{"schemaVersion":1,"reportPath":"/reports/4ea4cfc4-c1e2-491f-a591-3d1aaf3145dd","status":{"id":"4ea4cfc4-c1e2-491f-a591-3d1aaf3145dd","scanId":"44cc5cbf-9f91-43f5-ab85-a44ab461ff9a","invalidatedAt":null,"invalidationReason":null,"replacedBy":null,"snapshotAvailable":true,"policyAllowed":true,"createdAt":"2026-10-09T06:03:31.857Z","observationRevision":0,"previousScanId":null,"previousReportId":null,"current":true},"summary":{"id":"4ea4cfc4-c1e2-491f-a591-3d1aaf3145dd","scanId":"44cc5cbf-9f91-43f5-ab85-a44ab461ff9a","artifact":{"name":"preact","version":"11.0.0","integrity":"sha512-LRTLKuSe6VYPhvBDjwFaX+nuZnpsw6IN2GSboisAvhGsncylBmrbDCERhgKDn6yP2mAwbGvsB5OVyTe33M8gBg==","tarballUrl":"https://registry.npmjs.org/preact/-/preact-11.0.0.tgz"},"observedAt":"2026-10-09T06:03:31.441Z","classifiedAt":"2026-10-09T06:03:31.861Z","classifierRevision":"classifier_v2","matrix":{"id":"65c01fb7-c3ae-4ddd-9f4a-1d1787e56842","revision":"production_9ec43ff508961f8e502723462d123971","platform":"linux_amd64_glibc","harnessRevision":"load_v2","planRevision":"explicit_exports_v1","policyRevision":"runtime_limits_v2","images":[{"profileId":"node_24_21_0","kind":"node","version":"24.21.0","imageId":"sha256:780e803cd17524cd7672c0affdd0c646e9b519c53266f5ae9018ab3b31f83fb3","builtAt":"2026-10-04T15:20:38.392Z","sourceImage":"node:24.21.0-bookworm-slim@sha256:5cbc7caba8c2c0f0bca675d1b61b9f2857e1cf1853c6164ee9dd409501a936e7","baseImage":"gcr.io/distroless/cc-debian13:nonroot@sha256:20afe6a70f2565277b704cc17289cb557f353a3619f6350f52a2317106598df4","supportImage":"node:26.10.0-bookworm-slim@sha256:0a992e1420e2d70611578f1844a6f10a9d11fe6bb535aabf72efe3007f13d79b","platform":"linux_amd64_glibc","recipeRevision":"runtime_image_v1"},{"profileId":"node_26_10_0","kind":"node","version":"26.10.0","imageId":"sha256:6f8b23272379925b25c19f9225ce8ef83776d99dea34a0e43451ac3f96204323","builtAt":"2026-10-04T15:20:47.161Z","sourceImage":"node:26.10.0-bookworm-slim@sha256:0a992e1420e2d70611578f1844a6f10a9d11fe6bb535aabf72efe3007f13d79b","baseImage":"gcr.io/distroless/cc-debian13:nonroot@sha256:20afe6a70f2565277b704cc17289cb557f353a3619f6350f52a2317106598df4","supportImage":"node:26.10.0-bookworm-slim@sha256:0a992e1420e2d70611578f1844a6f10a9d11fe6bb535aabf72efe3007f13d79b","platform":"linux_amd64_glibc","recipeRevision":"runtime_image_v1"},{"profileId":"bun_1_4_2","kind":"bun","version":"1.4.2","imageId":"sha256:24f5ff9755b8dbebafba484dc621d9159ff70c237902cd1fc889ec337c6ad8c9","builtAt":"2026-10-04T15:21:07.160Z","sourceImage":"oven/bun:1.4.2-debian@sha256:53710ce0f14eef8312521c586a7ae1d9aeab4011840f09f1966073b68fc2e2ab","baseImage":"gcr.io/distroless/cc-debian13:nonroot@sha256:20afe6a70f2565277b704cc17289cb557f353a3619f6350f52a2317106598df4","supportImage":"node:26.10.0-bookworm-slim@sha256:0a992e1420e2d70611578f1844a6f10a9d11fe6bb535aabf72efe3007f13d79b","platform":"linux_amd64_glibc","recipeRevision":"runtime_image_v1"},{"profileId":"deno_2_9_7","kind":"deno","version":"2.9.7","imageId":"sha256:8947185bb06b0d2aded69f46ac1638e862bdbe80a760600efbfd17d2feadfd1a","builtAt":"2026-10-04T15:21:22.570Z","sourceImage":"denoland/deno:debian-2.9.7@sha256:869d374bdaddda4fde029c492d7219199b0e821c2c53cca5357b3a6f5b9336fc","baseImage":"gcr.io/distroless/cc-debian13:nonroot@sha256:20afe6a70f2565277b704cc17289cb557f353a3619f6350f52a2317106598df4","supportImage":"node:26.10.0-bookworm-slim@sha256:0a992e1420e2d70611578f1844a6f10a9d11fe6bb535aabf72efe3007f13d79b","platform":"linux_amd64_glibc","recipeRevision":"runtime_image_v1"}]},"outcome":"inconclusive","evidenceLevel":"smoke_tested","coverageComplete":true,"limitations":["Only