{
  "analysis_id": "08324647-35af-4af2-8d82-4387eec03918",
  "session_id": "426471ed-5e63-4b7e-ac6c-d36e060a4739",
  "database_context": {
    "mode": "local-only",
    "matches": [],
    "coverage": {
      "truncated": false,
      "no_exact_match": 243,
      "observable_limit": 5000,
      "observables_total": 243,
      "matched_observables": 0,
      "observables_checked": 243,
      "prior_cases_checked": 6,
      "prior_case_limit_reached": false
    },
    "created_at": "2026-09-19T12:08:41.573203+00:00",
    "session_id": "426471ed-5e63-4b7e-ac6c-d36e060a4739",
    "techniques": [
      {
        "url": "https://attack.mitre.org/techniques/T1071/001",
        "name": "Web Protocols",
        "status": "catalog-context-not-validation-of-behavior",
        "attack_id": "T1071.001",
        "detection": "",
        "platforms": [
          "ESXi",
          "Linux",
          "macOS",
          "Network Devices",
          "Windows"
        ],
        "data_sources": [
          "NSM:Flow",
          "WinEventLog:Sysmon",
          "auditd:SYSCALL",
          "macos:osquery",
          "macos:unifiedlog",
          "esxi:shell"
        ],
        "catalog_version_id": 851,
        "detection_strategies": [
          {
            "name": "Detection of Web Protocol-Based C2 Over HTTP, HTTPS, or WebSockets",
            "stix_id": "x-mitre-detection-strategy--e6496b9b-2458-4616-9712-a7c0da7fd3bc",
            "attack_id": "DET0027"
          }
        ],
        "detection_links_truncated": false
      },
      {
        "url": "https://attack.mitre.org/techniques/T1219",
        "name": "Remote Access Tools",
        "status": "catalog-context-not-validation-of-behavior",
        "attack_id": "T1219",
        "detection": "",
        "platforms": [
          "Linux",
          "macOS",
          "Windows"
        ],
        "data_sources": [
          "WinEventLog:Sysmon",
          "WinEventLog:System",
          "auditd:SYSCALL",
          "auditd:PATH",
          "macos:unifiedlog",
          "macos:osquery"
        ],
        "catalog_version_id": 851,
        "detection_strategies": [
          {
            "name": "Behavior-Chain Detection for Remote Access Tools (Tool-Agnostic)",
            "stix_id": "x-mitre-detection-strategy--ec412019-109f-4f84-aa2f-d623f40254e0",
            "attack_id": "DET0496"
          }
        ],
        "detection_links_truncated": false
      }
    ],
    "interpretation": "No match means unknown in this corpus. Local CTI may postdate the capture. Matches and shared infrastructure require review; no automatic promotion or attribution.",
    "schema_version": "pcap-context-v1",
    "snapshot_sha256": "82f0a542eadbd91c1d0554cf45b8bd4f69607e372cf96649bcd6ec9cab5fafb8",
    "source_actor_links": [],
    "external_enrichment": {
      "reason": "Requires explicit provider consent and privacy review",
      "status": "not-requested",
      "requests": 0
    },
    "source_semantic_sha256": "4fa4f2aabaa7bcc51a396dcd62fc65dbd2ee862d01d0ba16095da5915212d518",
    "cross_case_correlations": [
      {
        "status": "shared-observation-not-common-campaign",
        "session_id": "1ea146b9-1fb6-4be9-8adc-154756a8642c",
        "analysis_id": "616a90fa-f15e-4fcb-8d56-7b8e0eff5785",
        "shared_count": 10,
        "source_sha256": "21bb800849459709a7ceb5513573b2b20f090ffccd00eb89b9886feedd47a2df",
        "shared_observables": [
          {
            "type": "domain",
            "value": "code.jquery.com"
          },
          {
            "type": "domain",
            "value": "edge.microsoft.com"
          },
          {
            "type": "domain",
            "value": "fd.api.iris.microsoft.com"
          },
          {
            "type": "domain",
            "value": "login.live.com"
          },
          {
            "type": "domain",
            "value": "login.microsoftonline.com"
          },
          {
            "type": "domain",
            "value": "mobile.events.data.microsoft.com"
          },
          {
            "type": "domain",
            "value": "odc.officeapps.live.com"
          },
          {
            "type": "domain",
            "value": "v10.events.data.microsoft.com"
          },
          {
            "type": "domain",
            "value": "www.bing.com"
          },
          {
            "type": "ipv4",
            "value": "52.168.112.67"
          }
        ]
      },
      {
        "status": "shared-observation-not-common-campaign",
        "session_id": "45dead98-56f7-41bd-bcd0-62bcf13e9f9b",
        "analysis_id": "459e119d-191f-49e8-85ea-c78f9de41826",
        "shared_count": 30,
