a66cadb983b23a7e01da579a1cf072d0b977" }, { "path": "bench/coverage/set-1/renewal-03/case.json", "sha256": "032007d97ec6cf16c8fabb54a77a5126c8539f98df365a8feaa48075f054327d" }, { "path": "bench/coverage/set-1/renewal-04/case.json", "sha256": "8e0761c64f2b66edd6bdb845b91ed3a9022469b3dc3d3b36e0e60cc37df38644" }, { "path": "bench/coverage/set-1/renewal-05/case.json", "sha256": "7bea97ef21c10420eab8469d3c892eda5994860436f47be2d6e8556000f23bc7" }, { "path": "bench/coverage/set-1/renewal-06/case.json", "sha256": "607d2dad2c0f987855b451ca4677da865d98c4e1ed680e8f059617d5520a4d9e" }, { "path": "bench/coverage/set-1/repo-keys-01/case.json", "sha256": "5366805fcc33a80c484aa099d2bd2793be9e3ea13f1b22dd2ee6ae2b6dbd8dcc" }, { "path": "bench/coverage/set-1/repo-keys-02/case.json", "sha256": "6b8350b2fa72c2d4502acf1476dc8df667ddd886f2deb8b5ea91014b46968916" }, { "path": "bench/coverage/set-1/repo-keys-03/case.json", "sha256": "1f3a9c16bc680e143d61dcc5ea1bd7239d6503f400c01667b7d6890c8ab9c494" }, { "path": "bench/coverage/set-1/repo-keys-04/case.json", "sha256": "99fc2d3c338d967828108311e9a67f86f28a88a84045203504336f86ad05da38" }, { "path": "bench/coverage/set-1/repo-keys-05/case.json", "sha256": "5f5665f537381289ea1e45115d37ee1a73be444b00f767d4ad5ceda4fd439090" }, { "path": "bench/coverage/set-1/repo-keys-06/case.json", "sha256": "9e08f70397468bc5bdb7d3d200cdc0cb823645c63fbc6a978b6cf7eaf5212741" }, { "path": "bench/coverage/set-1/sb-auth-01/case.json", "sha256": "5ca91295b18ceb4c9c516b18d45abed7c37a46ecfda05ce2bda886f5bc0689df" }, { "path": "bench/coverage/set-1/sb-auth-02/case.json", "sha256": "820e2c58dfe8dc36b14272f00220ed3ddb2e572cc5113f1a41cd1db2bff12374" }, { "path": "bench/coverage/set-1/sb-auth-03/case.json", "sha256": "c5c3ddd72da2ed50d79acd2a3727fcf17c6581ae0f8f82cce800060ff4e65087" }, { "path": "bench/coverage/set-1/sb-auth-04/case.json", "sha256": "0b28105a6c28851ad5e2ed386c2a70be59e436c2a74aa89226f9169bff53a873" }, { "path": "bench/coverage/set-1/sb-auth-05/case.json", "sha256": "69598329b437ad9f605e3f187dc1fa1034ed008327e6ca10685fd19483761352" }, { "path": "bench/coverage/set-1/sb-auth-06/case.json", "sha256": "a600cdf8c7cbcfb4a0d3c100be65a3d350b9ebf061a951977b3ed61f43f34ac9" }, { "path": "bench/coverage/set-1/sb-rules-01/case.json", "sha256": "c7307a66c20d07ea215a68e9ff876fa8c7c9c3321ea0a48a98b7b9927495a5b3" }, { "path": "bench/coverage/set-1/sb-rules-02/case.json", "sha256": "33b80af60afe12909fb70890999a8d0b36999aea867915e46a67e9bed9f06e92" }, { "path": "bench/coverage/set-1/sb-rules-03/case.json", "sha256": "1666af81a3b8d50a629792492c13810e3eff9ac65eab176228bbe9cbd64358ce" }, { "path": "bench/coverage/set-1/sb-rules-04/case.json", "sha256": "f72891ca1c80e8d7abd3f1c5a5bbaca26665e672fbdad9951580acd9fb76317c" }, { "path": "bench/coverage/set-1/sb-rules-05/case.json", "sha256": "9ca712ca015b9ba63369a0e70edcd446effe72174f077c9886761dc7ce6645d8" }, { "path": "bench/coverage/set-1/sb-rules-06/case.json", "sha256": "6686a67201d54867fe8c8ee4a952a2eb15cc8512e5e31e40815eef4adc601110" }, { "path": "bench/coverage/set-1/sb-storage-01/case.json", "sha256": "5bce32dfbbecea20f711470d8271d4464f9c20d1bf59c921de930e53c17db14e" }, { "path": "bench/coverage/set-1/sb-storage-02/case.json", "sha256": "d10af8587d2b1d3a9923592c39083ba211a3709524a1aefa84f327d58302ee61" }, { "path": "bench/coverage/set-1/sb-storage-03/case.json", "sha256": "cc5169b198d3ccd27c8a3cce8600c9ad0904ff4cd9d9ae837eabc178c3953a67" }, { "path": "bench/coverage/set-1/sb-storage-04/case.json", "sha256": "df4b034f0833a5a45c8b2031d95009886036cb3f6dafc6048944c64c46ad1764" }, { "path": "bench/coverage/set-1/sb-storage-05/case.json", "sha256": "46179b830197499e7137dd0430e5d0e3446315b9d6b28c5979ca92605ce92882" }, { "path": "bench/coverage/set-1/sb-storage-06/case.json", "sha256": "d8d25f79cd686ceb1fb6a2c43e4a943b19cab2337414e629088b0be5e0e120a2" }, { "path": "bench/coverage/set-1/subdomains-01/case.json", "sha256": "f4b6dbbd844b3f9079cb8aa7a2530c73bf23c157342095ac95f312ae665079b9" }, { "path": "bench/coverage/set-1/subdomains-02/case.json", "sha256": "8ad5448cb477a1dcb72f7dcaae960472849220c065acf974e22d369c375fb7ee" }, { "path": "bench/coverage/set-1/subdomains-03/case.json", "sha256": "b07db31b6378ce5804f5458449b2181ef2c8cde3a5eea65502b666853c060be7" }, { "path": "bench/coverage/set-1/subdomains-04/case.json", "sha256": "ddd2e56be2be5588a3109e9afcdee24ef69510e2a7a4a08a691ad9bb26f0cd98" }, { "path": "bench/coverage/set-1/subdomains-05/case.json", "sha256": "c72f27fad16baed992d7285e3b84759b42ab79210150bff505a5149d49706352" }, { "path": "bench/coverage/set-1/subdomains-06/case.json", "sha256": "a1bfe4066decfad2765a98c48cba60e3742d741c93a36ec9d67970864235e5b6" }, { "path": "docs/audits/2026-09-23-the-whole-perimeter/coverage-set-2-first.json", "sha256": "965853342759d6b07f2c34db16d2c0d9be1c103b4901981d2935a58fc07f3e46" }, { "path": "docs/audits/2026-09-23-the-whole-perimeter/coverage-set-2-shipped.json", "sha256": "6153e97b2a235238fc093bd8cb30b07006f426be3d30c852395c9e529b119127" }, { "path": "bench/coverage/set-2/deps-01/case.json", "sha256": "d019112421dd1c83bf9bb9dbe582c1b07223a9c723f59cb125c2e986b259f1ba" }, { "path": "bench/coverage/set-2/deps-02/case.json", "sha256": "9a358f4370c8e3501d871c7a6d231f6bc6daa966fe7d0bfc3e4428ba31f1b849" }, { "path": "bench/coverage/set-2/deps-03/case.json", "sha256": "fc30f3e1b0f1b60f7fc7014f023183aede769cf880ffa1def421f2f25f3cfa17" }, { "path": "bench/coverage/set-2/deps-04/case.json", "sha256": "807ef6c15545c6d5670924a601063595f8eba891faeb7f236fd1a2fec42a9ced" }, { "path": "bench/coverage/set-2/deps-05/case.json", "sha256": "0d958dd661750f86878a367718eff650f08be90f9b13ebbcd8ad549179e876ea" }, { "path": "bench/coverage/set-2/deps-06/case.json", "sha256": "70b2d623952f04c53131c5d584e1cd1040b84da8059a3837bab01f06ebf44f3d" }, { "path": "bench/coverage/set-2/libs-01/case.json", "sha256": "2bee656cd948fa0af6dcdc32a08e77f3d5bf1bac9747e65767a7bf2d52914928" }, { "path": "bench/coverage/set-2/libs-02/case.json", "sha256": "b7634122ac55733b44ee91c98b2ff4afd7d18b7cb31905b06f80cc5ceff58f82" }, { "path": "bench/coverage/set-2/libs-03/case.json", "sha256": "5d616eb314b405969d5cf1c2798fa2a7a142ba58a49cbb9c7df36dd4ca2e7633" }, { "path": "bench/coverage/set-2/libs-04/case.json", "sha256": "c039321adaaa2523a32dcec8e8dc5a2ff76dd369532b584a8006664197551501" }, { "path": "bench/coverage/set-2/libs-05/case.json", "sha256": "c51bfe4a25af371bf2c2e2a5ee20e248269f165e7071bddbcce35b455caa9425" }, { "path": "bench/coverage/set-2/libs-06/case.json", "sha256": "ae80bff3052896703b6855c54705eca53800970b18b83886328e89dafb705106" }, { "path": "bench/coverage/set-2/mail-01/case.json", "sha256": "4236cfe3719b7706d6aba367e97e1ec65ed50c10e4210c454439af6ba6882449" }, { "path": "bench/coverage/set-2/mail-02/case.json", "sha256": "e79686ba4f6c9625259c670374b04ed3c1a19068351a334a8109c03f6b0eaa32" }, { "path": "bench/coverage/set-2/mail-03/case.json", "sha256": "7e110940cbe67ca77e0a16bf00fcaeea77213bdbda5e04534c28b9173b4ed080" }, { "path": "bench/coverage/set-2/mail-04/case.json", "sha256": "a83a4b0873303764f83f3074e489c5c33acceb187ce99acf460e95d582522ec3" }, { "path": "bench/coverage/set-2/mail-05/case.json", "sha256": "0e0672ec1e22eec328000fe0f79234b1a9cc60b64810ce46ffb847296673f907" }, { "path": "bench/coverage/set-2/mail-06/case.json", "sha256": "200d4401ce9f67c37ac9a5fb76141af8c4a8df9bfeaf25245a01233cbe7e0ce0" }, { "path": "bench/coverage/set-2/renewal-01/case.json", "sha256": "325374a3e097415eca82682d86a5bea1001315bd7ff64ca84fa2510408c2c4eb" }, { "path": "bench/coverage/set-2/renewal-02/case.json", "sha256": "4bde7f6deabbfd1321e2b69abe151f7048c0e4a1a4f42b614a6b521b4a6cdf9d" }, { "path": "bench/coverage/set-2/renewal-03/case.json", "sha256": "be94809c34df4cf679689dcb2ef4a1c7c5be9d17605b0bc0067542579d7ab8bb" }, { "path": "bench/coverage/set-2/renewal-04/case.json", "sha256": "344932b3933d8a7e6dcfc72bed7f69648d5a2a59c9b851c6091419f5b5ecd0af" }, { "path": "bench/coverage/set-2/renewal-05/case.json", "sha256": "0541c26eca0c7ff19f0e2ca469836a2d1bb17996a6f8749f856b1788a98df755" }, { "path": "bench/coverage/set-2/renewal-06/case.json", "sha256": "2f0fb0cba2440f518ce55dea8120cfb639c67151bd4b7014f08e9a8cd29012d1" }, { "path": "bench/coverage/set-2/repo-keys-01/case.json", "sha256": "70c82746381904d0c8734f5cbd71cf5cbc717508d074a75372c24f414077ec92" }, { "path": "bench/coverage/set-2/repo-keys-02/case.json", "sha256": "c77910f0ad65203f86e4702bebc44b112cb6d1cb16a661753913f635d9fd5d74" }, { "path": "bench/coverage/set-2/repo-keys-03/case.json", "sha256": "97c56bde36982ce251fd8e6c5985b0fcfc4aa84a33e965b936da0a2639043443" }, { "path": "bench/coverage/set-2/repo-keys-04/case.json", "sha256": "b21a5f860c0c553a991801a2855484db9b2177913695f5ce867f7af0022bfbf0" }, { "path": "bench/coverage/set-2/repo-keys-05/case.json", "sha256": "0d78d010ea3c0c12b6180f513a1fbbf600c023794498281e2ef5e5174568f85e" }, { "path": "bench/coverage/set-2/repo-keys-06/case.json", "sha256": "964d82a3100602b8aae1b173d6e6693e322bb950b4c1863fb4b658d9fccd6ac2" }, { "path": "bench/coverage/set-2/sb-auth-01/case.json", "sha256": "ee15eb69031486f6f65637f9d89099db321ade7b664ac66be9a05248186b3acc" }, { "path": "bench/coverage/set-2/sb-auth-02/case.json", "sha256": "1241714c13053f2f03b22b70da2b76a578b3e0318eada433207881f6cb45ce1e" }, { "path": "bench/coverage/set-2/sb-auth-03/case.json", "sha256": "6d8046d2bd9e8d494e1f132d2af44aa7b59ef6f50da32e238f309a82e32e3036" }, { "path": "bench/coverage/set-2/sb-auth-04/case.json", "sha256": "a629fc549257313f09dbb5ffe01fcae50a435a6bfefe4a98ca4755f17d311f9d" }, { "path": "bench/coverage/set-2/sb-auth-05/case.json", "sha256": "3eb17aa12adaee62cf5fb4fe64682cb8c18989241019dcc54688935bc8e157d9" }, { "path": "bench/coverage/set-2/sb-auth-06/case.json", "sha256": "0038a7d49d8e2be744b8912b80c80a23b24a9797ee191670bf7b391f8bbc412e" }, { "path": "bench/coverage/set-2/sb-rules-01/case.json", "sha256": "a794f8107eb0513e66546cc4d347f6fc2803a7b95000b7e0facee6e203588ef1" }, { "path": "bench/coverage/set-2/sb-rules-02/case.json", "sha256": "44b2fc0208fa231e328141a542ba3c00df95498cd1a02cca4d7a10ae38039380" }, { "path": "bench/coverage/set-2/sb-rules-03/case.json", "sha256": "ab1ae85220ab1b17ffc2aa4f0534eae1eca089cfe0446e324fb5d9c60d79954a" }, { "path": "bench/coverage/set-2/sb-rules-04/case.json", "sha256": "6266d4baaf3983b986cedc831751283452d6412b9483e614db5f694be0bd7f6a" }, { "path": "bench/coverage/set-2/sb-rules-05/case.json", "sha256": "aea934c5b137f6d2a72d28023a889c1bcc08f6d3cac5ec516eeb229931e122f5" }, { "path": "bench/coverage/set-2/sb-rules-06/case.json", "sha256": "3e7eeab43ef4b286eba010828d27a1776a85cdc67c001fe3bfae6a1f05d7eb9e" }, { "path": "bench/coverage/set-2/sb-storage-01/case.json", "sha256": "1c292d6201fe1e8ff81ca50c66ea74caa53404d5d0de3611a1c32300c302c167" }, { "path": "bench/coverage/set-2/sb-storage-02/case.json", "sha256": "d00ef0f5f57e836866d4dc23b59a7c8a596e765e74188aceb093e49bcec462e5" }, { "path": "bench/coverage/set-2/sb-storage-03/case.json", "sha256": "c362983f247c57abd01a23cb846d5ad8a46939375f967a2b2546e578c9501573" }, { "path": "bench/coverage/set-2/sb-storage-04/case.json", "sha256": "2f470fc4278ad4fee14711d3415b171de790f4875f6d251913d0caa2c8721019" }, { "path": "bench/coverage/set-2/sb-storage-05/case.json", "sha256": "500d8bddd0a1dcf830deaeaac9a024c7e64bdfaff57ffc904a871281c621b08f" }, { "path": "bench/coverage/set-2/sb-storage-06/case.json", "sha256": "e7d678f1dca7a4bb772efd2c88197a46a79e6f94ba522964fcd1617d1bf39ed4" }, { "path": "bench/coverage/set-2/subdomains-01/case.json", "sha256": "0ea3b8558687146f1b2517ff6f4b1ff147e675de0da048923c5c0a86183c11b0" }, { "path": "bench/coverage/set-2/subdomains-02/case.json", "sha256": "2f5d32407b5d6bc159a2eece6ca2e1f9db1edf8aced4e0e5ec30ef0e576f925e" }, { "path": "bench/coverage/set-2/subdomains-03/case.json", "sha256": "a1fc35ee023be1b1ff5e6122c462049ea8c9a90f4a2c075e089debb3cfa75277" }, { "path": "bench/coverage/set-2/subdomains-04/case.json", "sha256": "16e7c53b8efe278bf369adf3d2431bcf64edb0e98c16f06094f05af36249bcae" }, { "path": "bench/coverage/set-2/subdomains-05/case.json", "sha256": "948757d367a6217394aab132c10cc8fab014fc8d8d28db579aff1d21df1179f0" }, { "path": "bench/coverage/set-2/subdomains-06/case.json", "sha256": "cf448afc67e4c7eaedad1b83c700021568ba86c5aed0c048411c4ac871412197" }, { "path": "docs/audits/2026-09-25-module-benchmarks/coverage-set-3-first.json", "sha256": "5744d5ac28dd08956edbfe835fa6a40a04b5ab71e6538b6c60acd1a199692aec" }, { "path": "docs/audits/2026-09-25-module-benchmarks/coverage-set-3-after-fixes.json", "sha256": "87275823cabbb19d4575ed497656eb0a95d8a8a7654ff14892ef26a26176cedd" }, { "path": "bench/coverage/set-3/artifacts-01/case.json", "sha256": "c8b7c5d4cb359d117b07ade44d4e24c5c55cacff50232fb8398fc396a4915dd2" }, { "path": "bench/coverage/set-3/artifacts-02/case.json", "sha256": "2720c239273e08226ebd1d146d74d344338e615fcbaa20e76faa083727c210d0" }, { "path": "bench/coverage/set-3/artifacts-03/case.json", "sha256": "ff842004ee5336becbfa57a4cfaf8d1c7228c3f77cb42c99ff35a53626ec2151" }, { "path": "bench/coverage/set-3/artifacts-04/case.json", "sha256": "763aad309f5b6d955a0fc3ae16b401f0ce1a4c66ac0b83c30395de717d5c41aa" }, { "path": "bench/coverage/set-3/artifacts-05/case.json", "sha256": "36c9f34c6887b48eddbf342a46094228229c48ab9652a9f0578d4733cc0933da" }, { "path": "bench/coverage/set-3/artifacts-06/case.json", "sha256": "8ae2eebcf6dfbae0fa9341db3ad03ef9f22009fa5fc7aa78cb068c02f36d9b82" }, { "path": "bench/coverage/set-3/artifacts-07/case.json", "sha256": "b68248b7301e891a412518713f5728a8f2c474872bc102cfd6d14e3e5dc449ec" }, { "path": "bench/coverage/set-3/artifacts-08/case.json", "sha256": "71d1be57931c45ea024fab4e007b731173b181f23e98bf982b47219cf764aaf9" }, { "path": "bench/coverage/set-3/cookies-01/case.json", "sha256": "0ae9e9b5f33a365ea556c2ab731d6f639542a7b2e8c60b2c33e48b48d200831b" }, { "path": "bench/coverage/set-3/cookies-02/case.json", "sha256": "49d5652ec3b7f5193ff0a14c280135575f4a76c86b10516ab0e81cfefa4b44e4" }, { "path": "bench/coverage/set-3/cookies-03/case.json", "sha256": "8707abcfadb6278c949b9169033097d11452730b35c2bc5b4270225e51b917e4" }, { "path": "bench/coverage/set-3/cookies-04/case.json", "sha256": "c90a097bdde71b1764131df9a2f824e712c9afc80037aa214ef12b22619236de" }, { "path": "bench/coverage/set-3/cookies-05/case.json", "sha256": "544badef2d8ef1e0813a9238c911ca356e7c3ffa67ccb9a6d6d8b67139a3fffb" }, { "path": "bench/coverage/set-3/cookies-06/case.json", "sha256": "889257b01654c978c71af8c8133ae0495ce66ec0940553eb2fbedd401b95bfff" }, { "path": "bench/coverage/set-3/cookies-07/case.json", "sha256": "d71d89ea8c7790a9676347eaf760aa5cd5bc3c9367cd8437c86027b66c89a61c" }, { "path": "bench/coverage/set-3/cookies-08/case.json", "sha256": "b997b8a5429df1ec75e789fa63309fce4c22e3834c970922fe648deb3bc2cc1a" }, { "path": "bench/coverage/set-3/cors-01/case.json", "sha256": "962c02575f91930e8c8b92cba03d5c4c6e8e1b1966a91c88eded686813b01e40" }, { "path": "bench/coverage/set-3/cors-02/case.json", "sha256": "e970f249c6f41e1001a4672cca5be888bf9a8618f48cb452c0b9bbd7084a1701" }, { "path": "bench/coverage/set-3/cors-03/case.json", "sha256": "7441a4951d2e151cc01457eec020caa5a7b84ab7ed1b92bf006367b68fa7d688" }, { "path": "bench/coverage/set-3/cors-04/case.json", "sha256": "032b16c117537846c2b3063754118ee54178260912e7d8bccb03892ebc50ba93" }, { "path": "bench/coverage/set-3/cors-05/case.json", "sha256": "26f133e74ad48cdbe3d11ecaff665cbc3e5d6305d4312d224502671f66f09e8b" }, { "path": "bench/coverage/set-3/cors-06/case.json", "sha256": "3fdd3e569880e814b21332bf20a256534114daf4f85e7b57fb003d65844bcdd9" }, { "path": "bench/coverage/set-3/cors-07/case.json", "sha256": "ec33db6ff1a64f56e695defb48f7dfa41808fc304772d47198d30afbe6515cf7" }, { "path": "bench/coverage/set-3/cors-08/case.json", "sha256": "5695be5f8d826103c618ed92db249f144ad897e30726416a26ebeb1c6989b03c" }, { "path": "bench/coverage/set-3/files-01/case.json", "sha256": "6a0a6eba3e31906b7deedffede7fa82a227df61d922a6cd2748ef268ec9a2985" }, { "path": "bench/coverage/set-3/files-02/case.json", "sha256": "cd55ae188335ea7d909e5a634cd6f46587d1925a90ac5e436d04392a172c61ce" }, { "path": "bench/coverage/set-3/files-03/case.json", "sha256": "9388f3cacfdabaf11383202f8a1557105dfbf5554fc7d338dd8bd81dedfd6340" }, { "path": "bench/coverage/set-3/files-04/case.json", "sha256": "42666ca57f5afecbc4aaacb52013077547c609bc5f6f278f65c4967ebcaae1ef" }, { "path": "bench/coverage/set-3/files-05/case.json", "sha256": "439a271298549b4505f08c7ad932dc1d4e863c749de1b289a3ad6cc8a364fd8a" }, { "path": "bench/coverage/set-3/files-06/case.json", "sha256": "6c47135a799caebad83a0931a6a1caca94f5ae33d49887127879f551b8213b8c" }, { "path": "bench/coverage/set-3/files-07/case.json", "sha256": "7439f3aece2fe0b1f6a56842ffc1a7216de7aabf0b613d8813ee94937d233195" }, { "path": "bench/coverage/set-3/files-08/case.json", "sha256": "25eaf827ce2fbe5cb908ea33f4a26b032f831943e7f7d27ed72a5dbb57d5f20c" }, { "path": "bench/coverage/set-3/headers-01/case.json", "sha256": "fe629548ce4ec0155fc48bcd3dc26039be17c701f6735e13b43ea5b53aee81aa" }, { "path": "bench/coverage/set-3/headers-02/case.json", "sha256": "38127c8d336e3e47b25f6518d640e4ad46b3a5a01fb83bf79c5f252ffe23ae89" }, { "path": "bench/coverage/set-3/headers-03/case.json", "sha256": "06520de145611a3d7602da978008136920f06bcee2df63121e807b5a8cd10588" }, { "path": "bench/coverage/set-3/headers-04/case.json", "sha256": "50423bc7b0829cbe175a2e6fdc4f32d1394b0238885a163473a91b56912159e9" }, { "path": "bench/coverage/set-3/headers-05/case.json", "sha256": "773846ec23a6cc6141dbca0839ac391f550b7edefd9bac9833f405eeda83b631" }, { "path": "bench/coverage/set-3/headers-06/case.json", "sha256": "900dfb7853de18096a1837b5c5416a9064f9d07bfc62a3bf1f52dacc7d54f264" }, { "path": "bench/coverage/set-3/headers-07/case.json", "sha256": "c6669c5cbac634c164f1f9d32186f97e1f7cd18fa18d7e691fdf3b7af1af0516" }, { "path": "bench/coverage/set-3/headers-08/case.json", "sha256": "74f48ed2e9d1ae491ae8c720f01568e598f2f1b6993ca9ee754cfc683889aa9e" }, { "path": "bench/coverage/set-3/keys-01/case.json", "sha256": "3706ef46501f2f2ccdc171ac26b9cf95c7897edfe080dc26fd375b756e4ca03f" }, { "path": "bench/coverage/set-3/keys-02/case.json", "sha256": "49ec269838c0bb05283d5cc7bafc9476a9867e87a1d4bc3b4b963cdcefbb3649" }, { "path": "bench/coverage/set-3/keys-03/case.json", "sha256": "8fa3dcebd02295f295f4f3eaf66a09d60cdf19ff40a22cfd1bb8f4bdd0703b5c" }, { "path": "bench/coverage/set-3/keys-04/case.json", "sha256": "de0782adc617a147da132f541497ae40f3208d1f3a7d9bec8cfec31cf95dc32d" }, { "path": "bench/coverage/set-3/keys-05/case.json", "sha256": "2aa93ad08aa61b1a8020a35314684f01476c6742c59f8a1829aa1e697a10673e" }, { "path": "bench/coverage/set-3/keys-06/case.json", "sha256": "58ff2b6c38e91b468296d8261ced35dc9374e3bba5a05b119ba4a37c0adbcbc7" }, { "path": "bench/coverage/set-3/keys-07/case.json", "sha256": "fcb7d3811459a514f6bd40511d3b71c5f744ced33ac2bf563737b0d048329bbe" }, { "path": "bench/coverage/set-3/keys-08/case.json", "sha256": "53acd152a1836d9dddb0670d639da1d9aa8f4cc8244dd2ac27102438a26780cf" }, { "path": "bench/coverage/set-3/mixed-01/case.json", "sha256": "dcdbbfb1bda71bf0a32adc7797c0ce41084a22cb044fa290ac894c6806929afd" }, { "path": "bench/coverage/set-3/mixed-02/case.json", "sha256": "0a4baa782c111649865929b9d2e4a9d31edc2d59a01bc2daa944b776ac5ab0d5" }, { "path": "bench/coverage/set-3/mixed-03/case.json", "sha256": "9fae89e0d72813a77378dc90e90de6a7a22bd0435aef76174ae24ff209c9c8ad" }, { "path": "bench/coverage/set-3/mixed-04/case.json", "sha256": "7906e266a231171fe71c22fc9ba1ecd5fd7d823015650ba6b09da30db4347013" }, { "path": "bench/coverage/set-3/mixed-05/case.json", "sha256": "01410ce6642acdacc01d7f9bd6bc222ce110290dd9cb90651aa97398723de246" }, { "path": "bench/coverage/set-3/mixed-06/case.json", "sha256": "c1b1a41785e30000c396ce596a1376b7b266ca7c362683c29c7250f5151cb486" }, { "path": "bench/coverage/set-3/mixed-07/case.json", "sha256": "919ddc8753343e56ad008e8bceb01af1c0e229e061d5387756c19ef29a3dba07" }, { "path": "bench/coverage/set-3/mixed-08/case.json", "sha256": "e596c1c0a3e63f2f4a0742703c987807e1f2aa27bdf337cff21d12e72ccafbc0" }, { "path": "bench/coverage/set-3/noindex-01/case.json", "sha256": "0c82c3dbcf30e8ad64163bde9c146866a7976672cabdd02b054dc8b918839077" }, { "path": "bench/coverage/set-3/noindex-02/case.json", "sha256": "fe340f46b670ae3d5eb9355eec427e27d1cf59fd7ac58f8c97b2e1c15e07452e" }, { "path": "bench/coverage/set-3/noindex-03/case.json", "sha256": "f54543fdbc3fe0ddb378a24f66e787375262168e6370ecd4fd7ceb95536e5a86" }, { "path": "bench/coverage/set-3/noindex-04/case.json", "sha256": "681a53f402c0309cb52dac16008d66df09eca2146caff8f1b04e69e7b0682c90" }, { "path": "bench/coverage/set-3/noindex-05/case.json", "sha256": "789014ee00ff2ecd8a800b02e2751eb8d3b939deaee83b347d16cedf7a8ffa00" }, { "path": "bench/coverage/set-3/noindex-06/case.json", "sha256": "51684845321372b67400a05d0207cb45fd3e8854d40ead035bde2de33abf152a" }, { "path": "bench/coverage/set-3/noindex-07/case.json", "sha256": "94a627f59d6541b5aae48b097facf5a010b2b56ef30a9c83e228e2a5b50367aa" }, { "path": "bench/coverage/set-3/noindex-08/case.json", "sha256": "a159a647e170835715780efb7aeb5fc7afdc1e6e71bc568e9d29c3df9cb90452" }, { "path": "bench/coverage/set-3/reach-01/case.json", "sha256": "e2295dc0fd3538dcbeb5cdac3c7428b8f3274073519282827e00fbfd00af914a" }, { "path": "bench/coverage/set-3/reach-02/case.json", "sha256": "990aea343b763043611fd7a24cd49f128b1b815b00818e4ea1831d09b31a3317" }, { "path": "bench/coverage/set-3/reach-03/case.json", "sha256": "953f022b57bebafe09f603c900f91d8c6842e31a7944b915ee83a9218a0badf0" }, { "path": "bench/coverage/set-3/reach-04/case.json", "sha256": "8b2a7fd38b9aad53e0e77164ebf01ef8d6886efdbccc8d3da13a5f86d8711322" }, { "path": "bench/coverage/set-3/reach-05/case.json", "sha256": "b5608bdb9d1ed1cb3d09f7af57f1123492450bdadab301acb481e79c2b1504bb" }, { "path": "bench/coverage/set-3/reach-06/case.json", "sha256": "d8a2e3483f0790c415d5ef28c326d7c9e05c6005ce9783af99a9b276625fb867" }, { "path": "bench/coverage/set-3/reach-07/case.json", "sha256": "4ce030c1172573cdad8b4f2691e06a522e3b1e845c1afb7684e42e2a3b1c889b" }, { "path": "bench/coverage/set-3/reach-08/case.json", "sha256": "561e1824f56c4cb6a0b98b5c8905b6bc246f6d665539bb833c3d1aa6e90a2a19" }, { "path": "bench/coverage/set-3/rls-01/case.json", "sha256": "5d42d1c0686c83a82432ca980cff8c2b56643b67af6508643ab82e32185adfe5" }, { "path": "bench/coverage/set-3/rls-02/case.json", "sha256": "f9a89adbe67dfcb28ac3ded587792f6bb25c28c7a8f4d6230cde4b750f1bb56f" }, { "path": "bench/coverage/set-3/rls-03/case.json", "sha256": "b1e920b7d3079bd1c76edf52aba1dc3d9205fb0f1d5609deece74698073599ad" }, { "path": "bench/coverage/set-3/rls-04/case.json", "sha256": "db8811f25f11d84b0c4039a3ee602c1e43dbf318243d2dccc09dbe51553f4484" }, { "path": "bench/coverage/set-3/rls-05/case.json", "sha256": "72dc1d18f4894c78607e85823e52922a1726e5d591390d71b3dac7cf400c9a4b" }, { "path": "bench/coverage/set-3/rls-06/case.json", "sha256": "846998e79b198531706698375fccd006f2dd4b1d919a221a31b97e3f3df9377e" }, { "path": "bench/coverage/set-3/rls-07/case.json", "sha256": "e9250596417616417e84d9640525b0601f9d22aa9f8b2a4e08e0e5a3b803b593" }, { "path": "bench/coverage/set-3/rls-08/case.json", "sha256": "33db35c5f60d222f37976556174238a4f6ab1ec35957291c80eff636148d7461" }, { "path": "bench/coverage/set-3/tls-01/case.json", "sha256": "73accf5cbed3a4b2488e5be68702b6100203550fe580dfad3fc321c7e4f211f4" }, { "path": "bench/coverage/set-3/tls-02/case.json", "sha256": "11b8a2abc9cfd71a498c091b03caf1c9cf3199adedcef9db81acc0e312d2526d" }, { "path": "bench/coverage/set-3/tls-03/case.json", "sha256": "60cc5d1973a25e946dadd97a5082801ebb38912a7303b3cd095359dfe67d2cf5" }, { "path": "bench/coverage/set-3/tls-04/case.json", "sha256": "9b5178794b519570d527220ddc9acc164d4343c812cfae2ad1d22c3f8b277125" }, { "path": "bench/coverage/set-3/tls-05/case.json", "sha256": "299e5c2e0a403bfbc5e55ca83a307662af33e47f1e42d410c9a66acf5c049a18" }, { "path": "bench/coverage/set-3/tls-06/case.json", "sha256": "bc5a6d74d2ff56135678e32cc928969429d547cbdbeeb2cc817262617772be40" }, { "path": "bench/coverage/set-3/tls-07/case.json", "sha256": "b505fed31b2135abe463bc5fa09524971d8a107928c3fae9d7e358c5079ffbe0" }, { "path": "bench/coverage/set-3/tls-08/case.json", "sha256": "72f5d63a34c859523a5ce99cf521d775105fc19917da4b92a4b1ae4282337997" }, { "path": "docs/audits/2026-09-25-module-benchmarks/coverage-set-4-first.json", "sha256": "01dd35cc18d53ed8d7ebf7ee1a0c6543cbdd1b53565d9649432294b77cb4cc31" }, { "path": "bench/coverage/set-4/dangling-01/case.json", "sha256": "353f0627d78c9e2064246d19e5ba1dcd9eec6eea125486b5d9a3cf7e33342380" }, { "path": "bench/coverage/set-4/dangling-02/case.json", "sha256": "56dce94ed2fd8fc25c12f69f55e87ba3898c049dc3c368eef5bbdc