installation and loading were observed; functional correctness and package safety are not established.","Subpath batches share module caches and globals; root modes use separate fresh sandboxes.","Package-visible harness observations can be tampered with. They are not adversarial attestation.","Evidence applies to these exact artifacts, dependency snapshot, runtime images and Linux amd64/glibc policy.","Runtime error codes are captured observations and can also be thrown by package code."],"preparation":{"id":"b06f815f-32b3-4da0-ad2f-4326d58d8a44","outcome":"pass","failure":null,"profileRevision":"npm_11_19_0_linux_amd64_v2","snapshot":{"id":"5adfc437-031f-4443-8cd1-fa6ea475a4b1","generation":"033a249b-b4c1-4bad-9b4e-dcb586d88652","lockDigest":"ed87c621cac1befd6cfc9982e7ceb7c9ddc881a3b5e08aa44dface3201ed96c1","treeDigest":"6112a50f6235ed2b38d7d0fa09ac040cc4d5d95cecc45c820a9379690caf0a71","profileRevision":"npm_11_19_0_linux_amd64_v2","installerImage":"node:24.21.0-bookworm-slim@sha256:5cbc7caba8c2c0f0bca675d1b61b9f2857e1cf1853c6164ee9dd409501a936e7"},"installedCount":1,"omittedOptionalCount":0},"cells":[{"runId":"6bbdf3ea-bfb5-4a2d-916c-1dadb4babf3a","profileId":"node_24_21_0","group":"root","mode":"esm","method":"fresh_root_v2","outcome":"pass","evidenceLevel":"smoke_tested","coverage":{"planned":1,"observed":1,"passed":1,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":361.71830999999656,"failure":null},{"runId":"59ca8b5b-9c1f-4aee-b72f-9d910aa2f230","profileId":"node_24_21_0","group":"root","mode":"commonjs","method":"fresh_root_v2","outcome":"pass","evidenceLevel":"smoke_tested","coverage":{"planned":1,"observed":1,"passed":1,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":356.54241500000353,"failure":null},{"runId":"0b3276eb-fa2c-40b9-803b-e020ba694a79","profileId":"node_24_21_0","group":"subpaths","mode":"esm","method":"sequential_batch_v2","outcome":"inconclusive","evidenceLevel":"smoke_tested","coverage":{"planned":14,"observed":14,"passed":12,"failed":2,"prerequisiteLimited":2,"interrupted":0,"untested":0,"complete":true},"durationMs":335.5420040000172,"failure":{"classification":"optional_peer_missing","phase":"module_resolution","origin":"prerequisite","retryable":false,"source":"captured_error_code","message":"Cannot find package 'preact-render-to-string' imported from /workspace/node_modules/preact/compat/server.mjs","optionalPeer":{"name":"preact-render-to-string","range":">=6.7.0"}}},{"runId":"f13c23e9-67eb-4e2a-91ee-142a50c0c20b","profileId":"node_24_21_0","group":"subpaths","mode":"commonjs","method":"sequential_batch_v2","outcome":"inconclusive","evidenceLevel":"smoke_tested","coverage":{"planned":14,"observed":14,"passed":12,"failed":2,"prerequisiteLimited":2,"interrupted":0,"untested":0,"complete":true},"durationMs":344.92544399999315,"failure":{"classification":"optional_peer_missing","phase":"module_resolution","origin":"prerequisite","retryable":false,"source":"harness_observation","message":"renderToString() error: missing \"preact-render-to-string\" dependency.","optionalPeer":{"name":"preact-render-to-string","range":">=6.7.0"}}},{"runId":"adc500d2-54f1-41bb-a580-ad3f78aa79fd","profileId":"node_26_10_0","group":"root","mode":"esm","method":"fresh_root_v2","outcome":"pass","evidenceLevel":"smoke_tested","coverage":{"planned":1,"observed":1,"passed":1,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":335.24542299998575,"failure":null},{"runId":"c4bbe1fd-2c76-4dc9-963a-b360b6bdf75d","profileId":"node_26_10_0","group":"root","mode":"commonjs","method":"fresh_root_v2","outcome":"pass","evidenceLevel":"smoke_tested","coverage":{"planned":1,"observed":1,"passed":1,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":320.02840899999137,"failure":null},{"runId":"59cbc2b6-44ec-4a84-a257-2a3987391b1b","profileId":"node_26_10_0","group":"subpaths","mode":"esm","method":"sequential_batch_v2","outcome":"inconclusive","evidenceLevel":"smoke_tested","coverage":{"planned":14,"observed":14,"passed":12,"failed":2,"prerequisiteLimited":2,"interrupted":0,"untested":0,"complete":true},"durationMs":316.0772129999823,"failure":{"classification":"optional_peer_missing","phase":"module_resolution","origin":"prerequisite","retryable":false,"source":"captured_error_code","message":"Cannot find package 'preact-render-to-string' imported from /workspace/node_modules/preact/compat/server.mjs","optionalPeer":{"name":"preact-render-to-string","range":">=6.7.0"}}},{"runId":"80f2cf88-0f14-448a-b37f-afbe4cd6f5af","profileId":"node_26_10_0","group":"subpaths","mode":"commonjs","method":"sequential_batch_v2","outcome":"inconclusive","evidenceLevel":"smoke_tested","coverage":{"planned":14,"observed":14,"passed":12,"failed":2,"prerequisiteLimited":2,"interrupted":0,"untested":0,"complete":true},"durationMs":328.62762099999236,"failure":{"classification":"optional_peer_missing","phase":"module_resolution","origin":"prerequisite","retryable":false,"source":"harness_observation","message":"renderToString() error: missing \"preact-render-to-string\" dependency.","optionalPeer":{"name":"preact-render-to-string","range":">=6.7.0"}}},{"runId":"e454629b-fe43-4265-a748-b27e69b51de6","profileId":"bun_1_4_2","group":"root","mode":"esm","method":"fresh_root_v2","outcome":"pass","evidenceLevel":"smoke_tested","coverage":{"planned":1,"observed":1,"passed":1,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":349.53682900001877,"failure":null},{"runId":"8a5ddc48-e48a-4fc3-9bcd-7e2a8dc5216b","profileId":"bun_1_4_2","group":"root","mode":"commonjs","method":"fresh_root_v2","outcome":"pass","evidenceLevel":"smoke_tested","coverage":{"planned":1,"observed":1,"passed":1,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":312.7398239999893,"failure":null},{"runId":"b4f8b677-813c-43e4-80a7-c889a5bbe6a4","profileId":"bun_1_4_2","group":"subpaths","mode":"esm","method":"sequential_batch_v2","outcome":"partial","evidenceLevel":"smoke_tested","coverage":{"planned":14,"observed":14,"passed":12,"failed":2,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":316.78513099998236,"failure":{"classification":"esm_import_failed","phase":"module_evaluation","origin":"package","retryable":false,"source":"harness_observation","message":"The runtime reported a loading failure without a captured error message. Its cause is unknown."