        "source_sha256": "0ea6b597732a9ce6af9a7e3adff4512c9a91b4bce27184c8fdeb746f05cce170",
        "shared_observables": [
          {
            "type": "domain",
            "value": "a1834.dscg2.akamai.net"
          },
          {
            "type": "domain",
            "value": "api.msn.com"
          },
          {
            "type": "domain",
            "value": "assets.msn.com"
          },
          {
            "type": "domain",
            "value": "client.wns.windows.com"
          },
          {
            "type": "domain",
            "value": "ctldl.windowsupdate.com"
          },
          {
            "type": "domain",
            "value": "ecs.office.com"
          },
          {
            "type": "domain",
            "value": "edge.microsoft.com"
          },
          {
            "type": "domain",
            "value": "fd.api.iris.microsoft.com"
          },
          {
            "type": "domain",
            "value": "img-s-msn-com.akamaized.net"
          },
          {
            "type": "domain",
            "value": "login.live.com"
          },
          {
            "type": "domain",
            "value": "login.microsoftonline.com"
          },
          {
            "type": "domain",
            "value": "mobile.events.data.microsoft.com"
          },
          {
            "type": "domain",
            "value": "officeclient.microsoft.com"
          },
          {
            "type": "domain",
            "value": "srtb.msn.com"
          },
          {
            "type": "domain",
            "value": "th.bing.com"
          },
          {
            "type": "domain",
            "value": "v10.events.data.microsoft.com"
          },
          {
            "type": "domain",
            "value": "windows.msn.com"
          },
          {
            "type": "domain",
            "value": "wns.notify.trafficmanager.net"
          },
          {
            "type": "domain",
            "value": "www.bing.com"
          },
          {
            "type": "domain",
            "value": "www.msftconnecttest.com"
          },
          {
            "type": "domain",
            "value": "www.msn.com"
          },
          {
            "type": "ipv4",
            "value": "20.190.135.2"
          },
          {
            "type": "ipv4",
            "value": "20.190.135.3"
          },
          {
            "type": "ipv4",
            "value": "204.79.197.203"
          },
          {
            "type": "ipv4",
            "value": "224.0.0.251"
          },
          {
            "type": "ipv4",
            "value": "224.0.0.252"
          },
          {
            "type": "ipv4",
            "value": "40.126.28.11"
          },
          {
            "type": "ipv4",
            "value": "40.126.28.22"
          },
          {
            "type": "ipv4",
            "value": "52.168.112.67"
          },
          {
            "type": "sha256",
            "value": "5e9a7996fe94d7be10595d7133748760bf8348198b71b7a50fd8affaa980ac61"
          }
        ]
      },
      {
        "status": "shared-observation-not-common-campaign",
        "session_id": "d201ef05-c1ff-4b51-bfb6-594810367b62",
        "analysis_id": "7a2cfe72-f48d-4894-8a2d-8889cb3b11b2",
        "shared_count": 46,
        "source_sha256": "3dc470f5490ec15b4024c513e87c67e0b17caeae2a2ce3d83541be24ef407e61",
        "shared_observables": [
          {
            "type": "domain",
            "value": "a1834.dscg2.akamai.net"
          },
          {
            "type": "domain",
            "value": "acroipm2.adobe.com"
          },
          {
            "type": "domain",
            "value": "api.msn.com"
          },
          {
            "type": "domain",
            "value": "armmf.adobe.com"
          },
          {
            "type": "domain",
            "value": "assets.msn.com"
          },
          {
            "type": "domain",
            "value": "client.wns.windows.com"
          },
          {
            "type": "domain",
            "value": "ctldl.windowsupdate.com"
          },
          {
            "type": "domain",
            "value": "ecs.office.com"
          },
          {
            "type": "domain",
            "value": "edge.microsoft.com"
          },
          {
            "type": "domain",
            "value": "fd.api.iris.microsoft.com"
          },
          {
            "type": "domain",
            "value": "img-s-msn-com.akamaized.net"
          },
          {
            "type": "domain",
            "value": "licensing.mp.microsoft.com"
          },
          {
            "type": "domain",
            "value": "login.microsoftonline.com"
          },
          {
