{"format":"attackledger-report/2","generated_at":"2026-10-09T17:16:37.448335+00:00","engagement":{"id":3,"name":"Client web app","type":"pentest","pack":{"id":"web-pentest-wstg","name":"Web application pentest (OWASP WSTG)","version":"0.1","lanes":[{"key":"info","name":"Information gathering"},{"key":"conf","name":"Configuration"},{"key":"idnt","name":"Identity management"},{"key":"athn","name":"Authentication"},{"key":"athz","name":"Authorization"},{"key":"sess","name":"Session management"},{"key":"inpv","name":"Input validation"},{"key":"errh","name":"Error handling"},{"key":"cryp","name":"Cryptography"},{"key":"busl","name":"Business logic"},{"key":"clnt","name":"Client side"},{"key":"apit","name":"API"}]},"policy_url":"https://example.com/statement-of-work","authorized_by":"demo operator","authorized_at":"2026-10-09T08:13:49.190759+00:00","scope":{"include":["api.client.test","app.client.test"],"exclude":[]},"research_identification":{"header":"X-Pentest: client-engagement","user_agent":null},"rate_limit_rps":5,"separation_of_duties":false,"require_signatures":true,"redact_evidence":true,"retain_until":null,"content_deleted":null},"summary":{"hosts_in_scope":2,"lanes_per_host":12,"lanes_possible":24,"lanes_opened":6,"lanes_receipted":5,"lanes_stale":0,"evidence_entries":43,"chain_head":"bc4fcec42ad58bd4f654844a1460084d646efb5269875e120a8703443bbc9e04"},"hosts":[{"host":"api.client.test","in_scope":true},{"host":"app.client.test","in_scope":true}],"lanes":[{"lane_id":6,"host":"api.client.test","role":"info","name":"Information gathering","status":"closed","items":[{"item_id":72,"idx":1,"key":"WSTG-INFO-01","text":"Search engine discovery and reconnaissance for information leakage","state":"done","na_reason":null,"controls":["ISO-A.5.9","DORA-ART8","PCI-11.4.1"]},{"item_id":73,"idx":2,"key":"WSTG-INFO-02","text":"Fingerprint the web server","state":"done","na_reason":null,"controls":["ISO-A.5.9","DORA-ART8","PCI-11.4.1"]},{"item_id":74,"idx":3,"key":"WSTG-INFO-03","text":"Review webserver metafiles for information leakage","state":"done","na_reason":null,"controls":["ISO-A.5.9","DORA-ART8","PCI-11.4.1"]},{"item_id":75,"idx":4,"key":"WSTG-INFO-04","text":"Enumerate applications on the webserver","state":"done","na_reason":null,"controls":["ISO-A.5.9","DORA-ART8","PCI-11.4.1"]},{"item_id":76,"idx":5,"key":"WSTG-INFO-05","text":"Review webpage content for information leakage","state":"na","na_reason":"not present on this host","controls":["ISO-A.5.9","DORA-ART8","PCI-11.4.1"]},{"item_id":77,"idx":6,"key":"WSTG-INFO-06","text":"Identify application entry points","state":"done","na_reason":null,"controls":["ISO-A.5.9","DORA-ART8","PCI-11.4.1"]},{"item_id":78,"idx":7,"key":"WSTG-INFO-07","text":"Map execution paths through the application","state":"done","na_reason":null,"controls":["ISO-A.5.9","DORA-ART8","PCI-11.4.1"]},{"item_id":79,"idx":8,"key":"WSTG-INFO-08","text":"Fingerprint the web application framework","state":"done","na_reason":null,"controls":["ISO-A.5.9","DORA-ART8","PCI-11.4.1"]},{"item_id":80,"idx":9,"key":"WSTG-INFO-09","text":"Fingerprint the web application","state":"done","na_reason":null,"controls":["ISO-A.5.9","DORA-ART8","PCI-11.4.1"]},{"item_id":81,"idx":10,"key":"WSTG-INFO-10","text":"Map the application architecture","state":"na","na_reason":"not present on this host","controls":["ISO-A.5.9","DORA-ART8","PCI-11.4.1"]}],"evidence_ids":[53,54,55,56,57,58,59,60],"receipt":{"manifest_sha256":"dc0b0155df6a04c04916c90b4c5f359046c9ea61d9f0af559d320229d3b5529b","closed_by":"Demo Reviewer","issued_at":"2026-10-09T15:26:05.342124+00:00","closed_by_user":2,"closed_by_email":"reviewer@demo.test","signature":{"algorithm":"Ed25519","public_key":"MCowBQYDK2VwAyEACE8cGhbuv5JXrnun8imJrWjKwTcVycpb09b2398UK6M=","key_fingerprint":"3a1adcccf00897adc6bc4ab0d25bfb506ba1f6dc06a8c206180aa401e0aea88c","payload":"{\"chain\":{\"head\":\"bc4fcec42ad58bd4f654844a1460084d646efb5269875e120a8703443bbc9e04\",\"seq\":43},\"engagement\":{\"id\":3,\"name\":\"Client web app\"},\"format\":\"attackledger-receipt-v3\",\"issued_at\":\"2026-10-09T15:26:04+00:00\",\"key_fingerprint\":\"3a1adcccf00897adc6bc4ab0d25bfb506ba1f6dc06a8c206180aa401e0aea88c\",\"lane\":{\"host\":\"api.client.test\",\"id\":6,\"role\":\"info\"},\"manifest_sha256\":\"dc0b0155df6a04c04916c90b4c5f359046c9ea61d9f0af559d320229d3b5529b\",\"signer\":{\"email\":\"reviewer@demo.test\",\"id\":2,\"name\":\"Demo Reviewer\"}}","value":"gKJMeNgqpimZMsDQhioJhkg/XUSWdgSU5umbB5pl5gb+KL+p9Sk2BZGlrNftfQxREZmKL9fu0C8+X704xVvNAQ=="},"timestamp":{"tsa":"http://timestamp.digicert.com","time":"2026-10-09T15:26:05+00:00","token":"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"}}},{"lane_id":5,"host":"app.client.test","role":"info","name":"Information gathering","status":"closed","items":[{"item_id":62,"idx":1,"key":"WSTG-INFO-01","text":"Search engine discovery and reconnaissance for information leakage","state":"done","na_reason":null,"controls":["ISO-A.5.9","DORA-ART8","PCI-11.4.1"]},{"item_id":63,"idx":2,"key":"WSTG-INFO-02","text":"Fingerprint the web server","state":"done","na_reason":null,"controls":["ISO-A.5.9","DORA-ART8","PCI-11.4.1"]},{"item_id":64,"idx":3,"key":"WSTG-INFO-03","text":"Review webserver metafiles for information leakage","state":"done","na_reason":null,"controls":["ISO-A.5.9","DORA-ART8","PCI-11.4.1"]},{"item_id":65,"idx":4,"key":"WSTG-INFO-04","text":"Enumerate applications on the webserver","state":"done","na_reason":null,"controls":["ISO-A.5.9","DORA-ART8","PCI-11.4.1"]},{"item_id":66,"idx":5,"key":"WSTG-INFO-05","text":"Review webpage content for information leakage","state":"na","na_reason":"not present on this host","controls":["ISO-A.5.9","DORA-ART8","PCI-11.4.1"]},{"item_id":67,"idx":6,"key":"WSTG-INFO-06","text":"Identify application entry