{
  "_doc": "Phase 17 cross-lang recall-validation baseline for phpmyadmin (PHP). Re-capture by running scripts/validate_recall.sh --lang php phpmyadmin <clone_path> --capture against a fresh checkout. Baseline location is tests/recall_targets/xlang/php/ (relocated out of .pitboss/ per the Phase 01 precedent — pitboss implementer agents must not write under .pitboss/).",
  "target": "phpmyadmin",
  "lang": "php",
  "clone_url": "https://github.com/phpmyadmin/phpmyadmin",
  "exercises_recall_items": [],
  "captured_against": "real-scan @ ddf4e99390c8da9c851ac7a21a43a45d1229687c",
  "captured_on": "2026-05-09",
  "pinned_commit": "ddf4e99390c8da9c851ac7a21a43a45d1229687c",
  "findings": [
    {
      "rule_id": "taint-prototype-pollution",
      "path_suffix": "resources/js/makegrid.ts",
      "line": 441,
      "severity": "High",
      "verdict": "needs_review",
      "note": "captured by validate_recall.sh --capture"
    },
    {
      "rule_id": "taint-prototype-pollution",
      "path_suffix": "resources/js/makegrid.ts",
      "line": 445,
      "severity": "High",
      "verdict": "needs_review",
      "note": "captured by validate_recall.sh --capture"
    },
    {
      "rule_id": "taint-unsanitised-flow",
      "path_suffix": "src/Server/Privileges.php",
      "line": 1417,
      "severity": "High",
      "verdict": "needs_review",
      "note": "captured by validate_recall.sh --capture"
    },
    {
      "rule_id": "taint-unsanitised-flow",
      "path_suffix": "src/Controllers/Table/ZoomSearchController.php",
      "line": 182,
      "severity": "High",
      "verdict": "needs_review",
      "note": "captured by validate_recall.sh --capture"
    },
    {
      "rule_id": "taint-unsanitised-flow",
      "path_suffix": "resources/js/setup/scripts.ts",
      "line": 24,
      "severity": "High",
      "verdict": "needs_review",
      "note": "captured by validate_recall.sh --capture"
    },
    {
      "rule_id": "taint-unsanitised-flow",
      "path_suffix": "resources/js/setup/scripts.ts",
      "line": 248,
      "severity": "High",
      "verdict": "needs_review",
      "note": "captured by validate_recall.sh --capture"
    },
    {
      "rule_id": "taint-unsanitised-flow",
      "path_suffix": "resources/js/setup/scripts.ts",
      "line": 251,
      "severity": "High",
      "verdict": "needs_review",
      "note": "captured by validate_recall.sh --capture"
    },
    {
      "rule_id": "taint-unsanitised-flow",
      "path_suffix": "src/Controllers/Table/ZoomSearchController.php",
      "line": 295,
      "severity": "High",
      "verdict": "needs_review",
      "note": "captured by validate_recall.sh --capture"
    },
    {
      "rule_id": "taint-unsanitised-flow",
      "path_suffix": "src/Controllers/Table/ZoomSearchController.php",
      "line": 356,
      "severity": "High",
      "verdict": "needs_review",
      "note": "captured by validate_recall.sh --capture"
    },
    {
      "rule_id": "taint-unsanitised-flow",
      "path_suffix": "src/Controllers/Table/GisVisualizationController.php",
      "line": 91,
      "severity": "High",
      "verdict": "needs_review",
      "note": "captured by validate_recall.sh --capture"
    },
    {
      "rule_id": "taint-unsanitised-flow",
      "path_suffix": "src/Operations.php",
      "line": 905,
      "severity": "High",
      "verdict": "needs_review",
      "note": "captured by validate_recall.sh --capture"
    },
    {
      "rule_id": "taint-unsanitised-flow",
      "path_suffix": "src/Operations.php",
      "line": 913,
      "severity": "High",
      "verdict": "needs_review",
      "note": "captured by validate_recall.sh --capture"
    },
    {
      "rule_id": "taint-unsanitised-flow",
