{
  "text": "{\n  \"failed\": 0,\n  \"cases\": [\n    {\n      \"expected_allowed\": true,\n      \"pass\": true,\n      \"actual\": {\n        \"created_utc\": \"2026-09-13T05:45:32.8201734Z\",\n        \"observations\": [\n          {\n            \"created_utc\": \"2026-09-13T05:45:32.8201734Z\",\n            \"image\": null,\n            \"source\": \"CIM\",\n            \"pid\": 41000\n          }\n        ],\n        \"original_gone\": false,\n        \"allowed\": true,\n        \"pid\": 41000,\n        \"disposition\": \"PREDATES_RIG\"\n      },\n      \"case\": \"pre-rig unreadable perch\"\n    },\n    {\n      \"expected_allowed\": true,\n      \"pass\": true,\n      \"actual\": {\n        \"created_utc\": \"2026-09-14T05:45:33.8201734Z\",\n        \"observations\": [\n          {\n            \"created_utc\": \"2026-09-14T05:45:33.8201734Z\",\n            \"image\": null,\n            \"source\": \"CIM\",\n            \"pid\": 41000\n          },\n          {\n            \"created_utc\": \"2026-09-14T05:45:33.8201734Z\",\n            \"image\": \"C:\\\\fleet\\\\spt.exe\",\n            \"source\": \"NATIVE\",\n            \"replaces_cim_identity\": false,\n            \"pid\": 41000,\n            \"live\": true\n          }\n        ],\n        \"original_gone\": false,\n        \"allowed\": true,\n        \"pid\": 41000,\n        \"disposition\": \"OTHER_IMAGE\"\n      },\n      \"case\": \"native resolves unrelated image\"\n    },\n    {\n      \"expected_allowed\": false,\n      \"pass\": true,\n      \"actual\": {\n        \"created_utc\": \"2026-09-14T05:45:33.8201734Z\",\n        \"observations\": [\n          {\n            \"created_utc\": \"2026-09-14T05:45:33.8201734Z\",\n            \"image\": \"C:\\\\rig\\\\bin\\\\spt.exe\",\n            \"source\": \"CIM\",\n            \"pid\": 41000\n          }\n        ],\n        \"original_gone\": false,\n        \"allowed\": false,\n        \"pid\": 41000,\n        \"disposition\": \"RIG_DAEMON_ALREADY_PRESENT\"\n      },\n      \"case\": \"known rig image\"\n    },\n    {\n      \"expected_allowed\": false,\n      \"pass\": true,\n      \"actual\": {\n        \"created_utc\": \"2026-09-14T05:45:33.8201734Z\",\n        \"observations\": [\n          {\n            \"created_utc\": \"2026-09-14T05:45:33.8201734Z\",\n            \"image\": null,\n            \"source\": \"CIM\",\n            \"pid\": 41000\n          },\n          {\n            \"created_utc\": \"2026-09-14T05:45:33.8201734Z\",\n            \"image\": \"C:\\\\rig\\\\bin\\\\spt.exe\",\n            \"source\": \"NATIVE\",\n            \"replaces_cim_identity\": false,\n            \"pid\": 41000,\n            \"live\": true\n          }\n        ],\n        \"original_gone\": false,\n        \"allowed\": false,\n        \"pid\": 41000,\n        \"disposition\": \"RIG_DAEMON_ALREADY_PRESENT\"\n      },\n      \"case\": \"native resolves rig image\"\n    },\n    {\n      \"expected_allowed\": true,\n      \"pass\": true,\n      \"actual\": {\n        \"created_utc\": \"2026-09-14T05:45:33.8201734Z\",\n        \"observations\": [\n          {\n            \"created_utc\": \"2026-09-14T05:45:33.8201734Z\",\n            \"image\": null,\n            \"source\": \"CIM\",\n            \"pid\": 41000\n          },\n          {\n            \"state\": \"UNRESOLVED\",\n            \"native_error\": 5,\n            \"error_type\": \"System.ComponentModel.Win32Exception\",\n            \"source\": \"NATIVE\"\n          }\n        ],\n        \"original_gone\": true,\n        \"allowed\": true,\n        \"pid\": 41000,\n        \"disposition\": \"ORIGINAL_GONE\"\n      },\n      \"case\": \"successful reread confirms disappearance\"\n    },\n    {\n      \"expected_allowed\": false,\n      \"pass\": true,\n      \"actual\": {\n        \"created_utc\": \"2026-09-14T05:45:33.8201734Z\",\n        \"observations\": [\n          {\n            \"created_utc\": \"2026-09-14T05:45:33.8201734Z\",\n            \"image\": null,\n            \"source\": \"CIM\",\n            \"pid\": 41000\n          },\n          {\n            \"state\": \"UNRESOLVED\",\n            \"native_error\": 5,\n            \"error_type\": \"System.ComponentModel.Win32Exception\",\n            \"source\": \"NATIVE\"\n          },\n          {\n            \"created_utc\": \"2026-09-14T05:45:33.8201734Z\",\n            \"same_identity\": true,\n            \"source\": \"CIM_REREAD\",\n            \"pid\": 41000\n          }\n        ],\n        \"original_gone\": false,\n        \"allowed\": false,\n        \"pid\": 41000,\n        \"disposition\": \"SPT_PROCESS_IDENTITY_UNRESOLVED\"\n      },\n      \"case\": \"persistent denied identity\"\n    },\n    {\n      \"expected_allowed\": false,\n      \"pass\": true,\n      \"actual\": {\n        \"created_utc\": \"2026-09-14T05:45:33.8201734Z\",\n        \"observations\": [\n          {\n            \"created_utc\": \"2026-09-14T05:45:33.8201734Z\",\n            \"image\": null,\n            \"source\": \"CIM\",\n            \"pid\": 41000\n          },\n          {\n            \"state\": \"UNRESOLVED\",\n            \"native_error\": 5,\n            \"error_type\": \"System.ComponentModel.Win32Exception\",\n            \"source\": \"NATIVE\"\n          }\n        ],\n        \"original_gone\": false,\n        \"allowed\": false,\n        \"pid\": 41000,\n        \"disposition\": \"SPT_CENSUS_QUERY_FAILED\"\n      },\n      \"case\": \"failed reread is not gone\"\n    },\n    {\n      \"expected_allowed\": false,\n      \"pass\": true,\n      \"actual\": {\n        \"created_utc\": \"2026-09-14T05:45:33.8201734Z\",\n        \"observations\": [\n          {\n            \"created_utc\": \"2026-09-14T05:45:33.8201734Z\",\n            \"image\": null,\n            \"source\": \"CIM\",\n            \"pid\": 41000\n          },\n          {\n            \"state\": \"UNRESOLVED\",\n            \"native_error\": 5,\n            \"error_type\": \"System.ComponentModel.Win32Exception\",\n            \"source\": \"NATIVE\"\n          }\n        ],\n        \"original_gone\": false,\n        \"allowed\": false,\n        \"pid\": 41000,\n        \"disposition\": \"SPT_CENSUS_CONTROL_FAILED\"\n      },\n      \"case\": \"empty provider is not gone\"\n    },\n    {\n      \"expected_allowed\": false,\n      \"pass\": true,\n      \"actual\": {\n        \"created_utc\": null,\n        \"observations\": [],\n        \"original_gone\": false,\n        \"allowed\": false,\n        \"pid\": 41000,\n        \"disposition\": \"SPT_PROCESS_BIRTH_UNREADABLE\"\n      },\n      \"case\": \"unknown birth fails closed\"\n    },\n    {\n      \"expected_allowed\": false,\n      \"pass\": true,\n      \"actual\": {\n        \"created_utc\": \"2026-09-14T05:45:32.8201729Z\",\n        \"observations\": [\n          {\n            \"created_utc\": \"2026-09-14T05:45:32.8201729Z\",\n            \"image\": null,\n            \"source\": \"CIM\",\n            \"pid\": 41000\n          },\n          {\n            \"state\": \"UNRESOLVED\",\n            \"native_error\": 5,\n            \"error_type\": \"System.ComponentModel.Win32Exception\",\n            \"source\": \"NATIVE\"\n          },\n          {\n            \"created_utc\": \"2026-09-14T05:45:32.8201729Z\",\n            \"same_identity\": true,\n            \"source\": \"CIM_REREAD\",\n            \"pid\": 41000\n          }\n        ],\n        \"original_gone\": false,\n        \"allowed\": false,\n        \"pid\": 41000,\n        \"disposition\": \"SPT_PROCESS_IDENTITY_UNRESOLVED\"\n      },\n      \"case\": \"precision overlap is not pre-rig\"\n    },\n    {\n      \"expected_allowed\": false,\n      \"pass\": true,\n      \"actual\": {\n        \"created_utc\": \"2026-09-14T05:45:32.8201734Z\",\n        \"observations\": [\n          {\n            \"created_utc\": \"2026-09-14T05:45:32.8201734Z\",\n            \"image\": null,\n            \"source\": \"CIM\",\n            \"pid\": 41000\n          },\n          {\n            \"state\": \"UNRESOLVED\",\n            \"native_error\": 5,\n            \"error_type\": \"System.ComponentModel.Win32Exception\",\n            \"source\": \"NATIVE\"\n          },\n          {\n            \"created_utc\": \"2026-09-14T05:45:32.8201734Z\",\n            \"same_identity\": true,\n            \"source\": \"CIM_REREAD\",\n            \"pid\": 41000\n          }\n        ],\n        \"original_gone\": false,\n        \"allowed\": false,\n        \"pid\": 41000,\n        \"disposition\": \"SPT_PROCESS_IDENTITY_UNRESOLVED\"\n      },\n      \"case\": \"equal birth is not pre-rig\"\n    },\n    {\n      \"expected_allowed\": false,\n      \"pass\": true,\n      \"actual\": {\n        \"created_utc\": \"2026-09-14T05:45:33.8201734Z\",\n        \"observations\": [\n          {\n            \"created_utc\": \"2026-09-14T05:45:33.8201734Z\",\n            \"image\": null,\n            \"source\": \"CIM\",\n            \"pid\": 41000\n          },\n          {\n            \"created_utc\": \"2026-09-14T05:45:34.8201734Z\",\n            \"image\": \"C:\\\\rig\\\\bin\\\\spt.exe\",\n            \"source\": \"NATIVE\",\n            \"replaces_cim_identity\": true,\n            \"pid\": 41000,\n            \"live\": true\n          }\n        ],\n        \"original_gone\": true,\n        \"allowed\": false,\n        \"pid\": 41000,\n        \"disposition\": \"RIG_DAEMON_ALREADY_PRESENT\"\n      },\n      \"case\": \"native PID reuse into rig image\"\n    },\n    {\n      \"expected_allowed\": false,\n      \"pass\": true,\n      \"actual\": {\n        \"created_utc\": \"2026-09-14T05:45:33.8201734Z\",\n        \"observations\": [\n          {\n            \"created_utc\": \"2026-09-14T05:45:33.8201734Z\",\n            \"image\": null,\n            \"source\": \"CIM\",\n            \"pid\": 41000\n          },\n          {\n            \"state\": \"UNRESOLVED\",\n            \"native_error\": 5,\n            \"error_type\": \"System.ComponentModel.Win32Exception\",\n            \"source\": \"NATIVE\"\n          },\n          {\n            \"created_utc\": \"2026-09-14T05:45:34.8201734Z\",\n            \"same_identity\": false,\n            \"source\": \"CIM_REREAD\",\n            \"pid\": 41000\n          },\n          {\n            \"created_utc\": \"2026-09-14T05:45:34.8201734Z\",\n            \"image\": \"C:\\\\rig\\\\bin\\\\spt.exe\",\n            \"source\": \"CIM\",\n            \"pid\": 41000\n          }\n        ],\n        \"original_gone\": true,\n        \"allowed\": false,\n        \"pid\": 41000,\n        \"disposition\": \"RIG_DAEMON_ALREADY_PRESENT\"\n      },\n      \"case\": \"CIM PID reuse into rig image\"\n    },\n    {\n      \"expected_allowed\": true,\n      \"pass\": true,\n      \"actual\": {\n        \"created_utc\": \"2026-09-14T05:45:33.8201734Z\",\n        \"observations\": [\n          {\n            \"created_utc\": \"2026-09-14T05:45:33.8201734Z\",\n            \"image\": null,\n            \"source\": \"CIM\",\n            \"pid\": 41000\n          },\n          {\n            \"created_utc\": \"2026-09-14T05:45:33.8201734Z\",\n            \"image\": \"\",\n            \"source\": \"NATIVE\",\n            \"replaces_cim_identity\": false,\n            \"pid\": 41000,\n            \"live\": false\n          }\n        ],\n        \"original_gone\": true,\n        \"allowed\": true,\n        \"pid\": 41000,\n        \"disposition\": \"ORIGINAL_GONE\"\n      },\n      \"case\": \"native retained handle signals exit\"\n    }\n  ]\n}\n\n\nWall time: 0.78 seconds",
  "details": {
    "timeoutSeconds": 20,
    "wallTimeMs": 775.3469000011683
  }
}