            "type": "domain",
            "value": "mobile.events.data.microsoft.com"
          },
          {
            "type": "domain",
            "value": "odc.officeapps.live.com"
          },
          {
            "type": "domain",
            "value": "officeclient.microsoft.com"
          },
          {
            "type": "domain",
            "value": "srtb.msn.com"
          },
          {
            "type": "domain",
            "value": "th.bing.com"
          },
          {
            "type": "domain",
            "value": "v10.events.data.microsoft.com"
          },
          {
            "type": "domain",
            "value": "windows.msn.com"
          },
          {
            "type": "domain",
            "value": "wns.notify.trafficmanager.net"
          },
          {
            "type": "domain",
            "value": "wpad.mshome.net"
          },
          {
            "type": "domain",
            "value": "www.bing.com"
          },
          {
            "type": "domain",
            "value": "www.msftconnecttest.com"
          },
          {
            "type": "domain",
            "value": "www.msn.com"
          },
          {
            "type": "ipv4",
            "value": "13.107.246.57"
          },
          {
            "type": "ipv4",
            "value": "142.250.138.94"
          },
          {
            "type": "ipv4",
            "value": "20.190.135.2"
          },
          {
            "type": "ipv4",
            "value": "20.190.135.3"
          },
          {
            "type": "ipv4",
            "value": "20.190.135.6"
          },
          {
            "type": "ipv4",
            "value": "20.190.135.7"
          },
          {
            "type": "ipv4",
            "value": "20.96.153.111"
          },
          {
            "type": "ipv4",
            "value": "204.79.197.203"
          },
          {
            "type": "ipv4",
            "value": "224.0.0.251"
          },
          {
            "type": "ipv4",
            "value": "224.0.0.252"
          },
          {
            "type": "ipv4",
            "value": "239.255.255.250"
          },
          {
            "type": "ipv4",
            "value": "40.126.28.11"
          },
          {
            "type": "ipv4",
            "value": "40.126.28.14"
          },
          {
            "type": "ipv4",
            "value": "40.126.28.22"
          },
          {
            "type": "ipv4",
            "value": "40.126.29.9"
          },
          {
            "type": "ipv4",
            "value": "40.126.7.32"
          },
          {
            "type": "ipv4",
            "value": "52.168.112.67"
          },
          {
            "type": "sha256",
            "value": "2b69346572041eefe558a82b58d654237e087ce9ab4e0876254a40a8954279a9"
          },
          {
            "type": "sha256",
            "value": "5e9a7996fe94d7be10595d7133748760bf8348198b71b7a50fd8affaa980ac61"
          },
          {
            "type": "sha256",
            "value": "975b5678560775735da4a9e8b805dce370329179b8e17ebc1c289aaeb293f7ff"
          },
          {
            "type": "sha256",
            "value": "f0e200cacd273e3dd257057f27aeda839a1f2f31482e0bb01ea8b1363a7af245"
          }
        ]
      },
      {
        "status": "shared-observation-not-common-campaign",
        "session_id": "28d700f9-1f64-46d0-ab25-5dd6123537fa",
        "analysis_id": "81373b30-6a59-49d1-89b0-bad73ed19eaa",
        "shared_count": 37,
        "source_sha256": "f755444d0b6eac847e07b73dea0774084b232d8577f536547a12f39b959d7833",
        "shared_observables": [
          {
            "type": "domain",
            "value": "a1834.dscg2.akamai.net"
          },
          {
            "type": "domain",
            "value": "api.msn.com"
          },
          {
            "type": "domain",
            "value": "assets.msn.com"
          },
          {
            "type": "domain",
            "value": "client.wns.windows.com"
          },
          {
            "type": "domain",
            "value": "dns.msftncsi.com"
          },
          {
            "type": "domain",
            "value": "ecs.office.com"
          },
          {
            "type": "domain",
            "value": "edge.microsoft.com"
          },
          {
            "type": "domain",
            "value": "fd.api.iris.microsoft.com"
          },
          {
            "type": "domain",
            "value": "img-s-msn-com.akamaized.net"
          },
          {
            "type": "domain",
            "value": "licensing.mp.microsoft.com"
          },
          {
            "type": "domain",
            "value": "login.live.com"