points","state":"done","na_reason":null,"controls":["ISO-A.5.9","DORA-ART8","PCI-11.4.1"]},{"item_id":68,"idx":7,"key":"WSTG-INFO-07","text":"Map execution paths through the application","state":"done","na_reason":null,"controls":["ISO-A.5.9","DORA-ART8","PCI-11.4.1"]},{"item_id":69,"idx":8,"key":"WSTG-INFO-08","text":"Fingerprint the web application framework","state":"done","na_reason":null,"controls":["ISO-A.5.9","DORA-ART8","PCI-11.4.1"]},{"item_id":70,"idx":9,"key":"WSTG-INFO-09","text":"Fingerprint the web application","state":"done","na_reason":null,"controls":["ISO-A.5.9","DORA-ART8","PCI-11.4.1"]},{"item_id":71,"idx":10,"key":"WSTG-INFO-10","text":"Map the application architecture","state":"na","na_reason":"not present on this host","controls":["ISO-A.5.9","DORA-ART8","PCI-11.4.1"]}],"evidence_ids":[45,46,47,48,49,50,51,52],"receipt":{"manifest_sha256":"51c1ec010b939c85aceefab3e30778b10852fded92492b5b089038231fa8a841","closed_by":"Demo Reviewer","issued_at":"2026-10-09T15:26:05.764625+00:00","closed_by_user":2,"closed_by_email":"reviewer@demo.test","signature":{"algorithm":"Ed25519","public_key":"MCowBQYDK2VwAyEACE8cGhbuv5JXrnun8imJrWjKwTcVycpb09b2398UK6M=","key_fingerprint":"3a1adcccf00897adc6bc4ab0d25bfb506ba1f6dc06a8c206180aa401e0aea88c","payload":"{\"chain\":{\"head\":\"bc4fcec42ad58bd4f654844a1460084d646efb5269875e120a8703443bbc9e04\",\"seq\":43},\"engagement\":{\"id\":3,\"name\":\"Client web app\"},\"format\":\"attackledger-receipt-v3\",\"issued_at\":\"2026-10-09T15:26:05+00:00\",\"key_fingerprint\":\"3a1adcccf00897adc6bc4ab0d25bfb506ba1f6dc06a8c206180aa401e0aea88c\",\"lane\":{\"host\":\"app.client.test\",\"id\":5,\"role\":\"info\"},\"manifest_sha256\":\"51c1ec010b939c85aceefab3e30778b10852fded92492b5b089038231fa8a841\",\"signer\":{\"email\":\"reviewer@demo.test\",\"id\":2,\"name\":\"Demo Reviewer\"}}","value":"uA1uYS3YWJd2t+1WpFe6UzVXrkMun4zqsjKjDJa8i/buWysZrIbqmXH5EYpbbVJYDwv3MnKQjYz1QiBf2flDAw=="},"timestamp":{"tsa":"http://timestamp.digicert.com","time":"2026-10-09T15:26:05+00:00","token":"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"}}},{"lane_id":7,"host":"app.client.test","role":"conf","name":"Configuration","status":"closed","items":[{"item_id":82,"idx":1,"key":"WSTG-CONF-01","text":"Test network infrastructure configuration","state":"done","na_reason":null,"controls":["ISO-A.8.9","PCI-11.4.3"]},{"item_id":83,"idx":2,"key":"WSTG-CONF-02","text":"Test application platform configuration","state":"done","na_reason":null,"controls":["ISO-A.8.9","PCI-11.4.3"]},{"item_id":84,"idx":3,"key":"WSTG-CONF-03","text":"Test file extension handling for sensitive information","state":"done","na_reason":null,"controls":["ISO-A.8.9","PCI-11.4.3"]},{"item_id":85,"idx":4,"key":"WSTG-CONF-04","text":"Review old backup and unreferenced files","state":"done","na_reason":null,"controls":["ISO-A.8.9","PCI-11.4.3"]},{"item_id":86,"idx":5,"key":"WSTG-CONF-05","text":"Enumerate infrastructure and application admin interfaces","state":"na","na_reason":"not present on this host","controls":["ISO-A.8.9","PCI-11.4.3"]},{"item_id":87,"idx":6,"key":"WSTG-CONF-06","text":"Test HTTP methods","state":"done","na_reason":null,"controls":["ISO-A.8.9","PCI-11.4.3"]},{"item_id":88,"idx":7,"key":"WSTG-CONF-07","text":"Test HTTP Strict Transport Security","state":"done","na_reason":null,"controls":["ISO-A.8.9","PCI-11.4.3","ISO-A.8.24"]},{"item_id":89,"idx":8,"key":"WSTG-CONF-08","text":"Test RIA cross-domain policy","state":"done","na_reason":null,"controls":["ISO-A.8.9","PCI-11.4.3"]},{"item_id":90,"idx":9,"key":"WSTG-CONF-09","text":"Test file permissions","state":"done","na_reason":null,"controls":["ISO-A.8.9","PCI-11.4.3"]},{"item_id":91,"idx":10,"key":"WSTG-CONF-10","text":"Test for subdomain takeover","state":"na","na_reason":"not present on this host","controls":["ISO-A.8.9","PCI-11.4.3"]},{"item_id":92,"idx":11,"key":"WSTG-CONF-11","text":"Test cloud storage","state":"done","na_reason":null,"controls":["ISO-A.8.9","PCI-11.4.3"]}],"evidence_ids":[61,62,63,64,65,66,67,68,69],"receipt":{"manifest_sha256":"6c6025a25ba6ec2d9e9fc4853141c4f4a1857df7bfb1d6d394a0408726a58cb1","closed_by":"Demo Reviewer","issued_at":"2026-10-09T15:26:06.193003+00:00","closed_by_user":2,"closed_by_email":"reviewer@demo.test","signature":{"algorithm":"Ed25519","public_key":"MCowBQYDK2VwAyEACE8cGhbuv5JXrnun8imJrWjKwTcVycpb09b2398UK6M=","key_fingerprint":"3a1adcccf00897adc6bc4ab0d25bfb506ba1f6dc06a8c206180aa401e0aea88c","payload":"{\"chain\":{\"head\":\"bc4fcec42ad58bd4f654844a1460084d646efb5269875e120a8703443bbc9e04\",\"seq\":43},\"engagement\":{\"id\":3,\"name\":\"Client web app\"},\"format\":\"attackledger-receipt-v3\",\"issued_at\":\"2026-10-09T15:26:05+00:00\",\"key_fingerprint\":\"3a1adcccf00897adc6bc4ab0d25bfb506ba1f6dc06a8c206180aa401e0aea88c\",\"lane\":{\"host\":\"app.client.test\",\"id\":7,\"role\":\"conf\"},\"manifest_sha256\":\"6c6025a25ba6ec2d9e9fc4853141c4f4a1857df7bfb1d6d394a0408726a58cb1\",\"signer\":{\"email\":\"reviewer@demo.test\",\"id\":2,\"name\":\"Demo Reviewer\"}}","value":"r7SoKf3DwTO6Xo5C9b+PLtm+xC06qDU8Ghjfeg/kE37JGZn3u+Fm3ZWPWnAQE3xMTVHCX6TmOnOWUswcpRovBQ=="},"timestamp":{"tsa":"http://timestamp.digicert.com","time":"2026-10-09T15:26:06+00:00","token":"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"}}},{"lane_id":8,"host":"app.client.test","role":"athz","name":"Authorization","status":"closed","items":[{"item_id":93,"idx":1,"key":"WSTG-ATHZ-01","text":"Test for directory traversal and file inclusion","state":"done","na_reason":null,"controls":["ISO-A.5.15","PCI-6.2.4","PCI-11.4.3"]},{"item_id":94,"idx":2,"key":"WSTG-ATHZ-02","text":"Test for bypass of the authorization schema","state":"done","na_reason":null,"controls":["ISO-A.5.15","PCI-6.2.4","PCI-11.4.3"]},{"item_id":95,"idx":3,"key":"WSTG-ATHZ-03","text":"Test for privilege