{ "source": "OpenInterpreter/open-interpreter@e00f08e", "gms_version": "oao-gms-0.1.0", "resolved_at": "2026-06-10T17:03:27.923726+00:00", "graph_snapshot_hash": "379df5aa5ac506d12ffca69682ff72f55aadc1f11e6c94531e9543d8a8b5956d", "gate_summary": { "actions": 21, "escalate": 15, "verified_or_abstain": "deterministic lattice boundary (escalate = governance not grounded enough to act autonomously)" }, "resolutions": [ { "action": "delete_event", "scan_matched_via": "heuristic", "risk_domain": "deletion", "technique": { "id": "T1485", "tactics": [ "impact" ] }, "work_role_categories": [ "OVERSIGHT and GOVERNANCE", "DESIGN and DEVELOPMENT", "IMPLEMENTATION and OPERATION", "PROTECTION and DEFENSE" ], "live_threat_signals": [ { "cve": "CVE-2026-41383", "title": "CVE-2026-41383: OpenClaw before 2026.4.2 contains an arbitrary directory deletion vulnerability in mirror mode" }, { "cve": "CVE-2026-5478", "title": "CVE-2026-5478: The Everest Forms plugin for WordPress is vulnerable to Arbitrary File Read and Deletion in all" }, { "cve": "CVE-2026-6940", "title": "CVE-2026-6940: radare2 prior to 6.1.4 contains a path traversal vulnerability in project deletion that allows " } ], "recommendation": { "canonical_reasons": [ "change_freeze_active", "approval_required" ], "controls": [ "NIST 800-53 CM-3", "NIST 800-53 CP-9", "OWASP LLM06" ], "severity": "high" }, "mapping_confidence": "GRAPH_INFERRED_HIGH", "gate": { "verdict": "INFER", "region": "NARROW_INFERRED", "gate_action": "ESCALATE", "escalate": true, "rationale": "narrow but inferred-only (2 candidate(s)) on a critical domain 'deletion'. A guessed control is not enough to act autonomously on a high-blast action -> escalate." } }, { "action": "exec", "scan_matched_via": "none", "risk_domain": "code_execution", "technique": { "id": "T1059", "tactics": [ "execution" ] }, "work_role_categories": [ "OVERSIGHT and GOVERNANCE", "DESIGN and DEVELOPMENT", "IMPLEMENTATION and OPERATION", "PROTECTION and DEFENSE" ], "live_threat_signals": [ { "cve": "CVE-2026-40029", "title": "CVE-2026-40029: parseusbs before 1.9 contains an OS command injection vulnerability in parseUSBs.py where LNK " }, { "cve": "CVE-2026-39866", "title": "CVE-2026-39866: Lawnchair is a free, open-source home app for Android. Prior to commit fcba413f55dd47f8a392144" }, { "cve": "CVE-2026-35020", "title": "CVE-2026-35020: Anthropic Claude Code CLI and Claude Agent SDK contain an OS command injection vulnerability i" } ], "recommendation": { "canonical_reasons": [ "approval_required", "high_blast_needs_named_approver" ], "controls": [ "NIST 800-53 CM-3", "EU AI Act Article 14", "OWASP LLM06" ], "severity": "critical" }, "mapping_confidence": "GRAPH_INFERRED_MED", "gate": { "verdict": "INFER", "region": "NARROW_INFERRED", "gate_action": "ESCALATE", "escalate": true, "rationale": "narrow but inferred-only (2 candidate(s)) on a critical domain 'code_execution'. A guessed control is not enough to act autonomously on a high-blast action -> escalate." } }, { "action": "export_to_markdown", "scan_matched_via": "heuristic", "risk_domain": "network_egress", "technique": { "id": "TA0010", "tactics": [] }, "work_role_categories": [], "live_threat_signals": [ { "cve": "CVE-2026-23659", "title": "CVE-2026-23659: Exposure of sensitive information to an unauthorized actor in Azure Data Factory allows an una" }, { "cve": "CVE-2026-42826", "title": "CVE-2026-42826: Exposure of sensitive information to an unauthorized actor in Azure DevOps allows an unauthori" }, { "cve": "CVE-2026-2941", "title": "CVE-2026-2941: The Linksy Search and Replace plugin for WordPress is vulnerable to unauthorized modification o" } ], "recommendation": { "canonical_reasons": [ "regulated_egress_blocked", "classification_above_ceiling" ], "controls": [ "NIST 800-53 SC-7", "EU AI Act Article 14", "OWASP LLM02" ], "severity": "high" }, "mapping_confidence": "GRAPH_INFERRED_HIGH", "gate": { "verdict": "INFER", "region": "NARROW_INFERRED", "gate_action": "PROCEED_FLAGGED", "escalate": false, "rationale": "narrow but inferred-only (2 candidate(s)). Proceed, but the receipt flags the binding as inferred -- confirm against control text." } }, { "action": "migrate_app_directory", "scan_matched_via": "heuristic", "risk_domain": "deployment", "technique": { "id": "T1543", "tactics": [ "persistence", "privilege-escalation" ] }, "work_role_categories": [ "OVERSIGHT and GOVERNANCE", "DESIGN and DEVELOPMENT", "IMPLEMENTATION and OPERATION", "PROTECTION and DEFENSE" ], "live_threat_signals": [ { "cve": "CVE-2025-71260", "title": "CVE-2025-71260: BMC FootPrints ITSM versions 20.20.02 through 20.24.01.001 contain a deserialization of untrus" }, { "cve": "CVE-2026-41468", "title": "CVE-2026-41468: Beghelli Sicuro24 SicuroWeb embeds AngularJS 1.5.2, an end-of-life component containing known " }, { "cve": "CVE-2026-33613", "title": "CVE-2026-33613: Due to the improper neutralisation of special elements used in an OS command, a remote attacke" } ], "recommendation": { "canonical_reasons": [ "approval_required", "change_freeze_active", "high_blast_needs_named_approver" ], "controls": [ "NIST 800-53 CM-3", "NIST 800-53 CM-5", "EU AI Act Article 14" ], "severity": "critical" }, "mapping_confidence": "GRAPH_INFERRED_HIGH", "gate": { "verdict": "ABSTAIN", "region": "WIDE", "gate_action": "ESCALATE", "escalate": true, "rationale": "3 competing inferred interpretations survive (wide state, above theta_width=2). Under-determined -> escalate." } }, { "action": "migrate_profile", "scan_matched_via": "heuristic", "risk_domain": "deployment", "technique": { "id": "T1543", "tactics": [ "persistence", "privilege-escalation" ] }, "work_role_categories": [ "OVERSIGHT and GOVERNANCE", "DESIGN and DEVELOPMENT", "IMPLEMENTATION and OPERATION", "PROTECTION and DEFENSE" ], "live_threat_signals": [ { "cve": "CVE-2025-71260", "title": "CVE-2025-71260: BMC FootPrints ITSM versions 20.20.02 through 20.24.01.001 contain a deserialization of untrus" }, { "cve": "CVE-2026-41468", "title": "CVE-2026-41468: Beghelli Sicuro24 SicuroWeb embeds AngularJS 1.5.2, an end-of-life component containing known " }, { "cve": "CVE-2026-33613", "title": "CVE-2026-33613: Due to the improper neutralisation of special elements used in an OS command, a remote attacke" } ], "recommendation": { "canonical_reasons": [ "approval_required", "change_freeze_active", "high_blast_needs_named_approver" ], "controls": [ "NIST 800-53 CM-3", "NIST 800-53 CM-5", "EU AI Act Article 14" ], "severity": "critical" }, "mapping_confidence": "GRAPH_INFERRED_HIGH", "gate": { "verdict": "ABSTAIN", "region": "WIDE", "gate_action": "ESCALATE", "escalate": true, "rationale": "3 competing inferred interpretations survive (wide state, above theta_width=2). Under-determined -> escalate." } }, { "action": "migrate_user_app_directory", "scan_matched_via": "heuristic", "risk_domain": "deployment", "technique": { "id": "T1543", "tactics": [ "persistence", "privilege-escalation" ] }, "work_role_categories": [ "OVERSIGHT and GOVERNANCE", "DESIGN and DEVELOPMENT", "IMPLEMENTATION and OPERATION", "PROTECTION and DEFENSE" ], "live_threat_signals": [ { "cve": "CVE-2025-71260", "title": "CVE-2025-71260: BMC FootPrints ITSM versions 20.20.02 through 20.24.01.001 contain a deserialization of untrus" }, { "cve": "CVE-2026-41468", "title": "CVE-2026-41468: Beghelli Sicuro24 SicuroWeb embeds AngularJS 1.5.2, an end-of-life component containing known " }, { "cve": "CVE-2026-33613", "title": "CVE-2026-33613: Due to the improper neutralisation of special elements used in an OS command, a remote attacke" } ], "recommendation": { "canonical_reasons": [ "approval_required", "change_freeze_active", "high_blast_needs_named_approver" ], "controls": [ "NIST 800-53 CM-3", "NIST 800-53 CM-5", "EU AI Act Article 14" ], "severity": "critical" }, "mapping_confidence": "GRAPH_INFERRED_HIGH", "gate": { "verdict": "ABSTAIN", "region": "WIDE", "gate_action": "ESCALATE", "escalate": true, "rationale": "3 competing inferred interpretations survive (wide state, above theta_width=2). Under-determined -> escalate." } }, { "action": "run", "scan_matched_via": "heuristic", "risk_domain": "code_execution", "technique": { "id": "T1059", "tactics": [ "execution" ] }, "work_role_categories": [ "OVERSIGHT and GOVERNANCE", "DESIGN and DEVELOPMENT", "IMPLEMENTATION and OPERATION", "PROTECTION and DEFENSE" ], "live_threat_signals": [ { "cve": "CVE-2026-40029", "title": "CVE-2026-40029: parseusbs before 1.9 contains an OS command injection vulnerability in parseUSBs.py where LNK " }, { "cve": "CVE-2026-39866", "title": "CVE-2026-39866: Lawnchair is a free, open-source home app for Android. Prior to commit fcba413f55dd47f8a392144" }, { "cve": "CVE-2026-35020", "title": "CVE-2026-35020: Anthropic Claude Code CLI and Claude Agent SDK contain an OS command injection vulnerability i" } ], "recommendation": { "canonical_reasons": [ "approval_required", "high_blast_needs_named_approver" ], "controls": [ "NIST 800-53 CM-3", "EU AI Act Article 14", "OWASP LLM06" ], "severity": "critical" }, "mapping_confidence": "GRAPH_INFERRED_MED", "gate": { "verdict": "INFER", "region": "NARROW_INFERRED", "gate_action": "ESCALATE", "escalate": true, "rationale": "narrow but inferred-only (2 candidate(s)) on a critical domain 'code_execution'. A guessed control is not enough to act autonomously on a high-blast action -> escalate." } }, { "action": "run_applescript", "scan_matched_via": "heuristic", "risk_domain": "code_execution", "technique": { "id": "T1059", "tactics": [ "execution" ] }, "work_role_categories": [ "OVERSIGHT and GOVERNANCE", "DESIGN and DEVELOPMENT", "IMPLEMENTATION and OPERATION", "PROTECTION