          },
          {
            "type": "domain",
            "value": "login.microsoftonline.com"
          },
          {
            "type": "domain",
            "value": "odc.officeapps.live.com"
          },
          {
            "type": "domain",
            "value": "srtb.msn.com"
          },
          {
            "type": "domain",
            "value": "th.bing.com"
          },
          {
            "type": "domain",
            "value": "v10.events.data.microsoft.com"
          },
          {
            "type": "domain",
            "value": "windows.msn.com"
          },
          {
            "type": "domain",
            "value": "wpad.mshome.net"
          },
          {
            "type": "domain",
            "value": "www.bing.com"
          },
          {
            "type": "domain",
            "value": "www.google.com"
          },
          {
            "type": "domain",
            "value": "www.gstatic.com"
          },
          {
            "type": "domain",
            "value": "www.msftconnecttest.com"
          },
          {
            "type": "domain",
            "value": "www.msn.com"
          },
          {
            "type": "ipv4",
            "value": "13.107.246.57"
          },
          {
            "type": "ipv4",
            "value": "131.107.255.255"
          },
          {
            "type": "ipv4",
            "value": "142.250.113.95"
          },
          {
            "type": "ipv4",
            "value": "142.250.114.95"
          },
          {
            "type": "ipv4",
            "value": "142.250.115.95"
          },
          {
            "type": "ipv4",
            "value": "142.251.116.95"
          },
          {
            "type": "ipv4",
            "value": "142.251.186.95"
          },
          {
            "type": "ipv4",
            "value": "20.96.153.111"
          },
          {
            "type": "ipv4",
            "value": "204.79.197.203"
          },
          {
            "type": "ipv4",
            "value": "224.0.0.251"
          },
          {
            "type": "ipv4",
            "value": "224.0.0.252"
          },
          {
            "type": "ipv4",
            "value": "239.255.255.250"
          },
          {
            "type": "ipv4",
            "value": "40.126.29.9"
          },
          {
            "type": "sha256",
            "value": "5e9a7996fe94d7be10595d7133748760bf8348198b71b7a50fd8affaa980ac61"
          }
        ]
      },
      {
        "status": "shared-observation-not-common-campaign",
        "session_id": "d001b3fc-7e55-401a-8bb6-381e0c10fbda",
        "analysis_id": "38851ad7-b3a0-423d-ae89-3b7be4e4b908",
        "shared_count": 37,
        "source_sha256": "33e274d7246f4eca8fbe7337c465c7ded077cd650d5d4d42481cad822c962741",
        "shared_observables": [
          {
            "type": "domain",
            "value": "acroipm2.adobe.com"
          },
          {
            "type": "domain",
            "value": "api.msn.com"
          },
          {
            "type": "domain",
            "value": "assets.msn.com"
          },
          {
            "type": "domain",
            "value": "client.wns.windows.com"
          },
          {
            "type": "domain",
            "value": "ctldl.windowsupdate.com"
          },
          {
            "type": "domain",
            "value": "dns.msftncsi.com"
          },
          {
            "type": "domain",
            "value": "ecs.office.com"
          },
          {
            "type": "domain",
            "value": "edge.microsoft.com"
          },
          {
            "type": "domain",
            "value": "fd.api.iris.microsoft.com"
          },
          {
            "type": "domain",
            "value": "fonts.googleapis.com"
          },
          {
            "type": "domain",
            "value": "fonts.gstatic.com"
          },
          {
            "type": "domain",
            "value": "login.live.com"
          },
          {
            "type": "domain",
            "value": "login.microsoftonline.com"
          },
          {
            "type": "domain",
            "value": "srtb.msn.com"
          },
          {
            "type": "domain",
            "value": "th.bing.com"
          },
          {
            "type": "domain",
            "value": "v10.events.data.microsoft.com"
          },
          {
            "type": "domain",
            "value": "windows.msn.com"
          },
          {
            "type": "domain",
            "value": "wns.notify.trafficmanager.net"
          },
          {
            "type": "domain",
            "value": "www.bing.com"
          },