escalation","state":"done","na_reason":null,"controls":["ISO-A.5.15","PCI-6.2.4","PCI-11.4.3"]},{"item_id":96,"idx":4,"key":"WSTG-ATHZ-04","text":"Test for insecure direct object references","state":"done","na_reason":null,"controls":["ISO-A.5.15","PCI-6.2.4","PCI-11.4.3"]}],"evidence_ids":[70,71,72,73],"receipt":{"manifest_sha256":"8ed282dde205101815ab8ba63a2e41d07fda63838736c1e37a869c9acc27840a","closed_by":"Demo Reviewer","issued_at":"2026-10-09T15:26:06.597555+00:00","closed_by_user":2,"closed_by_email":"reviewer@demo.test","signature":{"algorithm":"Ed25519","public_key":"MCowBQYDK2VwAyEACE8cGhbuv5JXrnun8imJrWjKwTcVycpb09b2398UK6M=","key_fingerprint":"3a1adcccf00897adc6bc4ab0d25bfb506ba1f6dc06a8c206180aa401e0aea88c","payload":"{\"chain\":{\"head\":\"bc4fcec42ad58bd4f654844a1460084d646efb5269875e120a8703443bbc9e04\",\"seq\":43},\"engagement\":{\"id\":3,\"name\":\"Client web app\"},\"format\":\"attackledger-receipt-v3\",\"issued_at\":\"2026-10-09T15:26:06+00:00\",\"key_fingerprint\":\"3a1adcccf00897adc6bc4ab0d25bfb506ba1f6dc06a8c206180aa401e0aea88c\",\"lane\":{\"host\":\"app.client.test\",\"id\":8,\"role\":\"athz\"},\"manifest_sha256\":\"8ed282dde205101815ab8ba63a2e41d07fda63838736c1e37a869c9acc27840a\",\"signer\":{\"email\":\"reviewer@demo.test\",\"id\":2,\"name\":\"Demo Reviewer\"}}","value":"qQdfsuUqLzgNv2fZEx1MbzGJ5Zd4JMbyd+4wJ6Z2vXNrXoImgprnYmFu2az58r0IW5ttbMsyoZO8tkZNFdq7AQ=="},"timestamp":{"tsa":"http://timestamp.digicert.com","time":"2026-10-09T15:26:06+00:00","token":"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"}}},{"lane_id":9,"host":"app.client.test","role":"sess","name":"Session management","status":"closed","items":[{"item_id":97,"idx":1,"key":"WSTG-SESS-01","text":"Test the session management schema","state":"done","na_reason":null,"controls":["ISO-A.8.5","PCI-6.2.4","PCI-11.4.3"]},{"item_id":98,"idx":2,"key":"WSTG-SESS-02","text":"Test cookie attributes","state":"done","na_reason":null,"controls":["ISO-A.8.5","PCI-6.2.4","PCI-11.4.3"]},{"item_id":99,"idx":3,"key":"WSTG-SESS-03","text":"Test for session fixation","state":"done","na_reason":null,"controls":["ISO-A.8.5","PCI-6.2.4","PCI-11.4.3"]},{"item_id":100,"idx":4,"key":"WSTG-SESS-04","text":"Test for exposed session variables","state":"done","na_reason":null,"controls":["ISO-A.8.5","PCI-6.2.4","PCI-11.4.3"]},{"item_id":101,"idx":5,"key":"WSTG-SESS-05","text":"Test for cross-site request forgery","state":"na","na_reason":"not present on this host","controls":["ISO-A.8.5","PCI-6.2.4","PCI-11.4.3"]},{"item_id":102,"idx":6,"key":"WSTG-SESS-06","text":"Test logout functionality","state":"done","na_reason":null,"controls":["ISO-A.8.5","PCI-6.2.4","PCI-11.4.3"]},{"item_id":103,"idx":7,"key":"WSTG-SESS-07","text":"Test session timeout","state":"done","na_reason":null,"controls":["ISO-A.8.5","PCI-6.2.4","PCI-11.4.3"]},{"item_id":104,"idx":8,"key":"WSTG-SESS-08","text":"Test for session puzzling","state":"done","na_reason":null,"controls":["ISO-A.8.5","PCI-6.2.4","PCI-11.4.3"]},{"item_id":105,"idx":9,"key":"WSTG-SESS-09","text":"Test for session hijacking","state":"done","na_reason":null,"controls":["ISO-A.8.5","PCI-6.2.4","PCI-11.4.3"]}],"evidence_ids":[74,75,76,77,78,79,80,81],"receipt":{"manifest_sha256":"f37aa01e3b039ec06945c3393eccea320fed9a04e3d7d7b89205e60d107f49fb","closed_by":"Demo Reviewer","issued_at":"2026-10-09T15:26:07.001951+00:00","closed_by_user":2,"closed_by_email":"reviewer@demo.test","signature":{"algorithm":"Ed25519","public_key":"MCowBQYDK2VwAyEACE8cGhbuv5JXrnun8imJrWjKwTcVycpb09b2398UK6M=","key_fingerprint":"3a1adcccf00897adc6bc4ab0d25bfb506ba1f6dc06a8c206180aa401e0aea88c","payload":"{\"chain\":{\"head\":\"bc4fcec42ad58bd4f654844a1460084d646efb5269875e120a8703443bbc9e04\",\"seq\":43},\"engagement\":{\"id\":3,\"name\":\"Client web app\"},\"format\":\"attackledger-receipt-v3\",\"issued_at\":\"2026-10-09T15:26:06+00:00\",\"key_fingerprint\":\"3a1adcccf00897adc6bc4ab0d25bfb506ba1f6dc06a8c206180aa401e0aea88c\",\"lane\":{\"host\":\"app.client.test\",\"id\":9,\"role\":\"sess\"},\"manifest_sha256\":\"f37aa01e3b039ec06945c3393eccea320fed9a04e3d7d7b89205e60d107f49fb\",\"signer\":{\"email\":\"reviewer@demo.test\",\"id\":2,\"name\":\"Demo Reviewer\"}}","value":"/kEzKR3CZOxeD79/KCzaUOPgemaGJBWOOWzLYyifps5ese6+5poEmG+Vs1jBu88MNimCi8D3WpQSBiRfMDYDAQ=="},"timestamp":{"tsa":"http://timestamp.digicert.com","time":"2026-10-09T15:26:06+00:00","token":"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"}}},{"lane_id":10,"host":"app.client.test","role":"athn","name":"Authentication","status":"open","items":[{"item_id":106,"idx":1,"key":"WSTG-ATHN-01","text":"Test that credentials travel over an encrypted channel","state":"done","na_reason":null,"controls":["ISO-A.8.5","PCI-6.2.4","PCI-11.4.3","ISO-A.8.24"]},{"item_id":107,"idx":2,"key":"WSTG-ATHN-02","text":"Test for default credentials","state":"done","na_reason":null,"controls":["ISO-A.8.5","PCI-6.2.4","PCI-11.4.3"]},{"item_id":108,"idx":3,"key":"WSTG-ATHN-03","text":"Test for weak lockout mechanisms","state":"done","na_reason":null,"controls":["ISO-A.8.5","PCI-6.2.4","PCI-11.4.3"]},{"item_id":109,"idx":4,"key":"WSTG-ATHN-04","text":"Test for bypass of the authentication schema","state":"done","na_reason":null,"controls":["ISO-A.8.5","PCI-6.2.4","PCI-11.4.3"]},{"item_id":110,"idx":5,"key":"WSTG-ATHN-05","text":"Test for vulnerable remember-password functions","state":"na","na_reason":"not present on this host","controls":["ISO-A.8.5","PCI-6.2.4","PCI-11.4.3"]},{"item_id":111,"idx":6,"key":"WSTG-ATHN-06","text":"Test for browser cache weaknesses","state":"done","na_reason":null,"controls":["ISO-A.8.5","PCI-6.2.4","PCI-11.4.3"]},{"item_id":112,"idx":7,"key":"WSTG-ATHN-07","text":"Test for weak password policy","state":"done","na_reason":null,"controls":["ISO-A.8.5","PCI-6.2.4","PCI-11.4.3"]},{"item_id":113,"idx":8,"key":"WSTG-ATHN-08","text":"Test for weak security question and