      "path_suffix": "resources/js/modules/ajax.ts",
      "line": 906,
      "severity": "High",
      "verdict": "needs_review",
      "note": "captured by validate_recall.sh --capture"
    },
    {
      "rule_id": "taint-unsanitised-flow",
      "path_suffix": "src/Controllers/Preferences/ManageController.php",
      "line": 124,
      "severity": "High",
      "verdict": "needs_review",
      "note": "captured by validate_recall.sh --capture"
    },
    {
      "rule_id": "taint-unsanitised-flow",
      "path_suffix": "src/Database/Routines.php",
      "line": 251,
      "severity": "High",
      "verdict": "needs_review",
      "note": "captured by validate_recall.sh --capture"
    },
    {
      "rule_id": "taint-unsanitised-flow",
      "path_suffix": "src/Database/Designer/Common.php",
      "line": 426,
      "severity": "High",
      "verdict": "needs_review",
      "note": "captured by validate_recall.sh --capture"
    },
    {
      "rule_id": "taint-unsanitised-flow",
      "path_suffix": "src/Controllers/Operations/DatabaseController.php",
      "line": 128,
      "severity": "High",
      "verdict": "needs_review",
      "note": "captured by validate_recall.sh --capture"
    },
    {
      "rule_id": "taint-unsanitised-flow",
      "path_suffix": "src/Controllers/Table/Structure/SaveController.php",
      "line": 210,
      "severity": "High",
      "verdict": "needs_review",
      "note": "captured by validate_recall.sh --capture"
    },
    {
      "rule_id": "taint-unsanitised-flow",
      "path_suffix": "src/Controllers/Database/RoutinesController.php",
      "line": 301,
      "severity": "High",
      "verdict": "needs_review",
      "note": "captured by validate_recall.sh --capture"
    },
    {
      "rule_id": "taint-unsanitised-flow",
      "path_suffix": "src/Server/Privileges.php",
      "line": 2282,
      "severity": "High",
      "verdict": "needs_review",
      "note": "captured by validate_recall.sh --capture"
    },
    {
      "rule_id": "taint-unsanitised-flow",
      "path_suffix": "src/Server/Privileges.php",
      "line": 2296,
      "severity": "High",
      "verdict": "needs_review",
      "note": "captured by validate_recall.sh --capture"
    },
    {
      "rule_id": "taint-unsanitised-flow",
      "path_suffix": "src/Controllers/Server/PrivilegesController.php",
      "line": 194,
      "severity": "High",
      "verdict": "needs_review",
      "note": "captured by validate_recall.sh --capture"
    },
    {
      "rule_id": "taint-unsanitised-flow",
      "path_suffix": "src/Controllers/Server/PrivilegesController.php",
      "line": 304,
      "severity": "High",
      "verdict": "needs_review",
      "note": "captured by validate_recall.sh --capture"
    },
    {
      "rule_id": "taint-unsanitised-flow",
      "path_suffix": "src/Controllers/Server/PrivilegesController.php",
      "line": 331,
      "severity": "High",
      "verdict": "needs_review",
      "note": "captured by validate_recall.sh --capture"
    },
    {
      "rule_id": "taint-unsanitised-flow",
      "path_suffix": "src/Git.php",
      "line": 630,
      "severity": "High",
      "verdict": "needs_review",
      "note": "captured by validate_recall.sh --capture"
    },
    {
      "rule_id": "taint-unsanitised-flow",
      "path_suffix": "resources/js/modules/ajax.ts",
      "line": 905,
      "severity": "High",
      "verdict": "needs_review",
      "note": "captured by validate_recall.sh --capture"
    },
    {
      "rule_id": "taint-unsanitised-flow",
      "path_suffix": "src/Database/Routines.php",
      "line": 112,
      "severity": "High",
      "verdict": "needs_review",
      "note": "captured by validate_recall.sh --capture"
    },
    {
      "rule_id": "php.cmdi.system",