and DEFENSE" ], "live_threat_signals": [ { "cve": "CVE-2026-40029", "title": "CVE-2026-40029: parseusbs before 1.9 contains an OS command injection vulnerability in parseUSBs.py where LNK " }, { "cve": "CVE-2026-39866", "title": "CVE-2026-39866: Lawnchair is a free, open-source home app for Android. Prior to commit fcba413f55dd47f8a392144" }, { "cve": "CVE-2026-35020", "title": "CVE-2026-35020: Anthropic Claude Code CLI and Claude Agent SDK contain an OS command injection vulnerability i" } ], "recommendation": { "canonical_reasons": [ "approval_required", "high_blast_needs_named_approver" ], "controls": [ "NIST 800-53 CM-3", "EU AI Act Article 14", "OWASP LLM06" ], "severity": "critical" }, "mapping_confidence": "GRAPH_INFERRED_MED", "gate": { "verdict": "INFER", "region": "NARROW_INFERRED", "gate_action": "ESCALATE", "escalate": true, "rationale": "narrow but inferred-only (2 candidate(s)) on a critical domain 'code_execution'. A guessed control is not enough to act autonomously on a high-blast action -> escalate." } }, { "action": "run_applescript_capture", "scan_matched_via": "heuristic", "risk_domain": "code_execution", "technique": { "id": "T1059", "tactics": [ "execution" ] }, "work_role_categories": [ "OVERSIGHT and GOVERNANCE", "DESIGN and DEVELOPMENT", "IMPLEMENTATION and OPERATION", "PROTECTION and DEFENSE" ], "live_threat_signals": [ { "cve": "CVE-2026-40029", "title": "CVE-2026-40029: parseusbs before 1.9 contains an OS command injection vulnerability in parseUSBs.py where LNK " }, { "cve": "CVE-2026-39866", "title": "CVE-2026-39866: Lawnchair is a free, open-source home app for Android. Prior to commit fcba413f55dd47f8a392144" }, { "cve": "CVE-2026-35020", "title": "CVE-2026-35020: Anthropic Claude Code CLI and Claude Agent SDK contain an OS command injection vulnerability i" } ], "recommendation": { "canonical_reasons": [ "approval_required", "high_blast_needs_named_approver" ], "controls": [ "NIST 800-53 CM-3", "EU AI Act Article 14", "OWASP LLM06" ], "severity": "critical" }, "mapping_confidence": "GRAPH_INFERRED_MED", "gate": { "verdict": "INFER", "region": "NARROW_INFERRED", "gate_action": "ESCALATE", "escalate": true, "rationale": "narrow but inferred-only (2 candidate(s)) on a critical domain 'code_execution'. A guessed control is not enough to act autonomously on a high-blast action -> escalate." } }, { "action": "run_async_main", "scan_matched_via": "heuristic", "risk_domain": "code_execution", "technique": { "id": "T1059", "tactics": [ "execution" ] }, "work_role_categories": [ "OVERSIGHT and GOVERNANCE", "DESIGN and DEVELOPMENT", "IMPLEMENTATION and OPERATION", "PROTECTION and DEFENSE" ], "live_threat_signals": [ { "cve": "CVE-2026-40029", "title": "CVE-2026-40029: parseusbs before 1.9 contains an OS command injection vulnerability in parseUSBs.py where LNK " }, { "cve": "CVE-2026-39866", "title": "CVE-2026-39866: Lawnchair is a free, open-source home app for Android. Prior to commit fcba413f55dd47f8a392144" }, { "cve": "CVE-2026-35020", "title": "CVE-2026-35020: Anthropic Claude Code CLI and Claude Agent SDK contain an OS command injection vulnerability i" } ], "recommendation": { "canonical_reasons": [ "approval_required", "high_blast_needs_named_approver" ], "controls": [ "NIST 800-53 CM-3", "EU AI Act Article 14", "OWASP LLM06" ], "severity": "critical" }, "mapping_confidence": "GRAPH_INFERRED_MED", "gate": { "verdict": "INFER", "region": "NARROW_INFERRED", "gate_action": "ESCALATE", "escalate": true, "rationale": "narrow but inferred-only (2 candidate(s)) on a critical domain 'code_execution'. A guessed control is not enough to act autonomously on a high-blast action -> escalate." } }, { "action": "run_auth_server", "scan_matched_via": "heuristic", "risk_domain": "code_execution", "technique": { "id": "T1059", "tactics": [ "execution" ] }, "work_role_categories": [ "OVERSIGHT and GOVERNANCE", "DESIGN and DEVELOPMENT", "IMPLEMENTATION and OPERATION", "PROTECTION and DEFENSE" ], "live_threat_signals": [ { "cve": "CVE-2026-40029", "title": "CVE-2026-40029: parseusbs before 1.9 contains an OS command injection vulnerability in parseUSBs.py where LNK " }, { "cve": "CVE-2026-39866", "title": "CVE-2026-39866: Lawnchair is a free, open-source home app for Android. Prior to commit fcba413f55dd47f8a392144" }, { "cve": "CVE-2026-35020", "title": "CVE-2026-35020: Anthropic Claude Code CLI and Claude Agent SDK contain an OS command injection vulnerability i" } ], "recommendation": { "canonical_reasons": [ "approval_required", "high_blast_needs_named_approver" ], "controls": [ "NIST 800-53 CM-3", "EU AI Act Article 14", "OWASP LLM06" ], "severity": "critical" }, "mapping_confidence": "GRAPH_INFERRED_MED", "gate": { "verdict": "INFER", "region": "NARROW_INFERRED", "gate_action": "ESCALATE", "escalate": true, "rationale": "narrow but