{
  "captured_at": "2026-10-12T17:16:20.882Z",
  "plan_sha256": "114af00d581007a674a51bdd244068a448e052a54b7a5da41023d944dd3e40dd",
  "cases": [
    {
      "fixture": "01-baseline",
      "started_at": "2026-10-12T17:16:16.085Z",
      "exit_code": 0,
      "process_error": null,
      "observation_only": false,
      "stdout_file": "01-baseline.stdout.json",
      "stdout_sha256": "826a5478eeca42704963316ed9b4a4daebd959c7f49eb9cd0ad71fdcc2e0266c",
      "stderr_file": "01-baseline.stderr.txt",
      "stderr_sha256": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
      "scores": {
        "Dangerous-Workflow": 0,
        "Pinned-Dependencies": 0,
        "Token-Permissions": 0
      },
      "check_names_match": true,
      "expectations_matched": true
    },
    {
      "fixture": "02-permissions-only",
      "started_at": "2026-10-12T17:16:16.664Z",
      "exit_code": 0,
      "process_error": null,
      "observation_only": false,
      "stdout_file": "02-permissions-only.stdout.json",
      "stdout_sha256": "43ef81ea4e293f72c3c351ad02532afab701a3436e1f9d7b24e5de5ccc5c5885",
      "stderr_file": "02-permissions-only.stderr.txt",
      "stderr_sha256": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
      "scores": {
        "Dangerous-Workflow": 0,
        "Pinned-Dependencies": 0,
        "Token-Permissions": 10
      },
      "check_names_match": true,
      "expectations_matched": true
    },
    {
      "fixture": "03-pin-only",
      "started_at": "2026-10-12T17:16:17.210Z",
      "exit_code": 0,
      "process_error": null,
      "observation_only": false,
      "stdout_file": "03-pin-only.stdout.json",
      "stdout_sha256": "246b4923d56b29f100cd19d9a61ee97878f80b8482d4f5a91029618af93a45dc",
      "stderr_file": "03-pin-only.stderr.txt",
      "stderr_sha256": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
      "scores": {
        "Dangerous-Workflow": 0,
        "Pinned-Dependencies": 10,
        "Token-Permissions": 0
      },
      "check_names_match": true,
      "expectations_matched": true
    },
    {
      "fixture": "04-quoted-input-only",
      "started_at": "2026-10-12T17:16:17.826Z",
      "exit_code": 0,
      "process_error": null,
      "observation_only": false,
      "stdout_file": "04-quoted-input-only.stdout.json",
      "stdout_sha256": "00b558c6de230d40a054fe8a39f4d83d04ba92163e1c1609ac97276359c3856e",
      "stderr_file": "04-quoted-input-only.stderr.txt",
      "stderr_sha256": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
      "scores": {
        "Dangerous-Workflow": 10,
        "Pinned-Dependencies": 0,
        "Token-Permissions": 0
      },
      "check_names_match": true,
      "expectations_matched": true
    },
    {
      "fixture": "05-combined",
      "started_at": "2026-10-12T17:16:18.442Z",
      "exit_code": 0,
      "process_error": null,
      "observation_only": false,
      "stdout_file": "05-combined.stdout.json",
      "stdout_sha256": "8281ac43f33afbbfa5038f66a046d5e0824477f4d7b831f53d3ba0911254e6e8",
      "stderr_file": "05-combined.stderr.txt",
      "stderr_sha256": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
      "scores": {
        "Dangerous-Workflow": 10,
        "Pinned-Dependencies": 10,
        "Token-Permissions": 10
      },
      "check_names_match": true,
      "expectations_matched": true
    },
    {
      "fixture": "06-fabricated-pin",
      "started_at": "2026-10-12T17:16:19.098Z",
      "exit_code": 0,
      "process_error": null,
      "observation_only": false,
      "stdout_file": "06-fabricated-pin.stdout.json",
      "stdout_sha256": "0c18103aa28f83d75080e5d6bebfe47fb4a1456e4d81c78db31b3a91025faa34",
      "stderr_file": "06-fabricated-pin.stderr.txt",
      "stderr_sha256": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
      "scores": {
        "Dangerous-Workflow": 10,
        "Pinned-Dependencies": 10,
        "Token-Permissions": 10
      },
      "check_names_match": true,
      "expectations_matched": true
    },
    {
      "fixture": "07-no-workflow",
      "started_at": "2026-10-12T17:16:19.655Z",
      "exit_code": 0,
      "process_error": null,
      "observation_only": false,
      "stdout_file": "07-no-workflow.stdout.json",
      "stdout_sha256": "6fc83f94bfecc566dbeaccfae0240ae9b4f4d9799e8fba9deaec8bd2daf64765",
      "stderr_file": "07-no-workflow.stderr.txt",
      "stderr_sha256": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
      "scores": {
        "Dangerous-Workflow": -1,
        "Pinned-Dependencies": -1,
        "Token-Permissions": -1
      },
      "check_names_match": true,
      "expectations_matched": true
    },
    {
      "fixture": "08-local-branch-protection",
      "started_at": "2026-10-12T17:16:20.250Z",
      "exit_code": 1,
      "process_error": null,
      "observation_only": true,
      "stdout_file": "08-local-branch-protection.stdout.json",
      "stdout_sha256": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
      "stderr_file": "08-local-branch-protection.stderr.txt",
      "stderr_sha256": "3b42c6ea60766036a69a4c7fbe54477719856c3243dd18367b484de3ac75ec60",
      "scores": {},
      "check_names_match": null,
      "expectations_matched": null
    }
  ],
  "fixture_inputs_unchanged": true,
  "scorecard_cli_invocations": 8,
  "workflow_steps_executed": 0,
  "predicted_cases": 7,
  "matched_cases": 7,
  "scope": "Actual Scorecard CLI runs against synthetic local files. Neither GitHub Actions execution nor an upstream repository audit. No independent reproduction or security certification."
}