{
  "scope": "six hand-built synthetic cases; not a production benchmark",
  "candidate_hypotheses": 6,
  "counts": {
    "confirmed": 2,
    "disproven": 2,
    "rejected": 2
  },
  "precision_before_validation": 0.333,
  "precision_after_validation": 1.0,
  "findings": [
    {
      "name": "public-shell-concatenation",
      "class": "command injection",
      "outcome": "confirmed",
      "reason": "binary oracle reproduced impact"
    },
    {
      "name": "allowlisted-shell-argument",
      "class": "command injection",
      "outcome": "disproven",
      "reason": "binary oracle did not reproduce impact"
    },
    {
      "name": "admin-maintenance-shell",
      "class": "command injection",
      "outcome": "rejected",
      "reason": "threat model marks entry point admin-only"
    },
    {
      "name": "dead-debug-shell",
      "class": "command injection",
      "outcome": "rejected",
      "reason": "threat model marks entry point dead-code"
    },
    {
      "name": "invoice-without-owner-check",
      "class": "broken object-level authorisation",
      "outcome": "confirmed",
      "reason": "binary oracle reproduced impact"
    },
    {
      "name": "invoice-with-owner-check",
      "class": "broken object-level authorisation",
      "outcome": "disproven",
      "reason": "binary oracle did not reproduce impact"
    }
  ]
}