inferred-only (2 candidate(s)) on a critical domain 'code_execution'. A guessed control is not enough to act autonomously on a high-blast action -> escalate." } }, { "action": "run_function_calling_llm", "scan_matched_via": "heuristic", "risk_domain": "code_execution", "technique": { "id": "T1059", "tactics": [ "execution" ] }, "work_role_categories": [ "OVERSIGHT and GOVERNANCE", "DESIGN and DEVELOPMENT", "IMPLEMENTATION and OPERATION", "PROTECTION and DEFENSE" ], "live_threat_signals": [ { "cve": "CVE-2026-40029", "title": "CVE-2026-40029: parseusbs before 1.9 contains an OS command injection vulnerability in parseUSBs.py where LNK " }, { "cve": "CVE-2026-39866", "title": "CVE-2026-39866: Lawnchair is a free, open-source home app for Android. Prior to commit fcba413f55dd47f8a392144" }, { "cve": "CVE-2026-35020", "title": "CVE-2026-35020: Anthropic Claude Code CLI and Claude Agent SDK contain an OS command injection vulnerability i" } ], "recommendation": { "canonical_reasons": [ "approval_required", "high_blast_needs_named_approver" ], "controls": [ "NIST 800-53 CM-3", "EU AI Act Article 14", "OWASP LLM06" ], "severity": "critical" }, "mapping_confidence": "GRAPH_INFERRED_MED", "gate": { "verdict": "INFER", "region": "NARROW_INFERRED", "gate_action": "ESCALATE", "escalate": true, "rationale": "narrow but inferred-only (2 candidate(s)) on a critical domain 'code_execution'. A guessed control is not enough to act autonomously on a high-blast action -> escalate." } }, { "action": "run_server", "scan_matched_via": "heuristic", "risk_domain": "code_execution", "technique": { "id": "T1059", "tactics": [ "execution" ] }, "work_role_categories": [ "OVERSIGHT and GOVERNANCE", "DESIGN and DEVELOPMENT", "IMPLEMENTATION and OPERATION", "PROTECTION and DEFENSE" ], "live_threat_signals": [ { "cve": "CVE-2026-40029", "title": "CVE-2026-40029: parseusbs before 1.9 contains an OS command injection vulnerability in parseUSBs.py where LNK " }, { "cve": "CVE-2026-39866", "title": "CVE-2026-39866: Lawnchair is a free, open-source home app for Android. Prior to commit fcba413f55dd47f8a392144" }, { "cve": "CVE-2026-35020", "title": "CVE-2026-35020: Anthropic Claude Code CLI and Claude Agent SDK contain an OS command injection vulnerability i" } ], "recommendation": { "canonical_reasons": [ "approval_required", "high_blast_needs_named_approver" ], "controls": [ "NIST 800-53 CM-3", "EU AI Act Article 14", "OWASP LLM06" ], "severity": "critical" }, "mapping_confidence": "GRAPH_INFERRED_MED", "gate": { "verdict": "INFER", "region": "NARROW_INFERRED", "gate_action": "ESCALATE", "escalate": true, "rationale": "narrow but inferred-only (2 candidate(s)) on a critical domain 'code_execution'. A guessed control is not enough to act autonomously on a high-blast action -> escalate." } }, { "action": "run_text_llm", "scan_matched_via": "heuristic", "risk_domain": "code_execution", "technique": { "id": "T1059", "tactics": [ "execution" ] }, "work_role_categories": [ "OVERSIGHT and GOVERNANCE", "DESIGN and DEVELOPMENT", "IMPLEMENTATION and OPERATION", "PROTECTION and DEFENSE" ], "live_threat_signals": [ { "cve": "CVE-2026-40029", "title": "CVE-2026-40029: parseusbs before 1.9 contains an OS command injection vulnerability in parseUSBs.py where LNK " }, { "cve": "CVE-2026-39866", "title": "CVE-2026-39866: Lawnchair is a free, open-source home app for Android. Prior to commit fcba413f55dd47f8a392144" }, { "cve": "CVE-2026-35020", "title": "CVE-2026-35020: Anthropic Claude Code CLI and Claude Agent SDK contain an OS command injection vulnerability i" } ], "recommendation": { "canonical_reasons": [ "approval_required", "high_blast_needs_named_approver" ], "controls": [ "NIST 800-53 CM-3", "EU AI Act Article 14", "OWASP LLM06" ], "severity": "critical" }, "mapping_confidence": "GRAPH_INFERRED_MED", "gate": { "verdict": "INFER", "region": "NARROW_INFERRED", "gate_action": "ESCALATE", "escalate": true, "rationale": "narrow but inferred-only (2 candidate(s)) on a critical domain 'code_execution'. A guessed control is not enough to act autonomously on a high-blast action -> escalate." } }, { "action": "run_tool_calling_llm", "scan_matched_via": "heuristic", "risk_domain": "code_execution", "technique": { "id": "T1059", "tactics": [ "execution" ] }, "work_role_categories": [ "OVERSIGHT and GOVERNANCE", "DESIGN and DEVELOPMENT", "IMPLEMENTATION and OPERATION", "PROTECTION and DEFENSE" ], "live_threat_signals": [ { "cve": "CVE-2026-40029", "title": "CVE-2026-40029: parseusbs before 1.9 contains an OS command injection vulnerability in parseUSBs.py where LNK " }, { "cve": "CVE-2026-39866", "title": "CVE-2026-39866: Lawnchair is a free, open-source home app for Android. Prior to commit fcba413f55dd47f8a392144" }, { "cve": "CVE-2026-35020", "title": "CVE-2026-35020: Anthropic Claude Code CLI and Claude