83db8fed05" }, { "path": "bench/coverage/set-4/dangling-03/case.json", "sha256": "4f24c97a05d58174444dc246fe91f341335929d899528541d2a69434aa544b27" }, { "path": "bench/coverage/set-4/dangling-04/case.json", "sha256": "0a52fe5128894aa0122c3feb905f8d767ffc0a45dc8dde8136133d86eee10b35" }, { "path": "bench/coverage/set-4/dangling-05/case.json", "sha256": "04ed58c63f3e9778d84b13f8dcadc9526b8000ff12dce3dc8c92badda1aa164b" }, { "path": "bench/coverage/set-4/dangling-06/case.json", "sha256": "8b138b7b71d45fa3d4a0c25a471f66df79ad86eb63ee80126bffc44d9c44ded4" }, { "path": "bench/coverage/set-4/dangling-07/case.json", "sha256": "1fa39143fe310cdf720f50c95320521245b2380f575a6082dc66588481e915f6" }, { "path": "bench/coverage/set-4/dangling-08/case.json", "sha256": "a490936f42610ad32c4a5788bd3c9b02bc837337519fb7ed08ae6a1dfee4cce7" }, { "path": "bench/coverage/set-4/deps-01/case.json", "sha256": "e8ce7684e8d2d41baab7a514d8f37c5764d4ffb4ca1fe855fd34dba466accac8" }, { "path": "bench/coverage/set-4/deps-02/case.json", "sha256": "f77dad7eea6ec680d135b02d2c6e2157860bdc603a828b1dc5a4e6d11946b66d" }, { "path": "bench/coverage/set-4/deps-03/case.json", "sha256": "73738419a2863b08be97d1d33e90774f3cfe47e6085fe08c9f2d49ee4629d098" }, { "path": "bench/coverage/set-4/deps-04/case.json", "sha256": "99b82b6dd56e3419ec071427d24b045649991ce152e6591c0a8512b630ef9c51" }, { "path": "bench/coverage/set-4/deps-05/case.json", "sha256": "ba3a5c07d60081efac6ae456ad7b1d8b4565a7a88fbaae65e8f9c5b08d6337b1" }, { "path": "bench/coverage/set-4/deps-06/case.json", "sha256": "7d6adf13521d96080bfe66a80889c7f88e1534a7a9cdf6d835ebc1056245264b" }, { "path": "bench/coverage/set-4/deps-07/case.json", "sha256": "37c2a32ce52c0048d7dea2b7ca5c9f8ab142ab126d18bb452842a777af6331de" }, { "path": "bench/coverage/set-4/deps-08/case.json", "sha256": "6b0c96e3ace6c9029af6ccb82ccd648be44f555e9c44d0c1b3a9cb4e3d4d9b6d" }, { "path": "bench/coverage/set-4/email-01/case.json", "sha256": "2b18c40343f8d8da1b18ddfc239d68e057bd10ff7d8058dc8adca3fe5aa91350" }, { "path": "bench/coverage/set-4/email-02/case.json", "sha256": "4a90f201edc635eb36ed4bfdeb498444e865643951a0cd6097290642eab65261" }, { "path": "bench/coverage/set-4/email-03/case.json", "sha256": "414252157a22bbaa270edcb5d40e543021addd2f469d6f42330c90088843d9bf" }, { "path": "bench/coverage/set-4/email-04/case.json", "sha256": "4f452cd756ad610cdc2b040fc43236800834ee0d2bd4b419c220cda1fdb5327c" }, { "path": "bench/coverage/set-4/email-05/case.json", "sha256": "20788b905a5330469ba7dd833db2ef15f82345af2900a26c0c5d2997d943e695" }, { "path": "bench/coverage/set-4/email-06/case.json", "sha256": "e396b273ebcf0e517c06ffe8198a5f06879358807c348fa28ab8973448d4e2f6" }, { "path": "bench/coverage/set-4/email-07/case.json", "sha256": "96ba7cf9a2e985f7beb9ac45e18b3090ad70a630e2cb839253c1b87fea6efdff" }, { "path": "bench/coverage/set-4/email-08/case.json", "sha256": "f2c655364bb6c1ae991293b265c63ee8e38587891c56d4ba0349b7c1edf031e0" }, { "path": "bench/coverage/set-4/expiry-01/case.json", "sha256": "43d89a0ccc5826c6409afba91735dd57978f12d2b7dfa202814f9e548894ba25" }, { "path": "bench/coverage/set-4/expiry-02/case.json", "sha256": "c43c315cc7eccc63fa69f5c9a3197f2be160ebbae13bd3ff7c0a70a47d608c07" }, { "path": "bench/coverage/set-4/expiry-03/case.json", "sha256": "1c5f16b1bd42722fbc6ef3c74e72d4620c618fe38b4f4aee68f413ef55997db2" }, { "path": "bench/coverage/set-4/expiry-04/case.json", "sha256": "42a128f4589e30300c23ab97c2dc87c6878aefdb7512444e6054adc04cf107d6" }, { "path": "bench/coverage/set-4/expiry-05/case.json", "sha256": "390e2f61cb28e8a690770cf56e53169cc11033d7b85c9253cfeb9212712b7b84" }, { "path": "bench/coverage/set-4/expiry-06/case.json", "sha256": "61c41b19953adb6cf93467b88b3b84d51d1a021d481ba4d6eaf0558c25fd04e0" }, { "path": "bench/coverage/set-4/expiry-07/case.json", "sha256": "6936ab5ef7fe8bab90d8c84ba89f646ab0c65e853ebb5fd4a51d6190f2f73b7a" }, { "path": "bench/coverage/set-4/expiry-08/case.json", "sha256": "f6d1def2c2bf28a25826c4d63d97b3f4be885afe2af46c6f6a6810d1ed839300" }, { "path": "bench/coverage/set-4/keys-01/case.json", "sha256": "0065dcb31fc717914c46da38e723cdd7b437547ba9f8d0021c59aeaf681294f7" }, { "path": "bench/coverage/set-4/keys-02/case.json", "sha256": "9c105d9a943fdd8cda9376b35cde2a0b5a81e1f6485959ab348750d168fcf8c2" }, { "path": "bench/coverage/set-4/keys-03/case.json", "sha256": "d0f7b00cb31aa046cbcd6881796802abe540327e19e463f35bbd5717f2620794" }, { "path": "bench/coverage/set-4/keys-04/case.json", "sha256": "96598ff0170af6d97773340230f59007ae31f92edb54b4e34e3975eede87f0f9" }, { "path": "bench/coverage/set-4/keys-05/case.json", "sha256": "3a1a9c7eafbad01538ff3a2b9720d9e1f0d9ae6a8c36100cc6c08d8e11cc1ef1" }, { "path": "bench/coverage/set-4/keys-06/case.json", "sha256": "e399e9dd3b2a6bd53ac996bc0daad2b7b08f48dcaba779e75f678e1e7e2b7c5a" }, { "path": "bench/coverage/set-4/keys-07/case.json", "sha256": "189286b9684bf43b482cee960b31133c04fd3d06f61698d6c40bcb9a4d7e72a2" }, { "path": "bench/coverage/set-4/keys-08/case.json", "sha256": "a4d9309e1cf67b10042c0a087439a80ddab057f1c8b7b1c700c87ae908dcbe32" }, { "path": "bench/coverage/set-4/libs-01/case.json", "sha256": "e5e6400818fc1c589df26657a29fc21a61b1ec721dfb1b72d8f5ef797b6fdc3c" }, { "path": "bench/coverage/set-4/libs-02/case.json", "sha256": "e19d0c6046c1824ad2f3bad9f0be676a04ec0b9f18a5a23f1da1e8e974e7f0ef" }, { "path": "bench/coverage/set-4/libs-03/case.json", "sha256": "1f73f49699f94e6b82243790b6bc6658d5c60710dd2b211c1146d025ee45f3eb" }, { "path": "bench/coverage/set-4/libs-04/case.json", "sha256": "4e4f46a78fede698c73d06759ae7be13c5dbeaa8a32876d78a806d5e96f85e9c" }, { "path": "bench/coverage/set-4/libs-05/case.json", "sha256": "cfe3249718b998ca5c9102280b082f8055832cfb2bdc87fa57b9b32f4b5e7e72" }, { "path": "bench/coverage/set-4/libs-06/case.json", "sha256": "1598e1f6c076114e9841fdf72a912c25c8fae88a4400418f4a363edcc7b5aa7f" }, { "path": "bench/coverage/set-4/libs-07/case.json", "sha256": "1e84009eff5dd63e599fc654ab0cf42376514e4d6951d6958cd1d5c216e240c5" }, { "path": "bench/coverage/set-4/libs-08/case.json", "sha256": "316a8a7659f8bd2fedb437a4042e3d72afa298ef383595c117421f1439149344" }, { "path": "bench/coverage/set-4/policies-01/case.json", "sha256": "df6bc5ff88dc33858fe9264cb2be9a3f927cb04e18362c8d076efcbc73035e12" }, { "path": "bench/coverage/set-4/policies-02/case.json", "sha256": "44da3b95302f9d4a75c3905e59a7fb905da38dfb78c1e3e7c5660b63d33d425d" }, { "path": "bench/coverage/set-4/policies-03/case.json", "sha256": "30b3ffee5e67e74e37eef1ef40a78af01c0ab82bccee2d9b97bbb74cd8c042b6" }, { "path": "bench/coverage/set-4/policies-04/case.json", "sha256": "625fd106df6f15aeec2e81279eece38c775d8c3cbb41edf2c8518ebb08ad3393" }, { "path": "bench/coverage/set-4/policies-05/case.json", "sha256": "cede771cad59cfbaad89f09cf48fa79b2e84f7546c16975c904ae9995cdd88af" }, { "path": "bench/coverage/set-4/policies-06/case.json", "sha256": "d465600f39d0162f09129cc6b062c1dfd74663a7bdd63df253f28ca31f0919ce" }, { "path": "bench/coverage/set-4/policies-07/case.json", "sha256": "e62f2fc169d924c5418d5eebfff8625aae635aef9dcda28547e6c3b1d3c4b609" }, { "path": "bench/coverage/set-4/policies-08/case.json", "sha256": "ca18f45486d2281fc0a03ec9f9bf5fea531b7edff702e8e9f623f4408d23ac51" }, { "path": "bench/coverage/set-4/sbauth-01/case.json", "sha256": "0cffa8abe856d91a98b4883bd38e10ed6103d8d3e36edcf493f5b020a0de0371" }, { "path": "bench/coverage/set-4/sbauth-02/case.json", "sha256": "02e5df1b5a986b1c19322956801d4d3b3d16d6e6cb14a0aa741802eedd601fc7" }, { "path": "bench/coverage/set-4/sbauth-03/case.json", "sha256": "1dc0106c83dfe1650a97c271512d397ee393683a479f950f8dce25ad3fbdd9ec" }, { "path": "bench/coverage/set-4/sbauth-04/case.json", "sha256": "530b2ce7d8b1ebb02cb4d8a16bb976ecb817c21507ddcd3e635de5c2d053daa4" }, { "path": "bench/coverage/set-4/sbauth-05/case.json", "sha256": "c5f70e99b499a64c1a8275ffacd179825c01288c8347d19851cc4cf78e5f7d5c" }, { "path": "bench/coverage/set-4/sbauth-06/case.json", "sha256": "490fb08f4f3f786b366bb353f777d841ae27ddb2bf3968e24ca58edeaa1de9f2" }, { "path": "bench/coverage/set-4/sbauth-07/case.json", "sha256": "103f0af87c2595f9770c53ee96fac76753e488ef0fc3ec7ef43a3c679b05eec4" }, { "path": "bench/coverage/set-4/sbauth-08/case.json", "sha256": "68b307db9eeac70b1106c48c97c70335ca878e82faed0aee8be5d0228480c0d1" }, { "path": "bench/coverage/set-4/sbstorage-01/case.json", "sha256": "70b472f73300c79dab76f79c896c4836b588adc90050215398457eebf1d526fa" }, { "path": "bench/coverage/set-4/sbstorage-02/case.json", "sha256": "de9dbb57b9f743c6ea5463f2767dd508cd66ca4e8f6ea8f72453a76d8c144155" }, { "path": "bench/coverage/set-4/sbstorage-03/case.json", "sha256": "3104a4945af01e5bfa092d3b8e10405f19076a14dba2acd47dc66a7d5bd0dbf8" }, { "path": "bench/coverage/set-4/sbstorage-04/case.json", "sha256": "944c0f2b34823d03d40d3459bbec14ad7deed349def79b2b204fc9fc92b2c540" }, { "path": "bench/coverage/set-4/sbstorage-05/case.json", "sha256": "a56e758df41eede9c15cae49bbbbce0fb694a21b4b7ad5e7af5ac1c48092e219" }, { "path": "bench/coverage/set-4/sbstorage-06/case.json", "sha256": "d8f62af5481533ef78362391433380f8db9a8a7f602f20580699fbe214ba5f14" }, { "path": "bench/coverage/set-4/sbstorage-07/case.json", "sha256": "63569d3cda01e0352dd2a856f06923a14e440df490e495f2bcebbb9693205e32" }, { "path": "bench/coverage/set-4/sbstorage-08/case.json", "sha256": "1aa89994d4e2c7b18daaa5b7e0cd03c2a0fcb25fa95283c2a0f2ad39e08817b9" }, { "path": "docs/audits/2026-09-25-module-benchmarks/coverage-modules-holdout-first.json", "sha256": "1a247229a380798138584e5f7f5d1a7f42925508c6a71df34a694065a3251d75" }, { "path": "docs/audits/2026-09-25-module-benchmarks/coverage-modules-holdout-after-fixes.json", "sha256": "934635f2120b6de3b7d1f301f3bda13dfd96da52a842603ad876f38832b33dc6" }, { "path": "bench/coverage/modules-holdout/cache-leak-01/case.json", "sha256": "ebbe9c5a3823e76acbe11df038ea5f562ce10cb78e4feb12b5e52678a44f1b99" }, { "path": "bench/coverage/modules-holdout/cache-leak-02/case.json", "sha256": "748eb1645ed0c3417bb8e02914b766f15484d277c1418f63cb5de677349b9d0b" }, { "path": "bench/coverage/modules-holdout/cache-leak-03/case.json", "sha256": "5f34267bbbdde7fb36b8412b871c189bcdb41ce013df10e76286ca3e45d3cfb5" }, { "path": "bench/coverage/modules-holdout/cache-leak-04/case.json", "sha256": "12eb19c46b0101cba2479e2b7f5bdbf0ed17a235612b22ab1db0ccade923fa5c" }, { "path": "bench/coverage/modules-holdout/cache-leak-05/case.json", "sha256": "22f1d2a2ade3b3cf73dcf386bcf07e2452466c8cd7f97a1c9e4bf22c44a3c377" }, { "path": "bench/coverage/modules-holdout/cache-leak-06/case.json", "sha256": "61fa2cda96dc777df9a51804140837186ee4e3814975b4fe20bf92cb965844ae" }, { "path": "bench/coverage/modules-holdout/cache-leak-07/case.json", "sha256": "6cde0b2fb913ee0b940fd44c418f415b1225188247384fe75e7be6bf1b6fb516" }, { "path": "bench/coverage/modules-holdout/cache-leak-08/case.json", "sha256": "dfbc196410e4f25aba3c4d1a5254b8ff1f68d4feb92309214339273c1324daaa" }, { "path": "bench/coverage/modules-holdout/ci-injection-01/case.json", "sha256": "1750b60b30e883f7433c7c0d715ad6e98f7055aa25ef41f826f89fe617124be8" }, { "path": "bench/coverage/modules-holdout/ci-injection-02/case.json", "sha256": "ab030e4616bc1746aa9e916f5f6df13da0f27a6cd8e77bb55e23fbb5e4cb94f4" }, { "path": "bench/coverage/modules-holdout/ci-injection-03/case.json", "sha256": "a7135e41a2231d51833b66417d4490731afb98cdb3535907c54d9a07785ccb92" }, { "path": "bench/coverage/modules-holdout/ci-injection-04/case.json", "sha256": "879be123bae3237b856c9bd1f2039736b656b7a39c5d01523c3f1f787f473432" }, { "path": "bench/coverage/modules-holdout/ci-injection-05/case.json", "sha256": "05c30534cbe711955667c9d34b1bfa2b0ec4c6280e281da5513906911fe5f5d6" }, { "path": "bench/coverage/modules-holdout/ci-injection-06/case.json", "sha256": "2792f48710cc95855029e87a74747f18712caafd45a361e13d78568813827fff" }, { "path": "bench/coverage/modules-holdout/ci-injection-07/case.json", "sha256": "1a4962eb3d4412d827b37d5c9a0039f13e30c2a7aa7ec992ceee135f4a925199" }, { "path": "bench/coverage/modules-holdout/ci-injection-08/case.json", "sha256": "f2c7708f249da86fe9c5d4390f80346a13a15e926f906c989739ee2ef55250e8" }, { "path": "bench/coverage/modules-holdout/compromised-script-hosts-01/case.json", "sha256": "ef987aafda0a0421518bc558d02212280ac5fcbb4d2b8fbf2b1f92838d702599" }, { "path": "bench/coverage/modules-holdout/compromised-script-hosts-02/case.json", "sha256": "d558b3e5938788