      "path_suffix": "src/Command/WriteGitRevisionCommand.php",
      "line": 147,
      "severity": "High",
      "verdict": "needs_review",
      "note": "captured by validate_recall.sh --capture"
    },
    {
      "rule_id": "php.cmdi.system",
      "path_suffix": "src/Plugins/Transformations/Abs/ExternalTransformationsPlugin.php",
      "line": 128,
      "severity": "High",
      "verdict": "needs_review",
      "note": "captured by validate_recall.sh --capture"
    },
    {
      "rule_id": "php.cmdi.system",
      "path_suffix": "src/Server/SysInfo/SunOs.php",
      "line": 27,
      "severity": "High",
      "verdict": "needs_review",
      "note": "captured by validate_recall.sh --capture"
    },
    {
      "rule_id": "php.code_exec.assert_string",
      "path_suffix": "src/Controllers/Table/Structure/MoveColumnsController.php",
      "line": 144,
      "severity": "High",
      "verdict": "needs_review",
      "note": "captured by validate_recall.sh --capture"
    },
    {
      "rule_id": "php.deser.unserialize",
      "path_suffix": "src/Core.php",
      "line": 643,
      "severity": "High",
      "verdict": "needs_review",
      "note": "captured by validate_recall.sh --capture"
    },
    {
      "rule_id": "ts.code_exec.eval",
      "path_suffix": "resources/js/modules/functions.ts",
      "line": 3070,
      "severity": "High",
      "verdict": "needs_review",
      "note": "captured by validate_recall.sh --capture"
    },
    {
      "rule_id": "js.auth.missing_ownership_check",
      "path_suffix": "resources/js/designer/page.ts",
      "line": 45,
      "severity": "High",
      "verdict": "needs_review",
      "note": "captured by validate_recall.sh --capture"
    },
    {
      "rule_id": "js.auth.missing_ownership_check",
      "path_suffix": "resources/js/designer/page.ts",
      "line": 87,
      "severity": "High",
      "verdict": "needs_review",
      "note": "captured by validate_recall.sh --capture"
    },
    {
      "rule_id": "js.auth.missing_ownership_check",
      "path_suffix": "resources/js/designer/page.ts",
      "line": 93,
      "severity": "High",
      "verdict": "needs_review",
      "note": "captured by validate_recall.sh --capture"
    },
    {
      "rule_id": "js.auth.missing_ownership_check",
      "path_suffix": "resources/js/designer/page.ts",
      "line": 141,
      "severity": "High",
      "verdict": "needs_review",
      "note": "captured by validate_recall.sh --capture"
    },
    {
      "rule_id": "js.auth.missing_ownership_check",
      "path_suffix": "resources/js/designer/page.ts",
      "line": 171,
      "severity": "High",
      "verdict": "needs_review",
      "note": "captured by validate_recall.sh --capture"
    },
    {
      "rule_id": "php.path.include_variable",
      "path_suffix": "src/Plugins/Auth/AuthenticationSignon.php",
      "line": 132,
      "severity": "High",
      "verdict": "needs_review",
      "note": "captured by validate_recall.sh --capture"
    },
    {
      "rule_id": "taint-unsanitised-flow",
      "path_suffix": "src/Export/OutputHandler.php",
      "line": 214,
      "severity": "Medium",
      "verdict": "needs_review",
      "note": "captured by validate_recall.sh --capture"
    },
    {
      "rule_id": "taint-header-injection",
      "path_suffix": "examples/openid.php",
      "line": 135,
      "severity": "Medium",
      "verdict": "needs_review",
      "note": "captured by validate_recall.sh --capture"
    },
    {
      "rule_id": "taint-unsanitised-flow",
      "path_suffix": "resources/js/sql.ts",
      "line": 583,
      "severity": "Medium",
      "verdict": "needs_review",
      "note": "captured by validate_recall.sh --capture"
    },
    {
      "rule_id": "state-resource-leak",