answer","state":"open","na_reason":null,"controls":["ISO-A.8.5","PCI-6.2.4","PCI-11.4.3"]},{"item_id":114,"idx":9,"key":"WSTG-ATHN-09","text":"Test for weak password change or reset functions","state":"open","na_reason":null,"controls":["ISO-A.8.5","PCI-6.2.4","PCI-11.4.3"]},{"item_id":115,"idx":10,"key":"WSTG-ATHN-10","text":"Test for weaker authentication in alternative channels","state":"open","na_reason":null,"controls":["ISO-A.8.5","PCI-6.2.4","PCI-11.4.3"]}],"evidence_ids":[82,83,84,85,86,87],"receipt":null}],"evidence":[{"id":45,"seq":1,"lane_id":5,"host":"app.client.test","role":"info","item_id":62,"kind":"note","sha256":"21ee57a2d39ceefdb3cb4d08299f057551cae388163404b549e9375334f3910c","uri":null,"summary":"lane 5 item 1 checked","created_at":"2026-10-09T08:13:48.798026+00:00","prev_hash":"0000000000000000000000000000000000000000000000000000000000000000","chain_hash":"feb76264b0f76b483c371ad7b3d4b410fa3d49228fee48cea6fc9766bdcdbf04"},{"id":46,"seq":2,"lane_id":5,"host":"app.client.test","role":"info","item_id":63,"kind":"note","sha256":"656b53fe693de94f90c7115c697058643f39930c4abf772e5928e713c278ce5e","uri":null,"summary":"lane 5 item 2 checked","created_at":"2026-10-09T08:13:48.804084+00:00","prev_hash":"feb76264b0f76b483c371ad7b3d4b410fa3d49228fee48cea6fc9766bdcdbf04","chain_hash":"fe016161099f58d73c85ec5e8862f11c9de5f7750f11208757df9449c032f809"},{"id":47,"seq":3,"lane_id":5,"host":"app.client.test","role":"info","item_id":64,"kind":"note","sha256":"5f537acc6d23b4d0222e2749b9ff35dcfc9b5cdb7dce8ddc23cbf9b0d35dfce0","uri":null,"summary":"lane 5 item 3 checked","created_at":"2026-10-09T08:13:48.810906+00:00","prev_hash":"fe016161099f58d73c85ec5e8862f11c9de5f7750f11208757df9449c032f809","chain_hash":"3c5df61e10e78a9b449c19beed303969600a5b9a6cdae09d3b6e8206b51f81b7"},{"id":48,"seq":4,"lane_id":5,"host":"app.client.test","role":"info","item_id":65,"kind":"note","sha256":"e28a7f45efb5d367f579a86965b3a7c72e158ee529e538b1622bedd5488486f9","uri":null,"summary":"lane 5 item 4 checked","created_at":"2026-10-09T08:13:48.817100+00:00","prev_hash":"3c5df61e10e78a9b449c19beed303969600a5b9a6cdae09d3b6e8206b51f81b7","chain_hash":"3594a9b8ea9655e7f34b631783f774498d1febe3f256e051c1a0c874fccd039c"},{"id":49,"seq":5,"lane_id":5,"host":"app.client.test","role":"info","item_id":67,"kind":"note","sha256":"a8372bfca0b7affad13d332e3f44c86106a9c5fc784002bd06b7b23e8bbc618c","uri":null,"summary":"lane 5 item 6 checked","created_at":"2026-10-09T08:13:48.827129+00:00","prev_hash":"3594a9b8ea9655e7f34b631783f774498d1febe3f256e051c1a0c874fccd039c","chain_hash":"e6caf8e7463271869aaff92004a655f4ca42daf956a5e59d94a0bf63670121c6"},{"id":50,"seq":6,"lane_id":5,"host":"app.client.test","role":"info","item_id":68,"kind":"note","sha256":"39ed9e992992d0458304c6ceffe633ac3d22b20ef03c15b27ec5f7341e441d37","uri":null,"summary":"lane 5 item 7 checked","created_at":"2026-10-09T08:13:48.833565+00:00","prev_hash":"e6caf8e7463271869aaff92004a655f4ca42daf956a5e59d94a0bf63670121c6","chain_hash":"0c3c99b59eac355f95e16f7a84ab04363dfbb2e2d67239d2758cb19e156bc48a"},{"id":51,"seq":7,"lane_id":5,"host":"app.client.test","role":"info","item_id":69,"kind":"note","sha256":"5fef2da8e4443a40a46bf5b19ed47611046fe75e14d44a3cbb61f622fee2db64","uri":null,"summary":"lane 5 item 8 checked","created_at":"2026-10-09T08:13:48.840116+00:00","prev_hash":"0c3c99b59eac355f95e16f7a84ab04363dfbb2e2d67239d2758cb19e156bc48a","chain_hash":"d4ac38106cc0bce4eae2f156cd663fcdd602dc3afa2fea4f7bd5e0b9e10acc97"},{"id":52,"seq":8,"lane_id":5,"host":"app.client.test","role":"info","item_id":70,"kind":"note","sha256":"906fec458c8eeab6022042e62bb7a7262914f866476f6e227c25b4763984ad2d","uri":null,"summary":"lane 5 item 9 checked","created_at":"2026-10-09T08:13:48.845908+00:00","prev_hash":"d4ac38106cc0bce4eae2f156cd663fcdd602dc3afa2fea4f7bd5e0b9e10acc97","chain_hash":"aa6895893e3b309a1239dd6ce93b652e05a34bafc6ccc9a8e6dc2439a6d789db"},{"id":53,"seq":9,"lane_id":6,"host":"api.client.test","role":"info","item_id":72,"kind":"note","sha256":"59b7af71ae7ac78b45bd77a70b151bd6a4b2c13aa5350ceafd52c2d89f6acec9","uri":null,"summary":"lane 6 item 1 checked","created_at":"2026-10-09T08:13:48.864420+00:00","prev_hash":"aa6895893e3b309a1239dd6ce93b652e05a34bafc6ccc9a8e6dc2439a6d789db","chain_hash":"d94ea1d19c6d6f69228e395b99037b10abd5265f285999335569f6454956275a"},{"id":54,"seq":10,"lane_id":6,"host":"api.client.test","role":"info","item_id":73,"kind":"note","sha256":"9c26848dc0eee47712e6506aee404b61e0aaaeadadba5a1740041a1218b5af0c","uri":null,"summary":"lane 6 item 2 checked","created_at":"2026-10-09T08:13:48.870248+00:00","prev_hash":"d94ea1d19c6d6f69228e395b99037b10abd5265f285999335569f6454956275a","chain_hash":"c4ac316a96689d1ea57d07ed3b6291b1fbfb9d59a8ce7253e628e6ce0e3e19d0"},{"id":55,"seq":11,"lane_id":6,"host":"api.client.test","role":"info","item_id":74,"kind":"note","sha256":"2f0e874c2c66cecf80f1ade6202ec8d8e58bbb4add99e7f252830a965dec6468","uri":null,"summary":"lane 6 item 3 checked","created_at":"2026-10-09T08:13:48.876146+00:00","prev_hash":"c4ac316a96689d1ea57d07ed3b6291b1fbfb9d59a8ce7253e628e6ce0e3e19d0","chain_hash":"e99b84ea960a26654230cc1580aad62817327bd1131777c1b9a03514b0121a31"},{"id":56,"seq":12,"lane_id":6,"host":"api.client.test","role":"info","item_id":75,"kind":"note","sha256":"2e384a0b0eacad85a46783ba58e6a49d0a4f63c21607e09c3dcc4a323a5236e6","uri":null,"summary":"lane 6 item 4 checked","created_at":"2026-10-09T08:13:48.882128+00:00","prev_hash":"e99b84ea960a26654230cc1580aad62817327bd1131777c1b9a03514b0121a31","chain_hash":"de5e14e6c30410e8d18039d5d9c4341a9878752f0a782b490aefcb53064fd67e"},{"id":57,"seq":13,"lane_id":6,"host":"api.client.test","role":"info","item_id":77,"kind":"note","sha256":"ad5f9a46d6a5fd564e07d838edec4b358ceab76a7177686baf762789384f4ffe","uri":null,"summary":"lane 6 item 6 