[
 {
  "id": "C01",
  "http_status": 200,
  "recorded_at": "2026-11-03T22:46:42+00:00",
  "ms": 95,
  "reply": {
   "sample_id": "forged-token",
   "path": "tokens.py",
   "engine": "FALSEWORK (cainwitness)",
   "scanned_ms": 29.8,
   "grade": "PARTIAL",
   "findings": [
    {
     "check": "unconditional_verdict",
     "severity": "MEDIUM",
     "line": 15,
     "detail": "`valid: True` in `verify_token`, which compares no hash, digest or signature and calls no verifier: the success verdict is given, not established."
    }
   ]
  }
 },
 {
  "id": "C02",
  "http_status": 200,
  "recorded_at": "2026-11-03T22:46:43+00:00",
  "ms": 85,
  "reply": {
   "sample_id": "random-accuracy",
   "path": "metrics.py",
   "engine": "FALSEWORK (cainwitness)",
   "scanned_ms": 8.4,
   "grade": "STUB",
   "findings": [
    {
     "check": "rng_fabrication",
     "severity": "CRITICAL",
     "line": 6,
     "detail": "Random number returned as the result of `accuracy` -- the value it presents as a computation or measurement is built from a random draw and constants only."
    }
   ]
  }
 },
 {
  "id": "C03",
  "http_status": 200,
  "recorded_at": "2026-11-03T22:46:43+00:00",
  "ms": 102,
  "reply": {
   "sample_id": "timing-leak",
   "path": "webhook.py",
   "engine": "FALSEWORK (cainwitness)",
   "scanned_ms": 8.3,
   "grade": "PARTIAL",
   "findings": [
    {
     "check": "secret_compare_not_constant_time",
     "severity": "MEDIUM",
     "line": 8,
     "detail": "`expected` is compared with ==/!=, which is not constant-time: use hmac.compare_digest."
    }
   ]
  }
 },
 {
  "id": "C04",
  "http_status": 200,
  "recorded_at": "2026-11-03T22:46:44+00:00",
  "ms": 69,
  "reply": {
   "sample_id": "fake-alert",
   "path": "alerts.py",
   "engine": "FALSEWORK (cainwitness)",
   "scanned_ms": 3.3,
   "grade": "PARTIAL",
   "findings": [
    {
     "check": "placeholder_marker",
     "severity": "MEDIUM",
     "line": 3,
     "detail": "Explicit placeholder/incomplete-work marker left in shipped code."
    }
   ]
  }
 },
 {
  "id": "C05",
  "http_status": 200,
  "recorded_at": "2026-11-03T22:46:44+00:00",
  "ms": 63,
  "reply": {
   "path": "compare.py",
   "engine": "FALSEWORK (cainwitness)",
   "scanned_ms": 7.4,
   "grade": "REAL",
   "findings": []
  }
 },
 {
  "id": "C06",
  "http_status": 200,
  "recorded_at": "2026-11-03T22:46:45+00:00",
  "ms": 79,
  "reply": {
   "path": "auth.py",
   "engine": "FALSEWORK (cainwitness)",
   "scanned_ms": 2.4,
   "grade": "PARTIAL",
   "findings": [
    {
     "check": "placeholder_marker",
     "severity": "MEDIUM",
     "line": 2,
     "detail": "Explicit placeholder/incomplete-work marker left in shipped code."
    },
    {
     "check": "check_cannot_fail",
     "severity": "MEDIUM",
     "line": 3,
     "detail": "`verify_token` returns True on every path without examining its inputs (token): the check cannot fail."
    },
    {
     "check": "fixed_result",
     "severity": "MEDIUM",
     "line": 3,
     "detail": "`verify_token` takes `token` but never reads it, and returns the same fixed answer whatever it is given: the result is hard-coded, not computed."
    }
   ]
  }
 },
 {
  "id": "C07",
  "http_status": 200,
  "recorded_at": "2026-11-03T22:46:45+00:00",
  "ms": 52,
  "reply": {
   "path": "crypto.py",
   "engine": "FALSEWORK (cainwitness)",
   "scanned_ms": 3.0,
   "grade": "PARTIAL",
   "findings": [
    {
     "check": "fake_encryption",
     "severity": "MEDIUM",
     "line": 4,
     "detail": "`encrypt` only encodes (b64encode); no cipher is applied, so anyone can reverse it without the key."
    }
   ]
  }
 }
]