      "path_suffix": "src/Export/OutputHandler.php",
      "line": 186,
      "severity": "Medium",
      "verdict": "needs_review",
      "note": "captured by validate_recall.sh --capture"
    },
    {
      "rule_id": "state-resource-leak",
      "path_suffix": "src/File.php",
      "line": 414,
      "severity": "Medium",
      "verdict": "needs_review",
      "note": "captured by validate_recall.sh --capture"
    },
    {
      "rule_id": "state-resource-leak",
      "path_suffix": "src/Utils/HttpRequest.php",
      "line": 122,
      "severity": "Medium",
      "verdict": "needs_review",
      "note": "captured by validate_recall.sh --capture"
    },
    {
      "rule_id": "state-resource-leak",
      "path_suffix": "src/WebAuthn/DataStream.php",
      "line": 14,
      "severity": "Medium",
      "verdict": "needs_review",
      "note": "captured by validate_recall.sh --capture"
    },
    {
      "rule_id": "cfg-error-fallthrough",
      "path_suffix": "resources/js/setup/scripts.ts",
      "line": 108,
      "severity": "Medium",
      "verdict": "needs_review",
      "note": "captured by validate_recall.sh --capture"
    },
    {
      "rule_id": "cfg-resource-leak",
      "path_suffix": "src/Utils/HttpRequest.php",
      "line": 275,
      "severity": "Medium",
      "verdict": "needs_review",
      "note": "captured by validate_recall.sh --capture"
    },
    {
      "rule_id": "cfg-unguarded-sink",
      "path_suffix": "resources/js/modules/functions.ts",
      "line": 1972,
      "severity": "Medium",
      "verdict": "needs_review",
      "note": "captured by validate_recall.sh --capture"
    },
    {
      "rule_id": "cfg-unguarded-sink",
      "path_suffix": "resources/js/modules/indexes.ts",
      "line": 741,
      "severity": "Medium",
      "verdict": "needs_review",
      "note": "captured by validate_recall.sh --capture"
    },
    {
      "rule_id": "cfg-unguarded-sink",
      "path_suffix": "src/Bookmarks/Bookmark.php",
      "line": 98,
      "severity": "Medium",
      "verdict": "needs_review",
      "note": "captured by validate_recall.sh --capture"
    },
    {
      "rule_id": "cfg-unguarded-sink",
      "path_suffix": "src/ConfigStorage/Relation.php",
      "line": 1464,
      "severity": "Medium",
      "verdict": "needs_review",
      "note": "captured by validate_recall.sh --capture"
    },
    {
      "rule_id": "cfg-unguarded-sink",
      "path_suffix": "src/Controllers/Database/SqlAutoCompleteController.php",
      "line": 49,
      "severity": "Medium",
      "verdict": "needs_review",
      "note": "captured by validate_recall.sh --capture"
    },
    {
      "rule_id": "cfg-unguarded-sink",
      "path_suffix": "src/Controllers/Database/Structure/AddPrefixTableController.php",
      "line": 38,
      "severity": "Medium",
      "verdict": "needs_review",
      "note": "captured by validate_recall.sh --capture"
    },
    {
      "rule_id": "cfg-unguarded-sink",
      "path_suffix": "src/Controllers/Operations/Database/CollationController.php",
      "line": 61,
      "severity": "Medium",
      "verdict": "needs_review",
      "note": "captured by validate_recall.sh --capture"
    },
    {
      "rule_id": "cfg-unguarded-sink",
      "path_suffix": "src/Controllers/Operations/Database/CollationController.php",
      "line": 81,
      "severity": "Medium",
      "verdict": "needs_review",
      "note": "captured by validate_recall.sh --capture"
    },
    {
      "rule_id": "cfg-unguarded-sink",
      "path_suffix": "src/Controllers/Server/Databases/DestroyController.php",
      "line": 80,
      "severity": "Medium",
      "verdict": "needs_review",
      "note": "captured by validate_recall.sh --capture"
    },
    {
      "rule_id": "cfg-unguarded-sink",
