ValidationEvidenceBody ¶

class ValidationEvidenceBody(TypedDict, closed=True):
    exploitable: "capo_continuum.types.exploitability_verdict.ExploitabilityVerdict"
    """Exploitability verdict. Explicit UNCERTAIN replaces the producer's tri-state `exploitable: true | false | null`, so an absent verdict is never confused with a negative one."""
    terminal_status: NotRequired[
        "capo_continuum.types.validation_terminal_status.ValidationTerminalStatus"
    ]
    """How the validation run ended. Absent when the producer reported a status with no mapping yet: the rest of the body still projects, so one unmapped enum never costs a customer the whole artifact."""
    flow_verdicts: NotRequired["capo_continuum.types.flow_verdicts.FlowVerdicts"]
    """One verdict per attack flow assessed in the bundle."""
    attack_flows_confirmed: NotRequired[
        "capo_continuum.types.attack_flow_ids.AttackFlowIds"
    ]
    """Identifiers of attack flows upgraded to Confirmed provenance."""
    exploit_artifact: NotRequired[
        "capo_continuum.types.validation_exploit_artifact.ValidationExploitArtifact"
    ]
    """Concrete payload and its observed effect, when validation produced one by sending an HTTP request. Only an HTTP proof projects here. A validation agent that proves exploitability by RUNNING code against the repository projects `executedProof`, and one that proves it by reading the source projects `sourceAnalysis`. All three are mutually exclusive: at most one is present."""
    executed_proof: NotRequired[
        "capo_continuum.types.validation_executed_proof.ValidationExecutedProof"
    ]
    """Proof the agent produced by executing code against the repository under test, with the output that execution produced."""
    source_analysis: NotRequired[
        "capo_continuum.types.validation_source_analysis.ValidationSourceAnalysis"
    ]
    """Proof the agent produced by reading the repository's source, with nothing built or run."""
    per_finding_results: NotRequired[
        "capo_continuum.types.per_finding_results.PerFindingResults"
    ]
    """Per-finding breakdown for a multi-finding bundle. Absent for a single-finding bundle."""