          {
            "type": "domain",
            "value": "www.google.com"
          },
          {
            "type": "domain",
            "value": "www.gstatic.com"
          },
          {
            "type": "domain",
            "value": "www.msftconnecttest.com"
          },
          {
            "type": "domain",
            "value": "www.msn.com"
          },
          {
            "type": "ipv4",
            "value": "13.107.246.57"
          },
          {
            "type": "ipv4",
            "value": "131.107.255.255"
          },
          {
            "type": "ipv4",
            "value": "142.250.113.95"
          },
          {
            "type": "ipv4",
            "value": "142.250.115.95"
          },
          {
            "type": "ipv4",
            "value": "20.189.173.6"
          },
          {
            "type": "ipv4",
            "value": "20.190.135.2"
          },
          {
            "type": "ipv4",
            "value": "20.190.135.6"
          },
          {
            "type": "ipv4",
            "value": "204.79.197.203"
          },
          {
            "type": "ipv4",
            "value": "224.0.0.251"
          },
          {
            "type": "ipv4",
            "value": "224.0.0.252"
          },
          {
            "type": "ipv4",
            "value": "239.255.255.250"
          },
          {
            "type": "ipv4",
            "value": "40.126.28.14"
          },
          {
            "type": "ipv4",
            "value": "40.126.29.9"
          },
          {
            "type": "sha256",
            "value": "5e9a7996fe94d7be10595d7133748760bf8348198b71b7a50fd8affaa980ac61"
          }
        ]
      },
      {
        "status": "shared-observation-not-common-campaign",
        "session_id": "bc2c808d-5171-4ed5-9832-5cbf7c3a8866",
        "analysis_id": "bfccc426-aa9b-4007-8558-a66d37ecb90c",
        "shared_count": 54,
        "source_sha256": "e59db1c07c6fdefafa0abdbca03248c341cdc36c09c34753204d3162802a3586",
        "shared_observables": [
          {
            "type": "domain",
            "value": "a1834.dscg2.akamai.net"
          },
          {
            "type": "domain",
            "value": "api.msn.com"
          },
          {
            "type": "domain",
            "value": "assets.msn.com"
          },
          {
            "type": "domain",
            "value": "checkappexec.microsoft.com"
          },
          {
            "type": "domain",
            "value": "client.wns.windows.com"
          },
          {
            "type": "domain",
            "value": "ctldl.windowsupdate.com"
          },
          {
            "type": "domain",
            "value": "dns.msftncsi.com"
          },
          {
            "type": "domain",
            "value": "ecs.office.com"
          },
          {
            "type": "domain",
            "value": "edge-microsoft-com.dual-a-0036.a-msedge.net"
          },
          {
            "type": "domain",
            "value": "edge.microsoft.com"
          },
          {
            "type": "domain",
            "value": "fd.api.iris.microsoft.com"
          },
          {
            "type": "domain",
            "value": "img-s-msn-com.akamaized.net"
          },
          {
            "type": "domain",
            "value": "login.live.com"
          },
          {
            "type": "domain",
            "value": "login.microsoftonline.com"
          },
          {
            "type": "domain",
            "value": "mobile.events.data.microsoft.com"
          },
          {
            "type": "domain",
            "value": "odc.officeapps.live.com"
          },
          {
            "type": "domain",
            "value": "officeclient.microsoft.com"
          },
          {
            "type": "domain",
            "value": "srtb.msn.com"
          },
          {
            "type": "domain",
            "value": "th.bing.com"
          },
          {
            "type": "domain",
            "value": "v10.events.data.microsoft.com"
          },
          {
            "type": "domain",
            "value": "windows.msn.com"
          },
          {
            "type": "domain",
            "value": "wns.notify.trafficmanager.net"
          },
          {
            "type": "domain",
            "value": "www.bing.com"
          },
          {
            "type": "domain",
            "value": "www.google.com"
          },
          {
            "type": "domain",
            "value": "www.msftconnecttest.com"
          },
          {
            "type": "domain",
            "value": "www.msn.com"
          },
          {
            "type": "ipv4",