      "path_suffix": "src/Controllers/Table/FindReplaceController.php",
      "line": 356,
      "severity": "Medium",
      "verdict": "needs_review",
      "note": "captured by validate_recall.sh --capture"
    },
    {
      "rule_id": "cfg-unguarded-sink",
      "path_suffix": "src/Controllers/Table/Structure/PrimaryController.php",
      "line": 133,
      "severity": "Medium",
      "verdict": "needs_review",
      "note": "captured by validate_recall.sh --capture"
    },
    {
      "rule_id": "cfg-unguarded-sink",
      "path_suffix": "src/Database/Designer/Common.php",
      "line": 495,
      "severity": "Medium",
      "verdict": "needs_review",
      "note": "captured by validate_recall.sh --capture"
    },
    {
      "rule_id": "cfg-unguarded-sink",
      "path_suffix": "src/Database/Designer/Common.php",
      "line": 503,
      "severity": "Medium",
      "verdict": "needs_review",
      "note": "captured by validate_recall.sh --capture"
    },
    {
      "rule_id": "cfg-unguarded-sink",
      "path_suffix": "src/Database/Designer/Common.php",
      "line": 597,
      "severity": "Medium",
      "verdict": "needs_review",
      "note": "captured by validate_recall.sh --capture"
    },
    {
      "rule_id": "cfg-unguarded-sink",
      "path_suffix": "src/Dbal/DatabaseInterface.php",
      "line": 288,
      "severity": "Medium",
      "verdict": "needs_review",
      "note": "captured by validate_recall.sh --capture"
    },
    {
      "rule_id": "cfg-unguarded-sink",
      "path_suffix": "src/Dbal/DatabaseInterface.php",
      "line": 1028,
      "severity": "Medium",
      "verdict": "needs_review",
      "note": "captured by validate_recall.sh --capture"
    },
    {
      "rule_id": "cfg-unguarded-sink",
      "path_suffix": "src/Dbal/DbiMysqli.php",
      "line": 158,
      "severity": "Medium",
      "verdict": "needs_review",
      "note": "captured by validate_recall.sh --capture"
    },
    {
      "rule_id": "cfg-unguarded-sink",
      "path_suffix": "src/InsertEdit.php",
      "line": 195,
      "severity": "Medium",
      "verdict": "needs_review",
      "note": "captured by validate_recall.sh --capture"
    },
    {
      "rule_id": "cfg-unguarded-sink",
      "path_suffix": "src/InsertEdit.php",
      "line": 764,
      "severity": "Medium",
      "verdict": "needs_review",
      "note": "captured by validate_recall.sh --capture"
    },
    {
      "rule_id": "cfg-unguarded-sink",
      "path_suffix": "src/InsertEdit.php",
      "line": 1819,
      "severity": "Medium",
      "verdict": "needs_review",
      "note": "captured by validate_recall.sh --capture"
    },
    {
      "rule_id": "cfg-unguarded-sink",
      "path_suffix": "src/Operations.php",
      "line": 70,
      "severity": "Medium",
      "verdict": "needs_review",
      "note": "captured by validate_recall.sh --capture"
    },
    {
      "rule_id": "cfg-unguarded-sink",
      "path_suffix": "src/Operations.php",
      "line": 83,
      "severity": "Medium",
      "verdict": "needs_review",
      "note": "captured by validate_recall.sh --capture"
    },
    {
      "rule_id": "cfg-unguarded-sink",
      "path_suffix": "src/Operations.php",
      "line": 266,
      "severity": "Medium",
      "verdict": "needs_review",
      "note": "captured by validate_recall.sh --capture"
    },
    {
      "rule_id": "cfg-unguarded-sink",
      "path_suffix": "src/Operations.php",
      "line": 319,
      "severity": "Medium",
      "verdict": "needs_review",
      "note": "captured by validate_recall.sh --capture"
    },
    {
      "rule_id": "cfg-unguarded-sink",
      "path_suffix": "src/Operations.php",
      "line": 324,
      "severity": "Medium",
      "verdict": "needs_review",