f772ab38f7119af56b66852323a44501a72c68fd8deb6b4d9b" }, { "path": "bench/coverage/modules-holdout/compromised-script-hosts-03/case.json", "sha256": "7a9489f7927de02aac2f2d1153860ffc61027400eecdecd32831bafaf7f19599" }, { "path": "bench/coverage/modules-holdout/compromised-script-hosts-04/case.json", "sha256": "0853adcde0b7db24f665239f12ed5bfc0b9a0adebf978599ff78bdb22bae7d1a" }, { "path": "bench/coverage/modules-holdout/compromised-script-hosts-05/case.json", "sha256": "48e63c6523bff702b6c0169d11c45da8d96e86cecfa66c308844c9bc3657e425" }, { "path": "bench/coverage/modules-holdout/compromised-script-hosts-06/case.json", "sha256": "006fb66545d6b80ed2af0f08c299531c03dc5ee6e6b9d48b53e0566eba6635f2" }, { "path": "bench/coverage/modules-holdout/compromised-script-hosts-07/case.json", "sha256": "ee806bfe30043e5176689af3c3b2f444a13b1b5f893b5771caf55df46c20ecea" }, { "path": "bench/coverage/modules-holdout/compromised-script-hosts-08/case.json", "sha256": "0fff26a519f115c3e4e2fd91f7b58c7d3c19b3b66ee4e1f2a5391fabb4c3c7e8" }, { "path": "bench/coverage/modules-holdout/csp-weakness-01/case.json", "sha256": "896ca9a99d8d755f101d9eeab4939b84fa5f57e99f7bb4852ac591e7edc1b54c" }, { "path": "bench/coverage/modules-holdout/csp-weakness-02/case.json", "sha256": "ffe4d69b224447f6c46369127e961c77ebd9f47193a79277e9f7bf5360b190af" }, { "path": "bench/coverage/modules-holdout/csp-weakness-03/case.json", "sha256": "c2d66a6bc5da30115fdff951abb4d7fc36b963787be7ceb1e78844e64cf7045c" }, { "path": "bench/coverage/modules-holdout/csp-weakness-04/case.json", "sha256": "bafa9722cfae5bfe7a602608e83bf6194290a92967bc85cc458dbb44ef531ee6" }, { "path": "bench/coverage/modules-holdout/csp-weakness-05/case.json", "sha256": "c0b46c3a2b0f757273c0ea9ef7fce09b083ce5d36916a75efcf2345664441f1e" }, { "path": "bench/coverage/modules-holdout/csp-weakness-06/case.json", "sha256": "601d70de6972decf40720783b819a2de58ee1420b41d3225ddaa97828ee9d36b" }, { "path": "bench/coverage/modules-holdout/csp-weakness-07/case.json", "sha256": "c33249eeb425851515651fefbda36e59024afa64acb61d2c52bc464b3f57a6a0" }, { "path": "bench/coverage/modules-holdout/csp-weakness-08/case.json", "sha256": "80fff14b1e869687b7e6a54bf11701a7de46103c5e9f72be2e94ae4c2209fb0f" }, { "path": "bench/coverage/modules-holdout/dev-server-exposed-01/case.json", "sha256": "a6bec458b944dc549fbd341659abfe0d25bd0f80a29047e6e3185fda045fc244" }, { "path": "bench/coverage/modules-holdout/dev-server-exposed-02/case.json", "sha256": "05ffc2658ff49a2d2d0196ed1380cf5ac0fb11e310739863b093485c559464b2" }, { "path": "bench/coverage/modules-holdout/dev-server-exposed-03/case.json", "sha256": "32501f2bdc1b671e5585d64a8e7aaf9d90c76e222e13cd4d6aa25f38ee0fb4ef" }, { "path": "bench/coverage/modules-holdout/dev-server-exposed-04/case.json", "sha256": "8c61e4423503872be4748bfafb8e113ddd469d28abace44f13e7492108b5c9ea" }, { "path": "bench/coverage/modules-holdout/dev-server-exposed-05/case.json", "sha256": "5d502db98c2de75045f30496bd9e30bdac6767935f146b0664b3e47f4de2a402" }, { "path": "bench/coverage/modules-holdout/dev-server-exposed-06/case.json", "sha256": "94241cbee196c3e6ba9a3d75957616a0746053e88f91bc6136aa5a27c8d74810" }, { "path": "bench/coverage/modules-holdout/dev-server-exposed-07/case.json", "sha256": "c4aaf627c41fa48680fdcb3e27a51231853be279585d8d509479c5bd3a357ae4" }, { "path": "bench/coverage/modules-holdout/dev-server-exposed-08/case.json", "sha256": "78d4dfb06b0d7e500759824211f14133bf138d7dd12346420ad1007a21a87d7d" }, { "path": "bench/coverage/modules-holdout/firebase-open-db-01/case.json", "sha256": "c67359f6c6fec090065a271062c53a1ccb9ac5239174253088d6f7da65353b7b" }, { "path": "bench/coverage/modules-holdout/firebase-open-db-02/case.json", "sha256": "6068e1aaf7b0946dd1119735b59dcb597bdbe0bc878f0d1e1f29f2f84ae47e1c" }, { "path": "bench/coverage/modules-holdout/firebase-open-db-03/case.json", "sha256": "46718df6ca162d9e9e8f734929ae6ab0f2dc751a46e1d5eba0a23e5544697dde" }, { "path": "bench/coverage/modules-holdout/firebase-open-db-04/case.json", "sha256": "d245d27bfb24ff84db8a861b4ab1b5e4426b432a0b38a5155700dfd0fba65239" }, { "path": "bench/coverage/modules-holdout/firebase-open-db-05/case.json", "sha256": "5df52149047e5063e9b9c07e651bb0cc42dd8d06ec62b5b6e9c721d4be799bba" }, { "path": "bench/coverage/modules-holdout/firebase-open-db-06/case.json", "sha256": "26065fcd4cfe5bc9e7806dc4bd9ffa81447cdac106a341c6dff95a977b4946f2" }, { "path": "bench/coverage/modules-holdout/firebase-open-db-07/case.json", "sha256": "d9b8f7fbb80560c66cfb7e38aa333781de714c3fe079388dc98ec9845a9629c4" }, { "path": "bench/coverage/modules-holdout/firebase-open-db-08/case.json", "sha256": "9dd2edf1cfc64d203988927ec92958bed8cfbda799c426188ddc3b71cd91a8ae" }, { "path": "bench/coverage/modules-holdout/firebase-rules-01/case.json", "sha256": "1813517f453d4dc8ea70c43ca51bddbdd6713ffe53ec46bba2075df1b12c5df8" }, { "path": "bench/coverage/modules-holdout/firebase-rules-02/case.json", "sha256": "f5415ac32b56e3c290c6ae651fc6d5c9d81df42a883abc6539c32d2fe2ae6b07" }, { "path": "bench/coverage/modules-holdout/firebase-rules-03/case.json", "sha256": "c445b28364da5fc184742dd20c639bfd6b41ccce86e7c38834de6b28a128c9e5" }, { "path": "bench/coverage/modules-holdout/firebase-rules-04/case.json", "sha256": "7c828e60f253a32efd1e3ce89787a8078fe8778d553203c6d33715c0729eb5f0" }, { "path": "bench/coverage/modules-holdout/firebase-rules-05/case.json", "sha256": "1bc960ce00b9cf642e0bdf37bc71de13911878ad5d5735420389f07f71246cf2" }, { "path": "bench/coverage/modules-holdout/firebase-rules-06/case.json", "sha256": "eadba5689d27b6dc270e088c45fd64151297d97cf5bb9cbd83a7645caff8daa5" }, { "path": "bench/coverage/modules-holdout/firebase-rules-07/case.json", "sha256": "a2051c2fda1a044cc689c98c27ead7f88721809eb28ca513f0fcd44b92bd1a7b" }, { "path": "bench/coverage/modules-holdout/firebase-rules-08/case.json", "sha256": "d154b834493a605dd8266e671e747d9c7f408c0e9983c43e6d079bb9122e6e85" }, { "path": "bench/coverage/modules-holdout/graphql-introspection-01/case.json", "sha256": "62d0808ce8de26a0d08b998b53ea3655ed287934701af0e3689297e5c0576248" }, { "path": "bench/coverage/modules-holdout/graphql-introspection-02/case.json", "sha256": "94bd7776d565b7feba134cc15e8782a376d9c78bbf0b68b90120e2e5f89d4388" }, { "path": "bench/coverage/modules-holdout/graphql-introspection-03/case.json", "sha256": "afdc25aefd71088ce0e166123166fe94fc1db5698404ec2ca307a63b4c3adb88" }, { "path": "bench/coverage/modules-holdout/graphql-introspection-04/case.json", "sha256": "4885c08383ae9aef0b5235e97d41cd6f3e94fff0d8d7bcabf5b4dd4b18490a70" }, { "path": "bench/coverage/modules-holdout/graphql-introspection-05/case.json", "sha256": "8c1e66a73a99696d8d937e6fce13d1be5914a32b33b1ab9bee111599eab7e9e0" }, { "path": "bench/coverage/modules-holdout/graphql-introspection-06/case.json", "sha256": "12c676d7b9f3b5ffcd699b9ed4662ccffcfc4bf8334c85ded5f56fd4ce974c1b" }, { "path": "bench/coverage/modules-holdout/graphql-introspection-07/case.json", "sha256": "93fbbbfdf29aa5baf201cdabb08addc0ca7885ee28921e81b6a630caf59c628c" }, { "path": "bench/coverage/modules-holdout/graphql-introspection-08/case.json", "sha256": "b3b51a6364220c7d0c52a3ae242b951f8679dd167f6844eff3e018f3dd40e2d2" }, { "path": "bench/coverage/modules-holdout/https-redirect-01/case.json", "sha256": "ac61cabd7de2963b579ecefb8310b4853709a18d606e0317246f7ff08721e6e6" }, { "path": "bench/coverage/modules-holdout/https-redirect-02/case.json", "sha256": "850a8b9cad35e7415ff2d43b729f1f7a48abf16bcc3393b78c64a49b984a3c44" }, { "path": "bench/coverage/modules-holdout/https-redirect-03/case.json", "sha256": "4ee850da4107871f0677fdd0c833596c1297b780ac4fcb5e90e5d0cf36577c0f" }, { "path": "bench/coverage/modules-holdout/https-redirect-04/case.json", "sha256": "f820b417b00b0cc6d7ef0a9e3c16cbb3a1b3805880b47137a9bcadc27c3a7398" }, { "path": "bench/coverage/modules-holdout/https-redirect-05/case.json", "sha256": "376bf729ec87d5c1e05fce47be9e49bba9c86886c88211cca8279612b8fa526c" }, { "path": "bench/coverage/modules-holdout/https-redirect-06/case.json", "sha256": "a42c6aa48169d216e6047cb1e0f75d9e0fc9bfd8cac8d7cd3db7af96a3d5a32f" }, { "path": "bench/coverage/modules-holdout/https-redirect-07/case.json", "sha256": "5ffcfd0b19865a393ee606fce89bc6046504803c7e9cd4a1663176006763ba88" }, { "path": "bench/coverage/modules-holdout/https-redirect-08/case.json", "sha256": "a72c8d358e39637a688717e01d6b669bafe85c4056164273bbaf7794c1aaa9e0" }, { "path": "bench/coverage/modules-holdout/insecure-forms-01/case.json", "sha256": "86ae44f43d8959e620aea3a4ddbc9dd548cff0e93ac14509eb29d70ac68e1fbe" }, { "path": "bench/coverage/modules-holdout/insecure-forms-02/case.json", "sha256": "8519f13a815ab759473257b9ef3bfb2c1dd85eeea60c9fcdb2ba63d27be797b3" }, { "path": "bench/coverage/modules-holdout/insecure-forms-03/case.json", "sha256": "521c20f5e633d5a3809441414c1ba9ef1c63498e6db67239732879349a27c4a2" }, { "path": "bench/coverage/modules-holdout/insecure-forms-04/case.json", "sha256": "785c312f0cfb3378fb631df285767a0c03158776c4f84e74835ad6f7e79a6693" }, { "path": "bench/coverage/modules-holdout/insecure-forms-05/case.json", "sha256": "e148054288e7ebf29dd5eba26ef0e460f282852b4f09022505ec449caa656ae0" }, { "path": "bench/coverage/modules-holdout/insecure-forms-06/case.json", "sha256": "c2b6e531cf926a9115985beb75bff2cb07f4a72fccd27e50c5c30b70d7bfe51f" }, { "path": "bench/coverage/modules-holdout/insecure-forms-07/case.json", "sha256": "b15173c6e9556821d8029308f70776ad009a8659e888f41151ca245c6fb71c59" }, { "path": "bench/coverage/modules-holdout/insecure-forms-08/case.json", "sha256": "b8fbdd3d79fc66c819bcdd5c6e06cad67ed80dfab6084bfe4c5dfced518dfdd2" }, { "path": "bench/coverage/modules-holdout/public-env-secrets-01/case.json", "sha256": "14c179299ee836dcbf3726d7010ad8db03f7f257fc22037fd55efd946c6fe719" }, { "path": "bench/coverage/modules-holdout/public-env-secrets-02/case.json", "sha256": "a44e953dd8213bb933c47305a5b665f6954b0f62ff9f4a81f7d6bdfd957f79cc" }, { "path": "bench/coverage/modules-holdout/public-env-secrets-03/case.json", "sha256": "579b53117a5e3099d0ea42c501713df03e50f0467c27bc2eb63f6ce75ef69162" }, { "path": "bench/coverage/modules-holdout/public-env-secrets-04/case.json", "sha256": "7fb756c184388ca7419feff065b864c3baad5c0a538e928873b0771a3f929aed" }, { "path": "bench/coverage/modules-holdout/public-env-secrets-05/case.json", "sha256": "2a72ee3fefee20228558a1330ed1aec7fe7accef1c60b15782ae6aeb29ba619f" }, { "path": "bench/coverage/modules-holdout/public-env-secrets-06/case.json", "sha256": "aebc947b072eb5666c187a5650272485ccb8103489c8b572c98115c56d98122c" }, { "path": "bench/coverage/modules-holdout/public-env-secrets-07/case.json", "sha256": "e8e95ed02fbd41b36e3bb96ef28ad13f06684899d12b4f85eeda10ab0d68f9af" }, { "path": "bench/coverage/modules-holdout/public-env-secrets-08/case.json", "sha256": "767da7501f6bde07b587d22dbe84d129d7740ff516708ad371a8f60c9eb589f3" }, { "path": "bench/coverage/modules-holdout/secrets-in-urls-01/case.json", "sha256": "4cb6d221e6ba7a7186fed590dfbe099f3e31905b61a790af53d9e5878d47fda1" }, { "path": "bench/coverage/modules-holdout/secrets-in-urls-02/case.json", "sha256": "753104ed342bfe1d73988d7ace22397f8dd3057fe5205aafc42e0960e386de51" }, { "path": "bench/coverage/modules-holdout/secrets-in-urls-03/case.json", "sha256": "9e72229b1f651c5da6b9eaee2f6ab5297511b7c7232632e663c08bdb05f285fd" }, { "path": "bench/coverage/modules-holdout/secrets-in-urls-04/case.json", "sha256": "4ddd38680d6d8dbebe28cebfa7d80249e50a1d8b78751bff340ef716edbef3e6" }, { "path": "bench/coverage/modules-holdout/secrets-in-urls-05/case.json", "sha256": "b1ccafea013f483685db0a7a1539d69a6c5cb3f79d4f321ffa08be090204d855" }, { "path": "bench/coverage/modules-holdout/secrets-in-urls-06/case.json", "sha256": "4690ffc2dc3056441c61847c33de62f5cb7856ac75a6ea415e2d950697ae8fa9" }, { "path": "bench/coverage/modules-holdout/secrets-in-urls-07/case.json", "sha256": "4071583b8052f64b46a3b0c853bdd23517458fea575a0d8da352e939a2120475" }, { "path": "bench/coverage/modules-holdout/secrets-in-urls-08/case.json", "sha256": "1bf586a9809b7fec43d224f63a67de00fcabc2dc2ac50e2f755e2b0425b8de27" }, { "path": "docs/audits/2026-09-25-module-benchmarks/coverage-set-5-first.json", "sha256": "c96b80fd6f6ea481bd60e53c40b64a199f1da6f717749987e3d86d8f15b710ba" }, { "path": "docs/audits/2026-09-25-module-benchmarks/coverage-set-5-after-fixes.json", "sha256": "13fc8b6eb77d4db4bb83744cebd3f28fb