            "value": "13.107.21.239"
          },
          {
            "type": "ipv4",
            "value": "13.107.246.57"
          },
          {
            "type": "ipv4",
            "value": "131.107.255.255"
          },
          {
            "type": "ipv4",
            "value": "142.251.186.103"
          },
          {
            "type": "ipv4",
            "value": "142.251.186.104"
          },
          {
            "type": "ipv4",
            "value": "142.251.186.105"
          },
          {
            "type": "ipv4",
            "value": "142.251.186.106"
          },
          {
            "type": "ipv4",
            "value": "142.251.186.147"
          },
          {
            "type": "ipv4",
            "value": "142.251.186.99"
          },
          {
            "type": "ipv4",
            "value": "20.189.173.16"
          },
          {
            "type": "ipv4",
            "value": "20.190.135.2"
          },
          {
            "type": "ipv4",
            "value": "20.190.135.3"
          },
          {
            "type": "ipv4",
            "value": "20.190.135.6"
          },
          {
            "type": "ipv4",
            "value": "20.190.135.7"
          },
          {
            "type": "ipv4",
            "value": "20.96.153.111"
          },
          {
            "type": "ipv4",
            "value": "204.79.197.203"
          },
          {
            "type": "ipv4",
            "value": "204.79.197.239"
          },
          {
            "type": "ipv4",
            "value": "224.0.0.251"
          },
          {
            "type": "ipv4",
            "value": "224.0.0.252"
          },
          {
            "type": "ipv4",
            "value": "239.255.255.250"
          },
          {
            "type": "ipv4",
            "value": "4.150.155.223"
          },
          {
            "type": "ipv4",
            "value": "40.126.28.11"
          },
          {
            "type": "ipv4",
            "value": "40.126.28.22"
          },
          {
            "type": "ipv4",
            "value": "40.126.29.9"
          },
          {
            "type": "ipv4",
            "value": "40.126.7.32"
          },
          {
            "type": "ipv4",
            "value": "52.109.20.47"
          },
          {
            "type": "ipv4",
            "value": "52.113.194.132"
          },
          {
            "type": "sha256",
            "value": "5e9a7996fe94d7be10595d7133748760bf8348198b71b7a50fd8affaa980ac61"
          }
        ]
      }
    ]
  },
  "capture_retained_sha256": "a38267943a7bf3b0e445d7e51cb0a68b3dee797d67081bc9a033f73d079c0f50",
  "capture_retained_matches": true,
  "ioc_expected_count": 0,
  "ioc_actual_count": 0,
  "ioc_exact": true,
  "ioc_missing_ids": [],
  "ioc_unexpected_ids": [],
  "actors_expected": 0,
  "actors_actual": 0,
  "actors_exact": true,
  "techniques_exact": true,
  "detection_checks": [
    {
      "technique": "T1071.001",
      "expected": 1,
      "actual": 1,
      "exact": true
    },
    {
      "technique": "T1219",
      "expected": 1,
      "actual": 1,
      "exact": true
    }
  ],
  "cross_case_expected": 6,
  "cross_case_actual": 6,
  "cross_case_exact": true,
  "cross_case_checks": [
    {
      "analysis_id": "616a90fa-f15e-4fcb-8d56-7b8e0eff5785",
      "shared_count": 10,
      "expected_count": 10,
      "exact": true,
      "attribution_guard": true
    },
    {
      "analysis_id": "459e119d-191f-49e8-85ea-c78f9de41826",
      "shared_count": 30,
      "expected_count": 30,
      "exact": true,
      "attribution_guard": true
    },
    {
      "analysis_id": "7a2cfe72-f48d-4894-8a2d-8889cb3b11b2",
      "shared_count": 46,
      "expected_count": 46,
      "exact": true,
      "attribution_guard": true
    },
    {
      "analysis_id": "81373b30-6a59-49d1-89b0-bad73ed19eaa",
      "shared_count": 37,
      "expected_count": 37,
      "exact": true,
      "attribution_guard": true
    },
    {
      "analysis_id": "38851ad7-b3a0-423d-ae89-3b7be4e4b908",
      "shared_count": 37,
      "expected_count": 37,
      "exact": true,
      "attribution_guard": true
    },
    {
      "analysis_id": "bfccc426-aa9b-4007-8558-a66d37ecb90c",
      "shared_count": 54,
      "expected_count": 54,
      "exact": true,
      "attribution_guard": true
    }
  ],
  "review_count": 1,
  "review_states": [
    "draft"
  ],
  "promotion_count": 0,
  "read_only_audit": true,
  "database_equals_api": true,
  "database_semantic_valid": true,
  "audit_seconds": 1.9616524659795687,
  "public_note": "Duplicate native database payload omitted. Equality and semantic audit checks retained; compare api-upload.json."
}