      "note": "captured by validate_recall.sh --capture"
    },
    {
      "rule_id": "cfg-unguarded-sink",
      "path_suffix": "src/Operations.php",
      "line": 329,
      "severity": "Medium",
      "verdict": "needs_review",
      "note": "captured by validate_recall.sh --capture"
    },
    {
      "rule_id": "cfg-unguarded-sink",
      "path_suffix": "src/Operations.php",
      "line": 334,
      "severity": "Medium",
      "verdict": "needs_review",
      "note": "captured by validate_recall.sh --capture"
    },
    {
      "rule_id": "cfg-unguarded-sink",
      "path_suffix": "src/Operations.php",
      "line": 380,
      "severity": "Medium",
      "verdict": "needs_review",
      "note": "captured by validate_recall.sh --capture"
    },
    {
      "rule_id": "cfg-unguarded-sink",
      "path_suffix": "src/Operations.php",
      "line": 398,
      "severity": "Medium",
      "verdict": "needs_review",
      "note": "captured by validate_recall.sh --capture"
    },
    {
      "rule_id": "cfg-unguarded-sink",
      "path_suffix": "src/Operations.php",
      "line": 415,
      "severity": "Medium",
      "verdict": "needs_review",
      "note": "captured by validate_recall.sh --capture"
    },
    {
      "rule_id": "cfg-unguarded-sink",
      "path_suffix": "src/Operations.php",
      "line": 433,
      "severity": "Medium",
      "verdict": "needs_review",
      "note": "captured by validate_recall.sh --capture"
    },
    {
      "rule_id": "cfg-unguarded-sink",
      "path_suffix": "src/Operations.php",
      "line": 449,
      "severity": "Medium",
      "verdict": "needs_review",
      "note": "captured by validate_recall.sh --capture"
    },
    {
      "rule_id": "cfg-unguarded-sink",
      "path_suffix": "src/Operations.php",
      "line": 758,
      "severity": "Medium",
      "verdict": "needs_review",
      "note": "captured by validate_recall.sh --capture"
    },
    {
      "rule_id": "cfg-unguarded-sink",
      "path_suffix": "src/Operations.php",
      "line": 766,
      "severity": "Medium",
      "verdict": "needs_review",
      "note": "captured by validate_recall.sh --capture"
    },
    {
      "rule_id": "cfg-unguarded-sink",
      "path_suffix": "src/Operations.php",
      "line": 812,
      "severity": "Medium",
      "verdict": "needs_review",
      "note": "captured by validate_recall.sh --capture"
    },
    {
      "rule_id": "cfg-unguarded-sink",
      "path_suffix": "src/Operations.php",
      "line": 829,
      "severity": "Medium",
      "verdict": "needs_review",
      "note": "captured by validate_recall.sh --capture"
    },
    {
      "rule_id": "cfg-unguarded-sink",
      "path_suffix": "src/Operations.php",
      "line": 856,
      "severity": "Medium",
      "verdict": "needs_review",
      "note": "captured by validate_recall.sh --capture"
    },
    {
      "rule_id": "cfg-unguarded-sink",
      "path_suffix": "src/Plugins/Export/ExportMediawiki.php",
      "line": 227,
      "severity": "Medium",
      "verdict": "needs_review",
      "note": "captured by validate_recall.sh --capture"
    },
    {
      "rule_id": "cfg-unguarded-sink",
      "path_suffix": "src/Plugins/Export/ExportOds.php",
      "line": 164,
      "severity": "Medium",
      "verdict": "needs_review",
      "note": "captured by validate_recall.sh --capture"
    },
    {
      "rule_id": "cfg-unguarded-sink",
      "path_suffix": "src/Plugins/Export/ExportOdt.php",
      "line": 202,
      "severity": "Medium",
      "verdict": "needs_review",
      "note": "captured by validate_recall.sh --capture"
    },
    {
      "rule_id": "cfg-unguarded-sink",
      "path_suffix": "src/Plugins/Export/ExportXml.php",
      "line": 402,
      "severity": "Medium",
      "verdict": "needs_review",