0019a46702eead4ce321414d6c9dee1" }, { "path": "bench/coverage/set-5/artifacts-01/case.json", "sha256": "16dfd529c51164f6b2e3e35dd801bdb29300c5aed9ddf951cec4ba65fe5db71b" }, { "path": "bench/coverage/set-5/artifacts-02/case.json", "sha256": "a66100b417bdd42e744ee76ce193aa2c2e8150304391a460d6a4fa65dfb79502" }, { "path": "bench/coverage/set-5/artifacts-03/case.json", "sha256": "108eb682acbf6a69e3f53ec2b73e2506d2c28b38c9f410538a49e80184115866" }, { "path": "bench/coverage/set-5/artifacts-04/case.json", "sha256": "6273a9e07cadc4655c57c0e5cda3be1aa94db185a6d1377f5f45255044ada656" }, { "path": "bench/coverage/set-5/artifacts-05/case.json", "sha256": "dd85442479c329ab6b32d95ae17aa1968b85b1a9155b9ed24d895a7962b6fe38" }, { "path": "bench/coverage/set-5/artifacts-06/case.json", "sha256": "bdea477f470f553d3a8f111aef47a821625810e0ce1273f38eff9713cc7aed14" }, { "path": "bench/coverage/set-5/artifacts-07/case.json", "sha256": "a4e5b7416d1aed27f3d634963159f9f2d4f4b492c5e3bab41d9ca4a9f6060873" }, { "path": "bench/coverage/set-5/artifacts-08/case.json", "sha256": "f2aca8da901e6e40a92545445175696ff7a98eb6df4cdb25cae180ec39f74ba0" }, { "path": "bench/coverage/set-5/cookies-01/case.json", "sha256": "e11818f404121253f1ee18f518449aca15598b2114e16f4ca1e2fd671b7e7e8a" }, { "path": "bench/coverage/set-5/cookies-02/case.json", "sha256": "7c37da2d95774bd7bff3dd995b202fc909380057763a9016ecfdc438c5b9fcfe" }, { "path": "bench/coverage/set-5/cookies-03/case.json", "sha256": "af0d263888a5bd67379fc63cc9fb0b4dd97e2a077ae9af5e5bb4924a6900ad11" }, { "path": "bench/coverage/set-5/cookies-04/case.json", "sha256": "58c2b9b37e763f8904ede5e149f266172fc18028caeca89d9b18ffe5b69091a0" }, { "path": "bench/coverage/set-5/cookies-05/case.json", "sha256": "66515caa48b98baaef736041ae140fff45718a8bdd240191afd283d2a50b391b" }, { "path": "bench/coverage/set-5/cookies-06/case.json", "sha256": "c4866d58862c251fd4d0ce992c6a8c84797a2280c389643070e8d25ea5226972" }, { "path": "bench/coverage/set-5/cookies-07/case.json", "sha256": "86766934f4ab693b68c18b5dfd0b8180eaabfdc7ee1b9013780da32e2ab3b14d" }, { "path": "bench/coverage/set-5/cookies-08/case.json", "sha256": "a20f5f848742e2d1865685c20a4ddeab00b472224a7b46df01cde55fa63def83" }, { "path": "bench/coverage/set-5/cors-01/case.json", "sha256": "7534599db99af6d74fe812a1fada4ec39cfab6f11346a993e5a88fb5b6b5424b" }, { "path": "bench/coverage/set-5/cors-02/case.json", "sha256": "7402a5aec9c4af8bf9c6ab9254be8ca4c09daf862cbb9a4071098babe9c8c0a1" }, { "path": "bench/coverage/set-5/cors-03/case.json", "sha256": "4596be01dc86e3453be5cdee4a19c7474779522b9f5f3300c4a6ae22185e879a" }, { "path": "bench/coverage/set-5/cors-04/case.json", "sha256": "bbdfb1a2d12c7355ecedb15a9da4aef9926b8bccb7f9aedc41eb38c9a2c2b412" }, { "path": "bench/coverage/set-5/cors-05/case.json", "sha256": "9256f2ce8f58c29524a8977152f0d57aedb2c2c2b6796c5b5565712c5aa6be2c" }, { "path": "bench/coverage/set-5/cors-06/case.json", "sha256": "dba933abcce61dd9f2e15bd0ed22e4ea14572744e1989dd5fd1f478d8032bee1" }, { "path": "bench/coverage/set-5/cors-07/case.json", "sha256": "770156b8ede7b56a6746733a85e8ad2b0900a22fb7e8ba84e6fea776d5774ca2" }, { "path": "bench/coverage/set-5/cors-08/case.json", "sha256": "0b7a2eed38cfbaa28b9dcd7daa5aa3e11cc01ce93b2f71d7c5c41c5b9f5c41f6" }, { "path": "bench/coverage/set-5/files-01/case.json", "sha256": "4ed9c55343ac011f95a0f932ec2e838d8f78438c56c5ddd0a641f7908d319cf2" }, { "path": "bench/coverage/set-5/files-02/case.json", "sha256": "be21d0564a4747d70ae85008e6326021b9d29b9d7e15f89789f9c69435a2cf62" }, { "path": "bench/coverage/set-5/files-03/case.json", "sha256": "9fa674ae45c6515cbaae38be56052aa393d1d010a7838bdb233eb16dcaa82780" }, { "path": "bench/coverage/set-5/files-04/case.json", "sha256": "64c9b3f2dbe818d3c82055deb11efd5abd0fad92a9b3d9a27352b932d578afce" }, { "path": "bench/coverage/set-5/files-05/case.json", "sha256": "073b8a4f84e95f1094be590ee9263f649f483a848de50e27b580908014b07001" }, { "path": "bench/coverage/set-5/files-06/case.json", "sha256": "466ce8a8ae7278eb1d045a3777c1553e880008b7b4f8c69dad6f003cef2ce2a0" }, { "path": "bench/coverage/set-5/files-07/case.json", "sha256": "62b41c762b14d990c50cd331f1ae71c588b62385a943f6fac57581a4b0dffaa3" }, { "path": "bench/coverage/set-5/files-08/case.json", "sha256": "1010c44fc18d35c9b9d57b14a14ee592e70016df9f163dd8f09d7fb38dc70a1b" }, { "path": "bench/coverage/set-5/headers-01/case.json", "sha256": "e23e9eda9f01b06c4c63372cf7b7e52ac4c65a77ee83ae36f01d1b8f491531bb" }, { "path": "bench/coverage/set-5/headers-02/case.json", "sha256": "1354dfe22a30d25509ecb4f8907cda1be4b4c3a412019d9ff5dab68cd2f791ce" }, { "path": "bench/coverage/set-5/headers-03/case.json", "sha256": "284d9cd7ca8b187bebd6551472c55f1002b55f79b6fd63a8dc7e86dcdabe4d84" }, { "path": "bench/coverage/set-5/headers-04/case.json", "sha256": "626e954424d11857238327d384005a3d85d87916e6fda814db7e57cbb0bbcf56" }, { "path": "bench/coverage/set-5/headers-05/case.json", "sha256": "dab541ecb2a17d5461a2d640b360f01727503cf3973370532723710adcb953c3" }, { "path": "bench/coverage/set-5/headers-06/case.json", "sha256": "a63e3f9a6df48fb5724672361ab1de479e918996bd10608c9f5c91851ef8e672" }, { "path": "bench/coverage/set-5/headers-07/case.json", "sha256": "7fada80f88881f3098c230aea720334f625c12f1d0c5713feb2e2f3fb7961e7e" }, { "path": "bench/coverage/set-5/headers-08/case.json", "sha256": "6d173de15faffae1ee001746627e2c05c9305c0b7d6c306d24ebd11c20c16f5c" }, { "path": "bench/coverage/set-5/keys-01/case.json", "sha256": "e3b902caaa578abf53f2a313476fb6482f88f98edf32523b599da490bd5d48d0" }, { "path": "bench/coverage/set-5/keys-02/case.json", "sha256": "1efbf871f0cf84a3ed1d1500584fc433bad87533039b93974fa6f43e2b9eafdc" }, { "path": "bench/coverage/set-5/keys-03/case.json", "sha256": "cc34492deb60bf65c5d37df459c5cc98aa561f2f007b21c0987fdb6ab66a7b38" }, { "path": "bench/coverage/set-5/keys-04/case.json", "sha256": "aa97ed0ef847d6de3749f22f1832deb8c2d7df4e8bc6ce1bd14b060e93f476a1" }, { "path": "bench/coverage/set-5/keys-05/case.json", "sha256": "112a5deffd98cc49ccf5c4dddc244c274a3f1de7acc9d5648bd8d0377a4cc8ff" }, { "path": "bench/coverage/set-5/keys-06/case.json", "sha256": "d1b5d4ec205558db4e8f5bbbc4809154a650b4c9631405791520810df3ee0f84" }, { "path": "bench/coverage/set-5/keys-07/case.json", "sha256": "c1e69d5451826f2e5048c77f95826bb5fc165144985a6e90aa6e7da904c7896a" }, { "path": "bench/coverage/set-5/keys-08/case.json", "sha256": "35484b980151eef29f8cded81746f777d43ea2f20419cc8f261f35e2c0be2418" }, { "path": "bench/coverage/set-5/mixed-01/case.json", "sha256": "8c7edf8cb99b0683be5089ee2d1c8b5aa40a3234cb058fec251e2a3533f04074" }, { "path": "bench/coverage/set-5/mixed-02/case.json", "sha256": "ef9a17b42f2cc650bc9d0a7496f5290138e4028fe53f31bf21df53e6e119cd03" }, { "path": "bench/coverage/set-5/mixed-03/case.json", "sha256": "6982e9789753161483f8a63bbb0d964c099b4c2464ce75bcf21fb7bd15a40df8" }, { "path": "bench/coverage/set-5/mixed-04/case.json", "sha256": "49942de7c0a908da25575fcbdaa346bd2cc62b45b741183f236e6021ee70c613" }, { "path": "bench/coverage/set-5/mixed-05/case.json", "sha256": "2c3544d1bc0e2d6d062e55938fd1582afa39f5bc2ad605ebe29ceb170d824481" }, { "path": "bench/coverage/set-5/mixed-06/case.json", "sha256": "2b535b7bf7e354c68a8081706ce351fc4c834282aafc732a36e91ab61e1640d3" }, { "path": "bench/coverage/set-5/mixed-07/case.json", "sha256": "a81a9fa3bdfb123a10f12db11c9db7515193b2443fe63a2ebf4600da3656885c" }, { "path": "bench/coverage/set-5/mixed-08/case.json", "sha256": "8910c4f332815f203795ae704a2a78b67d5794f08f7e39fb9f090bc740d529b9" }, { "path": "bench/coverage/set-5/noindex-01/case.json", "sha256": "77ad3c94b81da201226e2a9f698d6db609bce132be76c75d4f78ff0408600b38" }, { "path": "bench/coverage/set-5/noindex-02/case.json", "sha256": "0ef3d6e5d6f8598dfd258df9d4ca2c48672d96fad5520068e53ba07c56a401fb" }, { "path": "bench/coverage/set-5/noindex-03/case.json", "sha256": "3d3c2f9d151e5f455ce5a64f3f1ba416a0e4c94a4e0997b91f2d4e2b00432a83" }, { "path": "bench/coverage/set-5/noindex-04/case.json", "sha256": "7b4658cbde3fe067f9dc5f4288c6ae26743da8896d1c0583cd44dc677759ae6d" }, { "path": "bench/coverage/set-5/noindex-05/case.json", "sha256": "4314148c4b15d25008e44ad7b59e9d420f651b22785c4c57fa2e0ef786567f38" }, { "path": "bench/coverage/set-5/noindex-06/case.json", "sha256": "ce8cbbc79ae198ed1403c3f239a65273f649cc905e05317fa6bf8250892031c5" }, { "path": "bench/coverage/set-5/noindex-07/case.json", "sha256": "8ab3176183e98964a15c9313342ef8801ce79e8d7ab693742f6cf2541243b066" }, { "path": "bench/coverage/set-5/noindex-08/case.json", "sha256": "11ed2bbcf054b242a30e4f027bffc32aefaa8deb95917415b55893dd7cc19f58" }, { "path": "bench/coverage/set-5/reach-01/case.json", "sha256": "695498879a42ab1439645976d03fa4f651f9a269852af93b56a6b01e97beb4f1" }, { "path": "bench/coverage/set-5/reach-02/case.json", "sha256": "0c29a1cd1afc9651ced6c08613e453273ede47850da87ab45808cc4299e02a7e" }, { "path": "bench/coverage/set-5/reach-03/case.json", "sha256": "d7b50fb5c5b092375c314d7016f248d5738f64635efd88676f2515e3d64829aa" }, { "path": "bench/coverage/set-5/reach-04/case.json", "sha256": "05353a33358904bbccc5e95ca733cc331081cf78bda5f3f52bbaa72c2a1e539d" }, { "path": "bench/coverage/set-5/reach-05/case.json", "sha256": "4addf894f95a94853eae912ca574bc7a8f29360be71ef532493c54e539bcb500" }, { "path": "bench/coverage/set-5/reach-06/case.json", "sha256": "912b97f220debbd1e9138ef0bd107bc38fe5f11ac60fc03a75d4246a68da5229" }, { "path": "bench/coverage/set-5/reach-07/case.json", "sha256": "a11a1a0db554e8194011b791bbe49abbd1abd5891708740de30228647541c909" }, { "path": "bench/coverage/set-5/reach-08/case.json", "sha256": "c13e654a87a31ced81eb1c00566d51847fa493bea8707740cb73e4413bf970c7" }, { "path": "bench/coverage/set-5/rls-01/case.json", "sha256": "fadcd440991b08dc6eb446dffc3781dc2815b9ce8b9139ba5ae75ec5b79d643b" }, { "path": "bench/coverage/set-5/rls-02/case.json", "sha256": "6a8996f17c5c0195fcaf9c225d4429579abeb7dee0d644d28ff4d1dffb557ace" }, { "path": "bench/coverage/set-5/rls-03/case.json", "sha256": "c17bc8fd1d4daf1838629abf68781e87bf88f8a629c3af88dae5cafd8fb96936" }, { "path": "bench/coverage/set-5/rls-04/case.json", "sha256": "945728ed5d42ff5f6b641fe786566c9cfe60de89f424939e9851a7a7c4e24f89" }, { "path": "bench/coverage/set-5/rls-05/case.json", "sha256": "6ea170cba6417ac515dd66c0b63d7ba1dc63e70a9d52a6e3b6c4b459fb62af2b" }, { "path": "bench/coverage/set-5/rls-06/case.json", "sha256": "e00d1631187d94655923840ee819796529ccbfc67291ea49554624972df59816" }, { "path": "bench/coverage/set-5/rls-07/case.json", "sha256": "c20a2a1ad48d03e702f0768460516d472c4e4f6d5381e9a2e82611781ff64581" }, { "path": "bench/coverage/set-5/rls-08/case.json", "sha256": "e801875d399dd954a9f9e0217d730131624c7c3f31fce52057fffd4a04c9d9cd" }, { "path": "bench/coverage/set-5/tls-01/case.json", "sha256": "c37f372ff694f7db89d7bc330c05317fe9a6036f2ab47c363b2a4eed509a3c2d" }, { "path": "bench/coverage/set-5/tls-02/case.json", "sha256": "f7abb7b6e836768f714223fd28863d3bc9f67ace65f643569a54d664c9f9f88a" }, { "path": "bench/coverage/set-5/tls-03/case.json", "sha256": "841f1f596edef23816f33d8bbeb7459962af1d701800cbcc71e4ae8505836cd5" }, { "path": "bench/coverage/set-5/tls-04/case.json", "sha256": "11d7bc2aedf008ff0ef0194a108a51df871e822a7b8e31c0367180102ae0ce7a" }, { "path": "bench/coverage/set-5/tls-05/case.json", "sha256": "91de1bd5da9bb46d0d866df00f18298af914f926a5e766f29b4e3e55b11d9795" }, { "path": "bench/coverage/set-5/tls-06/case.json", "sha256": "8797874413ae7a3dd0c152d0a5cdc5523ffb2d36aeafef92828d270c75ece7c5" }, { "path": "bench/coverage/set-5/tls-07/case.json", "sha256": "80c5c3c3155fe631587e2ecc9535581ed5a2c538d0a8ccbb010ef3e162e991f1" }, { "path": "bench/coverage/set-5/tls-08/case.json", "sha256": "832018dd51e0af960b4c7d8727459e40b1c6cb2ef0cd3ecd106440214911cef9" }, { "path": "docs/audits/2026-09-25-module-benchmarks/coverage-modules-final-first.json", "sha256": "ab3a01e6211bf546a475cc9caacf3957dbe7b7c670d5c33359617e7c813f5b29" }, { "path": "docs/audits/2026-09-25-module-benchmarks/coverage-modules-final-after-fixes.json", "sha256": "376a59192ed4ff7d50b348c56271e08eb8031d6630cf0fbda3f828e37f783e1c" }, { "path": "bench/coverage/modules-final/cacheleak-01/case.json", "sha256": "1cd33d329f957a8fd6a6abc821a144f360ba2e2b537c5f2ce3db5d3fb7026296" }, { "path": "bench/coverage/modules-final/cacheleak-02/case.json", "sha256": "e8faee02df0601a5ebdf48059200398b149232be697809571e20c47