}},{"runId":"aa9be43e-88c9-4aa6-b6c7-c0678137a597","profileId":"bun_1_4_2","group":"subpaths","mode":"commonjs","method":"sequential_batch_v2","outcome":"inconclusive","evidenceLevel":"smoke_tested","coverage":{"planned":14,"observed":14,"passed":12,"failed":2,"prerequisiteLimited":1,"interrupted":0,"untested":0,"complete":true},"durationMs":349.85430000000633,"failure":{"classification":"optional_peer_missing","phase":"module_resolution","origin":"prerequisite","retryable":false,"source":"harness_observation","message":"renderToString() error: missing \"preact-render-to-string\" dependency.","optionalPeer":{"name":"preact-render-to-string","range":">=6.7.0"}}},{"runId":"8fbcd6d5-f575-45f5-a891-2fe1dd84369f","profileId":"deno_2_9_7","group":"root","mode":"esm","method":"fresh_root_v2","outcome":"pass","evidenceLevel":"smoke_tested","coverage":{"planned":1,"observed":1,"passed":1,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":441.14414299998316,"failure":null},{"runId":"9d277660-7456-4de7-8626-09273764ffcb","profileId":"deno_2_9_7","group":"root","mode":"commonjs","method":"fresh_root_v2","outcome":"pass","evidenceLevel":"smoke_tested","coverage":{"planned":1,"observed":1,"passed":1,"failed":0,"prerequisiteLimited":0,"interrupted":0,"untested":0,"complete":true},"durationMs":404.9986420000205,"failure":null},{"runId":"ae087646-1db1-458c-b0df-6be8bcfc5cdc","profileId":"deno_2_9_7","group":"subpaths","mode":"esm","method":"sequential_batch_v2","outcome":"inconclusive","evidenceLevel":"smoke_tested","coverage":{"planned":14,"observed":14,"passed":12,"failed":2,"prerequisiteLimited":2,"interrupted":0,"untested":0,"complete":true},"durationMs":413.10687399999006,"failure":{"classification":"optional_peer_missing","phase":"module_resolution","origin":"prerequisite","retryable":false,"source":"captured_error_code","message":"Could not find package 'preact-render-to-string' from referrer 'file:///workspace/node_modules/preact/compat/server.mjs'.","optionalPeer":{"name":"preact-render-to-string","range":">=6.7.0"}}},{"runId":"8154337b-66ff-44dd-97b1-89a158a37e06","profileId":"deno_2_9_7","group":"subpaths","mode":"commonjs","method":"sequential_batch_v2","outcome":"inconclusive","evidenceLevel":"smoke_tested","coverage":{"planned":14,"observed":14,"passed":12,"failed":2,"prerequisiteLimited":2,"interrupted":0,"untested":0,"complete":true},"durationMs":439.9165090000024,"failure":{"classification":"optional_peer_missing","phase":"module_resolution","origin":"prerequisite","retryable":false,"source":"harness_observation","message":"renderToString() error: missing \"preact-render-to-string\" dependency.","optionalPeer":{"name":"preact-render-to-string","range":">=6.7.0"}}}],"runtimes":[{"profileId":"node_24_21_0","outcome":"inconclusive"},{"profileId":"node_26_10_0","outcome":"inconclusive"},{"profileId":"bun_1_4_2","outcome":"inconclusive"},{"profileId":"deno_2_9_7","outcome":"inconclusive"}],"missingOptionalPeers":[{"name":"preact-render-to-string","range":">=6.7.0"}],"missingOptionalPeersTruncated":false}}