{
  "report_id": "demo-virusologia-2026-07",
  "target": "demo.virusologia.local",
  "generated_at": "2026-07-05",
  "security_score": 7.4,
  "evidence_quality": 0.92,
  "quality_gate": "demo_pass",
  "findings": [
    {
      "id": "DEMO-API-001",
      "title": "Authenticated API coverage gap",
      "severity": "medium",
      "status": "needs_customer_artifacts",
      "evidence": [
        "role_matrix_missing",
        "single_identity_only"
      ],
      "retest": "Provide two owned identities and rerun read-only role matrix."
    },
    {
      "id": "DEMO-EDGE-002",
      "title": "Legacy route canonical drift",
      "severity": "low",
      "status": "validated",
      "evidence": [
        "legacy_route_301_expected"
      ],
      "retest": "Legacy paths return stable 301 to canonical routes."
    }
  ],
  "remediation": [
    {
      "priority": "P0",
      "owner": "Engineering",
      "task": "Normalize canonical host and legacy routes."
    },
    {
      "priority": "P0",
      "owner": "Product",
      "task": "Collect structured scope through the assessment form."
    },
    {
      "priority": "P1",
      "owner": "Security",
      "task": "Attach signed evidence bundle when production credentials are ready."
    }
  ]
}