      "note": "captured by validate_recall.sh --capture"
    },
    {
      "rule_id": "cfg-unguarded-sink",
      "path_suffix": "src/Replication/ReplicationInfo.php",
      "line": 151,
      "severity": "Medium",
      "verdict": "needs_review",
      "note": "captured by validate_recall.sh --capture"
    },
    {
      "rule_id": "cfg-unguarded-sink",
      "path_suffix": "src/Server/Privileges.php",
      "line": 1205,
      "severity": "Medium",
      "verdict": "needs_review",
      "note": "captured by validate_recall.sh --capture"
    },
    {
      "rule_id": "cfg-unguarded-sink",
      "path_suffix": "src/Server/Privileges.php",
      "line": 2726,
      "severity": "Medium",
      "verdict": "needs_review",
      "note": "captured by validate_recall.sh --capture"
    },
    {
      "rule_id": "cfg-unguarded-sink",
      "path_suffix": "src/Table/Indexes.php",
      "line": 204,
      "severity": "Medium",
      "verdict": "needs_review",
      "note": "captured by validate_recall.sh --capture"
    },
    {
      "rule_id": "cfg-unguarded-sink",
      "path_suffix": "src/Table/TableMover.php",
      "line": 340,
      "severity": "Medium",
      "verdict": "needs_review",
      "note": "captured by validate_recall.sh --capture"
    },
    {
      "rule_id": "cfg-unguarded-sink",
      "path_suffix": "src/Table/TableMover.php",
      "line": 353,
      "severity": "Medium",
      "verdict": "needs_review",
      "note": "captured by validate_recall.sh --capture"
    },
    {
      "rule_id": "cfg-unguarded-sink",
      "path_suffix": "src/Table/TableMover.php",
      "line": 371,
      "severity": "Medium",
      "verdict": "needs_review",
      "note": "captured by validate_recall.sh --capture"
    },
    {
      "rule_id": "cfg-unguarded-sink",
      "path_suffix": "src/Table/TableMover.php",
      "line": 440,
      "severity": "Medium",
      "verdict": "needs_review",
      "note": "captured by validate_recall.sh --capture"
    },
    {
      "rule_id": "cfg-unguarded-sink",
      "path_suffix": "src/Tracking/Tracking.php",
      "line": 827,
      "severity": "Medium",
      "verdict": "needs_review",
      "note": "captured by validate_recall.sh --capture"
    },
    {
      "rule_id": "ts.xss.insert_adjacent_html",
      "path_suffix": "resources/js/modules/functions.ts",
      "line": 2581,
      "severity": "Medium",
      "verdict": "needs_review",
      "note": "captured by validate_recall.sh --capture"
    },
    {
      "rule_id": "ts.xss.insert_adjacent_html",
      "path_suffix": "resources/js/sql.ts",
      "line": 1229,
      "severity": "Medium",
      "verdict": "needs_review",
      "note": "captured by validate_recall.sh --capture"
    },
    {
      "rule_id": "ts.xss.location_assign",
      "path_suffix": "resources/js/modules/ajax.ts",
      "line": 441,
      "severity": "Medium",
      "verdict": "needs_review",
      "note": "captured by validate_recall.sh --capture"
    },
    {
      "rule_id": "ts.xss.outer_html",
      "path_suffix": "resources/js/modules/navigation/event-loader.ts",
      "line": 13,
      "severity": "Medium",
      "verdict": "needs_review",
      "note": "captured by validate_recall.sh --capture"
    },
    {
      "rule_id": "taint-open-redirect",
      "path_suffix": "examples/openid.php",
      "line": 135,
      "severity": "Low",
      "verdict": "needs_review",
      "note": "captured by validate_recall.sh --capture"
    },
    {
      "rule_id": "state-resource-leak",
      "path_suffix": "tests/end-to-end/TestBase.php",
      "line": 1131,
      "severity": "Low",
      "verdict": "FP",
      "note": "Test fixture / helper. The flagged shape is in the test path, not request-reachable production code."
