{"ok":true,"data":{"report":{"schemaVersion":"pentest.report.v1","generatedAt":"2026-07-21T14:21:21.603Z","publicSafe":true,"run":{"runId":"pentest-2026-06-13-f7b3bdc0","targetRepo":"mbarbine/jc-pentest-harness","targetUrl":"https://platphormnews.com","storedStatus":"completed","displayStatus":"dry_run_plan_complete","executionState":"not_executed","evidenceLabel":"planning only, not executed","runType":"dry_run","executionMode":"api-multi-model","plannedClassCount":44,"attemptedClassCount":0,"completedClassCount":0,"totalFindings":0,"confirmedFindings":0,"scorecardCount":0,"pipelineErrorCount":0,"spendUsd":0,"budgetUsd":5,"startedAt":"Sat Jun 13 2026 03:39:34 GMT+0000 (Coordinated Universal Time)","completedAt":"Sat Jun 13 2026 03:39:34 GMT+0000 (Coordinated Universal Time)"},"outputs":[{"kind":"run_page","label":"Run evidence page","status":"artifact_backed","href":"https://pentest.platphormnews.com/runs/pentest-2026-06-13-f7b3bdc0","publicSafe":true},{"kind":"run_logs","label":"Public-safe execution log","status":"artifact_backed","href":"https://pentest.platphormnews.com/api/v1/runs/pentest-2026-06-13-f7b3bdc0/logs","publicSafe":true},{"kind":"report_json","label":"Public-safe report JSON","status":"report_generated","href":"https://pentest.platphormnews.com/api/v1/reports/pentest-2026-06-13-f7b3bdc0","publicSafe":true},{"kind":"findings","label":"Finding explorer","status":"not_executed","href":"https://pentest.platphormnews.com/findings","publicSafe":true},{"kind":"scorecard","label":"Scorecard surface","status":"not_executed","href":"https://pentest.platphormnews.com/scorecard","publicSafe":true},{"kind":"matrix","label":"Coverage matrix","status":"not_executed","href":"https://pentest.platphormnews.com/matrix","publicSafe":true}],"findings":[],"scorecards":[],"classEvidence":[],"logSummary":[{"sequence":1,"stage":"setup","status":"plan_recorded","level":"info","message":"Dry-run plan pentest-2026-06-13-f7b3bdc0 was persisted for mbarbine/jc-pentest-harness; model execution did not run.","timestamp":"Sat Jun 13 2026 03:39:34 GMT+0000 (Coordinated Universal Time)"},{"sequence":2,"stage":"planning","status":"dry_run_plan_complete","level":"warn","message":"Dry-run planning completed. No model execution, class evidence, findings, scorecard, or cost events are persisted for this run.","timestamp":"Sat Jun 13 2026 03:39:34 GMT+0000 (Coordinated Universal Time)"}],"boundaries":{"includes":["run metadata","class-level execution counts","public-safe finding summaries","scorecard metrics","pipeline error counts and sanitized messages","report and evidence route links"],"excludes":["raw prompts","raw target responses","authorization headers","cookies","provider secrets","unredacted request bodies"]},"markdown":"# Public-Safe Pentest Report: pentest-2026-06-13-f7b3bdc0\n\nGenerated: 2026-07-21T14:21:21.603Z\nTarget repo: mbarbine/jc-pentest-harness\nTarget URL: https://platphormnews.com\nRun type: dry_run\nStored status: completed\nEvidence status: dry_run_plan_complete\nExecution state: not_executed\nEvidence label: planning only, not executed\n\n## Coverage\n\nClasses: 0 / 44\nAttempted classes: 0\nClass evidence rows: 0\nFindings: 0\nConfirmed findings: 0\nScorecards: 0\nPipeline errors: 0\nSpend: 0.0000 USD / budget 5.00 USD\n\n## Outputs\n\n- Run evidence page: artifact_backed (https://pentest.platphormnews.com/runs/pentest-2026-06-13-f7b3bdc0)\n- Public-safe execution log: artifact_backed (https://pentest.platphormnews.com/api/v1/runs/pentest-2026-06-13-f7b3bdc0/logs)\n- Public-safe report JSON: report_generated (https://pentest.platphormnews.com/api/v1/reports/pentest-2026-06-13-f7b3bdc0)\n- Finding explorer: not_executed (https://pentest.platphormnews.com/findings)\n- Scorecard surface: not_executed (https://pentest.platphormnews.com/scorecard)\n- Coverage matrix: not_executed (https://pentest.platphormnews.com/matrix)\n\n## Findings\n\nNo retained finding records are present in this public-safe package.\n\n## Scorecards\n\nNo scorecard rows are present in this public-safe package.\n\n## Boundary\n\nIncludes: run metadata, class-level execution counts, public-safe finding summaries, scorecard metrics, pipeline error counts and sanitized messages, report and evidence route links\nExcludes: raw prompts, raw target responses, authorization headers, cookies, provider secrets, unredacted request bodies"}}}