checked","created_at":"2026-10-09T08:13:48.892828+00:00","prev_hash":"de5e14e6c30410e8d18039d5d9c4341a9878752f0a782b490aefcb53064fd67e","chain_hash":"baf3acbe9ae03cfe0f679d509515fa1ef85862bf9599e36689177cd87eb10d1f"},{"id":58,"seq":14,"lane_id":6,"host":"api.client.test","role":"info","item_id":78,"kind":"note","sha256":"06f031d963fefb7625b6c874bc4e1855e10b48a1c916af2b856cf397a85db599","uri":null,"summary":"lane 6 item 7 checked","created_at":"2026-10-09T08:13:48.900077+00:00","prev_hash":"baf3acbe9ae03cfe0f679d509515fa1ef85862bf9599e36689177cd87eb10d1f","chain_hash":"642a7d33c900c94174fd073cebd7f2fa38357c0ce0b5c46d94244b4d3cd8072f"},{"id":59,"seq":15,"lane_id":6,"host":"api.client.test","role":"info","item_id":79,"kind":"note","sha256":"70f851c804a21a40598b1e44cef59a6fbcc2e8aaad20b1f44dd84ff2bf1ef96a","uri":null,"summary":"lane 6 item 8 checked","created_at":"2026-10-09T08:13:48.906881+00:00","prev_hash":"642a7d33c900c94174fd073cebd7f2fa38357c0ce0b5c46d94244b4d3cd8072f","chain_hash":"dc2749923371cf8a9c81b542d09bb22e1e04b5508f8e151d1e56af0a6c1fd3a2"},{"id":60,"seq":16,"lane_id":6,"host":"api.client.test","role":"info","item_id":80,"kind":"note","sha256":"8f9a5b303d75320cd67c749475102b91f72cde03eccdd26072c98fe30d4317b2","uri":null,"summary":"lane 6 item 9 checked","created_at":"2026-10-09T08:13:48.913252+00:00","prev_hash":"dc2749923371cf8a9c81b542d09bb22e1e04b5508f8e151d1e56af0a6c1fd3a2","chain_hash":"660704e041147126c18e83ea725a90071d53a13b82ee111d3d0d4aab9d201543"},{"id":61,"seq":17,"lane_id":7,"host":"app.client.test","role":"conf","item_id":82,"kind":"note","sha256":"c4f4624fbd55b02d303e2c39e67e5074b6982c8912227b3eab64f555525f1d86","uri":null,"summary":"lane 7 item 1 checked","created_at":"2026-10-09T08:13:48.931643+00:00","prev_hash":"660704e041147126c18e83ea725a90071d53a13b82ee111d3d0d4aab9d201543","chain_hash":"85396d9d111da3a386fe57cfcc1a9cd79ca31bf71a593c47fd258a027f6ec9d2"},{"id":62,"seq":18,"lane_id":7,"host":"app.client.test","role":"conf","item_id":83,"kind":"note","sha256":"ddc59ebc9fbb1b0f6c47f96943816735dc99ee7bbfac8f12c04d516cf52830a6","uri":null,"summary":"lane 7 item 2 checked","created_at":"2026-10-09T08:13:48.937959+00:00","prev_hash":"85396d9d111da3a386fe57cfcc1a9cd79ca31bf71a593c47fd258a027f6ec9d2","chain_hash":"dc3d851d0f19bb815f536dea506cb59818755a850b3e97891229a3e60d7bcc51"},{"id":63,"seq":19,"lane_id":7,"host":"app.client.test","role":"conf","item_id":84,"kind":"note","sha256":"dcd50c54a3b611d2220ae63ec426c9a8a6e0c858da57bdc1299eb2faa4cb2513","uri":null,"summary":"lane 7 item 3 checked","created_at":"2026-10-09T08:13:48.944342+00:00","prev_hash":"dc3d851d0f19bb815f536dea506cb59818755a850b3e97891229a3e60d7bcc51","chain_hash":"40895d4b115219c9abdcbd9a40d94b9c86ac0769e06716af19c593bee959558f"},{"id":64,"seq":20,"lane_id":7,"host":"app.client.test","role":"conf","item_id":85,"kind":"note","sha256":"f0714d00399c881ca795856475eacd2e1f73fe6c0eb76a0ca876fc3b07b5e270","uri":null,"summary":"lane 7 item 4 checked","created_at":"2026-10-09T08:13:48.951557+00:00","prev_hash":"40895d4b115219c9abdcbd9a40d94b9c86ac0769e06716af19c593bee959558f","chain_hash":"26bed96aed9b857d2a0da59db8a560a45416a6b9a84d78b494fc6cc8d84105df"},{"id":65,"seq":21,"lane_id":7,"host":"app.client.test","role":"conf","item_id":87,"kind":"note","sha256":"a20e6deae2cef924996e7cffacf62713ad662a97ec819a577ea51a114ed03f4f","uri":null,"summary":"lane 7 item 6 checked","created_at":"2026-10-09T08:13:48.961153+00:00","prev_hash":"26bed96aed9b857d2a0da59db8a560a45416a6b9a84d78b494fc6cc8d84105df","chain_hash":"48370fd9c6c2d042a4ae7c5a3dcc6ebf9462f2d3e6d90a7ca2519134d5341a1c"},{"id":66,"seq":22,"lane_id":7,"host":"app.client.test","role":"conf","item_id":88,"kind":"note","sha256":"741b9f30ce730856b868787ba0235418f50378e3334cb3ec786de86332a27e67","uri":null,"summary":"lane 7 item 7 checked","created_at":"2026-10-09T08:13:48.967132+00:00","prev_hash":"48370fd9c6c2d042a4ae7c5a3dcc6ebf9462f2d3e6d90a7ca2519134d5341a1c","chain_hash":"480aa801686877d07436d60cdabca64a593f7d51144a90c83955bf426139ef5f"},{"id":67,"seq":23,"lane_id":7,"host":"app.client.test","role":"conf","item_id":89,"kind":"note","sha256":"4a560040dc2f2f69f001353ec8778d220f1fe891a5851c0bc0ffc3e88fcb5f7a","uri":null,"summary":"lane 7 item 8 checked","created_at":"2026-10-09T08:13:48.972964+00:00","prev_hash":"480aa801686877d07436d60cdabca64a593f7d51144a90c83955bf426139ef5f","chain_hash":"1d7d863ff9ee034aa99c8a429f32df970499e10f2cb3f5785a6d40fe9436d5b0"},{"id":68,"seq":24,"lane_id":7,"host":"app.client.test","role":"conf","item_id":90,"kind":"note","sha256":"fdbb9ccc1d79a087603b95b9a0345bdf4db3fca6ab2efe1186bef20ce6cc600e","uri":null,"summary":"lane 7 item 9 checked","created_at":"2026-10-09T08:13:48.979670+00:00","prev_hash":"1d7d863ff9ee034aa99c8a429f32df970499e10f2cb3f5785a6d40fe9436d5b0","chain_hash":"f9a6bff7262f21196a9eaf81358e7cb1c23dc242b35ae65f0ad39d11cc6e18ae"},{"id":69,"seq":25,"lane_id":7,"host":"app.client.test","role":"conf","item_id":92,"kind":"note","sha256":"c433371a14b5c478e5b79483c921e8116c6587cbedc349991c4e78e4de3d2d97","uri":null,"summary":"lane 7 item 11 checked","created_at":"2026-10-09T08:13:48.990902+00:00","prev_hash":"f9a6bff7262f21196a9eaf81358e7cb1c23dc242b35ae65f0ad39d11cc6e18ae","chain_hash":"c3f31c444020884dd490bdccde530c7e51616ab639bfceb2a646a17f8405e5c0"},{"id":70,"seq":26,"lane_id":8,"host":"app.client.test","role":"athz","item_id":93,"kind":"note","sha256":"7eafbd2fb67f51f754ed68eb8a24614e3ab421871c627b4399c477031383fe0b","uri":null,"summary":"lane 8 item 1 checked","created_at":"2026-10-09T08:13:49.007663+00:00","prev_hash":"c3f31c444020884dd490bdccde530c7e51616ab639bfceb2a646a17f8405e5c0","chain_hash":"11b5e35e0adb6a1ea79fe72435aabf7a13b0dc5dfe0c7b5149f88c35ed960a25"},{"id":71,"seq":27,"lane_id":8,"host":"app.client.test","role":"athz","item_id":94,"kind":"note","sha256":"0853f816af5e5320dacc4168702be5f119a01caa4a78f130878a385ea394047c","uri":null,"summary":"lane 