{"schema":"termivar-report-comparison/v1","scope_assurance":"operator-declared","coverage_equivalence":"not-established","source_authenticity":"not-established-by-parsing","interpretation_limits":["Imported dispositions and claim bases are untrusted source labels, not endorsed findings.","Only in before does not mean fixed or resolved.","Only in after does not establish when an observation first appeared.","Unchanged means equal compared item projections, not equivalent coverage or security."],"before":{"sha256":"33f709237ffea142d892891d818815251c1cb35d888abe155f7175e15d7d481f","schema":"venom-rendered-assessment/v1","source_schema":"venom-assessment-run/v1","run_schema":"venom-run/v1","profile_schema":"venom.scan-profile/v1","profile":"web-review","status":"complete","subject_count":1,"item_count":3,"optional_audits":{}},"after":{"sha256":"5ea44cfd6dbab132aa96e62813c32c12e35f0bf32c09b43a102a16e9ff7bbe64","schema":"venom-rendered-assessment/v1","source_schema":"venom-assessment-run/v1","run_schema":"venom-run/v1","profile_schema":"venom.scan-profile/v1","profile":"web-review","status":"complete","subject_count":1,"item_count":3,"optional_audits":{}},"only_in_after":[{"fingerprint":"sha256:dddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddd","capability_id":"web.passive.x-content-type-options.missing@1","before":null,"after":{"title":"Synthetic after-only comparison fixture","category":"browser-defense","disposition":"informational","claim_basis":"observation","severity":null,"cwe":null,"confidence_ppm":1000000,"redacted_summary":"Synthetic document-processing fixture. This is not a new assessment result.","remediation":{"id":"web.remediation.nosniff@1","summary":"Set X-Content-Type-Options to nosniff where compatible with served content."},"evidence":{"evidence_count":6,"evidence_reference_count":6,"control_reference_count":0,"candidate_reference_count":0,"case_present":false,"outcome_present":false,"verification_stage":null}},"changed_fields":[]}],"only_in_before":[{"fingerprint":"sha256:8fe865ab9c15661e79fefee441ca28724fa4f773f8973c083ba8712c7b781154","capability_id":"web.passive.x-content-type-options.missing@1","before":{"title":"Synthetic comparison fixture 3","category":"browser-defense","disposition":"informational","claim_basis":"observation","severity":null,"cwe":null,"confidence_ppm":1000000,"redacted_summary":"Synthetic document-processing fixture. This is not a new assessment result.","remediation":{"id":"web.remediation.nosniff@1","summary":"Set X-Content-Type-Options to nosniff where compatible with served content."},"evidence":{"evidence_count":6,"evidence_reference_count":6,"control_reference_count":0,"candidate_reference_count":0,"case_present":false,"outcome_present":false,"verification_stage":null}},"after":null,"changed_fields":[]}],"changed":[{"fingerprint":"sha256:266e52f37c7b0c13ada33c28b9d4c2a15adabaeaa14e06b9d381c2752cc47d03","capability_id":"web.passive.csp.missing@1","before":{"title":"Synthetic comparison fixture 1","category":"content-policy","disposition":"informational","claim_basis":"observation","severity":null,"cwe":null,"confidence_ppm":1000000,"redacted_summary":"Synthetic document-processing fixture. This is not a new assessment result.","remediation":{"id":"web.remediation.csp@1","summary":"Define and validate a Content-Security-Policy for the application document."},"evidence":{"evidence_count":6,"evidence_reference_count":6,"control_reference_count":0,"candidate_reference_count":0,"case_present":false,"outcome_present":false,"verification_stage":null}},"after":{"title":"Synthetic comparison fixture 1","category":"content-policy","disposition":"informational","claim_basis":"observation","severity":null,"cwe":null,"confidence_ppm":1000000,"redacted_summary":"Synthetic edited summary used to demonstrate a content difference, not remediation.","remediation":{"id":"web.remediation.csp@1","summary":"Define and validate a Content-Security-Policy for the application document."},"evidence":{"evidence_count":6,"evidence_reference_count":6,"control_reference_count":0,"candidate_reference_count":0,"case_present":false,"outcome_present":false,"verification_stage":null}},"changed_fields":["redacted_summary"]}],"unchanged":[{"fingerprint":"sha256:7c882350932c1b914df08570b8d31f9e42e379b18a400d36dfe9f88e3246f3e1","capability_id":"web.passive.referrer-policy.missing@1","before":{"title":"Synthetic comparison fixture 2","category":"browser-defense","disposition":"informational","claim_basis":"observation","severity":null,"cwe":null,"confidence_ppm":1000000,"redacted_summary":"Synthetic document-processing fixture. This is not a new assessment result.","remediation":{"id":"web.remediation.referrer-policy@1","summary":"Define a Referrer-Policy that matches the application's cross-origin disclosure needs."},"evidence":{"evidence_count":6,"evidence_reference_count":6,"control_reference_count":0,"candidate_reference_count":0,"case_present":false,"outcome_present":false,"verification_stage":null}},"after":{"title":"Synthetic comparison fixture 2","category":"browser-defense","disposition":"informational","claim_basis":"observation","severity":null,"cwe":null,"confidence_ppm":1000000,"redacted_summary":"Synthetic document-processing fixture. This is not a new assessment result.","remediation":{"id":"web.remediation.referrer-policy@1","summary":"Define a Referrer-Policy that matches the application's cross-origin disclosure needs."},"evidence":{"evidence_count":6,"evidence_reference_count":6,"control_reference_count":0,"candidate_reference_count":0,"case_present":false,"outcome_present":false,"verification_stage":null}},"changed_fields":[]}]}