ea6b263e0" }, { "path": "bench/coverage/modules-final/cacheleak-03/case.json", "sha256": "bd56e92dbaa1dbb795d221a2e27ed5cb09b1e837837a179c6ee95a0eefd854ca" }, { "path": "bench/coverage/modules-final/cacheleak-04/case.json", "sha256": "69e00b045f73286cd0d19f35dc0ef0a02c79b9dfa3dba3b161d3074d53d62156" }, { "path": "bench/coverage/modules-final/cacheleak-05/case.json", "sha256": "41e3d060799fef05db933551d76bdb5060a1b3c3128bbba7f884bd72a30e1868" }, { "path": "bench/coverage/modules-final/cacheleak-06/case.json", "sha256": "a93fe45872e5c94bda5afca0d96b6cba4844a6e521f27aeef0d4585d67d24efb" }, { "path": "bench/coverage/modules-final/cacheleak-07/case.json", "sha256": "b899e30e70869c1b86d666a9dd4b91366f827c8a3311f7065663b7dbf645f3b8" }, { "path": "bench/coverage/modules-final/cacheleak-08/case.json", "sha256": "02ead234216c44e09094452799e480b9ae9c137837d73f7b91df57bbfb813503" }, { "path": "bench/coverage/modules-final/ciinjection-01/case.json", "sha256": "385e87d0592269deecc47f78ecc41ad61889068f07c5510c700d7fc3a9025be7" }, { "path": "bench/coverage/modules-final/ciinjection-02/case.json", "sha256": "ce0eb63a96fe00612bcb9ac06ecc4c854322418acf36f653039f2c37c3ba22ed" }, { "path": "bench/coverage/modules-final/ciinjection-03/case.json", "sha256": "7e2744d4e4a2c60ef6d240cd601c309d21044827d60557fb3792f24caddde1cc" }, { "path": "bench/coverage/modules-final/ciinjection-04/case.json", "sha256": "0d36a496f932b12bb55c8b30c2d8417ba6bf61ceaec6fd494c2b1cc9e6993db7" }, { "path": "bench/coverage/modules-final/ciinjection-05/case.json", "sha256": "d1702e2ef4656dc78aa50468ce0aca5bb7be8610e224b37ebf566cd8e02d0b68" }, { "path": "bench/coverage/modules-final/ciinjection-06/case.json", "sha256": "ca6c88aed4b3dbb209ffe9629d485ebf0cd775ebc2404f741111627e3355291a" }, { "path": "bench/coverage/modules-final/ciinjection-07/case.json", "sha256": "9b331db81dd68a00eb58e621446fc5409de205a34fbb8e970e1f5a0b8c8cbc55" }, { "path": "bench/coverage/modules-final/ciinjection-08/case.json", "sha256": "c0f52c8d2d8922d797f5e1d6f14a03f239f2ad126c3ee48880a7258b6f9896a0" }, { "path": "bench/coverage/modules-final/csp-01/case.json", "sha256": "b4648a7616c37a33f990b70e36134cc61b9e46f5f6d4168820a7a0d1a4eeb4b3" }, { "path": "bench/coverage/modules-final/csp-02/case.json", "sha256": "b0a989f038805a941037ae093f5a483084e3a855ef002f1c2fbc802bc10bbaea" }, { "path": "bench/coverage/modules-final/csp-03/case.json", "sha256": "82fc35466689bab97d708c06872b4f3ecb196d19dc601f9e594093cdcefd3d45" }, { "path": "bench/coverage/modules-final/csp-04/case.json", "sha256": "0691f0ea5369e8a97cf39cd252bc33601f0dd47e9750dd3d88b7536697437d92" }, { "path": "bench/coverage/modules-final/csp-05/case.json", "sha256": "e09bd844cf541cb192e8c6819b22a943866c2da6707836e0851b0c9d4c0cd16f" }, { "path": "bench/coverage/modules-final/csp-06/case.json", "sha256": "f6b984a30a1afc27091cd290cb544c9fec1918c5b4f0072289da1e5a7fa19e0f" }, { "path": "bench/coverage/modules-final/csp-07/case.json", "sha256": "b6abbb5bc92dda8d9bca2c99259c8dc3bfe30c48e2b06965666e2618f1869abb" }, { "path": "bench/coverage/modules-final/csp-08/case.json", "sha256": "555bd8f140ff8f952eede551bdd84c922470bfbaa1e8a89a21cf5fa8776fe88a" }, { "path": "bench/coverage/modules-final/devserver-01/case.json", "sha256": "9f76eb5eae9933a05e0236803985841e465499e2723bf31a504a04e5440b5f89" }, { "path": "bench/coverage/modules-final/devserver-02/case.json", "sha256": "86f32d3ae17ba6f13db6ce36d98c849384b7369354ad47a59c8c1cc95c838cdc" }, { "path": "bench/coverage/modules-final/devserver-03/case.json", "sha256": "5e1cd6c203fee8f0d5b78abb6e7da575d69ccdf7a81138d81056abaa384deeae" }, { "path": "bench/coverage/modules-final/devserver-04/case.json", "sha256": "9d550e58677b4cc4e930f46bdf5382389715d7d7751d21d4cabc328ea5e47aea" }, { "path": "bench/coverage/modules-final/devserver-05/case.json", "sha256": "76bc86f9926f31f347df6115f7e45da6c6d7d81cab1bb42b1c176e0b6b70c36a" }, { "path": "bench/coverage/modules-final/devserver-06/case.json", "sha256": "26ccc4dd4eff3d6368223c182ae6d14cf66ec38433af17986043f43d44907001" }, { "path": "bench/coverage/modules-final/devserver-07/case.json", "sha256": "7f20c156361a025230eb09fb00c810c4416698a353bf33ec45c284c13f1a4975" }, { "path": "bench/coverage/modules-final/devserver-08/case.json", "sha256": "c7171398ec2fc4518d7debb4db6957c340f439a6062d4f57ca46453b5b4bc594" }, { "path": "bench/coverage/modules-final/firebasedb-01/case.json", "sha256": "10f8f16443f2363cfc5fb2e6bb87c426ecb74363e748446310282ca98a10021e" }, { "path": "bench/coverage/modules-final/firebasedb-02/case.json", "sha256": "d5f3c3e6c36706516b140c5c9f65a365c8fed0a420ae9cc19689b7f326c25b3e" }, { "path": "bench/coverage/modules-final/firebasedb-03/case.json", "sha256": "e3aebe75a9f33243a820ebbcc24e0506a04fbe401b7ad5106380b7b2032e7d6e" }, { "path": "bench/coverage/modules-final/firebasedb-04/case.json", "sha256": "278b3bbf7051e48d5973ab2281ae94c476445179e83711cd55a971953215b9fe" }, { "path": "bench/coverage/modules-final/firebasedb-05/case.json", "sha256": "d0c67d25d0393971c3a703bb972853c9a106896dc11488a0b1e0fae6ab7a5d33" }, { "path": "bench/coverage/modules-final/firebasedb-06/case.json", "sha256": "a64c9adf11b1a9e4a4076743b70dec15726b5141d9f04dac283436cd901af2b8" }, { "path": "bench/coverage/modules-final/firebasedb-07/case.json", "sha256": "edbc71740d9098929289ffa620afb6c3a76dee3ed8d3389a02504b7a229a1e74" }, { "path": "bench/coverage/modules-final/firebasedb-08/case.json", "sha256": "980d84cb650c1cd1ca2e6bcaef0fbfb5e4002b81c93bdbe943adb60561a76614" }, { "path": "bench/coverage/modules-final/firebaserules-01/case.json", "sha256": "0e98fd879920e65b911ee06bf06f5ef608c10a1f85a7f8119a4a53c4cd732ac6" }, { "path": "bench/coverage/modules-final/firebaserules-02/case.json", "sha256": "8b56f6dcdd5522a53cd7ce0874149ccd39384a951fb7d1b13f308ff7bcc5607c" }, { "path": "bench/coverage/modules-final/firebaserules-03/case.json", "sha256": "fc5377e61f6e91b2c860eb856b61684228e1c56a909309e33ac6dcc49d863ffd" }, { "path": "bench/coverage/modules-final/firebaserules-04/case.json", "sha256": "e99b99d0e4c849620a52abd57b35bcc605fc00950256a1aa1090769dab33ea96" }, { "path": "bench/coverage/modules-final/firebaserules-05/case.json", "sha256": "bb2d06fd9a079cde302143bf18bd3e0933856a39ac31292b4422ba352f8c8453" }, { "path": "bench/coverage/modules-final/firebaserules-06/case.json", "sha256": "cb34b15c2205b237e61c9483f2660aa288e2a59118e587f6e9a2e4bc329d5f7e" }, { "path": "bench/coverage/modules-final/firebaserules-07/case.json", "sha256": "7fcd9d90f0cd1461f1cb464409698be484992ef6c7ec637bca4306b2cc712b36" }, { "path": "bench/coverage/modules-final/firebaserules-08/case.json", "sha256": "554fcf27adb3fa52147511f09da839d7460b985f486bddcbef194fde230cf5ed" }, { "path": "bench/coverage/modules-final/forms-01/case.json", "sha256": "f5fa403e70630fccd112ef2ee3f2b861113ff950e8dad7899369277d4876eae4" }, { "path": "bench/coverage/modules-final/forms-02/case.json", "sha256": "b2bfec111ea4aa627d8b19398deaf56a057d2f6458b59ae7226d1e701e5e8600" }, { "path": "bench/coverage/modules-final/forms-03/case.json", "sha256": "a8f58d948bbfda7aa42fc9abd2a2a0548c71f7cf4ab23d332647dc6a9fb04aa3" }, { "path": "bench/coverage/modules-final/forms-04/case.json", "sha256": "3e406f3f2fc2642e3c872c49f1b3ccd5d977295b36986f436a7ef61374a26461" }, { "path": "bench/coverage/modules-final/forms-05/case.json", "sha256": "884a7e4af56e4e80d231298eaceded8d64bbd9f8afeb5b23a38ca86999b0fc70" }, { "path": "bench/coverage/modules-final/forms-06/case.json", "sha256": "981595291f7d088658b8fd7b96eec92c21613eb900066c4d1f1849ea9e33922f" }, { "path": "bench/coverage/modules-final/forms-07/case.json", "sha256": "58b07a57d336a5a3ab16d31d78d26b1c42f2e22ae85ee931245a7d90587d7a6f" }, { "path": "bench/coverage/modules-final/forms-08/case.json", "sha256": "13ec8084c66e700304383768469daf040a0b7182df02dc5597def212c744a11c" }, { "path": "bench/coverage/modules-final/graphql-01/case.json", "sha256": "41cafb2a04fff7b45e4bc5e0ef733360cb0e7ecd7b5fe17e7a75047e6e8bc891" }, { "path": "bench/coverage/modules-final/graphql-02/case.json", "sha256": "e8efbade263a03603f4b2d516b421113d078bda89c4233235aa67d3a13bdf98a" }, { "path": "bench/coverage/modules-final/graphql-03/case.json", "sha256": "d9d2542d89cf63e51faa146c17d9e90414749d52c54c048d70634fdaa3e49e78" }, { "path": "bench/coverage/modules-final/graphql-04/case.json", "sha256": "bbafa86905de980e0dbc893c753d624cdd53e40c9b8405ae78cd0f5275ecacd3" }, { "path": "bench/coverage/modules-final/graphql-05/case.json", "sha256": "66ce1c7d7227f57ffb949d4c7221110a050df810a03de5af5ddb5e43f3f3c2a8" }, { "path": "bench/coverage/modules-final/graphql-06/case.json", "sha256": "6fdb93edf7212c5b7ed4ed735719d9e06c713684f35a9ba3bbbb358227d5303f" }, { "path": "bench/coverage/modules-final/graphql-07/case.json", "sha256": "5a19d07c0db9eab38a641ada15b36a5dad94d1346364fd5d045cad42ecfda76c" }, { "path": "bench/coverage/modules-final/graphql-08/case.json", "sha256": "33c30c5527159a8a856889944ce6dfbe732015a0656f3051a4c8880f37cae6e7" }, { "path": "bench/coverage/modules-final/httpsredirect-01/case.json", "sha256": "97f87140e974767b5beb33708b0f0a11ad152eaca703f04c1204b32234fa4c80" }, { "path": "bench/coverage/modules-final/httpsredirect-02/case.json", "sha256": "877fad077d34ef14b88303bfe0f30bf3a41061193526e7b25d59ee934c119fb8" }, { "path": "bench/coverage/modules-final/httpsredirect-03/case.json", "sha256": "f05772404735c15bfc4746064c8b39fe2a65fef263eae1732ba839e83046a430" }, { "path": "bench/coverage/modules-final/httpsredirect-04/case.json", "sha256": "45d2fb4e21bdee13e780c60d3ff38bc03f1a6cc848bd49622ade1cc4ad760370" }, { "path": "bench/coverage/modules-final/httpsredirect-05/case.json", "sha256": "bff30c91324ecff80484e37bf304af289c9362a1871becff7ceecdcbab09cdcd" }, { "path": "bench/coverage/modules-final/httpsredirect-06/case.json", "sha256": "3e2d9bc5075879e095302d51443ee5266162ade8a76d914f20176e0e136011e8" }, { "path": "bench/coverage/modules-final/httpsredirect-07/case.json", "sha256": "663484c43d598bb3a7b3612b461e1802cf6c4512a30ff398271d063a98dee29a" }, { "path": "bench/coverage/modules-final/httpsredirect-08/case.json", "sha256": "2b4277d81e6c7267ae9994b6af1a7f8a7ddbe8b1bc5bf707f64862374bcb3118" }, { "path": "bench/coverage/modules-final/publicenv-01/case.json", "sha256": "f619b93949ee9531f1e4be9da3aee89327e78e69e68253bdcc48cf82132351b2" }, { "path": "bench/coverage/modules-final/publicenv-02/case.json", "sha256": "14ca1b7cbf19eebd486695cdd27ca04ed5ebe3d68e815971ef823b66fc6a644a" }, { "path": "bench/coverage/modules-final/publicenv-03/case.json", "sha256": "a24186afdc3e5acefb991ca2807ce614c76e4dcde41e635b90fa3a5ef04715bf" }, { "path": "bench/coverage/modules-final/publicenv-04/case.json", "sha256": "0cc0eb477d2361fee93a9af926f7ed27b700b82f0210093fb12f3d0c0deb98c4" }, { "path": "bench/coverage/modules-final/publicenv-05/case.json", "sha256": "a651a04a2d1665d989759d74341d1d88d63ad3637078bf35b46f03d9dbf5ae9f" }, { "path": "bench/coverage/modules-final/publicenv-06/case.json", "sha256": "1971092ee65a4cf766f000ce578494204c7e641cc110ad1736cb0e62db9d7b7b" }, { "path": "bench/coverage/modules-final/publicenv-07/case.json", "sha256": "01951ce5e83dd1077fa035c83d3f793ace70ff05eb867bbc8fd7ed975bd98c64" }, { "path": "bench/coverage/modules-final/publicenv-08/case.json", "sha256": "9a97662180a0bef64c0931b177e91683b02ddafbdcd974fd80bbee20e2adb5e2" }, { "path": "bench/coverage/modules-final/scripthosts-01/case.json", "sha256": "8b7ece74c25203b8a872c0759ad71095c9e8a086a68ff5bf4d2075c178b1757b" }, { "path": "bench/coverage/modules-final/scripthosts-02/case.json", "sha256": "bec3af7b80e593c80c3a2d1e2e2ca87fe43b0d586e25e9234786c5145660f1e6" }, { "path": "bench/coverage/modules-final/scripthosts-03/case.json", "sha256": "ab33fb2a04dad0ddc856d63c5c04715c47754249a57ba608a7224f1339e70db1" }, { "path": "bench/coverage/modules-final/scripthosts-04/case.json", "sha256": "a37694bc414d26f2fd80e780f6a000e31461d3c06989cdebdfa4430fca262b3b" }, { "path": "bench/coverage/modules-final/scripthosts-05/case.json", "sha256": "3ca341324755b1cc4ca459171cddc7a3cb7f8fa215e06fafa0f2ab301713c81f" }, { "path": "bench/coverage/modules-final/scripthosts-06/case.json", "sha256": "f797a90fa60b8dc73da7815ee05668c062e556b0f113bf107cdcf3c0ab8c5655" }, { "path": "bench/coverage/modules-final/scripthosts-07/case.json", "sha256": "24724f4202b51ac2182632cd2e6b2043a033a13b4a8cac5c3db507f11d82f8c2" }, { "path": "bench/coverage/modules-final/scripthosts-08/case.json", "sha256": "1c7e936b501fe323e355ec29a09312ee09d34b862e7e002b90347fe86f4711e6" }, { "path": "bench/coverage/modules-final/urlkeys-01/case.json", "sha256": "79fb5810d8e226beb187da6b5e9dac611764a31bb7a63e75aeaffbe6c0fa708f" }, { "path": "bench/coverage/modules-final/urlkeys-02/case.json", "sha256": "9cce147cd39aef26d57636ca91a66afa8b964d42d5bf839d7a3fe69c925efe46" }, { "path": "bench/coverage/modules-final/urlkeys-03/case.json", "sha256": "6a3c99385e02ceaa1fc9996d2be5890b0063f85fc461d5317191f34863bcd845" }, { "path": "bench/coverage/modules-final/urlkeys-04/case.json", "sha256": "26264282cb900860b2f3a88e53d132e242fe7ce82c3b8a8e4d81e451490d474b" }, { "path": "bench/coverage/modules-final/urlkeys-05/case.json", "sha256": "53baa00bdbec93530b041d3324dc63566549f04b7694b599e4b79fa180fe0bbe" }, { "path": "bench/coverage/modules-final/urlkeys-06/case.json", "sha256": "8a1b577d7af35f54c9a0d0655c16170fcbfbe25db973491d88bef0d995c4c3f2" }, { "path": "bench/coverage/modules-final/urlkeys-07/case.json", "sha256": "df54e4854cc67b02cbbc7146c3fd17198e2d2d4d0b751f99c3dcd390502ff27a" }, { "path": "bench/coverage/modules-final/urlkeys-08/case.json", "sha256": "7f5a7b172fe9c3eb6b83ef6f51f94b79aca2aa0f8223c07aede0d66c8519c884" }, { "path": "docs/audits/2026-09-26-detection-round-2/coverage-round2-blind-first.json", "sha256": "32af479ce4cc80e94ab70a84a989a2c57395507e4e92346777bdcf709e14f547" }, { "path": "docs/audits/2026-09-26-detection-round-2/coverage-round2-blind-second.json", "sha256": "5ef52833df342a65c0512af51c98f44d7c882c97af95e2ba47dd1d7f96b4c578" }, { "path": "bench/coverage/round2-blind/action-origins-01/case.json", "sha256": "e434987a8f6670216390c7fa30ec2b89bba7b183d424579826a26df83d0726e1" }, { "path": "bench/coverage/round2-blind/action-origins-02/case.json", "sha256": "fc9e5b7b36ff56e4b60e28736c4fb4c59f78850cd9096b91a82bef68d2abaaa0" }, { "path": "bench/coverage/round2-blind/action-origins-03/case.json", "sha256": "ac4801446ef264ebeb4c250d1c6cc87eeb77311ae0733988bde6c711db0fed42" }, { "path": "bench/coverage/round2-blind/action-origins-04/case.json", "sha256": "715a1b334ecbab3a15a53b202ace1ec9fe503d57164f288913a3206aac21d3b0" }, { "path": "bench/coverage/round2-blind/action-origins-05/case.json", "sha256": "a2cae5576038a96f3c3d4cfe2e7d0a6fd0fb0dc161e8d507626c7496b6787ee2" }, { "path": "bench/coverage/round2-blind/action-origins-06/case.json", "sha256": "028a929b1549e850efc968582e1956c985d49b90626b94320b795d51fdbcbd6e" }, { "path": "bench/coverage/round2-blind/action-origins-07/case.json", "sha256": "44dae31bd52e2e2dee69d159d6a3fc570424609b44552c321848032d2cc3d741" }, { "path": "bench/coverage/round2-blind/action-origins-08/case.json", "sha256": "38d38728598cfb18b257fcc4b6adf922f2b8b8470ae2151c4065837b33da0be4" }, { "path": "bench/coverage/round2-blind/admin-tools-01/case.json", "sha256": "4f9281a2c4ae151353baed2e3d0e51809c0b3c3885c833d824f64012c1fc6378" }, { "path": "bench/coverage/round2-blind/admin-tools-02/case.json", "sha256": "bf392cf793c5f4b708a19a749c9f9323328fce0fb1937d3af3e475b4512523d1" }, { "path": "bench/coverage/round2-blind/admin-tools-03/case.json", "sha256": "0bb53bc7e9176c1873239294e5d3b78eeae9f60a4a14a1cc6929dc5488ef2423" }, { "path": "bench/coverage/round2-blind/admin-tools-04/case.json", "sha256": "9f5f373402b46909f065028d6b8cc0c5deb79ba88687e1dce34a82c3bcb95085" }, { "path": "bench/coverage/round2-blind/admin-tools-05/case.json", "sha256": "c27b2212f816b30b53ad8547c59767fa095b3d3f6b2458a49a7890e6bbef5e56" }, { "path": "bench/coverage/round2-blind/admin-tools-06/case.json", "sha256": "585e4266fd02ae59f70268835d044c46d35436728f1dfe40f82ad984140e26b0" }, { "path": "bench/coverage/round2-blind/admin-tools-07/case.json", "sha256": "4940ea32e00ea082de9ea4508e18a8c701b85c8d7500ec6bede00ebd3508f223" }, { "path": "bench/coverage/round2-blind/admin-tools-08/case.json", "sha256": "aee3e047d0c6c2b7e9cad27d48724589866929f78bf2805e978c6a6663edaec3" }, { "path": "bench/coverage/round2-blind/anon-uploads-01/case.json", "sha256": "06c1b2635f08b919b790fcd67dd12c26b4d90fa4d1e8aaf2ab9ad61776947453" }, { "path": "bench/coverage/round2-blind/anon-uploads-02/case.json", "sha256": "754cff95ae2cad6c738ffb31d69e7be5717bb3bc9c70d20a105edac91e56c3b1" }, { "path": "bench/coverage/round2-blind/anon-uploads-03/case.json", "sha256": "26f859e56e82809c86ad5ae895501324f4cbffcc08aa92067f82a0123a3a90b8" }, { "path": "bench/coverage/round2-blind/anon-uploads-04/case.json", "sha256": "7884f47111b08a03f0448d5e03c66f01c670f477beb08fa3d9df2934b96f18e0" }, { "path": "bench/coverage/round2-blind/anon-uploads-05/case.json", "sha256": "18e395c193fdcfa0aca9acfac596db3adf228d536de800da62e624a09d0050ed" }, { "path": "bench/coverage/round2-blind/anon-uploads-06/case.json", "sha256": "43b2709059b47266c384f9e35b761ee232af0a71f97d5381dd28435c4c36d1ef" }, { "path": "bench/coverage/round2-blind/anon-uploads-07/case.json", "sha256": "19418e3b3444466fad5f44d58e578a4f36953f29f6088fb8edce6fdfa0e1936a" }, { "path": "bench/coverage/round2-blind/anon-uploads-08/case.json", "sha256": "7c74b6cf7f59bc29c14630b022bf48052cbb079749ea130cdb84b3aa2d4e0b0a" }, { "path": "bench/coverage/round2-blind/auth-users-exposed-01/case.json", "sha256": "46fc512009aed679f4c66a2f1ece77e63513dde29d0f48df689bf8ffd217f56b" }, { "path": "bench/coverage/round2-blind/auth-users-exposed-02/case.json", "sha256": "a6f3b5d744ef2ca2f83b6a167fb5275340ad9b9c72089da87a7a7ec127db387d" }, { "path": "bench/coverage/round2-blind/auth-users-exposed-03/case.json", "sha256": "cd5ba4f04f46bf30ea2a955020922fd18f4691f841c7dac3a799802d9c06fb31" }, { "path": "bench/coverage/round2-blind/auth-users-exposed-04/case.json", "sha256": "903cd28286f24773436d3ff8d33171498fbcd15cfd619872d428dc2084445801" }, { "path": "bench/coverage/round2-blind/auth-users-exposed-05/case.json", "sha256": "993c673cb474c6858390b7e65451fbe1217947c5df39f00441895aafe8946d37" }, { "path": "bench/coverage/round2-blind/auth-users-exposed-06/case.json", "sha256": "362b74e0b6b5e3744ab7a7648c57e9bf85b31a01941ff1f8579ca7a0723bbcaf" }, { "path": "bench/coverage/round2-blind/auth-users-exposed-07/case.json", "sha256": "b1e47cd2e38261f51a419b15bcb1c4f6ce5fd5cb8a3b71be095f9621715a748b" }, { "path": "bench/coverage/round2-blind/auth-users-exposed-08/case.json", "sha256": "821b833907abb17d54cbab555bf77007d73b5f3e2916ca4a1f821f3fa0cbab18" }, { "path": "bench/coverage/round2-blind/compromised-actions-01/case.json", "sha256": "5f45ea4f1ba541a5932a14aa94233c00e47f373dab4bbc166944d91978e59ec1" }, { "path": "bench/coverage/round2-blind/compromised-actions-02/case.json", "sha256": "bfd8c99b42a4a7cbf88cc6b93127337163347d0c2a03695a93f2ed123ce17c9b" }, { "path": "bench/coverage/round2-blind/compromised-actions-03/case.json", "sha256": "0105006be6de3619b0c2ae96e25bfebc3f761f8d3eff8a626377095b4a076659" }, { "path": "bench/coverage/round2-blind/compromised-actions-04/case.json", "sha256": "3bb6ca5ecfffa5ae4ce09cb044167fc6378d06154acc6c936a601a497779afa0" }, { "path": "bench/coverage/round2-blind/compromised-actions-05/case.json", "sha256": "838346b1f9e3d896b9f1cc22fa38298f411ad6d001e6d70098a38880feb275eb" }, { "path": "bench/coverage/round2-blind/compromised-actions-06/case.json", "sha256": "370cf56538c4a8b693745289d2af3889dfa3290dbf1a22e9b9cd82e0bf3a4958" }, { "path": "bench/coverage/round2-blind/compromised-actions-07/case.json", "sha256": "321df41b102eeafb0e369a4bfcd1680ac6af062fe0a09a5414534aa2cd845f0b" }, { "path": "bench/coverage/round2-blind/compromised-actions-08/case.json", "sha256": "f661b5c179e6129296b85db33a7a41fdae7b2c6c372c2d005b1738a551cc68f7" }, { "path": "bench/coverage/round2-blind/credential-files-01/case.json", "sha256": "84ff710233cab9c0018874e2e96c9c451bca7f4166640f231436eecb514de9d0" }, { "path": "bench/coverage/round2-blind/credential-files-02/case.json", "sha256": "26cc2d93e6850ce6a07ee68f9884725d4aaed9b8810f6c16bc718d71182e3284" }, { "path": "bench/coverage/round2-blind/credential-files-03/case.json", "sha256": "bea2bdf4f2eb10b0da99d5dd7271b9d6c3238f756353fc82caf34d645d750914" }, { "path": "bench/coverage/round2-blind/credential-files-04/case.json", "sha256": "aa479645a386e30ab3b070d05356aec5c4f9cc5c8f8203cec0752e35edb85111" }, { "path": "bench/coverage/round2-blind/credential-files-05/case.json", "sha256": "6ef71983fda79d3a5cd9261df4321db253080834590c67ad7da16be6efeb802c" }, { "path": "bench/coverage/round2-blind/credential-files-06/case.json", "sha256": "6ede961af4871dc7f1540d0d023f9b73895f773d2ea4cc6e513948b347d2e87c" }, { "path": "bench/coverage/round2-blind/credential-files-07/case.json", "sha256": "a1ffae65cf823a666f1f4ed4e7d5ef191dbdbc936b2a4c156c4a81aab13fe5c9" }, { "path": "bench/coverage/round2-blind/credential-files-08/case.json", "sha256": "3a9c7918e32118011a4738fae352704de6a8cc17afc905edae1c13c03c52adef" }, { "path": "bench/coverage/round2-blind/definer-views-01/case.json", "sha256": "dfbb3b06378371a39b58cc1f9222d051a732f855dae4d135cb03733e9655b95a" }, { "path": "bench/coverage/round2-blind/definer-views-02/case.json", "sha256": "d677dfe5dcc46ec90710586423c6d6847cae03532c38ea0425f6d7675dd093dd" }, { "path": "bench/coverage/round2-blind/definer-views-03/case.json", "sha256": "ce49f3a79724280e8ab0fd49cf535c9e7b4a28d7b50f46c704bb0de3e0e98edf" }, { "path": "bench/coverage/round2-blind/definer-views-04/case.json", "sha256": "f46bf70c6b2eb30db0619b2593497b04e53be1cf2d705bd733ad2a9bb5ccac8f" }, { "path": "bench/coverage/round2-blind/definer-views-05/case.json", "sha256": "fce51963d8c848af766a00c11216f880fd1fca665f7c7963c31a670ae4e4bb36" }, { "path": "bench/coverage/round2-blind/definer-views-06/case.json", "sha256": "51ea16b97a563f0d2030dd2a068777c9971eb70022371b1b77b66767995fe3da" }, { "path": "bench/coverage/round2-blind/definer-views-07/case.json", "sha256": "9047d1e4b8a785aae4a78f4976247481ddd80e9b201fd3b54f241e4e984460ca" }, { "path": "bench/coverage/round2-blind/definer-views-08/case.json", "sha256": "25fb71b3033d67970be3331e9c2b4b1e47fa8cbcc7be549f5b7d38269c095400" }, { "path": "bench/coverage/round2-blind/env-bundle-01/case.json", "sha256": "673e596699174c9886b6f9f745596342af242ab2f47f713bbbd32fa8661ac5db" }, { "path": "bench/coverage/round2-blind/env-bundle-02/case.json", "sha256": "eff6084bc0aca02f3b73bc0b35d1271749a8e07d87ed83e5a28aceaba6792fa0" }, { "path": "bench/coverage/round2-blind/env-bundle-03/case.json", "sha256": "fcbf944fad00ce7865cecd326afc3ee6dd32fe4a0933e76bd0b4d14d1f6b35e7" }, { "path": "bench/coverage/round2-blind/env-bundle-04/case.json", "sha256": "f6e86a33fa837b22833867edfd9f6c450c53cd215bde27c9b68e4835a517f9cb" }, { "path": "bench/coverage/round2-blind/env-bundle-05/case.json", "sha256": "7f3326d2cafbe9fd0ac210f4fcdc2777359ceeea5ea6f33da3fa7fd6af34c854" }, { "path": "bench/coverage/round2-blind/env-bundle-06/case.json", "sha256": "19e8ed7d55730d7dc03bc557122b258c11125cb8353cd9ee038b2c4699d9825f" }, { "path": "bench/coverage/round2-blind/env-bundle-07/case.json", "sha256": "2c2d6a7820662a36533788aaed1dd878282b1caefa442dcafc71e0a1b5b59d4a" }, { "path": "bench/coverage/round2-blind/env-bundle-08/case.json", "sha256": "553ee8dab47fc4b352401ce39a0eae02f4d7617dee832f4f9ac76ef2d48dec02" }, { "path": "bench/coverage/round2-blind/exposed-functions-01/case.json", "sha256": "c933f80f51b0e83e3c963cb4603d3c85eb8cfca2249f6dc11af93a72b8db3f33" }, { "path": "bench/coverage/round2-blind/exposed-functions-02/case.json", "sha256": "a9074d6bebcad8bbedd09a47232b225a813152bf93e03213de7cd06d98c14a3c" }, { "path": "bench/coverage/round2-blind/exposed-functions-03/case.json", "sha256": "ec9a9357e4260f559098a9566826fcc2bab57763c5746e537906ad001603cc12" }, { "path": "bench/coverage/round2-blind/exposed-functions-04/case.json", "sha256": "893ab3f56c9f760728a36a7adfc9b9722f3fc3d8180eb7ee1758d1b8cc6cab25" }, { "path": "bench/coverage/round2-blind/exposed-functions-05/case.json", "sha256": "4d1b641277c8648f2818ed4a0d869e1dd78dd1e1aa48c30d2bb524a536b8f7b8" }, { "path": "bench/coverage/round2-blind/exposed-functions-06/case.json", "sha256": "8b95adc60950a3335b82171d99840011567c4cf6c7383e6f18aad469ea081d1b" }, { "path": "bench/coverage/round2-blind/exposed-functions-07/case.json", "sha256": "ea6f5b3b60bcd22caeda6cc50b2a083ba10547d60cb81f9f502c9752e317bf53" }, { "path": "bench/coverage/round2-blind/exposed-functions-08/case.json", "sha256": "495a658012aacce096b074f7e7f3450d5b16ab1d59a4c7cbdc7b6447ad638dc3" }, { "path": "bench/coverage/round2-blind/framework