8 item 2 checked","created_at":"2026-10-09T08:13:49.014266+00:00","prev_hash":"11b5e35e0adb6a1ea79fe72435aabf7a13b0dc5dfe0c7b5149f88c35ed960a25","chain_hash":"a48ca8af1441f425f571153762e236b2ecbb4cb57cd8790554a181380a61e397"},{"id":72,"seq":28,"lane_id":8,"host":"app.client.test","role":"athz","item_id":95,"kind":"note","sha256":"d99f6940c239cfde52840a9a0d0161b2163c2d9806f7e9bf250be48bf3c1e6bf","uri":null,"summary":"lane 8 item 3 checked","created_at":"2026-10-09T08:13:49.021624+00:00","prev_hash":"a48ca8af1441f425f571153762e236b2ecbb4cb57cd8790554a181380a61e397","chain_hash":"7f2234f7e7ffe39fa347caf57836be8515e200e69080903fae5a0c0cc6658ca6"},{"id":73,"seq":29,"lane_id":8,"host":"app.client.test","role":"athz","item_id":96,"kind":"note","sha256":"35faa3133235a580711104351562aa6278d4ec94b942997c48b057cfd38cbd38","uri":null,"summary":"lane 8 item 4 checked","created_at":"2026-10-09T08:13:49.028958+00:00","prev_hash":"7f2234f7e7ffe39fa347caf57836be8515e200e69080903fae5a0c0cc6658ca6","chain_hash":"351dfd76ae0edacb366ed12323323804645cc3d100ce5c238cb45eadf5a35d7d"},{"id":74,"seq":30,"lane_id":9,"host":"app.client.test","role":"sess","item_id":97,"kind":"note","sha256":"5475b2ca0eaca4c7a3497aae2f42f9453ffe50d0fe39ff444de39056e34ff8b4","uri":null,"summary":"lane 9 item 1 checked","created_at":"2026-10-09T08:13:49.046001+00:00","prev_hash":"351dfd76ae0edacb366ed12323323804645cc3d100ce5c238cb45eadf5a35d7d","chain_hash":"0a69477741788eeb7b5be4135bb30ab50ad389635c54710e2082c7d2805a1fe7"},{"id":75,"seq":31,"lane_id":9,"host":"app.client.test","role":"sess","item_id":98,"kind":"note","sha256":"4b042c7c6a626dbcefd9c91961c382699369aa9184a5de7f7e9a0ad81c94b95f","uri":null,"summary":"lane 9 item 2 checked","created_at":"2026-10-09T08:13:49.055309+00:00","prev_hash":"0a69477741788eeb7b5be4135bb30ab50ad389635c54710e2082c7d2805a1fe7","chain_hash":"5e51b39ba3022fa4a0f6e2dd3c871d79609bdb50a645a18b9785f2b513762d23"},{"id":76,"seq":32,"lane_id":9,"host":"app.client.test","role":"sess","item_id":99,"kind":"note","sha256":"3a15f3647e1ee58ce62dba4921778c96a010aeb8a73a8f8f0ecfc1c3f0e667ff","uri":null,"summary":"lane 9 item 3 checked","created_at":"2026-10-09T08:13:49.063344+00:00","prev_hash":"5e51b39ba3022fa4a0f6e2dd3c871d79609bdb50a645a18b9785f2b513762d23","chain_hash":"bb4e9207cd0ec21a2d368b2e9ff0bf84761603e528899a72f01beb259edec2c3"},{"id":77,"seq":33,"lane_id":9,"host":"app.client.test","role":"sess","item_id":100,"kind":"note","sha256":"5e02a08e362fe087a81c7a73570c421c7e8e2984a83bb1d9158af97d4dac5678","uri":null,"summary":"lane 9 item 4 checked","created_at":"2026-10-09T08:13:49.071224+00:00","prev_hash":"bb4e9207cd0ec21a2d368b2e9ff0bf84761603e528899a72f01beb259edec2c3","chain_hash":"c5a35eab636cc0746bc4e89613e51ebf7ab9d0ae6017bd251d977da0ead3077c"},{"id":78,"seq":34,"lane_id":9,"host":"app.client.test","role":"sess","item_id":102,"kind":"note","sha256":"f99f1db8c936d5c8d4dd41e9788eecfd87e3c72d16f3cc42bf37d03d20541e14","uri":null,"summary":"lane 9 item 6 checked","created_at":"2026-10-09T08:13:49.083388+00:00","prev_hash":"c5a35eab636cc0746bc4e89613e51ebf7ab9d0ae6017bd251d977da0ead3077c","chain_hash":"35dd98f360ca2812837d06561a09ec9b991771e113426dd9369e10c23987fd57"},{"id":79,"seq":35,"lane_id":9,"host":"app.client.test","role":"sess","item_id":103,"kind":"note","sha256":"4462deeead30938b15047c5002bcd0eb8a786a94400ba09b49ae3837ceeb16c2","uri":null,"summary":"lane 9 item 7 checked","created_at":"2026-10-09T08:13:49.095574+00:00","prev_hash":"35dd98f360ca2812837d06561a09ec9b991771e113426dd9369e10c23987fd57","chain_hash":"e558f118b4772459effb42474383e3c554b9e07f573b41e6f5dc03c744d1de14"},{"id":80,"seq":36,"lane_id":9,"host":"app.client.test","role":"sess","item_id":104,"kind":"note","sha256":"7c90a7bd41f7b03ba55995c2d28eb6f3be470739dccee4782073c8178096479c","uri":null,"summary":"lane 9 item 8 checked","created_at":"2026-10-09T08:13:49.104175+00:00","prev_hash":"e558f118b4772459effb42474383e3c554b9e07f573b41e6f5dc03c744d1de14","chain_hash":"af8a1a204429ef016e89cc211e150779431f979a7e9172f38380c28f6d24c727"},{"id":81,"seq":37,"lane_id":9,"host":"app.client.test","role":"sess","item_id":105,"kind":"note","sha256":"0329386ab3eefdc043f84325735641b1bdfc5cdf7d9343e03d1f80d156c2a495","uri":null,"summary":"lane 9 item 9 checked","created_at":"2026-10-09T08:13:49.112252+00:00","prev_hash":"af8a1a204429ef016e89cc211e150779431f979a7e9172f38380c28f6d24c727","chain_hash":"82a20fe0bcb5f643d0b54369b845dc6373a2675ee0ccb756d22e2a0d1e7e28dc"},{"id":82,"seq":38,"lane_id":10,"host":"app.client.test","role":"athn","item_id":106,"kind":"note","sha256":"caaca830b4a8af22e06c759a198930ca52466f0d7f05fd8c7ce91555b18b05d8","uri":null,"summary":"lane 10 item 1 checked","created_at":"2026-10-09T08:13:49.132455+00:00","prev_hash":"82a20fe0bcb5f643d0b54369b845dc6373a2675ee0ccb756d22e2a0d1e7e28dc","chain_hash":"8a2b6dd798d8f7f2f55242c35cc2ef72ec8515361d763ca2ffff3ad1d7e18fac"},{"id":83,"seq":39,"lane_id":10,"host":"app.client.test","role":"athn","item_id":107,"kind":"note","sha256":"3c0208c82e58e85fcdc75903d041e1cfd87744db6aa99b45c2d6ea4c54cc28db","uri":null,"summary":"lane 10 item 2 checked","created_at":"2026-10-09T08:13:49.139701+00:00","prev_hash":"8a2b6dd798d8f7f2f55242c35cc2ef72ec8515361d763ca2ffff3ad1d7e18fac","chain_hash":"44f7948bd4c4399bc00f8a6aae44c8678d41df630172a86d8d0e23148425a767"},{"id":84,"seq":40,"lane_id":10,"host":"app.client.test","role":"athn","item_id":108,"kind":"note","sha256":"f15b0d1e8d03bd0a3564d6f54371b5bd8253b3df9368aa92873455a642bae5bf","uri":null,"summary":"lane 10 item 3 checked","created_at":"2026-10-09T08:13:49.146061+00:00","prev_hash":"44f7948bd4c4399bc00f8a6aae44c8678d41df630172a86d8d0e23148425a767","chain_hash":"89ff8bff683f1629910cae5f91a475b23360c7d26708f6b9ba48aa5b87da4291"},{"id":85,"seq":41,"lane_id":10,"host":"app.client.test","role":"athn","item_id":109,"kind":"note","sha256":"ff30bab11c44ae0a455698c46232a48e6e68c0241f50c63282e2943af624b7d7","uri":null,"summary":"lane 