{"schema":"qp-receipt/1","taskId":"8b42cfb93e","runPrefix":"qp","nonce":"5d0feeb810afc192314b3219","startedAt":"2026-11-04T15:43:06.477Z","finishedAt":"2026-11-04T15:43:24.352Z","status":"completed","verdict":"do-not-install","rulesFired":[{"id":"a","tier":"do-not-install","text":"write attempt (successful or blocked) outside /work, /tmp and HOME","observationIds":["o1"]},{"id":"b","tier":"do-not-install","text":"access attempt to docker.sock or a credential path","observationIds":["o3"]},{"id":"d","tier":"do-not-install","text":"network attempt carrying a payload (plaintext HTTP body/POST/PUT/PATCH/chunked, or raw bytes on non-TLS TCP)","observationIds":["o5"]},{"id":"f","tier":"review","text":"network attempt (DNS, TCP or UDP, TLS included; TLS bodies are not inspected), or a bind/listen in the sandbox network namespace","observationIds":["o4","o5"]},{"id":"g","tier":"review","text":"write inside HOME","observationIds":["o2"]}],"package":{"requested":"fixture:hostile","source":"fixture","name":"qp-fixture-hostile","version":"1.0.0"},"limits":{"downloadSeconds":120,"downloadMaxBytes":52428800,"downloadMaxPackages":300,"sandboxSeconds":60,"pids":64,"memoryBytes":268435456,"cpus":0.5,"tmpfsWorkBytes":134217728,"tmpfsTmpBytes":67108864,"tmpfsHomeBytes":16777216},"images":{"tag":"s1-1aba83a3","sandbox":"qp-sandbox:s1-1aba83a3","sinkhole":"qp-sinkhole:s1-1aba83a3"},"download":{"container":"ar-qp-download-8b42cfb93e","hardening":{"container":"ar-qp-download-8b42cfb93e","id":"91ac2cb320a49a1297a31c339a7643231a29187d7121ede6f124c08e5ab5b53a","image":"qp-sandbox:s1-1aba83a3","imageId":"sha256:3c6a223b5c22a3a5d0ee2aa0a9cc22e049172d60af9998d26d7a27abc6dfbc85","User":"10001:10001","ReadonlyRootfs":true,"Privileged":false,"CapDrop":["ALL"],"CapAdd":null,"SecurityOpt":["no-new-privileges"],"PidsLimit":64,"Memory":268435456,"MemorySwap":268435456,"NanoCpus":500000000,"Tmpfs":{"/home/qp":"rw,exec,nosuid,nodev,size=268435456,uid=10001,gid=10001,mode=0700","/tmp":"rw,exec,nosuid,nodev,size=268435456,uid=10001,gid=10001,mode=0700"},"Binds":["ar-qp-vol-8b42cfb93e:/out","/opt/quarantine-package/fixtures/hostile:/src:ro"],"Mounts":[{"Type":"volume","Name":"ar-qp-vol-8b42cfb93e","Destination":"/out","RW":true},{"Type":"bind","Destination":"/src","RW":false}],"NetworkMode":"bridge","PidMode":"","IpcMode":"private","UsernsMode":"","AutoRemove":true},"seconds":4.099,"exitCode":0,"precheck":{"ok":true,"reason":null,"stage":"tree","visited":0,"manifestsFetched":0,"nonRegistry":[]},"lockcheck":{"ok":true,"packageCount":1,"nonRegistry":[]},"inventory":{"name":"qp-fixture-hostile","version":"1.0.0","packageCount":1,"unpackedBytes":2389,"nonRegistry":[],"installScripts":["node_modules/qp-fixture-hostile"]},"output":"\n\nup to date in 910ms\nQP-RC lock 0\n\n\nadded 1 package in 705ms\nQP-RC install 0\n\nWARNING: Error loading config file: open /home/qp/.docker/config.json: permission denied\n"},"sandbox":{"container":"ar-qp-sandbox-8b42cfb93e","round":1,"fresh":true,"containerId":"c639912d1afea55cc9a6b98dddb6a1afb95461e6328b4602e66eb9ef692a6160","seconds":6.738,"exitCode":0,"endedBy":"exit","limitsHit":[],"hardening":{"container":"ar-qp-sandbox-8b42cfb93e","id":"c639912d1afea55cc9a6b98dddb6a1afb95461e6328b4602e66eb9ef692a6160","image":"qp-sandbox:s1-1aba83a3","imageId":"sha256:3c6a223b5c22a3a5d0ee2aa0a9cc22e049172d60af9998d26d7a27abc6dfbc85","User":"10001:10001","ReadonlyRootfs":true,"Privileged":false,"CapDrop":["ALL"],"CapAdd":null,"SecurityOpt":["no-new-privileges"],"PidsLimit":64,"Memory":268435456,"MemorySwap":268435456,"NanoCpus":500000000,"Tmpfs":{"/home/qp":"rw,exec,