{
  "app": "bakery-demo",
  "care_record_url": null,
  "checked_at": "2026-10-27 20:08 UTC",
  "drills": [
    {
      "checks": [
        {
          "limit": 14,
          "number": "kev_catalog_age_days",
          "over": false
        },
        {
          "limit": 0,
          "number": "known_exploited",
          "over": false
        },
        {
          "limit": 0,
          "number": "vulnerable_runtime_packages",
          "over": false
        }
      ],
      "drill": "advisories",
      "evidence_url": "https://gitlab.com/gitlab-ai-hackathon/transcend-october-2026/43462035/showcase/-/jobs/17496551048",
      "exposure": false,
      "findings": 0,
      "finished_at": "2026-10-27 09:05 UTC",
      "note": null,
      "numbers": [
        "known advisories across them: 14",
        "days since the exploited-flaw list was released: 0",
        "packages with a flaw known to be exploited: 0",
        "packages checked for known advisories: 232",
        "build-tool packages with a known advisory: 5",
        "shipped packages with a known advisory: 0"
      ],
      "schedule": "nightly",
      "state": "green",
      "status": "pass",
      "summary": "Advisories: 232 package(s) checked in OSV, 14 advisory id(s); 0 shipped and 5 dev-only package(s) affected, 0 known exploited (CISA KEV, 0 day(s) old).",
      "untriaged_since": null,
      "valid_until": "2026-10-28 21:05 UTC",
      "window_hours": 36
    },
    {
      "checks": [
        {
          "limit": 0,
          "number": "readable_rows",
          "over": null
        },
        {
          "limit": 0,
          "number": "writable_tables",
          "over": false
        }
      ],
      "drill": "anonymous-access",
      "evidence_url": "https://gitlab.com/gitlab-ai-hackathon/transcend-october-2026/43462035/showcase/-/jobs/17496551041",
      "exposure": false,
      "findings": 0,
      "finished_at": "2026-10-27 09:05 UTC",
      "note": null,
      "numbers": [
        "private rows a stranger can read: restricted",
        "tables a stranger can read: 1",
        "tables a stranger can write to: 0"
      ],
      "schedule": "nightly",
      "state": "green",
      "status": "pass",
      "summary": "A stranger can read no private rows and cannot write. Tables tried: the care plan and the database inventory (3). No readable listing.",
      "untriaged_since": null,
      "valid_until": "2026-10-28 21:05 UTC",
      "window_hours": 36
    },
    {
      "checks": [
        {
          "limit": 0,
          "number": "key_files",
          "over": false
        },
        {
          "limit": 0,
          "number": "scripts_enabled",
          "over": false
        },
        {
          "limit": 0,
          "number": "unlocked_installs",
          "over": false
        },
        {
          "limit": 0,
          "number": "unpinned_images",
          "over": false
        }
      ],
      "drill": "armour",
      "evidence_url": "https://gitlab.com/gitlab-ai-hackathon/transcend-october-2026/43462035/showcase/-/jobs/17496551043",
      "exposure": false,
      "findings": 0,
      "finished_at": "2026-10-27 09:05 UTC",
      "note": null,
      "numbers": [
        "container images checked: 11",
        "installs checked: 43",
        "files shaped like a cloud key: 0",
        "places where npm install scripts run: 0",
        "installs that do not use the lockfile: 0",
        "container images not pinned to a digest: 0"
      ],
      "schedule": "nightly",
      "state": "green",
      "status": "pass",
      "summary": "Armour: 0 of 11 image(s) not pinned by digest, 0 of 43 install(s) not locked, 0 npm script setting(s) on, 0 key-shaped file(s). Not measured: 19 apt-get/apk install(s).",
      "untriaged_since": null,
      "valid_until": "2026-10-28 21:05 UTC",
      "window_hours": 36
    },
    {
      "checks": [
        {
          "limit": 0,
          "number": "runtimes_eol_soon",
          "over": false
        },
        {
          "limit": 3,
          "number": "runtimes_no_date",
          "over": false
        },
        {
          "limit": 0,
          "number": "runtimes_past_eol",
          "over": false
        },
        {
          "limit": 0,
          "number": "tls_expiring",
          "over": false
        }
      ],
      "drill": "clock",
      "evidence_url": "https://gitlab.com/gitlab-ai-hackathon/transcend-october-2026/43462035/showcase/-/jobs/17496551042",
      "exposure": false,
      "findings": 0,
      "finished_at": "2026-10-27 09:05 UTC",
      "note": null,
      "numbers": [
        "domains checked: 0",
        "days to the nearest end of life: 185",
        "runtimes checked: 7",
        "runtimes past active support: 3",
        "runtimes reaching end of life within 90 days: 0",
        "runtimes with no end-of-life date yet: 3",
        "runtimes past end of life: 0",
        "website certificates (TLS) checked: 1",
        "website certificates (TLS) expiring within 14 days: 0"
      ],
      "schedule": "nightly",
      "state": "green",
      "status": "pass",
      "summary": "nodejs 22: 2027-04-30; alpine 3.24: 2028-06-01; python 3.12: 2028-10-31; nginx 1.30, docker-engine 29, react 18: no date published; TLS: 55d left (renewed automatically by Google); Domain expiry: not applicable. No custom domain; the address is a Cloud Run default address owned by Google. (+1 more)",
      "untriaged_since": null,
      "valid_until": "2026-10-28 21:05 UTC",
      "window_hours": 36
    },
    {
      "checks": [],
      "drill": "exposed-settings",
      "evidence_url": "https://gitlab.com/gitlab-ai-hackathon/transcend-october-2026/43462035/showcase/-/jobs/17496551049",
      "exposure": false,
      "findings": 0,
      "finished_at": "2026-10-27 09:05 UTC",
