artifact_type: verified_remediation_record
sample_status: synthetic_illustrative
evidence_snapshot:
  original_finding:
    finding_id: SAST-2026-4481
    tool: primary_sast
    severity: high
    location: src/payment/validator.ts:112
    description: Unsafe deserialization in payment validator
    detected_in_artifact: payment-service:2.4.0@build-8801
  fix_artifact: payment-service:2.4.1@build-8842
  retest_results:
    - tool: primary_sast
      finding_id: SAST-2026-4481
      status: not_detected
    - tool: secondary_sast
      finding_id: SAST-2026-4481-retest
      status: not_detected
  reviewer_attestation:
    reviewer: jsingh@example.org
    conclusion: fix_reviewed_and_approved
    reviewed_at: 2026-07-20T10:15:00Z
  runtime_corroboration:
    source: runtime_telemetry
    status: exploitable_behavior_not_observed
    observed_at: 2026-07-20T11:00:00Z
policy_version: v1.3.2
policy_digest: sha256:a1b2c3...f4e5d6
decision_fingerprint: sha256:3d4e5f...2c1b0a
freshness_state: fresh
trust_state: qualified_and_corroborated
dsse_envelope:
  payload_type: application/vnd.gosentrix.remediation+json
  signatures:
    - keyid: remediation-signer-2026
      sig: '...'
downgrade_reason_codes: []
outcome: risk_absent
replay_command: gosentrix replay --remediation-id SAST-2026-4481 --fix-artifact payment-service:2.4.1@build-8842 --policy-version v1.3.2