nosuid,nodev,size=16777216,uid=10001,gid=10001,mode=0700","/tmp":"rw,exec,nosuid,nodev,size=67108864,uid=10001,gid=10001,mode=0700","/work":"rw,exec,nosuid,nodev,size=134217728,uid=10001,gid=10001,mode=0700"},"Binds":["ar-qp-vol-8b42cfb93e:/in:ro"],"Mounts":[{"Type":"volume","Name":"ar-qp-vol-8b42cfb93e","Destination":"/in","RW":false}],"NetworkMode":"container:c4d1e1cbcc2d9b372c1a61c3b8a358974c55809f1809adb20479cb69f0353e90","PidMode":"","IpcMode":"private","UsernsMode":"","AutoRemove":true},"tracer":{"container":"ar-qp-tracer-8b42cfb93e","hardening":{"container":"ar-qp-tracer-8b42cfb93e","id":"b7b9cabaf23bc68d65e419945b035463667631a6a4d21bdc548573c4fd66db07","image":"qp-sandbox:s1-1aba83a3","imageId":"sha256:3c6a223b5c22a3a5d0ee2aa0a9cc22e049172d60af9998d26d7a27abc6dfbc85","User":"0:0","ReadonlyRootfs":true,"Privileged":false,"CapDrop":["ALL"],"CapAdd":["CAP_SYS_PTRACE"],"SecurityOpt":["no-new-privileges"],"PidsLimit":16,"Memory":268435456,"MemorySwap":268435456,"NanoCpus":500000000,"Binds":null,"Mounts":[],"NetworkMode":"none","PidMode":"container:c639912d1afea55cc9a6b98dddb6a1afb95461e6328b4602e66eb9ef692a6160","IpcMode":"private","UsernsMode":"","AutoRemove":true},"traceBytes":2369982,"truncated":false},"sinkhole":{"container":"ar-qp-sinkhole-8b42cfb93e","ip":"172.18.0.2","hardening":{"container":"ar-qp-sinkhole-8b42cfb93e","id":"c4d1e1cbcc2d9b372c1a61c3b8a358974c55809f1809adb20479cb69f0353e90","image":"qp-sinkhole:s1-1aba83a3","imageId":"sha256:75195ea4538d1fe039d75b314829dae7593fe25a78daad4573c10478783d3184","User":"","ReadonlyRootfs":true,"Privileged":false,"CapDrop":["ALL"],"CapAdd":["CAP_NET_ADMIN"],"SecurityOpt":["no-new-privileges"],"PidsLimit":256,"Memory":536870912,"MemorySwap":536870912,"NanoCpus":500000000,"Tmpfs":{"/run":"size=1m","/tmp":"size=8m"},"Binds":null,"Mounts":[],"NetworkMode":"ar-qp-net-8b42cfb93e","PidMode":"","IpcMode":"private","UsernsMode":"","AutoRemove":true},"records":2,"controlRecords":0,"flushed":true},"network":{"name":"ar-qp-net-8b42cfb93e","internal":true,"subnet":"172.18.0.0/16","enableIPv6":false},"roles":{"stagePid":26,"npmPid":34,"harnessPid":58,"scanPid":27},"allowedAreaWrites":{"total":0,"omitted":0},"preloadForeignRecords":0},"harness":{"mode":"require, then the model harness when one is staged (S2)","loaded":true,"detail":{"mode":"fallback-require","error":null,"resolved":"node_modules/qp-fixture-hostile/index.js"},"model":{"staged":true,"ran":true,"ok":true,"error":null,"fallback":null}},"explanation":{"label":"explanation","source":"model mimo-v2.6-pro","text":"The package declares an install script (node attempts.js) whose name and the author's own description ('makes benign attempts that look hostile') indicate it tries network access, out-of-tree writes, and subprocess spawns at install time. The entry module itself is inert, but installing/using the package in a sandbox will execute that script. Hosts and paths are best-guess placeholders since attempts.js contents were not provided.","note":"The verdict is computed by deterministic rules from the observations; this explanation never changes it."