Agent SDK contain an OS command injection vulnerability i" } ], "recommendation": { "canonical_reasons": [ "approval_required", "high_blast_needs_named_approver" ], "controls": [ "NIST 800-53 CM-3", "EU AI Act Article 14", "OWASP LLM06" ], "severity": "critical" }, "mapping_confidence": "GRAPH_INFERRED_MED", "gate": { "verdict": "INFER", "region": "NARROW_INFERRED", "gate_action": "ESCALATE", "escalate": true, "rationale": "narrow but inferred-only (2 candidate(s)) on a critical domain 'code_execution'. A guessed control is not enough to act autonomously on a high-blast action -> escalate." } }, { "action": "send", "scan_matched_via": "heuristic", "risk_domain": "network_egress", "technique": { "id": "TA0010", "tactics": [] }, "work_role_categories": [], "live_threat_signals": [ { "cve": "CVE-2026-23659", "title": "CVE-2026-23659: Exposure of sensitive information to an unauthorized actor in Azure Data Factory allows an una" }, { "cve": "CVE-2018-25204", "title": "CVE-2018-25204: Library CMS 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers " }, { "cve": "CVE-2026-42826", "title": "CVE-2026-42826: Exposure of sensitive information to an unauthorized actor in Azure DevOps allows an unauthori" } ], "recommendation": { "canonical_reasons": [ "regulated_egress_blocked", "classification_above_ceiling" ], "controls": [ "NIST 800-53 SC-7", "EU AI Act Article 14", "OWASP LLM02" ], "severity": "high" }, "mapping_confidence": "GRAPH_INFERRED_HIGH", "gate": { "verdict": "INFER", "region": "NARROW_INFERRED", "gate_action": "PROCEED_FLAGGED", "escalate": false, "rationale": "narrow but inferred-only (2 candidate(s)). Proceed, but the receipt flags the binding as inferred -- confirm against control text." } }, { "action": "send_message", "scan_matched_via": "heuristic", "risk_domain": "network_egress", "technique": { "id": "TA0010", "tactics": [] }, "work_role_categories": [], "live_threat_signals": [ { "cve": "CVE-2026-23659", "title": "CVE-2026-23659: Exposure of sensitive information to an unauthorized actor in Azure Data Factory allows an una" }, { "cve": "CVE-2026-42826", "title": "CVE-2026-42826: Exposure of sensitive information to an unauthorized actor in Azure DevOps allows an unauthori" }, { "cve": "CVE-2026-2941", "title": "CVE-2026-2941: The Linksy Search and Replace plugin for WordPress is vulnerable to unauthorized modification o" } ], "recommendation": { "canonical_reasons": [ "regulated_egress_blocked", "classification_above_ceiling" ], "controls": [ "NIST 800-53 SC-7", "EU AI Act Article 14", "OWASP LLM02" ], "severity": "high" }, "mapping_confidence": "GRAPH_INFERRED_HIGH", "gate": { "verdict": "INFER", "region": "NARROW_INFERRED", "gate_action": "PROCEED_FLAGGED", "escalate": false, "rationale": "narrow but inferred-only (2 candidate(s)). Proceed, but the receipt flags the binding as inferred -- confirm against control text." } }, { "action": "send_output", "scan_matched_via": "heuristic", "risk_domain": "network_egress", "technique": { "id": "TA0010", "tactics": [] }, "work_role_categories": [], "live_threat_signals": [ { "cve": "CVE-2026-23659", "title": "CVE-2026-23659: Exposure of sensitive information to an unauthorized actor in Azure Data Factory allows an una" }, { "cve": "CVE-2026-42826", "title": "CVE-2026-42826: Exposure of sensitive information to an unauthorized actor in Azure DevOps allows an unauthori" }, { "cve": "CVE-2026-2941", "title": "CVE-2026-2941: The Linksy Search and Replace plugin for WordPress is vulnerable to unauthorized modification o" } ], "recommendation": { "canonical_reasons": [ "regulated_egress_blocked", "classification_above_ceiling" ], "controls": [ "NIST 800-53 SC-7", "EU AI Act Article 14", "OWASP LLM02" ], "severity": "high" }, "mapping_confidence": "GRAPH_INFERRED_HIGH", "gate": { "verdict": "INFER", "region": "NARROW_INFERRED", "gate_action": "PROCEED_FLAGGED", "escalate": false, "rationale": "narrow but inferred-only (2 candidate(s)). Proceed, but the receipt flags the binding as inferred -- confirm against control text." } }, { "action": "send_past_conversations", "scan_matched_via": "heuristic", "risk_domain": "network_egress", "technique": { "id": "TA0010", "tactics": [] }, "work_role_categories": [], "live_threat_signals": [ { "cve": "CVE-2026-23659", "title": "CVE-2026-23659: Exposure of sensitive information to an unauthorized actor in Azure Data Factory allows an una" }, { "cve": "CVE-2026-42826", "title": "CVE-2026-42826: Exposure of sensitive information to an unauthorized actor in Azure DevOps allows an unauthori" }, { "cve": "CVE-2026-2941", "title": "CVE-2026-2941: The Linksy Search and Replace plugin for WordPress is vulnerable to unauthorized modification o" } ], "recommendation": { "canonical_reasons": [ "regulated_egress_blocked", "classification_above_ceiling" ], "controls": [ "NIST 