authz.lock reports

Rendered by python replay.py from committed lockfiles; verdicts recomputed keylessly (no LLM, no API key). Source: github.com/mathuryashash/authzlock

appPRkindexpectedverdictproof
app1same-shascenarioPASSPASS-
app1pr-benign-paginationscenarioPASSPASS-
app1pr-benign-statsscenarioPASSPASS-
app1pr-idor-refactorscenarioFAILFAILproven
app1pr-export-csvscenarioFAILFAILproven
app1pr-mass-assignscenarioFAILFAILproven
app1pr-count-leakscenarioFAILFAILproven
app1pr-mut-update-no-owner.v0mutation v0FAILFAILproven
app1pr-mut-delete-no-owner.v0mutation v0FAILFAILproven
app1pr-mut-list-leak.v0mutation v0FAILFAILproven
app1pr-mut-superuser-inverted.v0mutation v0FAILFAILproven
app1pr-mut-users-no-role.v0mutation v0FAILFAILproven
app1pr-mut-mass-assign-owner.v0mutation v0FAILFAILproven
app1pr-mut-benign-helper.v0mutation v0PASSPASS-
app1pr-mut-benign-order.v0mutation v0PASSPASS-
app1pr-mut-items-owner-param.v0mutation v0 held-outFAILPASS (miss)-
app1pr-mut-update-owner-field.v0mutation v0 held-outFAILFAIL-
app1base.v1probe v1 basePASSPASS-
app1pr-mut-update-no-owner.v1mutation v1FAILFAIL-
app1pr-mut-delete-no-owner.v1mutation v1FAILFAIL-
app1pr-mut-list-leak.v1mutation v1FAILFAIL-
app1pr-mut-superuser-inverted.v1mutation v1FAILFAIL-
app1pr-mut-users-no-role.v1mutation v1FAILFAIL-
app1pr-mut-mass-assign-owner.v1mutation v1FAILFAIL-
app1pr-mut-benign-helper.v1mutation v1PASSPASS-
app1pr-mut-benign-order.v1mutation v1PASSPASS-
app1pr-mut-items-owner-param.v1mutation v1 held-outFAILFAILproven
app1pr-mut-update-owner-field.v1mutation v1 held-outFAILFAILproven
app2same-shascenarioPASSPASS-
app2pr-todo-get-by-idscenarioFAILFAILproven
app2pr-category-cleanupscenarioFAILFAILproven
app2pr-todos-completed-filterscenarioPASSPASS-
app2pr-mut-update-todo-no-owner.v0mutation v0FAILFAIL-
app2pr-mut-categories-list-leak.v0mutation v0FAILFAIL-
app2pr-mut-bulk-delete.v0mutation v0FAILFAIL-
app2pr-mut-swap-user-source.v0mutation v0FAILPASS (miss)-
app2pr-mut-foreign-category-link.v0mutation v0FAILPASS (miss)-
app2pr-mut-benign-delete-helper.v0mutation v0PASSPASS-
app2pr-mut-categories-user-param.v0mutation v0 held-outFAILPASS (miss)-
app2pr-mut-update-skip-category-check.v0mutation v0 held-outFAILPASS (miss)-
app2pr-mut-benign-category-filter.v0mutation v0 held-outPASSPASS-
app2base.v1probe v1 basePASSPASS-
app2pr-mut-update-todo-no-owner.v1mutation v1FAILFAIL-
app2pr-mut-categories-list-leak.v1mutation v1FAILFAIL-
app2pr-mut-bulk-delete.v1mutation v1FAILFAIL-
app2pr-mut-swap-user-source.v1mutation v1FAILFAILproven
app2pr-mut-foreign-category-link.v1mutation v1FAILFAILproven
app2pr-mut-benign-delete-helper.v1mutation v1PASSPASS-
app2pr-mut-categories-user-param.v1mutation v1 held-outFAILFAILproven
app2pr-mut-update-skip-category-check.v1mutation v1 held-outFAILFAILproven
app2pr-mut-benign-category-filter.v1mutation v1 held-outPASSPASS-

51/51 verdicts reproduced from the recorded runs; 46/51 equal the expected verdict.