},"model":{"status":"ok","missing":[],"attempts":[{"purpose":"prediction","model":"mimo-v2.6-pro","status":"ok","latencyMs":4437,"httpStatus":null,"usage":{"prompt_tokens":298,"completion_tokens":570,"total_tokens":868},"detail":null}],"model":"mimo-v2.6-pro","prediction":{"network":{"expected":true,"hosts":["example.com","registry.npmjs.org","127.0.0.1"]},"filesOutsidePackage":{"expected":true,"paths":["/tmp/qp-fixture-attempt.txt","/tmp"]},"childProcesses":{"expected":true,"commands":["node","sh","curl"]}},"explanation":"The package declares an install script (node attempts.js) whose name and the author's own description ('makes benign attempts that look hostile') indicate it tries network access, out-of-tree writes, and subprocess spawns at install time. The entry module itself is inert, but installing/using the package in a sandbox will execute that script. Hosts and paths are best-guess placeholders since attempts.js contents were not provided.","harness":{"source":"model","retries":0,"firstError":null,"finalError":null}},"predictionVsObserved":[{"dimension":"network","predicted":true,"predictedDetail":["example.com","registry.npmjs.org","127.0.0.1"],"observed":true,"observedDetail":["recolector.example.com"],"observationIds":["o4","o5"],"status":"match","package":"qp-fixture-hostile"},{"dimension":"filesOutsidePackage","predicted":true,"predictedDetail":["/tmp/qp-fixture-attempt.txt","/tmp"],"observed":true,"observedDetail":["/etc/qp-fixture-marker","/home/qp/.qp-fixture-marker"],"observationIds":["o1","o2"],"status":"match","package":"qp-fixture-hostile"},{"dimension":"childProcesses","predicted":true,"predictedDetail":["node","sh","curl"],"observed":true,"observedDetail":["/usr/bin/sh","/usr/local/bin/node"],"observationIds":["o7","o8"],"status":"match","package":"qp-fixture-hostile"}],"completeness":{"instrumentation-heartbeat":{"ok":true,"runs":[{"round":1,"ok":true,"detail":{"nodeProcesses":4,"missing":[],"reasons":{}}}]},"paths-resolved":{"ok":true,"runs":[{"round":1,"ok":true,"detail":{"unresolved":[]}}]},"kernel-trace":{"ok":true,"runs":[{"round":1,"ok":true,"detail":{"syscalls":10858,"state":"complete"}}]},"sinkhole-log":{"ok":true,"runs":[{"round":1,"ok":true,"detail":{"ready":true,"unmatchedObservationIds":[],"rule":"every traced package TCP connect / DNS query that reached the redirect has a sinkhole record (AF-4)"}}]},"ended-normally":{"ok":true,"runs":[{"round":1,"ok":true,"detail":{}}]},"harness-ran":{"ok":true,"runs":[{"round":1,"ok":true,"detail":{}}]}},"observations":[{"id":"o1","kind":"fs-write","actor":"package","pid":47,"exe":"/usr/local/bin/node","dest":null,"orig_dest":null,"port":null,"sni":null,"proto":null,"blocked":true,"payload":null,"path":"/etc/qp-fixture-marker","nonce":"5d0feeb810afc192314b3219","syscall":"openat","errno":"EROFS"},{"id":"o2","kind":"fs-write","actor":"package","pid":47,"exe":"/usr/local/bin/node","dest":null,"orig_dest":null,"port":null,"sni":null,"proto":null,"blocked":false,"payload":null,"path":"/home/qp/.qp-fixture-marker","nonce":"5d0feeb810afc192314b3219","syscall":"openat","errno":null},{"id":"o3","kind":"fs-access","actor":"package","pid":47,"exe":"/usr/local/bin/node","dest":null,"orig_dest":null,"port":null,"sni":null,"proto":null,"blocked":true,"payload":null,"path":"/var/run/docker.sock","nonce":"5d0feeb810afc192314b3219","syscall":"access","errno":"ENOENT"},{"id":"o4","kind":"net-dns","actor":"package","pid":47,"exe":"/usr/local/bin/node","dest":"recolector.example.com","orig_dest":"127.0.0.11:53","port":53,"sni":null,"proto":"udp","blocked":false,"payload":false,"path":null,"nonce":"5d0feeb810afc192314b3219","sinkholeLogged":true,"queries":[{"name":"recolector.example.com","qtype":1}]},{"id":"o5","kind":"net-tcp","actor":"package","pid":47,"exe":"/usr/local/bin/node","dest":"recolector.example.com","orig_dest":"198.18.0.1:80","port":80,"sni":null,"proto":"http","blocked":false,"payload":true,"path":null,"nonce":"5d0feeb810afc192314b3219","family":"inet","sinkholeLogged":true,"http":{"method":"POST","host":"recolector.example.com","path":"/collect","payloadBytes":15}},{"id":"o6","kind":"env-enumerate","actor":"package","pid":47,"exe":"/usr/local/bin/node","dest":null,"orig_dest":null,"port":null,"sni":null,"proto":null,"blocked":null,"payload":null,"path":null,"nonce":"5d0feeb810afc192314b3219","rule":"c2 (observation only)"},{"id":"o7","kind":"spawn","actor":"package","pid":46,"exe":"/usr/bin/sh","dest":null,"orig_dest":null,"port":null,"sni":null,"proto":null,"blocked":null,"payload":null,"path":null,"nonce":"5d0feeb810afc192314b3219","argv":["sh","-c","node attempts.js"]},{"id":"o8","kind":"spawn","actor":"package","pid":47,"exe":"/usr/local/bin/node","dest":null,"orig_dest":null,"port":null,"sni":null,"proto":null,"blocked":null,"payload":null,"path":null,"nonce":"5d0feeb810afc192314b3219","argv":["node","attempts.js"]},{"id":"o9","kind":"load","actor":"harness","pid":58,"exe":null,"dest":null,"orig_dest":null,"port":null,"sni":null,"proto":null,"blocked":null,"payload":null,"path":null,"nonce":"5d0feeb810afc192314b3219","ok":true,"mode":"fallback-require","error":null,"resolved":"node_modules/qp-fixture-hostile/index.js"},{"id":"o10","kind":"completeness","actor":null,"pid":null,"exe":null,"dest":null,"orig_dest":null,"port":null,"sni":null,"proto":null,"blocked":null,"payload":null,"path":null,"nonce":"5d0feeb810afc192314b3219","marker":"instrumentation-heartbeat","ok":true,"detail":{"nodeProcesses":4,"missing":[],"reasons":{}}},{"id":"o11","kind":"completeness","actor":null,"pid":null,"exe":null,"dest":null,"orig_dest":null,"port":null,"sni":null,"proto":null,"blocked":null,"payload":null,"path":null,"nonce":"5d0feeb810afc192314b3219","marker":"paths-resolved","ok":true,"detail":{"unresolved":[]}},{"id":"o12","kind":"completeness","actor":null,"pid":null,"exe":null,"dest":null,"orig_dest":null,"port":null,"sni":null,"proto":null,"blocked":null,"payload":null,"path":null,"nonce":"5d0feeb810afc192314b3219","marker":"kernel-trace","ok":true,"detail":{"syscalls":10858,"state":"complete"}},{"id":"o13","kind":"completeness","actor":null,"pid":null,"exe":null,"dest":null,"orig_dest":null,"port":null,"sni":null,"proto":null,"blocked":null,"payload":null,"path":null,"nonce":"5d0feeb810afc192314b3219","marker":"sinkhole-log","ok":true,"detail":{"ready":true,"unmatchedObservationIds":[],"rule":"every traced package TCP connect / DNS query that reached the redirect has a sinkhole record (AF-4)"}},{"id":"o14","kind":"completeness","actor":null,"pid":null,"exe":null,"dest":null,"orig_dest":null,"port":null,"sni":null,"proto":null,"blocked":null,"payload":null,"path":null,"nonce":"5d0feeb810afc192314b3219","marker":"ended-normally","ok":true,"detail":{}},{"id":"o15","kind":"completeness","actor":null,"pid":null,"exe":null,"dest":null,"orig_dest":null,"port":null,"sni":null,"proto":null,"blocked":null,"payload":null,"path":null,"nonce":"5d0feeb810afc192314b3219","marker":"harness-ran","ok":true,"detail":{}}],"network":{"sinkholeLog":[{"answer":"198.18.0.1","name":"recolector.example.com","qtype":1,"srcIp":"127.0.0.1","srcPort":43234,"t":"2026-11-04T15:43:19.073880Z","type":"dns"},{"bytesReceived":147,"chunked":false,"dstIp":"198.18.0.1","dstName":"recolector.example.com","dstPort":80,"host":"recolector.example.com","method":"POST","path":"/collect","payloadBytes":15,"protocol":"http","srcIp":"172.18.0.2","srcPort":41458,"t":"2026-11-04T15:43:19.076181Z","type":"tcp"}]},"secretScan":{"sandbox":{"keyLikeEnvNames":[],"ignoredImageVars":["GPG_KEY"],"dockerSockPresent":[],"mounts":[{"mountPoint":"/","fsType":"overlay","readOnly":true},{"mountPoint":"/proc","fsType":"proc","readOnly":false},{"mountPoint":"/dev","fsType":"tmpfs","readOnly":false},{"mountPoint":"/dev/pts","fsType":"devpts","readOnly":false},{"mountPoint":"/sys","fsType":"sysfs","readOnly":true},{"mountPoint":"/sys/fs/cgroup","fsType":"cgroup2","readOnly":true},{"mountPoint":"/dev/mqueue","fsType":"mqueue","readOnly":false},{"mountPoint":"/dev/shm","fsType":"tmpfs","readOnly":false},{"mountPoint":"/in","fsType":"ext4","readOnly":true},{"mountPoint":"/tmp","fsType":"tmpfs","readOnly":false},{"mountPoint":"/work","fsType":"tmpfs","readOnly":false},{"mountPoint":"/etc/hostname","fsType":"ext4","readOnly":true},{"mountPoint":"/etc/hosts","fsType":"ext4","readOnly":true},{"mountPoint":"/etc/resolv.conf","fsType":"ext4","readOnly":true},{"mountPoint":"/home/qp","fsType":"tmpfs","readOnly":false},{"mountPoint":"/proc/bus","fsType":"proc","readOnly":true},{"mountPoint":"/proc/fs","fsType":"proc","readOnly":true},{"mountPoint":"/proc/irq","fsType":"proc","readOnly":true},{"mountPoint":"/proc/sys","fsType":"proc","readOnly":true},{"mountPoint":"/proc/sysrq-trigger","fsType":"proc","readOnly":true},{"mountPoint":"/proc/acpi","fsType":"tmpfs","readOnly":true},{"mountPoint":"/proc/asound","fsType":"tmpfs","readOnly":true},{"mountPoint":"/proc/interrupts","fsType":"tmpfs","readOnly":false},{"mountPoint":"/proc/kcore","fsType":"tmpfs","readOnly":false},{"mountPoint":"/proc/keys","fsType":"tmpfs","readOnly":false},{"mountPoint":"/proc/latency_stats","fsType":"tmpfs","readOnly":false},{"mountPoint":"/proc/scsi","fsType":"tmpfs","readOnly":true},{"mountPoint":"/proc/timer_list","fsType":"tmpfs","readOnly":false},{"mountPoint":"/sys/firmware","fsType":"tmpfs","readOnly":true}],"envNamesScanned":12,"pass":true},"receipt":{"pass":true,"hits":[]}},"hostProbe":null,"teardown":{"removed":{"containers":["ar-qp-sinkhole-8b42cfb93e"],"networks":["ar-qp-net-8b42cfb93e"],"volumes":["ar-qp-vol-8b42cfb93e"]},"leftoversForTask":[],"hostTempDirs":[]},"knownLimitations":["L-4: ICMP is out of scope: the sandbox has no capability to open raw sockets, and unprivileged ICMP is not logged.","L-4: TLS bodies are not inspected: the sinkhole records the SNI from the ClientHello and refuses the handshake.","UDP other than DNS is logged as an attempt; its original destination comes from the kernel trace when the socket names it.","DNS over TCP is logged as a TCP attempt to port 53 (query name not parsed).","Env-var reads are seen by the in-process preload only; a package can bypass or forge it in its own process. Forged preload records can only add observations; trace-derived completeness markers come from the tracer stream.","Inside the harness process every rule-relevant syscall is attributed to the package (the harness itself performs none).","Paths written through fchdir-relative or unknown directory fds are reported as unresolved and treated as outside the allowed areas.","Side channels inside the kernel (timing, /proc enumeration) are not observed.","L-4: Evasion: in the shared pid namespace a package can see that it is traced (TracerPid, the strace process) and behave benignly; S1 does not hide the tracer.","npm CLI processes do not get the env-read preload (npm fails with a wrapped process.env); an npm started by package code is therefore reported as incomplete instrumentation (review).","L-1: Shell expansion of env variables (e.g. $NPM_TOKEN inside a lifecycle sh) and env reads by sh itself (perl and awk are removed from the image since S2, X10) are invisible to both the kernel trace and the preload (DEC-11r5; their file, network and process activity is still traced and judged).","L-2: DEC-11r4: a package lifecycle that executes a