### Quarantine Package receipt for ` qp-fixture-netbenign@1.0.0 `

**Verdict: REVIEW** (computed by fixed rules from what the sandbox observed)

**Rules fired**

- (f) review: network attempt \(DNS, TCP or UDP, TLS included; TLS bodies are not inspected\), or a bind/listen in the sandbox network namespace (2 observations)

**Prediction vs observed**

- network: predicted yes, observed yes (match): ` downloads.qp-fixture.example `
- files outside the package: predicted no, observed no (match)
- child processes: predicted yes, observed yes (match): ` /usr/bin/sh `, ` /usr/local/bin/node `

**Sinkhole** (nothing left the sandbox): 2 network attempts

- dns ` downloads.qp-fixture.example `
- tcp ` downloads.qp-fixture.example ` ` GET ` ` /prebuilt/v1/linux-x64.json `, 0 bytes

**Sandbox destroyed:** yes, no container, network or volume of this task remains

**Limitations that applied**

- Side channels inside the kernel \(timing, /proc enumeration\) are not observed\.

Receipt: https://qp.hugovaler.com/r/d5af19b228 · JSON: https://qp.hugovaler.com/api/receipts/d5af19b228