800-53 SC-7", "EU AI Act Article 14", "OWASP LLM02" ], "severity": "high" }, "mapping_confidence": "GRAPH_INFERRED_HIGH", "gate": { "verdict": "INFER", "region": "NARROW_INFERRED", "gate_action": "PROCEED_FLAGGED", "escalate": false, "rationale": "narrow but inferred-only (2 candidate(s)). Proceed, but the receipt flags the binding as inferred -- confirm against control text." } }, { "action": "send_telemetry", "scan_matched_via": "heuristic", "risk_domain": "network_egress", "technique": { "id": "TA0010", "tactics": [] }, "work_role_categories": [], "live_threat_signals": [ { "cve": "CVE-2026-23659", "title": "CVE-2026-23659: Exposure of sensitive information to an unauthorized actor in Azure Data Factory allows an una" }, { "cve": "CVE-2026-42826", "title": "CVE-2026-42826: Exposure of sensitive information to an unauthorized actor in Azure DevOps allows an unauthori" }, { "cve": "CVE-2026-2941", "title": "CVE-2026-2941: The Linksy Search and Replace plugin for WordPress is vulnerable to unauthorized modification o" } ], "recommendation": { "canonical_reasons": [ "regulated_egress_blocked", "classification_above_ceiling" ], "controls": [ "NIST 800-53 SC-7", "EU AI Act Article 14", "OWASP LLM02" ], "severity": "high" }, "mapping_confidence": "GRAPH_INFERRED_HIGH", "gate": { "verdict": "INFER", "region": "NARROW_INFERRED", "gate_action": "PROCEED_FLAGGED", "escalate": false, "rationale": "narrow but inferred-only (2 candidate(s)). Proceed, but the receipt flags the binding as inferred -- confirm against control text." } }, { "action": "terminate", "scan_matched_via": "heuristic", "risk_domain": "deletion", "technique": { "id": "T1059", "tactics": [ "execution" ] }, "work_role_categories": [ "OVERSIGHT and GOVERNANCE", "DESIGN and DEVELOPMENT", "IMPLEMENTATION and OPERATION", "PROTECTION and DEFENSE" ], "live_threat_signals": [ { "cve": "CVE-2026-41383", "title": "CVE-2026-41383: OpenClaw before 2026.4.2 contains an arbitrary directory deletion vulnerability in mirror mode" }, { "cve": "CVE-2026-27651", "title": "CVE-2026-27651: When the ngx_mail_auth_http_module\u00a0module is enabled on NGINX Plus or NGINX Open Source, undis" }, { "cve": "CVE-2026-5478", "title": "CVE-2026-5478: The Everest Forms plugin for WordPress is vulnerable to Arbitrary File Read and Deletion in all" } ], "recommendation": { "canonical_reasons": [ "change_freeze_active", "approval_required" ], "controls": [ "NIST 800-53 CM-3", "NIST 800-53 CP-9", "OWASP LLM06" ], "severity": "high" }, "mapping_confidence": "GRAPH_INFERRED_HIGH", "gate": { "verdict": "INFER", "region": "NARROW_INFERRED", "gate_action": "ESCALATE", "escalate": true, "rationale": "narrow but inferred-only (2 candidate(s)) on a critical domain 'deletion'. A guessed control is not enough to act autonomously on a high-blast action -> escalate." } } ], "note": "GRAPH_INFERRED resolutions. Nothing here is ASSERTED: only a source-declared canonical reason or a confirmed human governance record can assert. Live threat signals are retrieved NVD-derived Signal nodes, never generated. Each action also carries a verified-or-ABSTAIN gate verdict from a deterministic lattice boundary (PROCEED / PROCEED_FLAGGED / ESCALATE). Produced by the hosted CWN Graph Model Service; the OSS scanner remains deterministic and offline.", "receipt": { "atom_id": "gms-562deac41210", "type": "SemanticResolutionReceipt", "gms_version": "oao-gms-0.1.0", "evidence_hash": "562deac412109307329cfea36bc99b87de4b4a8cc36bab8206467ae8696d2dd4", "signed_at": "2026-06-10T17:03:27.923726+00:00", "signature_b64": "6UCxFRHW3LkF9OuTWRpi84y7v1EOXayyVj0AYbKAkZjjaT1Y8iTAWK4ufXGsZj5OsMO25i0oYIeTCtjrdcuyBg==", "verify_pubkey_b64": "47QYzYTrFxIA2NcYLJvqIQ32Iub1pBCVyvXZp8joc88=", "ml_dsa_signature_b64": "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", "ml_dsa_public_key_b64": "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", "slh_dsa_signature_b64": "Fh8U8KqrLKEUNgaKOPtU+J2ixMoNBPcWKjMwadiyqWAAbl2KCrMZdRQRs5+ceLEYQVIMqg8Ab2N8nTH/AB2dyuwOg/NK8A75CG0H28avhI4/QLMtGqwyBhgb/24I06FkJbGqxVJI8N9zLh7/AxYQg6nFohLurGz0BzepeIVhkCuERW6aDE9U976Jwft6ASFBlyNZpz4FG6sXurU7Q8+dRY0VSQYvkZJxQlLWqmjTYwuz8YemAcdmIhtAhQL3kQkfIF+wkwi3cIS0jMRX6MU4Oel7M/baNYixdso/15agb9vW6sC0Zr5M7XeuuvHZnwVsZq4iwOmSo6D+JqV5eLmWcdyij/9SbvMaAirsqLdmLs/Ty3V/9CLxzi1wfpp+6DlLFcMSOfdts0ahD03H8qCCe2co0pil55pJpubI8TsYlnmvM44yr9mx009BlX6U3UgxCH/jWEkIH9sKPyHfHVDLkOMPwnASywn7jxzHftddRECSH7FAiwgrd6mhGhx3Or8yp7nvSWt/YDZF9rw20Z3lzrhb4q/1Hu7KoJ2N2R1UbFkx+ma9q4deMDHElv00R4Kns0KQtwRUTmuAqXNOwY8K3bSNwg7mLTFFl3SiqgTQWbcvV1yLCQJWDcUQ6GOJXSbckIPAFtg5Wt/Ywzqe6I+/ZiIGGr8+t9vPEDFUGpvFBwHVnAcFNZi9mmWkizXzt0eFCffUEVM6SSe+lYlVLiZq4KvSfG2CJV/cHtfWZW7T1TQHsMAFCToAd6qvmCKAtYka9+c/trmutR428iprxJct2cpWOX0ttsGG3UQXu9ZcJW7leLHgHJjLCsI0lnunZdqpHKdupLTjLHw8VRW9Yq53wRnALAAntSxnygO9ax/ZHGyNFZB+rYYrT+THcvUI+3PfKTWz1IFQLymgQDNDdtK3fAVPPl9prVn7Ro15V8EeN2UO3O/Ju2csqWWaKalFGHPjpH/1np2wfMRbnxuyfCYmrxU5BvEGvc/PiHu1siTYeEN9Bh4n/q7vUlh0o2uC28GGkqO5uZ7IBBsd2xSUOXDqPtBcWFVO3+rk+f6/O8iqjbZvIXkwBo8taEp2kFQzcbAeg60BHckqxjZppCPYYk5Ea423eLns16xVTXJEFJamIf25KT9PDNhoYFHUq7NWCD6v6fTS9iNyl+jSU4YQm1A3RGv2oLiJa7xnYCzNYWgIDr3HIEy3GhnJCmr1mb0yL4PXYtAGormO+VBChSzmdzlIjc6329Z0mN/ixyRaxQuRhmwnOD09SnZ0UTIcfZYVALZpSl6813kJBDr6bxzzKV2hWjhsRDtVybAsBQu+9mF/nr30jZX1HJ3gsiwb7udH4rkI0PWzvtSXpwGwxYSfOjBKliFLeHD0rQmQCkUwiT+DSG+5mmucb3IOS7MC6oSd/Bf6imN+IqiyAvzswqUvcPjjja7DgquHY0SxXhpE1fbFaAHk5eQ2yrEzKNJQ/TUloxagFgoBi/rv1rX3Yin2ZMPQBnm4LkJU1g+IPp2jzJTXL5Kb/hsj7lDWqqhU/wiojt+smHSyoO10xpjVungp7Gxc83Fucqdchr7mfyfACyww9EX+p37Vk453bKzsYEwMFEktL5a0BQRz3P8cFoS5fmU8pj95NL+X0wmn64V89LI3yBwJeDxeI8Vgk4Aiv9X2O7PmB1eN+I2axuJueQ1rQbZ2ZKUsNLeJ9w40DyeFrHT0nBjq2GbxslV0At6HlcQMTJZs4q5jj+apWQS/I4ooVpssOppUiDaeRfFwX8BeAh1qe5PMF5jVFbSxJeJpOgm1FRzq9YbfqQ7jdMBjAKRx6WcA2bygagVLFzEAjNcrdbSmXxjqvaBgDf7S1V+YrsBX+kjhWrJAojWcahw70giaMtZjEdq4hcSDSTNmjmI/9S2bDdC+NEPYDiU+rr/JlTjttsrW1faxlhLQm1bD4A0iRKw+xiTVhkRND0GRQKllwvG2ub2Job/BIAfkTLX5o9k5LAEaEPfsgpHZAyI5HmitNnnqfQjB8BDUcplnnviRCsmdHI3PIZKQSOeWVhWL8OxUO8eHgOV8D7fnidwi0Qtdb4EPjYo1ironxVU9/OeOqeS/OF0pKvOSi6yeLmoj6evmyGViB6+9A85KSvEbOpOEJT7/ACPfKsik6JMAI4ZmSt96Ejqxz2T6TUBbJvZ4gwXO1h2+82OeSJ7LPm5IV6oU42vwMSOYJIt6S2nIIhNHvp0OWJhC1hizby5fznnFw0ZQDN54GQZNzMzL13SJCctIKlKxAFP4300x4/aMKZcv8v8YBTVz8k25/QVn4zf72/MGbWk9J7V4W6SOgaRzlo6xVjZPWZkwxtThks/jU2INNoZy6PKR5pFWY8HUm6mSZlRZBuM2/AqgFUoLEUySstErvqaubf6Y6kfb+qo9y9pHwZ8VX4glrpPYjQgRc6a/i0pNQndIilrjV+r6fJv4UbOz88ZKiuSQ1HrfdXDYq10P/rcCLDjy1mQNtEfuUD9lx6muFgOiSx+RGzbBRgyeAbpX7zMM5b2EeG18E/CVT6tGxFKgmQCBZRMJpNMI76n3wviyWyH5/39tOc4Z3AOKs54KFDLkH/qR5g/RDD/thew7QWTIe9pVBdxFMopuy3Dep4X/AMHbppT6Pdfg2uZtGuRorSbqYtUyppIJ2kKs8VhayfdKqzjCVVS/oRZjRKKyoQaqiavcQA/yHJNuuotL8pOCRf90TUfs9O6ZSwLimd8eo0WqIRuL8DnThhInV/lQicZlioJvrd5DmsrXO/8IvWzWuzOgEaSQBAcdEib6q7pgoUXIG8+tck8ooORoPDdnQZzps7cniH1W+FppA43KHUZ64h0NBCuIgXB+eczs12QMA3f3lacrymYuL79mJoWAjF55/Rxn3v3NAdHA4yf+mhZ8P8YduR0TIw77Q6FDt0DnkcI+J+MxgQ+whDeHWnZhf1Im/ngD5M97t7u5KRzygZ3fF24y8dvs0WWJBd4OrqArOLPAfK68yh3kQwjy+9JJ5LTZYQYtJmParpt0NKLJb1ewqOHcrr/o7CfNhzF3ASL6sLTU9wN9hOnZKgxgDh3wgOmFEz1+Inyaxs5p/JGd4tr30RYKDe5rrVWr95ZDPEJys5LNYvdJYgGWUEGhP70GQrdO7QZexIyovA3zOD5a2zqJsvRnNd0/g1FUfkMOfAVOBEE8GtRcX/Ri09m8/Vc7LLXWxW9MniKjaP5qxTtizLgWWWewEPvznRtYgZXCcpPZSGBqHRmF4l2zzHoFOmmY/Y60ys8r9NUS3oJa8pvCBkTjvxbwcwOzgcfqmpNDbD8SllM+O5dDANTgqRU1ONE/R395oA1zpT1YSvahTCMUpSyjuPKlM4Yvj93HkDJ45wqmk+jsLwKqE66FHE5R0vagh2yXZee/5e+TViPHvEL71AhXYYNWW4/37xmaCXqXpQaulP7u5Ky10g960m+AelSC0JhQ6WAMi0Wbq/D6EPAgGjm+aFy/9wm+HfsiRWshHkgq5lfYj02wicspGU8GWdGsJgttdeDFD/gV11hnU21/nPAAw7F/5dPnLEgAYgsGt8QmWMAcDuYqg7odVa16f5uQiID7Xeq7Ig7PTPdF6a+0AXc7DxUc0BrW+K3hiCYu/HL1tb6fnMZalTypsx/B9j4HDJH26ruY3fFo1Mg/ayibrmc3041Ka/cM/17NNI6F8DF0qgHSQNicKtPTfb1TX71igoQJC9PGlrEulCQHIlY7MgRb+sys4FXIE4bsyFIVgM5a4wBViahdSihvERuhMF/+GcX85MfAY+h7Eey6XXt/ciQyXWXApjdoQQdR2RUEuoqVW2EXvEhZeF5rkUfeseOyaFgPaMla0LBklBRvN8dO1QYckfq3vIZDQWcQBrOLLtc8SZOaBCiTpEp700RglQDfxwSJTyhYNiQ8a0gDiAyM0JhTQU8ivNLpn04yTsPPaQJtGSIsu5vfqyLFq6DDxiH4Nhi5m86yrjY8UJXt1UuXGuK2JwG3AKnl94SjyVdIr4YWZjxitfBS1XwI0l3guo6LvrtzompiMC6Kg3fQl6eyd5MuKsDcoe0I7Td6TNyfG97P/PwiL/I/aANjj6X5I3t6VigMpi882mxbE2KXktrekIm8RtjDkYpbddEIbeKFTjYoJbtc3UPgbG7ftDMpysp+P1iUInVXS4y3xGzmLO+8NVK3UVXYHogV9ZFF8sGlJzS8MaI7ogi2FEpmFbbkJ64ckMeNwYUuGThGtrnCzZlxwwQQPF/l8LdFG60etXJLmaJS7p/5/nqUR0DX9/VAVLMKhpbb+mw6bVMTnzp6FhzwlG/KZ5Z/MTgxoK9F3w6j+AFN211Q6i5hpkcG/11e8F41gZL+DXzncwh+qOcItjIFM4bO9RKBD8WXyhXbybQR3FZ1ZhMc5MLmV1APJnEbNvthCQKDv/NPDGox3C3TGJtCqab8L5hvLfsO0w1TCYBggXcId2YWQT78qs4fVX13rLqtJHDka2VuUXGVrOamGI2eS+fH3Pz9p7cujH0x+ROtVzQ0bC8erCzM9P3x59hdX4oJ/M4A/QS2YPvSuCPrjgjftkdz6k+MZWw1IWpvi1GBK5P4AbPjs7vfxWe4BgJ6OGt+iItKGvWEZdLpKP7/cjFLyz+fMoXHexbkI5NB2vGT1fuxX9NH09K/UxeMHsuMpyaNjXdNOCvUU8yLkLGmcrs6EaG6ZSCUO/IO6NTMkzuhTDsFdk94BW2WUmi2Tw0KCL+wGlgtEHaG9tSIm/L4jnVYsou0FTUAUpatuJ0yzCuBMS1r+nGWlYqWl/+q6vIU7pKd59e1tf2xsQpzI//Gw9e9GhnSFgG7mYqBcyQzoPrtfYt356S27vWA73Ig3khZKI3QNYWmzraJ8OvrGT48ir6b3Qt8eJrE51DtXuY/lidYttkLwZV3jMI6cVXnXsP+bFZbO5y08wdoFpLI/NfcDdmxnXUQm7ECFd2l7564ICdiXAmfn5b1x1/ztXgSpbGnugRu0H7ziO0uCukXWu9ZogwWLMtOk4NalQJl5t4BGdvUQ5mctBCF5xSk114GFC/58BIfNiHaFTldttKaUAGPbgDLgmd9QvNZ2FwQjLCrCZRPPXD0ppQQJ0M7nIiMfBVcXRPtQ24yOH2XOc22/6MXFPY7R0O2jq/Ngp3WUulxAMROWK3mAxjroPgjuyHqojZ/zQ4D4VtMWLj2Vj2DWdjQ+l60X5Lk0h9qiHXwQI5pP6lRugHz3k+B6OKe9J8ezDaq/43xygkgnzOAWc2Q441LB/qowv56SuaOmf96fyWFPWu6WffZ0szGJeevd9+LOAToWBrTcdE5z/zzATelahFozH+Bh5QE+VTp6nMRuaKJ8Gzr/b/c1AARTviZxMYcS6e1gzuAdLG5VaW5KoR1i733oesE5SREy9rzvtUPo2N6tKCtBDzh9FpGhc2SDEUNDtSwXzcFGYrGHjU6/lnIot238MXP9MV2ZrQ0AAnFaJFEW6M+DSaxbgKgDCb/vYe5ywSSE1Me0gBJhXrTwZKvJkfNjtyA8R7fwgnDcibfLP8BG625dKLwiQP+rqgQl6iaIW64bN9bxvKwxSP3Ze+ZWgiMtu7qtF3arcd8VwghJKkHTTMmXn+B59KRkI/6HZMHr/kOasv4KL8vlGabjDCyPmQDbzb+QCAkBaVZIwXwGvFYFOQ3YsMiu9RE+Ly7uh9cXQ3DAhVBQF1tKVCaLRDXZQZR8oVqbtxrjYYHhJQ+arGBd/cpBHyVhcF5Poqnaza3nRHOGuckJyw2i4ERIotQBvVK7xY4Ve30TkVetGASiWEQyf5exzB45oTwXdMYXRd+pV+qU7WWzu8mvcSraKKXbyk2IZY+DRKfP1ucjqlRfX8PBACRpshYKpWM4ZiH2WCvf7WAJ8Y3MYOMZIr6jmpZVQzBYSgrARMjmY/rMTo17kUOWUYwiz7sJqgi4Ug9BqJm5GAJRA+NOJeMFX6Xghynutzp+Tu30CyYbpywtThwFQ+BsmwUehmSLOiHYdBxGhoEVcUx/YQw3n5vXmoJbLqF/G5XBo+IkT0lNXouLTNK87r/vfcfcvp+v55UAD9xB30QKA26jG9c+NY+VxOM5lLQlKpbUPO/X9egUunPl4XExnFf/57YfHec11JMniGhYhFFSEvtBrKtr7TkuTDgd4A8vKYlRclfoUlgv+J5c5UaR8Msjyr8W5oszgcmegvv2ZdaYyVYDpp52cF8t99VbUIeWwKXYP/4JRDEboPNJd2vqZ+UjGU2jKJCrmAC/R2r3ObbjJIj5OY49738PipyZCTq8cko8pz3XEZBWCxsL+1ZdjLHHJXtwIDk/kELWnTFqdPYPRg/848wlplnAhMtE1uv10OFX6ggzYGMFDT3fm1Rj2XK26d7hFxrA94rV7/hP5DC5olh8xVgt/WhGRcK3hiun5D/A8AA7f6OwaqIBnD90bJSRM9BWgRnFx6yd6pbwp5nTY9DLDK/RFWLL+eWzHg8fbaBC+3ejIi1jGQ5pBwCTKi8Sh8QXDTSB0A+VVAHBX1vCNyCcjMyBFB2KvhDtqMWHO3WCqOINV4ZaPEdrHRnvEu9EL42P1k/ZwrUHTSL3WC4pfir5SdX7WagQFh2olLJAFpwgdvWf0I4E05rRoGSwOSvz9Vkt8dQsbMhuc7bCbIMAb5cmhg7abxYiXTgUq8OgJxtJ8+fW243l3QrKip9ZihEAsTnivtsYo4s2M6CAZzhcZ5A/ZdB1dpGzKzoNtSu3GN8Sn7aGFzU7F9KMJlNCQylccqsgcL8LaucIUZlX1UtjlNP8PWMCUd4pWfJcDBANZ8PVdD6goJnunSWpcq9hyZexvaloys3Vbu3dTGVmijTLGOnYkw4M/93/VdaNMRC6m+QBno7ox+Jl0tth+SUlQ3GVVBhqOSOr5pNWTYNxYBc1kNImHfAnsWgNQAmbIK4pgSVroMtE4bCbEsnXIZ4mr+7Sfxl3RkEzoUXMembMc/4Jqwe/2UMfB5L6J7c3JrzldKNdoFN7MOgaYdb9gEFeRWNOkqiqUXM12b4D6MjIRYGQ4993+w9XZt8N9S2Tdzj1HRh+JbrSZYdHNXxvtVyymwyb0/BeBPffeis0O4AZihbXemQt/xQNISiy9IWRU5w14+Cto7rXdcm9eb+KEL+/1ClZ2S5+ku4lwQcAeG6eYNpxw7qaeMdfOOWz3L2WKBMks7GYhRNv0wcTbsKgQML6kuRLclQ3iyVDbVSDUsKrVUx4Va7thwjV2KPA7ooiU4jpPsljI+tKc2PCPrivrD3JuYApVNKsDLxZ5MYfdP/jAPW6xzxVas09AHj771KKA0szYOZINAOr9sp53EJ+WnnxO+0hfLC2NOTSMZKWpguDsuLeVimxdOFiqQ+u0Xgzhk9KhXvQmL32CIivdd8PeEgU1DfnxlbZIsxwb5Zek7go5NY/eBM2+4rF9SGz2l6YeGswkrqazrnJBlE59ujDpFVxquMz70bFX9h5EGHvAJ8rYPQ8PNUaxHeBhPjfXf84n/aEPnmMEEjsXAQjZZp46QzDpLGqmv3qHX+EEDHjZFkuoEglcstA6b0V5zV1QA0993ejs+aq5KpezKdUzE8upeZc9ucOMSnuzXtcioYDLgS+difrBIWqOUhK1WwuhHR5nDvdpVti98AwDhcZIaqCPV9RLy7vqPtCa1l5f1u0su6GfrUrmq+q+ZJ8hLsbJQ/wzsC7O+9tND4NG0hhPl0g4ZokP8fyrJiFy6WsHdk7PJUNixnSMxracapI4yD8FdIbgm1Zb3a8drpO0fM3XPAzOXhj4RiwJoFqZt8+lzmZCDvKWPEY/94vpxK9+PjwXOBdYxmV3i7JohGuR1ogEkTCWrIg8B1h/WSmBkf7BK3XxGBDsJb6XTw7Kmyu21aClg5w7b6kgP1ARbEfJQn6tQqvm4616PWFJdaeUDtOEKT2vuJuH22+ZrCcqmakjImo7K5Kw32JZyGJYbxzwm86sOeS7ZuBA0vJ57qyHgC5+EI6iaPOutVPGmKJY8gj2z5RDb+qg7GbKpbtTsB+XbyeWagTg5sO3i+m1lby5y5BsuQbNE0L/fvT14+gzsKC3HamTvPd8H7WN+6OtEzDnSp4Co5pWh+w6/wy4njdR920p8aHj16RXyiGml0eg82xHXfquetBLN48J3sjUkt1zsJ4k+mjJLgbHMiQBhDBSfuvDpn7fVU/+hlkI9w/YG/T3TLLq0lou8zfMF8kyaXIzK/Jg29Bd8AxT8hSC3bSFiyom7Oj/G1DFortHGVYFjfi0I34vdCNYOi0VXknGWxdTM1pLTuLfpwxTSSIgXwnDyu2gkYhhiVMj+cVoa/zAoQeg4N8gTpNHPZ6Vza7EJ3qOsVJtpcbXPGneUVdFLlscm9farp8M9S5hImYQ7hjxygYDoYMczkmq3MMq90z2YgEWz9Bw67yLMARGU1OB2e3f5sIszQF73XEqZ5B9W7Xo72zrQBDd9M24qzJSZTfLFf6G83EMdXVc5iNSKXvkvpMerSz1oM1r9VOuPxvm2j+Wy/ImUsCO4J4rBOXU3QhVrTwaQULRmG6W57lRTKr6Y9MfU7K/zFnzcne0PGoEgsbR89zWn5Vm6ECAYHcd2Kg8mIiIqlPV0Xy8+WdG2l9rau71NEueDNyF49uOLuNXuhVcMQSSbTGqKtAO5vsPuyLkWw9cWhwXbfL9T9M+3Ex33Kp7mlIlsO6tyEFRK7tODvZR+WZgxLP5IFrRHHATF9zml6BXvnwYJCO6nMrpezx0NXy/8v3TvMIi/mXkYztBREAJ7nQantLcejhk/kdFwvNYkUzqJ/IQheezz0ST4ARMA00mgHFTRx73mhI7z3SpSYj6Sdy8GrdJ4IIZx1jKsWY4pVqrPP6iT0DaXfvL0Nh/seOLAv3RA/rw/UlIY7wdXO4YvTcBF3iHJ6oH4xhSxFCumqLpUby8Ul+t976h1MIgTcePmSBGwmmS4GHPAundQtE0vi+CpVk/NmpdRyWQw4cLbmap9f3IUvBHh7IwS9Pl2Wh6lvOmLjuMfGIKA2fhoExrhtOiS18nXVdIr4iITAywqfv8OqRkIb4UXeoPk5z1ihc8Yq+xXkzmwB4JCOH23+5ZKkY84lFx3HLR884u6Q0XzLfIQ3uCXO05Z2zlhZ0p9kqk/lGLD6jTAFLvxIVZBwJvsVvmOZuftDgZ6Qhs1qbZBkkD2hPMIit94RlHXN/FIZPD4JFexFWexug9tFZZzb5BDGcsmcwuS5qfoPMYngLkKuxEnGwml4ntu5c9GHbi97TVVCBmNmEQKPQtDqLHHPY1Eh5LSpfMFx+ZFWi2oYu0fDrq/CjSUD/sAGGTyUvMkIDcB90hpoaVp55fAbu7skGP7gxcqM29nJbrb4mfTiwiuIFoUDsyzDPVKIwyr3ee6mklmgES82phJBHhZ5EQfxNwctOaJiovNzNrlsq8CClaCRx+yGYlYs4JWVTJvnZs+eogfow+krdy8VXia+ZM2tQsTCwXLnDERKvYdHWas1SKydiX4J6W+TWS4aelFdw9PGAfPfdNGyJmHR1gehQWawx5SAAfqq+E6KI+Su9QHCmBNpxujccd6RKgI86YYuAoWrF6dsC44TnP2bAB9Ah++CkWtVGlxGGD2PnwKi78ollNPc7+PVFPpPLsDe//3QxS93k6fxaUy2d0ukoFeCKIaLMtRZJ/fYbq+qox40UfIePQSL5dcQQNeeWSiXTyfrdcCiOc0BP5H17jZnesculkWEQcwSu4rUMc4XHobNYss8/syIlOV7uzds3HQQ+An3A8xJ4Ct4bedrvfiyz6oe8lgiPvebDLx2C/elzJgu5IJD+34MV3r1x/A/f+eMoyv8JevBbLbo4V/YZixi1CpsnrmFKBwp4bhQOvN6BkKcQ7y7YA3wQG/rUDDCVP7mtwXE8horWSfzhsZt0m5uso2ltE24DvZPLRrQPW7xCAJ7uNOdHwWxLLepF0GxSoLkIL6qQ/P/GmvxQAtKmK5VyliV6b+M9YTztsZ7WUyZ1eONFcWkQRY5mNpPPZj0VWuTxTYv3UWeCyNkhevSSPDesk8rzUhi2wtAlpmIsy+kqPbKeGbn16POc6sQ8LmirJLW64aWiBto/3eH7bKqnyJP2qJoe28Ud0KUkCYKCEP/L6xbV1kaEahjLcflQCmy6VGSb7bgxTsSzAB5383/3yOxE/Wt6seuItyDqTAXz5ExQ3ih9vHkju2w42IAJnEA6yYmmm59OofOk4cqgux4A0W9IEL6jIEC550Rd492rMAoSykTjbcb3nwRlTkeSGJ8o56XWK7I1zLM091jK/uB7ebBafNAwI5emv/gTMjT7D585jp7tkJUkHXJprBImi155GWIKlGFhF4V6lYOFgv6odWLM9T57IePFk1ofuE0Gr1aWGQSA9YupVAZcFpUA0FSqE7GlJw+q9arSeLbKdQhTuKf3LQp+nQWTm4igV1Nc2ywIVM9Q3LxluvqYHZA9mrjFMyTjFjRC0Hg0FjuFH6pKO4=", "slh_dsa_public_key_b64": "4xP3mYAvQi63J+r4BSBjxHo5qStu4Zya067ygJbBbfU=", "signature_alg": "Ed25519+ML-DSA-65+SLH-DSA" } }