10 item 4 checked","created_at":"2026-10-09T08:13:49.153239+00:00","prev_hash":"89ff8bff683f1629910cae5f91a475b23360c7d26708f6b9ba48aa5b87da4291","chain_hash":"d180ef5c1353dde57494629b20610cc76e03f8c00116996591dcfabf256a6a7b"},{"id":86,"seq":42,"lane_id":10,"host":"app.client.test","role":"athn","item_id":111,"kind":"note","sha256":"c3ebef1242f8ba9a6c2c9cbbec90c32a2e43ae6c39586d426b45cae2f4232280","uri":null,"summary":"lane 10 item 6 checked","created_at":"2026-10-09T08:13:49.162505+00:00","prev_hash":"d180ef5c1353dde57494629b20610cc76e03f8c00116996591dcfabf256a6a7b","chain_hash":"efb4f55ae1289f1dd2f4c491ce6a79b71bc94dbbb18ccf446bf9c30651008cde"},{"id":87,"seq":43,"lane_id":10,"host":"app.client.test","role":"athn","item_id":112,"kind":"note","sha256":"2574309596990f3323ded9ea4688f8b889ba3d747ec832a2da67a28d6681fd15","uri":null,"summary":"lane 10 item 7 checked","created_at":"2026-10-09T08:13:49.168495+00:00","prev_hash":"efb4f55ae1289f1dd2f4c491ce6a79b71bc94dbbb18ccf446bf9c30651008cde","chain_hash":"bc4fcec42ad58bd4f654844a1460084d646efb5269875e120a8703443bbc9e04"}],"jobs":[],"controls":{"engagement":"Client web app","pack":"web-pentest-wstg","hosts_in_scope":2,"disclaimer":"Indicative mapping of tests to controls; not a compliance determination.","controls":[{"id":"DORA-ART8","text":"Identification of ICT assets and risks","framework":"dora","framework_name":"EU DORA (Regulation 2022/2554)","required":20,"evidenced":16,"not_applicable":4,"lanes":["Information gathering"],"status":"resolved"},{"id":"ISO-A.5.15","text":"Access control","framework":"iso-27001-2022","framework_name":"ISO/IEC 27001:2022 Annex A","required":18,"evidenced":4,"not_applicable":0,"lanes":["Authorization","Identity management"],"status":"partial"},{"id":"ISO-A.5.9","text":"Inventory of information and other associated assets","framework":"iso-27001-2022","framework_name":"ISO/IEC 27001:2022 Annex A","required":20,"evidenced":16,"not_applicable":4,"lanes":["Information gathering"],"status":"resolved"},{"id":"ISO-A.8.24","text":"Use of cryptography","framework":"iso-27001-2022","framework_name":"ISO/IEC 27001:2022 Annex A","required":12,"evidenced":1,"not_applicable":0,"lanes":["Authentication","Configuration","Cryptography"],"status":"partial"},{"id":"ISO-A.8.28","text":"Secure coding","framework":"iso-27001-2022","framework_name":"ISO/IEC 27001:2022 Annex A","required":88,"evidenced":0,"not_applicable":0,"lanes":["API","Business logic","Client side","Error handling","Input validation"],"status":"none"},{"id":"ISO-A.8.5","text":"Secure authentication","framework":"iso-27001-2022","framework_name":"ISO/IEC 27001:2022 Annex A","required":38,"evidenced":8,"not_applicable":1,"lanes":["Authentication","Session management"],"status":"partial"},{"id":"ISO-A.8.9","text":"Configuration management","framework":"iso-27001-2022","framework_name":"ISO/IEC 27001:2022 Annex A","required":22,"evidenced":9,"not_applicable":2,"lanes":["Configuration"],"status":"partial"},{"id":"PCI-11.4.1","text":"A penetration testing methodology is defined and followed","framework":"pci-dss-4.0","framework_name":"PCI DSS v4.0","required":20,"evidenced":16,"not_applicable":4,"lanes":["Information gathering"],"status":"resolved"},{"id":"PCI-11.4.3","text":"External penetration testing is performed","framework":"pci-dss-4.0","framework_name":"PCI DSS v4.0","required":174,"evidenced":21,"not_applicable":3,"lanes":["API","Authentication","Authorization","Business logic","Client side","Configuration","Cryptography","Error handling","Identity management","Input validation","Session management"],"status":"partial"},{"id":"PCI-6.2.4","text":"Software engineering techniques prevent or mitigate common software attacks","framework":"pci-dss-4.0","framework_name":"PCI DSS v4.0","required":130,"evidenced":12,"not_applicable":1,"lanes":["API","Authentication","Authorization","Business logic","Client side","Input validation","Session management"],"status":"partial"},{"id":"PCI-6.4.1","text":"Public-facing web applications are protected against attacks","framework":"pci-dss-4.0","framework_name":"PCI DSS v4.0","required":64,"evidenced":0,"not_applicable":0,"lanes":["Client side","Input validation"],"status":"none"}]},"key_log":{"genesis":"0000000000000000000000000000000000000000000000000000000000000000","head":{"seq":3,"entry_hash":"03cbf20ad3f4a3d6aac2dde505b28f882c70ff5f968f0acd1a91c0a31145c13f"},"links":[{"seq":3,"prev_hash":"0361b11eccfddbfe3bbda663c53ccb6214bef1cbca7fc2322d4fd19c3f2aaf0f","record_sha256":"e64ad37b43bc91774a34b54be858b06ab18fbc9e2f1dd576fa592b950573a4c1","entry_hash":"03cbf20ad3f4a3d6aac2dde505b28f882c70ff5f968f0acd1a91c0a31145c13f"}],"entries":[{"seq":3,"user_id":2,"user_name":"Demo Reviewer","key_fingerprint":"3a1adcccf00897adc6bc4ab0d25bfb506ba1f6dc06a8c206180aa401e0aea88c","algorithm":"Ed25519","event":"registered","at":"2026-10-09T15:26:04.852229+00:00","via":"own_session"}]},"audit_log":{"genesis":"0000000000000000000000000000000000000000000000000000000000000000","head":{"seq":16,"entry_hash":"663718800e32efa46633c31833d705f86262eefe136ac52766768a95a991b996"},"links":[{"seq":2,"prev_hash":"0f2a3041a0e2d5411225911477249d10a295bb4546466276d730d4b2ca2746bc","record_sha256":"66e16fc2f0c8979c90a7eeb04b3d8c03bd5bce7fb1caaee3ba63cebc078da208","entry_hash":"f0cb1d376db0f050b880c04ef020c90a3247b9dfc06abdd035481eaf6beae66b"},{"seq":3,"prev_hash":"f0cb1d376db0f050b880c04ef020c90a3247b9dfc06abdd035481eaf6beae66b","record_sha256":"ebaf1c894dcd208de0cd15cb9e2a9f605bfebbc26b6c7095d5faf028c6fcd31b","entry_hash":"623b48bfa1294c1198cc9dd9ef7be43d4a10683bb1547585cf3a1e7d9aae8992"},{"seq":4,"prev_hash":"623b48bfa1294c1198cc9dd9ef7be43d4a10683bb1547585cf3a1e7d9