      "note": null,
      "numbers": [
        "plain-text secrets on the live service: 0",
        "plain-text secrets in older revisions: 0",
        "settings checked: 6"
      ],
      "schedule": "nightly",
      "state": "green",
      "status": "pass",
      "summary": "Checked 6 Cloud Run setting(s): 0 plain secrets on the serving service or old revisions; GitLab CI variables not measured (no read-only GitLab token exists yet; CI variables are not measured).",
      "untriaged_since": null,
      "valid_until": "2026-10-28 21:05 UTC",
      "window_hours": 36
    },
    {
      "checks": [
        {
          "limit": 0,
          "number": "deploy_jobs_in_schedule",
          "over": false
        },
        {
          "limit": 0,
          "number": "unknown_rules",
          "over": false
        }
      ],
      "drill": "postmortem",
      "evidence_url": "https://gitlab.com/gitlab-ai-hackathon/transcend-october-2026/43462035/showcase/-/jobs/17496551044",
      "exposure": false,
      "findings": 0,
      "finished_at": "2026-10-27 09:05 UTC",
      "note": null,
      "numbers": [
        "deploy jobs checked: 5",
        "deploy jobs a schedule would run: 0",
        "deploy jobs seen in a live schedule pipeline: 0",
        "rules the check could not work out: 0"
      ],
      "schedule": "nightly",
      "state": "green",
      "status": "pass",
      "summary": "0 deploy job(s) in a schedule pipeline; 1 scheduled by design: deploy-certificate (on_success); 0 seen in the newest schedule pipeline",
      "untriaged_since": null,
      "valid_until": "2026-10-28 21:05 UTC",
      "window_hours": 36
    },
    {
      "checks": [
        {
          "limit": 93600,
          "number": "backup_age_s",
          "over": false
        },
        {
          "limit": 900,
          "number": "restore_s",
          "over": false
        },
        {
          "limit": 0,
          "number": "tables_mismatched",
          "over": false
        }
      ],
      "drill": "restore",
      "evidence_url": "https://gitlab.com/gitlab-ai-hackathon/transcend-october-2026/43462035/showcase/-/jobs/17474371877",
      "exposure": false,
      "findings": 0,
      "finished_at": "2026-10-26 15:20 UTC",
      "note": null,
      "numbers": [
        "age of the newest backup: 6 min",
        "time to restore it: 0.2 s",
        "tables compared: 6",
        "tables that did not match: 0"
      ],
      "schedule": "weekly",
      "state": "green",
      "status": "pass",
      "summary": "Restored the backup taken 0.1 h before this drill in 0 s; 6 table(s) checked against its manifest, 0 differ.",
      "untriaged_since": null,
      "valid_until": "2026-11-03 15:20 UTC",
      "window_hours": 192
    },
    {
      "checks": [
        {
          "limit": 0,
          "number": "lock_entries_unverified",
          "over": false
        },
        {
          "limit": 0,
          "number": "scripts_enabled",
          "over": false
        },
        {
          "limit": 0,
          "number": "unlocked_installs",
          "over": false
        }
      ],
      "drill": "supply-chain",
      "evidence_url": "https://gitlab.com/gitlab-ai-hackathon/transcend-october-2026/43462035/showcase/-/jobs/17496551046",
      "exposure": false,
      "findings": 0,
      "finished_at": "2026-10-27 09:05 UTC",
      "note": null,
      "numbers": [
        "packages that carry an install script: 2",
        "installs checked: 1",
        "packages in the lockfile: 232",
        "lockfile packages with no checkable download: 0",
        "places where npm install scripts run: 0",
        "installs that do not use the lockfile: 0"
      ],
      "schedule": "nightly",
      "state": "green",
      "status": "pass",
      "summary": "Supply chain: 0 of 1 install(s) not locked, 0 npm script setting(s) on, 0 of 232 lockfile entries not verifiable, 2 package(s) with an install script.",
      "untriaged_since": null,
      "valid_until": "2026-10-28 21:05 UTC",
      "window_hours": 36
    },
    {
      "checks": [
        {
          "limit": 0,
          "number": "repo_push_possible",
          "over": false
        },
        {
          "limit": 0,
          "number": "secrets_visible",
          "over": null
        }
      ],
      "drill": "supply-chain-probe",
      "evidence_url": "https://gitlab.com/gitlab-ai-hackathon/transcend-october-2026/43462035/showcase/-/jobs/17496551047",
      "exposure": false,
      "findings": 0,
      "finished_at": "2026-10-27 09:05 UTC",
      "note": null,
      "numbers": [
        "checks performed: 2",
        "public-by-design keys visible (not counted): 1",
        "GitLab job credentials visible (not counted): 4",
        "an install could push to the repo (1 means yes): 0",
        "credential-looking names an install could see: restricted"
      ],
      "schedule": "nightly",
      "state": "green",
      "status": "pass",
      "summary": "Local package install measured 0 credential name(s) that count and 4 GitLab platform credential name(s) and 1 name(s) declared public that do not. GitLab refused Git push discovery (403) after the read discovery was accepted. Cloud metadata not measured in GitLab CI.",
      "untriaged_since": null,
      "valid_until": "2026-10-28 21:05 UTC",
      "window_hours": 36
    }
  ],
  "legend": {
    "amber": "Could not check: the last drill ran but could not measure.",
    "green": "Proven: the last drill passed, recently enough to count.",
    "grey": "Not proven: no recent drill result. Silence is not health.",
    "red": "Failing: the last drill found a problem."
  },
  "meaning": "Proven: the last drill passed, recently enough to count.",
  "overall": "green",
  "state_updated": "2026-10-27 09:05 UTC"
}