Patch Effectiveness Receipt

Does this patch stop the vulnerable behavior in an isolated reproduction?

Safe isolated evidence that a vulnerable path is reproducible before a patch and no longer reproducible afterward.

Audience

Security teams

Family

Change and risk evidence

Pilot price hypothesis

$25.00

Independent sources

At least 2

Sample result shape

{
  "customer_question": "Does this patch stop the vulnerable behavior in an isolated reproduction?",
  "example_evidence_record": {
    "outcome": "<outcome>",
    "package": "<package>",
    "version": "<version>",
    "vulnerability": "<vulnerability>"
  },
  "product_id": "patch-effectiveness-receipt",
  "required_fields": [
    "package",
    "vulnerability",
    "version",
    "outcome"
  ],
  "result_contract": {
    "conclusion": "source-bounded conclusion",
    "confidence": "bounded by the corroborated sources",
    "independent_source_count": 2,
    "limitations": [
      "known evidence and scope limitations"
    ]
  },
  "sample_only": true
}

JSON product definition

{
  "description": "Safe isolated evidence that a vulnerable path is reproducible before a patch and no longer reproducible afterward.",
  "id": "patch-effectiveness-receipt",
  "marketplace": {
    "audience": "Security teams",
    "customer_question": "Does this patch stop the vulnerable behavior in an isolated reproduction?",
    "family": "change-risk-evidence",
    "pilot_price_usd": "25.00"
  },
  "publication_media_type": "application/vnd.evidence-marketplace.publication+json",
  "title": "Patch Effectiveness Receipt",
  "validation": {
    "minimum_independent_sources": 2,
    "minimum_observations": 2,
    "prohibited_fields": [
      "access_token",
      "api_key",
      "password",
      "private_key",
      "secret",
      "ssn"
    ],
    "required_fields": [
      "package",
      "vulnerability",
      "version",
      "outcome"
    ]
  },
  "version": "1.0.0"
}