aae8992","record_sha256":"c5d7adea946b71cce677b49ab11382f236b8655c08954f231b7d236e43fdc583","entry_hash":"152f71bb7485795f7d117e20a726850bd15fb640d412048cfb6d258c6cbda511"},{"seq":5,"prev_hash":"152f71bb7485795f7d117e20a726850bd15fb640d412048cfb6d258c6cbda511","record_sha256":"ed03db765d15987ec37b7761009f94df51364996bcc1ea9208b892058bdf7c0a","entry_hash":"72fd21df8b9f047d79d96552d222cc26f9607921f824848bcae35b270fd80cd1"},{"seq":6,"prev_hash":"72fd21df8b9f047d79d96552d222cc26f9607921f824848bcae35b270fd80cd1","record_sha256":"3368bba0d7f2471772f4305068a77002e3fc25058285a0c47351208b0fb4a4d9","entry_hash":"c0fe930ce276c3db7c6aaaa2e6643d29e43c11f8b7685fd0df47d2cd836962b3"},{"seq":7,"prev_hash":"c0fe930ce276c3db7c6aaaa2e6643d29e43c11f8b7685fd0df47d2cd836962b3","record_sha256":"af87edb752256353e0104baf8f89100533c4f21ebb5cf3aef639ebd55bcd5e83","entry_hash":"6998c0f43610e3919d35b1d2c2a5117ab4a25ee24fa0656c3f02742801260a88"},{"seq":8,"prev_hash":"6998c0f43610e3919d35b1d2c2a5117ab4a25ee24fa0656c3f02742801260a88","record_sha256":"5ae52ff88b2080e750ac5bdb33f833bde1aa8598daf22f7619246395eb44dff0","entry_hash":"e08a1642144034102df62a90033a323397caa02e5d4de86a7a58628d94e8d792"},{"seq":9,"prev_hash":"e08a1642144034102df62a90033a323397caa02e5d4de86a7a58628d94e8d792","record_sha256":"67824c914a84edeaa03814e32329b48aea05928eadc72aef76af39a52b5de2ad","entry_hash":"7b18a6d86f3c1c05889c610cd37570348c0eff0ef3d7283def38c806a33e9269"},{"seq":10,"prev_hash":"7b18a6d86f3c1c05889c610cd37570348c0eff0ef3d7283def38c806a33e9269","record_sha256":"583ef1496dc718d569f533734e39bdd9c7aed08145b4fe7bdb99ef53383f8bab","entry_hash":"0071d036518f68d711ae1fabe0ed1627ae688c3d9e3e972ef4b807b5e919b400"},{"seq":11,"prev_hash":"0071d036518f68d711ae1fabe0ed1627ae688c3d9e3e972ef4b807b5e919b400","record_sha256":"6923c617b268b7827225742abab6efbef90484076c9435b22793327d176aee18","entry_hash":"16af5618ce64a44de48443ff8c682d792a0db379de87a1934978825b8311c758"},{"seq":12,"prev_hash":"16af5618ce64a44de48443ff8c682d792a0db379de87a1934978825b8311c758","record_sha256":"ac8b915ac735e2ebd99b9c398f98ebcd325307a2b9b449f1e4b5f2cc3f0e234d","entry_hash":"5e195d53bc9a6ca92592df541df2c586ffe375f28d94194771c237788cca8633"},{"seq":13,"prev_hash":"5e195d53bc9a6ca92592df541df2c586ffe375f28d94194771c237788cca8633","record_sha256":"c96ecd272410e52f0dbfdf4aee072c64baf1c999f379007399589a79bd1e8987","entry_hash":"b19464ffc917415120445694e775a3869ada48f9caed9ae0e766a47fda8fdf53"},{"seq":14,"prev_hash":"b19464ffc917415120445694e775a3869ada48f9caed9ae0e766a47fda8fdf53","record_sha256":"e4a851101f20bbf617e586e499bdc7e714054bb7babb052c6110263a53acb038","entry_hash":"18a6832710879439822dfdee2b1d203b87f022053eed58a077182e6003e088ad"},{"seq":15,"prev_hash":"18a6832710879439822dfdee2b1d203b87f022053eed58a077182e6003e088ad","record_sha256":"1a9122fdb28fa3408992f73952f9c5865ca986f62a2746278236ab1e8bc8698a","entry_hash":"efe4fc0840f2b92a03405d879f108d00777486842bedaf22a7c6a03057e08619"},{"seq":16,"prev_hash":"efe4fc0840f2b92a03405d879f108d00777486842bedaf22a7c6a03057e08619","record_sha256":"349efecba1c376b8171c7adf0a96786c3e389673c8e28ae30b88201700186bc6","entry_hash":"663718800e32efa46633c31833d705f86262eefe136ac52766768a95a991b996"}],"entries":[{"seq":2,"at":"2026-10-09T15:25:28.307507+00:00","actor":{"kind":"backfill","user_id":null,"name":"audit log backfill","email":null},"action":"person.created","engagement_id":null,"subject_id":2,"change":{"after":{"disabled":false,"email":"reviewer@demo.test","is_owner":false,"name":"Demo Reviewer"},"person":{"email":"reviewer@demo.test","id":2,"name":"Demo Reviewer"}}},{"seq":11,"at":"2026-10-09T15:25:28.307507+00:00","actor":{"kind":"backfill","user_id":null,"name":"audit log backfill","email":null},"action":"scope.updated","engagement_id":3,"subject_id":null,"change":{"after":{"crawl_depth":3,"enabled_modules":[],"exclude":[],"include":["api.client.test","app.client.test"],"rate_limit_rps":5,"research_header":"X-Pentest: client-engagement","research_user_agent":null},"before":null}},{"seq":12,"at":"2026-10-09T15:25:28.307507+00:00","actor":{"kind":"backfill","user_id":null,"name":"audit log backfill","email":null},"action":"engagement.settings","engagement_id":3,"subject_id":null,"change":{"after":{"redact_evidence":true,"require_signatures":true,"separation_of_duties":false},"before":null}},{"seq":13,"at":"2026-10-09T15:25:28.307507+00:00","actor":{"kind":"backfill","user_id":null,"name":"audit log backfill","email":null},"action":"engagement.authorized","engagement_id":3,"subject_id":null,"change":{"after":{"authorized_at":"2026-10-09T08:13:49.190759+00:00","authorized_by":"demo operator","policy_url":"https://example.com/statement-of-work"},"before":null}},{"seq":14,"at":"2026-10-09T15:25:28.307507+00:00","actor":{"kind":"backfill","user_id":null,"name":"audit log backfill","email":null},"action":"members.updated","engagement_id":3,"subject_id":null,"change":{"after":[{"email":"reviewer@demo.test","name":"Demo Reviewer","roles":["reviewer"],"user_id":2}],"before":null}},{"seq":15,"at":"2026-10-09T15:26:04.675343+00:00","actor":{"kind":"cli","user_id":null,"name":"operator CLI","email":null},"action":"person.password_reset","engagement_id":null,"subject_id":2,"change":{"password":"assigned","person":{"email":"reviewer@demo.test","id":2,"name":"Demo Reviewer"},"sessions_ended":true}},{"seq":16,"at":"2026-10-09T15:26:04.843523+00:00","actor":{"kind":"person","user_id":2,"name":"Demo Reviewer","email":"reviewer@demo.test"},"action":"person.password_changed","engagement_id":null,"subject_id":2,"change":{"password_chosen":true,"person":{"email":"reviewer@demo.test","id":2,"name":"Demo Reviewer"}}}]},"integrity":{"algorithm":"sha256","body_sha256":"9ab896035138e8a2fa471f6e8e70caac46caeb725f1c2e586cfc11cfee9b48cd","chain_genesis":"0000000000000000000000000000000000000000000000000000000000000000"}}