    },
    {
      "rule_id": "state-resource-leak",
      "path_suffix": "tests/unit/Dbal/DbiMysqliTest.php",
      "line": 29,
      "severity": "Low",
      "verdict": "FP",
      "note": "Test fixture / helper. The flagged shape is in the test path, not request-reachable production code."
    },
    {
      "rule_id": "cfg-unguarded-sink",
      "path_suffix": "tests/unit/Gis/GisVisualizationTest.php",
      "line": 437,
      "severity": "Low",
      "verdict": "FP",
      "note": "Test fixture / helper. The flagged shape is in the test path, not request-reachable production code."
    },
    {
      "rule_id": "state-resource-leak-possible",
      "path_suffix": "src/Config.php",
      "line": 237,
      "severity": "Low",
      "verdict": "needs_review",
      "note": "captured by validate_recall.sh --capture"
    },
    {
      "rule_id": "state-resource-leak-possible",
      "path_suffix": "src/Config/Validator.php",
      "line": 245,
      "severity": "Low",
      "verdict": "needs_review",
      "note": "captured by validate_recall.sh --capture"
    },
    {
      "rule_id": "state-resource-leak-possible",
      "path_suffix": "src/Dbal/DbiMysqli.php",
      "line": 46,
      "severity": "Low",
      "verdict": "needs_review",
      "note": "captured by validate_recall.sh --capture"
    },
    {
      "rule_id": "state-resource-leak-possible",
      "path_suffix": "src/Encoding.php",
      "line": 249,
      "severity": "Low",
      "verdict": "needs_review",
      "note": "captured by validate_recall.sh --capture"
    },
    {
      "rule_id": "state-resource-leak-possible",
      "path_suffix": "src/File.php",
      "line": 459,
      "severity": "Low",
      "verdict": "needs_review",
      "note": "captured by validate_recall.sh --capture"
    },
    {
      "rule_id": "state-resource-leak-possible",
      "path_suffix": "src/Git.php",
      "line": 145,
      "severity": "Low",
      "verdict": "needs_review",
      "note": "captured by validate_recall.sh --capture"
    },
    {
      "rule_id": "php.crypto.md5",
      "path_suffix": "tests/unit/MessageTest.php",
      "line": 286,
      "severity": "Low",
      "verdict": "FP",
      "note": "Test fixture / helper. The flagged shape is in the test path, not request-reachable production code."
    },
    {
      "rule_id": "ts.crypto.math_random",
      "path_suffix": "resources/js/designer/page.ts",
      "line": 188,
      "severity": "Low",
      "verdict": "needs_review",
      "note": "captured by validate_recall.sh --capture"
    },
    {
      "rule_id": "ts.crypto.math_random",
      "path_suffix": "resources/js/drag_drop_import.ts",
      "line": 398,
      "severity": "Low",
      "verdict": "needs_review",
      "note": "captured by validate_recall.sh --capture"
    },
    {
      "rule_id": "ts.crypto.math_random",
      "path_suffix": "resources/js/error_report.ts",
      "line": 134,
      "severity": "Low",
      "verdict": "needs_review",
      "note": "captured by validate_recall.sh --capture"
    },
    {
      "rule_id": "ts.crypto.math_random",
      "path_suffix": "resources/js/modules/console.ts",
      "line": 827,
      "severity": "Low",
      "verdict": "needs_review",
      "note": "captured by validate_recall.sh --capture"
    },
    {
      "rule_id": "ts.crypto.math_random",
      "path_suffix": "resources/js/modules/functions.ts",
      "line": 56,
      "severity": "Low",
      "verdict": "needs_review",
      "note": "captured by validate_recall.sh --capture"
    },
    {
      "rule_id": "ts.crypto.math_random",
      "path_suffix": "resources/js/replication.ts",
      "line": 13,
      "severity": "Low",
      "verdict": "needs_review",
      "note": "captured by validate_recall.sh --capture"
    }
  ]
}