mirror of
https://github.com/evilsocket/audit
synced 2026-06-06 15:44:27 +00:00
Simone Margaritelli
35 lines
1.3 KiB
JSON
35 lines
1.3 KiB
JSON
{
|
|
"$schema": "http://json-schema.org/draft-07/schema#",
|
|
"title": "ValidationVerdict",
|
|
"description": "Adversarial review verdict for a single finding. CANNOT emit new findings.",
|
|
"type": "object",
|
|
"required": ["finding_id", "verdict", "rationale", "validator_confidence"],
|
|
"additionalProperties": false,
|
|
"properties": {
|
|
"finding_id": { "type": "string" },
|
|
"verdict": {
|
|
"type": "string",
|
|
"enum": ["confirmed", "rejected", "needs_more_info"]
|
|
},
|
|
"rationale": {
|
|
"type": "string",
|
|
"minLength": 30,
|
|
"description": "Why the finding stands or falls. Must engage with the evidence, not restate it."
|
|
},
|
|
"alternative_explanation": {
|
|
"type": "string",
|
|
"description": "If rejected: the benign explanation. If confirmed: any rival hypothesis you ruled out."
|
|
},
|
|
"missing_preconditions": {
|
|
"type": "array",
|
|
"items": { "type": "string" },
|
|
"description": "Conditions that must hold for the bug to fire (sanitization upstream, config flags, etc.)."
|
|
},
|
|
"suggested_test": {
|
|
"type": "string",
|
|
"description": "Concrete test that would disambiguate — e.g. a curl command, a unit test stub."
|
|
},
|
|
"validator_confidence": { "type": "number", "minimum": 0, "maximum": 1 }
|
|
}
|
|
}
|