-versions-01/case.json", "sha256": "44164ec63d04a7518071ccc2602fdd14b0743044dfc799b6b362de92e783bb28" }, { "path": "bench/coverage/round2-blind/framework-versions-02/case.json", "sha256": "0e52f8011009298e93bc3f318fc55be3cc67e6a0d8029f32a8dd779d5b465f46" }, { "path": "bench/coverage/round2-blind/framework-versions-03/case.json", "sha256": "685d66d5f5d6cb986a5b3c92b97441761d07c2b16364823976703fb21fca1f27" }, { "path": "bench/coverage/round2-blind/framework-versions-04/case.json", "sha256": "ab78be76a4a195bbc8ede056f392366047727dfb9f7b458ae12694ecb6b7fdf3" }, { "path": "bench/coverage/round2-blind/framework-versions-05/case.json", "sha256": "4a71df862bc5a74b0f2adcbe9271f2d895ceaac26b3ca2326156a8ee4a51eb5d" }, { "path": "bench/coverage/round2-blind/framework-versions-06/case.json", "sha256": "e410ffb9f1bfd8c1f50ef891f307e96532e513c3f734c67739e12fb046c6a101" }, { "path": "bench/coverage/round2-blind/framework-versions-07/case.json", "sha256": "39fe23e8ddd6e9ea2f0e9003671a88e7321be1dc689b2f68e82a847261f19f6b" }, { "path": "bench/coverage/round2-blind/framework-versions-08/case.json", "sha256": "05dea92469c926085bac419275c18234846de5aa6e5c2266090d7f679e71fd3e" }, { "path": "bench/coverage/round2-blind/image-proxy-01/case.json", "sha256": "d76479d87737c3706af0add8bc540b605d253f3ea6b8e6e3d630663a7412f578" }, { "path": "bench/coverage/round2-blind/image-proxy-02/case.json", "sha256": "07d5b42c962c6100e007892d1c95f07d402dd5fc4e708fc5e6e11c607200521d" }, { "path": "bench/coverage/round2-blind/image-proxy-03/case.json", "sha256": "e94edffd4dabaec040fe5f9537709f42ccbec700535a654f4d86a68aa4ef0559" }, { "path": "bench/coverage/round2-blind/image-proxy-04/case.json", "sha256": "2ad347221511f0c382b4dcb2aca752b5cdc20f79ace548296efd24bfcf719f86" }, { "path": "bench/coverage/round2-blind/image-proxy-05/case.json", "sha256": "3861fdb8c5ffca62457e92d2a303c326ad980e361d4d5958262e47b8e2265b47" }, { "path": "bench/coverage/round2-blind/image-proxy-06/case.json", "sha256": "4d5273df36a14603732155888f510164c755cbba15c28067bd2cdc830454e7cf" }, { "path": "bench/coverage/round2-blind/image-proxy-07/case.json", "sha256": "8ed5671b6456cf338e498b640515a4b6f7add1b50dd16193d3475562b96a3edc" }, { "path": "bench/coverage/round2-blind/image-proxy-08/case.json", "sha256": "2d6485f7df19708a1a14917f8294f4e6f2769f7ca141bf985ba26bb2d357ecb2" }, { "path": "bench/coverage/round2-blind/metadata-policies-01/case.json", "sha256": "9e5efaadd5c2833677d51c1dad155b6fae2a788e18dedfde4dc8374eaf31ee16" }, { "path": "bench/coverage/round2-blind/metadata-policies-02/case.json", "sha256": "2c648a18d67631dd6438828cee4e1d52de7366c1000f5f1397de4115f2ef37a2" }, { "path": "bench/coverage/round2-blind/metadata-policies-03/case.json", "sha256": "1825975e86136efb7c93a24cfb6b9dbf4a2e312a4a290289bab4df118bb332b1" }, { "path": "bench/coverage/round2-blind/metadata-policies-04/case.json", "sha256": "d8e80a2f7ac5d6e170af154b73f721c6d7ad6fbccb4bc20201cc974e68fde62d" }, { "path": "bench/coverage/round2-blind/metadata-policies-05/case.json", "sha256": "3933b2462b54cb1b1ba50e5d8fdeaee99b1b4334871e0e3ce90a9f307e9311b9" }, { "path": "bench/coverage/round2-blind/metadata-policies-06/case.json", "sha256": "0eb9139f3e98ae9dc717357c5a5736ba78bf2bf68b84c66678fb775002d29bea" }, { "path": "bench/coverage/round2-blind/metadata-policies-07/case.json", "sha256": "85a1bad6195f1af93bc8b883cc1329e461e526d41ce727deb72a4dbcf941e964" }, { "path": "bench/coverage/round2-blind/metadata-policies-08/case.json", "sha256": "cf2f631efec9b1f9460a8bf2e39c760931c84b4f777af346333a64fa5ff894f1" }, { "path": "bench/coverage/round2-blind/public-secrets-01/case.json", "sha256": "7d9d54b46e5cce705e024dbc77afd331ddd7e237605479a97a240f79044a722f" }, { "path": "bench/coverage/round2-blind/public-secrets-02/case.json", "sha256": "5bc91b3f022bf64e2c82c7004355079af05e80a71375d7fb070e85d75197de1a" }, { "path": "bench/coverage/round2-blind/public-secrets-03/case.json", "sha256": "9efde1220a271a3ad526d9c32a45ee84c2e188317abb1fa87ec61bf4349d8cfa" }, { "path": "bench/coverage/round2-blind/public-secrets-04/case.json", "sha256": "2100f4bf9a771a0f3902d5fd5a92b43bfe27877d6970e086e8e190909683c438" }, { "path": "bench/coverage/round2-blind/public-secrets-05/case.json", "sha256": "bb14ae5cd815281970ba884ebc72e43914aa62f4de34c812fb34f8fb527e8dd5" }, { "path": "bench/coverage/round2-blind/public-secrets-06/case.json", "sha256": "471dcb075a3fca2cf37db3559efb86f2d65c8aaa1790f2ce1d16d9cbd3fcebef" }, { "path": "bench/coverage/round2-blind/public-secrets-07/case.json", "sha256": "3e1f3db6f71315ef257b508f577abc7fb41d88091153df2763383e79532bb884" }, { "path": "bench/coverage/round2-blind/public-secrets-08/case.json", "sha256": "8a64333cea93ee152f3c4e17ddf877bd9dd20a5e9adf3b8e0a11a9ac974c5e19" }, { "path": "bench/coverage/round2-blind/sri-01/case.json", "sha256": "84deab9b5dc85d6883072b1546f35a22258b553fbf3fa8f89a7310279d8cd0d7" }, { "path": "bench/coverage/round2-blind/sri-02/case.json", "sha256": "04c77b5c04c86fdb99b5aedef230af90397eab6450fbe0bc24af3c0a37883978" }, { "path": "bench/coverage/round2-blind/sri-03/case.json", "sha256": "7654f17a0c1ff7ef569deed1a0c42a43c70dac872d7811285a79322abae5b75d" }, { "path": "bench/coverage/round2-blind/sri-04/case.json", "sha256": "88969f918d51844931772e2616b58b32411f6e7fcdb83ed451ee056dc511bc46" }, { "path": "bench/coverage/round2-blind/sri-05/case.json", "sha256": "fd7c32fa99924749e20913e8330e35b46793278a0e57874084d71700d1fd4de9" }, { "path": "bench/coverage/round2-blind/sri-06/case.json", "sha256": "3726231dc8e3c50ceb09d87a068b5d473a6a312fdab8ada87db7162eccc20dda" }, { "path": "bench/coverage/round2-blind/sri-07/case.json", "sha256": "8cebb73921fd2b491e3187303b2502e1030cd633831789d324189dadf7dabca2" }, { "path": "bench/coverage/round2-blind/sri-08/case.json", "sha256": "aab62112b3d3cd74767ee8687dbc01def7b0cfb8a52ea9056bec6a50f114f29c" }, { "path": "bench/coverage/round2-blind/storage-listing-01/case.json", "sha256": "65bcc741cc78181f2b9d1dddf7f2faa42ae1c908318cbcbbf32b2d13104499ef" }, { "path": "bench/coverage/round2-blind/storage-listing-02/case.json", "sha256": "c9988fcd2ce0e415a064fbeca25927c1dc7f6d8d0ec1269873c8862ae4e6096d" }, { "path": "bench/coverage/round2-blind/storage-listing-03/case.json", "sha256": "584f142db4c2957409a91d0a583f97e29447f4b0d560030f09ca2c2abf58ad16" }, { "path": "bench/coverage/round2-blind/storage-listing-04/case.json", "sha256": "f9949baa56673fb3846a4a8eccf4ace0ee6b534ac2f55569e110fd7ccbf20cff" }, { "path": "bench/coverage/round2-blind/storage-listing-05/case.json", "sha256": "6c90356c5dc09f6a4c614efc57959c1d0b969025ce53a54b5a2784ce036c4761" }, { "path": "bench/coverage/round2-blind/storage-listing-06/case.json", "sha256": "ed805815bdadf84b26cbab5fec9cc7f1297eae629717587aa57e6dc77bb9416b" }, { "path": "bench/coverage/round2-blind/storage-listing-07/case.json", "sha256": "942d6fc8e12159a452813fffd49230252b95db19aac7045bc2437fd167056543" }, { "path": "bench/coverage/round2-blind/storage-listing-08/case.json", "sha256": "16e53250af2b50639deea0d83bcb027f4a5f1fdd799657b791f2f5899de5c065" }, { "path": "bench/coverage/round2-blind/svg-images-01/case.json", "sha256": "4dcee3935d19a9e242c14fb4b984842d765231c4d56409440fc6a7d53cf13be8" }, { "path": "bench/coverage/round2-blind/svg-images-02/case.json", "sha256": "7bd5858d13e07f0609f5b35c0be54be6c0cbd07521d51de1dd2c47c0dbd85d1b" }, { "path": "bench/coverage/round2-blind/svg-images-03/case.json", "sha256": "f430f769fd7df142f07967007518cb2ffe6979f048766ab68c47f735e9d45ecd" }, { "path": "bench/coverage/round2-blind/svg-images-04/case.json", "sha256": "1e2328b249d2670bb09fee8a32f83df668bc1acd6793bb50f40a46403172e047" }, { "path": "bench/coverage/round2-blind/svg-images-05/case.json", "sha256": "536b90f607f2e3cd92facda1d431d40478a2b45caed3c6807cc164f7302b6061" }, { "path": "bench/coverage/round2-blind/svg-images-06/case.json", "sha256": "e85ae1f566999beff3f650ff207156e1fb9ec9bd34d11d11e3221421f809086c" }, { "path": "bench/coverage/round2-blind/svg-images-07/case.json", "sha256": "3996536046a96cc3dca1b02ab109d8d944024e4f3370c4394e20c23cfa8317ea" }, { "path": "bench/coverage/round2-blind/svg-images-08/case.json", "sha256": "43f81e0eca6eb264b696456c34d230baaef78c1c3397b914f3a34c2a8e2c3a57" }, { "path": "bench/coverage/round2-blind/takeover-01/case.json", "sha256": "a865612522dc305b377239fa2b3cd966a3f3e9be42f2666f0690d69ad986cd8d" }, { "path": "bench/coverage/round2-blind/takeover-02/case.json", "sha256": "06b6a95ead773c4727f2c038d30d780007b3b3147cafb6ebb3569f314d37974e" }, { "path": "bench/coverage/round2-blind/takeover-03/case.json", "sha256": "3c28f98f6c5ad3426ed344ee25b7b015d5eedb0085e1a15ab76043cdf6f1c4c6" }, { "path": "bench/coverage/round2-blind/takeover-04/case.json", "sha256": "f415927cc15fd4d729998bfc842637c3c957c49bf41548a83388bfe3ba71542f" }, { "path": "bench/coverage/round2-blind/takeover-05/case.json", "sha256": "f8f79233691e7a61be8de4ba7eed3f8df4bb70eec2c97b33c2e0e0e5e197c7ec" }, { "path": "bench/coverage/round2-blind/takeover-06/case.json", "sha256": "366bb1ebe1d678fa86280f6630d64f38556ce5494073dfe13afce60d7f31878f" }, { "path": "bench/coverage/round2-blind/takeover-07/case.json", "sha256": "5b2f0a83a6e4530a56689c7dda17674418cb59564f69c39a4d601e247660d3c6" }, { "path": "bench/coverage/round2-blind/takeover-08/case.json", "sha256": "c37d87cab898dbe763fa84101b58f84d1d11f23b9b9897dc7723a2ecfb67bd58" }, { "path": "bench/coverage/round2-blind/tfstate-01/case.json", "sha256": "9421d0ebd2181bd2b27dcdf51dd70c8e1811019ead797e4c6d239b1bd0fbfa5d" }, { "path": "bench/coverage/round2-blind/tfstate-02/case.json", "sha256": "2d2b574d9fce85f5b83c7a70212492b30f525b780e0a1a440fff1c2517e3aaaa" }, { "path": "bench/coverage/round2-blind/tfstate-03/case.json", "sha256": "2173abc87ef1f04dd99f29f0514f90fd0c0d31f2be5648c7c066639fa707f1fd" }, { "path": "bench/coverage/round2-blind/tfstate-04/case.json", "sha256": "0922f76f2cff6040f10cf911fcfc6cb34894255f66d5c797c59b4db7b2ca2e47" }, { "path": "bench/coverage/round2-blind/tfstate-05/case.json", "sha256": "d73533cc02de1d19fb365fd827837bc6e8abdddff261c219429fff90bb26a045" }, { "path": "bench/coverage/round2-blind/tfstate-06/case.json", "sha256": "87c5baedb6ed04e153eeff602f92cb65d5b88804cde7c3e55f9aa5d36fc9dfcc" }, { "path": "bench/coverage/round2-blind/tfstate-07/case.json", "sha256": "9e07688d5b1779abebded7896522a85e1d42f2c2a5b415e174f3d69d51e7fa42" }, { "path": "bench/coverage/round2-blind/tfstate-08/case.json", "sha256": "e4a204b4ac809b82e3a0ca01ee35704fcd8fd52e2de822f1882a1fd789cda796" }, { "path": "docs/audits/2026-09-26-detection-round-3/coverage-round3-blind-first.json", "sha256": "990172a8d3640fb578d2a33a3c0e0591a865df6133e35e5f394e951ed8b4893c" }, { "path": "docs/audits/2026-09-26-detection-round-3/coverage-round3-blind-second.json", "sha256": "95d5bf035a4224fed2706685a8fafa2a068da13402f8ded307ff2f32a25916e0" }, { "path": "bench/coverage/round3-blind/redirect-01/case.json", "sha256": "21b36d474f1541ab51be662bfb6ea9f6b96938f4fea3f870ee7aaff7cb474e29" }, { "path": "bench/coverage/round3-blind/redirect-02/case.json", "sha256": "f4b3a8f2e3591912d723faff5d4f82c8e8f087371a5bf400a661bd9a8edae155" }, { "path": "bench/coverage/round3-blind/redirect-03/case.json", "sha256": "5c6c1baadc1e6e690ac843c341ddc8b7faac675f31aab7397348aff079e451b1" }, { "path": "bench/coverage/round3-blind/redirect-04/case.json", "sha256": "2fa9f9fe76e099b5dc9fe3dd64f7642452611b048ae6505e7f4a0c4ab9481809" }, { "path": "bench/coverage/round3-blind/redirect-05/case.json", "sha256": "4da40ab0dd93f72020efb7a1b8b4fb62f1254e98e04f16085d4727b6f230d86f" }, { "path": "bench/coverage/round3-blind/redirect-06/case.json", "sha256": "ea81355a766b04afa0af9f26cace692c50b92a77082538d3214c372fe8332c16" }, { "path": "bench/coverage/round3-blind/redirect-07/case.json", "sha256": "28582246316d11da13675045f441428269315bc2f30886b4a3d422861356984b" }, { "path": "bench/coverage/round3-blind/redirect-08/case.json", "sha256": "3144e3417bf3bd420c8f7a0c67751b625f7509d52e3a8995e378c6efcf876930" }, { "path": "bench/coverage/round3-blind/redirect-09/case.json", "sha256": "db3ee21619fb577eecb07b12f60370537197c2f1de129b41ce10080b42ea4648" }, { "path": "bench/coverage/round3-blind/redirect-10/case.json", "sha256": "8451a3587d355568bb9a6053e0e0cb8a20b706d842302b5e7ad51aed279fe90f" }, { "path": "bench/sim/results/2026-09-25.json", "sha256": "b94b2c4e5bf0abab31166e6924e114a581467f8193d0a0e287ccc47ba5b74bbb" } ] }