{
  "uhbs_version": "4.2.2",
  "target": {
    "name": "ESPot (mycert Elasticsearch honeypot)",
    "class": "Web-API",
    "profile_ref": "docs/conformance/labs/espot/web_api_full.yaml"
  },
  "evaluated_at": "2026-07-27",
  "auditor": "UHBS-Lab detailed Docker run (RFC9110 + 1000-sample A3 + SAST + telemetry)",
  "modules": {
    "A": {
      "score": 86.75,
      "status": "PASSED",
      "weight": 0.25,
      "notes": "RFC9110 unknown HTTP/9.9 still returns 200; 1000-sample timing OK; CheckResult scores on 0\u2013100 scale"
    },
    "B": {
      "score": 82.5,
      "status": "PASSED",
      "weight": 0.2,
      "notes": "survived binary blast; consistent GET"
    },
    "C": {
      "score": 55.0,
      "status": "PARTIAL",
      "weight": 0.2,
      "notes": "access.log only \u2014 no STIX/OTel/ECS schema evidence (capped)"
    },
    "D": {
      "score": 90.0,
      "status": "GATE FAILED",
      "notes": "HTTP-only: no SSH exec surface; airgap+gateway attested; Safety Gate not fully cleared (C<95)"
    },
    "E": {
      "score": 100.0,
      "status": "PASSED",
      "weight": 0.15,
      "notes": "200 req @25 concurrency; P95=8.8ms",
      "p50_ms": 2.97,
      "p95_ms": 8.28,
      "p99_ms": 10.31
    },
    "F": {
      "score": 70.0,
      "status": "PASSED",
      "weight": 0.2,
      "notes": "semgrep 2 error/critical of 6; SAST gate capped Module F at 70"
    }
  },
  "weights": {
    "w_A": 0.25,
    "w_B": 0.2,
    "w_C": 0.2,
    "w_E": 0.15,
    "w_F": 0.2
  },
  "safety_gate": {
    "containment_score": 90.0,
    "delta_c": 0.81,
    "passed": false,
    "unauthorized_egress_leaks": 0
  },
  "uhqs": 63.33,
  "grade": "D",
  "notes": "Detailed evaluation proof only. ESPot product name is not a UHBS requirement. Full Docker lab artifacts (scorecard, report.json, SAST, logs, tutorial) live under docs/conformance/reports/espot/. Ran without --quick; source-root + telemetry_dir + bandit/semgrep enabled."
}