{
  "uhbs_version": "4.0.1",
  "run_mode": "quick",
  "evaluated_at": "2026-07-27T18:14:30Z",
  "proof_label": "ESPot (mycert Elasticsearch honeypot)",
  "target": {
    "repository": "https://github.com/mycert/ESPot",
    "git_commit": "0b126a7783da69d543239606df59211c5d21f1db",
    "class": "Web-API",
    "protocol": "http",
    "host": "espot-lab",
    "port": 9200,
    "container_image": "espot:lab",
    "container_image_id": "sha256:7186a31a5ce7e9b806e17ad08164e13bd6c2fd6f3dd8bdeb8286da6476e1f869"
  },
  "grader": {
    "package_version": "4.0.1",
    "uhbs_git_commit": "12192d04d58b8d1feb5128d1a708c133c91b4a80",
    "docker_image": "uhbs:4.0.1",
    "tps": "web_api (builtin profiles/tps/web_api.yaml)",
    "notes": "CLI flags instead of inventory; no telemetry_dir; SAST skipped",
    "docker_image_id": "sha256:3e84c069ad1e343752d5245c7e2189555f6f19db00b8319764fbb08044cd2a16"
  },
  "flags": {
    "UHBS_QUICK": true,
    "UHBS_AIRGAP_ATTESTED": true,
    "UHBS_EGRESS_GATEWAY_LOG": null,
    "skip_sast_tools": true,
    "phases": [
      "profile",
      "static",
      "sandbox",
      "dynamic",
      "score"
    ],
    "modules": [
      "A",
      "B",
      "C",
      "D",
      "E",
      "F"
    ],
    "source_root": "/honeypot",
    "telemetry_dir": null
  },
  "results": {
    "uhqs": 49.34,
    "grade": "F",
    "delta_c": 0.5625,
    "module_scores": {
      "A": 86.75,
      "B": 82.5,
      "C": 100.0,
      "D": 75.0,
      "E": 100.0,
      "F": 72.64
    },
    "safety_gate_passed": false
  },
  "artifacts": [
    "SCORECARD.txt",
    "REPORT.txt",
    "report.json",
    "MANIFEST.json",
    "uhbs-run.log"
  ],
  "limitations": [
    "UHBS_QUICK=1 shortens Module A timing samples and lightens Module E.",
    "telemetry_dir unset \u2192 Module C C1 schema gates largely skipped (headline C can look optimistic).",
    "--skip-sast-tools \u2192 Module F does not run bandit/semgrep/trivy.",
    "HTTP-only target (no ports.ssh): Module D skips shell probes; C=75 with airgap attestation only.",
    "Prefer the full/ report for realistic evaluation claims.",
    "Product name is evaluation proof only \u2014 not a UHBS requirement or endorsement."
  ]
}