script directly from /work, /tmp or HOME (e.g. \"./install.sh\" rather than \"sh ./install.sh\" or \"node x.js\") fails the instrumentation marker and gets review (i): the trace cannot tell a script from an ELF binary there (fail closed; narrowed in S2, X8).","L-3: Download phase: a non-registry spec in the root manifest aborts before any network request; one deeper in the tree is rejected before it is fetched, but registry metadata of the dependencies visited before it has been fetched. Download-container egress is not limited to the registry host in S1.","L-4: execveat is handled (envp never trusted, SR-3) but is covered by unit tests only, not by a runtime fixture.","L-4: image builds are not byte-reproducible: the bases are pinned by digest, but distribution packages (strace, iptables, tcpdump) are installed at build time.","L-6b: relative file operations of a child process printed before the clone return of its parent have no inherited cwd: they are unresolved, so a write gives (a) and a read gives review (fail closed).","L-8: a chdir by a thread not yet attributed to any process that overlaps an unrelated fork marks that fork raced: relative paths of the child are unresolved (over-condemnation, never install).","L-8b: a benign multi-threaded package whose non-forking thread ever changes directory (e.g. main thread process.chdir while a worker spawns) gets the relative paths of its children unresolved: relative writes give do-not-install (a), relative reads give review. Fail closed by design (dispatch 3).","L-9: a chdir whose outcome is unknown (killed mid-call, \"= ?\", or never resumed before the trace ends) is treated as applied: the cwd of the thread group and of overlapping or later children become unresolved (fail closed).","L-10: a process cloned with CLONE_FS but not CLONE_THREAD shares its working directory with its parent; both sides get an unresolved cwd for the whole trace (fail closed). Only native code issues such a clone; node, dash and perl do not.","L-11: io_uring is not traced. Node 22 / libuv in the sandbox never issues io_uring_setup (checked with UV_USE_IO_URING=1), and native io_uring is denied by the default Docker seccomp profile the sandbox runs under; native code from a writable mount gives review anyway (L-2).","L-13: a native addon (.node) that the package loads can read env in-process with getenv(); there is no exec and no preload record, so only the intent signal (c1) is lost. Same class as L-1: the sandbox env holds no secret value (C7) and any exfiltration still fires (d)/(f).","Sinkhole memory bound: when more than 128 MB is buffered across open connections, the connection holding the most is recorded early with what it sent so far; later bytes on it are not counted.","UDP payloads are logged but, per DEC-2r1, UDP attempts are rated review (f), never do-not-install by payload."],"logs":{"sandboxOutput":"QP-TRACER-ATTACHED\nQP-PHASE copy\nQP-RC copy 0\nQP-PHASE scan\nQP-PHASE rebuild\n\n> qp-fixture-hostile@1.0.0 install\n> node attempts.js\n\n[fixture-hostile] write into /etc: blocked (EROFS)\n[fixture-hostile] write into HOME: written\n[fixture-hostile] look for docker.sock: absent\n[fixture-hostile] count key-like env names: 0\n[fixture-hostile] send out: HTTP 403\nrebuilt dependencies successfully\nQP-RC rebuild 0\nQP-PHASE harness\nQP-RC harness 0\nQP-PHASE done\n"},"runs":[{"round":1,"harness":"model","mode":"fallback-require","modelHarness":{"ok":true,"error":null},"container":"ar-qp-sandbox-8b42cfb93e","seconds":6.738,"exitCode":0,"endedBy":"exit","limitsHit":[],"observations":15,"traceFile":null}]}