{
  "http": {
    "passed": 2,
    "failed": 0,
    "skipped": 0,
    "retries": 0,
    "startTime": "2026-10-09T01:40:39.991Z",
    "durationSeconds": 15.297,
    "cases": [
      {
        "file": "cv-ai-readiness.spec.ts",
        "title": "bound CV proposals use real owned saves and reject fabricated or stale output without source/history mutation",
        "project": "",
        "status": "expected",
        "expectedStatus": "passed",
        "attempts": [
          {
            "status": "passed",
            "retry": 0,
            "durationMs": 1817
          }
        ]
      },
      {
        "file": "cv-ai-readiness.spec.ts",
        "title": "Production withholds CV review before provider calls or content writes while existing AI remains available",
        "project": "",
        "status": "expected",
        "expectedStatus": "passed",
        "attempts": [
          {
            "status": "passed",
            "retry": 0,
            "durationMs": 798
          }
        ]
      }
    ]
  },
  "rate-limit": {
    "passed": 9,
    "failed": 0,
    "skipped": 0,
    "retries": 0,
    "startTime": "2026-10-09T02:02:51.369Z",
    "durationSeconds": 9.817,
    "cases": [
      {
        "file": "isolation.spec.ts",
        "title": "A exhausting account exports does not throttle the other account on the same IP",
        "project": "",
        "status": "expected",
        "expectedStatus": "passed",
        "attempts": [
          {
            "status": "passed",
            "retry": 0,
            "durationMs": 1022
          }
        ]
      },
      {
        "file": "isolation.spec.ts",
        "title": "B exhausting account exports does not throttle the other account on the same IP",
        "project": "",
        "status": "expected",
        "expectedStatus": "passed",
        "attempts": [
          {
            "status": "passed",
            "retry": 0,
            "durationMs": 468
          }
        ]
      },
      {
        "file": "isolation.spec.ts",
        "title": "concurrent accounts share an IP while sessions, bearer/cookie and changed IPs share each owner's allowance",
        "project": "",
        "status": "expected",
        "expectedStatus": "passed",
        "attempts": [
          {
            "status": "passed",
            "retry": 0,
            "durationMs": 504
          }
        ]
      },
      {
        "file": "isolation.spec.ts",
        "title": "crafted body/query/headers and B02 context cannot select the email-send owner",
        "project": "",
        "status": "expected",
        "expectedStatus": "passed",
        "attempts": [
          {
            "status": "passed",
            "retry": 0,
            "durationMs": 432
          }
        ]
      },
      {
        "file": "isolation.spec.ts",
        "title": "export and disabled deletion consume the same account-data policy without affecting another account",
        "project": "",
        "status": "expected",
        "expectedStatus": "passed",
        "attempts": [
          {
            "status": "passed",
            "retry": 0,
            "durationMs": 400
          }
        ]
      },
      {
        "file": "isolation.spec.ts",
        "title": "invalid credentials are rejected before account partitioning and cannot select anonymous login partitions",
        "project": "",
        "status": "expected",
        "expectedStatus": "passed",
        "attempts": [
          {
            "status": "passed",
            "retry": 0,
            "durationMs": 614
          }
        ]
      },
      {
        "file": "isolation.spec.ts",
        "title": "login/security policies remain IP based for authenticated and anonymous requests",
        "project": "",
        "status": "expected",
        "expectedStatus": "passed",
        "attempts": [
          {
            "status": "passed",
            "retry": 0,
            "durationMs": 397
          }
        ]
      },
      {
        "file": "isolation.spec.ts",
        "title": "public PDF remains IP plus slug scoped even after authentication",
        "project": "",
        "status": "expected",
        "expectedStatus": "passed",
        "attempts": [
          {
            "status": "passed",
            "retry": 0,
            "durationMs": 371
          }
        ]
      },
      {
        "file": "isolation.spec.ts",
        "title": "untrusted direct peers cannot evade IP limits with forged forwarding headers",
        "project": "",
        "status": "expected",
        "expectedStatus": "passed",
        "attempts": [
          {
            "status": "passed",
            "retry": 0,
            "durationMs": 21
          }
        ]
      }
    ]
  },
  "ingress": {
    "passed": 6,
    "failed": 0,
    "skipped": 0,
    "retries": 0,
    "startTime": "2026-10-09T02:03:02.615Z",
    "durationSeconds": 6.328,
    "cases": [
      {
        "file": "production.spec.ts",
        "title": "unsafe production CORS overrides fail before the API starts listening",
        "project": "",
        "status": "expected",
        "expectedStatus": "passed",
        "attempts": [
          {
            "status": "passed",
            "retry": 0,
            "durationMs": 312
          }
        ]
      },
      {
        "file": "production.spec.ts",
        "title": "production CORS defaults to the canonical origin, never localhost or arbitrary origins",
        "project": "",
        "status": "expected",
        "expectedStatus": "passed",
        "attempts": [
          {
            "status": "passed",
            "retry": 0,
            "durationMs": 55
          }
        ]
      },
      {
        "file": "production.spec.ts",
        "title": "forwarded host cannot replace Host and internal liveness does not expose other routes",
        "project": "",
        "status": "expected",
        "expectedStatus": "passed",
        "attempts": [
          {
            "status": "passed",
            "retry": 0,
            "durationMs": 20
          }
        ]
      },
      {
        "file": "production.spec.ts",
        "title": "forged forwarding scheme cannot downgrade canonical HTTPS cookie security",
        "project": "",
        "status": "expected",
        "expectedStatus": "passed",
        "attempts": [
          {
            "status": "passed",
            "retry": 0,
            "durationMs": 19
          }
        ]
      },
      {
        "file": "production.spec.ts",
        "title": "untrusted direct source cannot reset its IP allowance using IP, scheme or host forwarding",
        "project": "",
        "status": "expected",
        "expectedStatus": "passed",
        "attempts": [
          {
            "status": "passed",
            "retry": 0,
            "durationMs": 66
          }
        ]
      },
      {
        "file": "production.spec.ts",
        "title": "trusted proxy gives two real clients independent IP allowances and ignores leftmost extra hops",
        "project": "",
        "status": "expected",
        "expectedStatus": "passed",
        "attempts": [
          {
            "status": "passed",
            "retry": 0,
            "durationMs": 29
          }
        ]
      }
    ]
  },
  "pdf-admission": {
    "passed": 1,
    "failed": 0,
    "skipped": 0,
    "retries": 0,
    "startTime": "2026-10-09T02:03:10.361Z",
    "durationSeconds": 7.394,
    "cases": [
      {
        "file": "admission.spec.ts",
        "title": "authenticated bursts across variant, job and public routes share actual render capacity and recover",
        "project": "",
        "status": "expected",
        "expectedStatus": "passed",
        "attempts": [
          {
            "status": "passed",
            "retry": 0,
            "durationMs": 1624
          }
        ]
      }
    ]
  }
}