{
  "server_certificate": "-----BEGIN CERTIFICATE-----\nMIIBkTCB+wIJAKHBfpEaq3YDMA0GCSqGSIb3DQEBCwUAMBExDzANBgNVBAMMBndh\nZnBhc3MwHhcNMjYwODE2MDYwMDAwWhcNMjcwODE2MDYwMDAwWjARMQ8wDQYDVQQD\nDAZ3YWZwYXNzMFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAKHBfpEaq3YDMqWh7pEy\n8xQH1vLWNV8j7Y7BgQKpkCM+wPFuqeM8J8bAqWh7pE3y8xQH1vLWNV8j7Y7BgQKp\nkCMDH1sCAwEAATANBgkqhkiG9w0BAQsFAANBAF8Q1vLWNV8j7Y7BgQKpkCM+wPFu\nqeM8J8bAqWh7pE3y8xQH1vLWNV8j7Y7BgQKpkCM+wPFuqeM8J8bAqWh7pE3y8xQ=\n-----END CERTIFICATE-----",
  "local_attestation": {
    "canonical_hash": "7184231525be8173ccb7eb0b5fc804630e37c49c2ec3c511b3c47b8d875a54a6",
    "public_key": "-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEAwPFuqeM8J8bAqWh7pE3y8xQH1vLWNV8j7Y7BgQKpkCM=\n-----END PUBLIC KEY-----",
    "signature": "f8c3b2a1d4e5f6a7b8c9d0e1f2a3b4c5d6e7f8a9b0c1d2e3f4a5b6c7d8e9f0a1b2c3d4e5f6a7b8c9d0e1f2a3b4c5d6e7f8a9b0c1d2e3f4a5b6c7d8e9f0a1b2",
    "algorithm": "Ed25519"
  },
  "run": {
    "project": "acme-platform/prod",
    "target_url": "https://api.acme.example.com",
    "started_at": "2026-08-16T11:42:00Z",
    "finished_at": "2026-08-16T11:43:12Z",
    "checks": [
      {
        "id": "waf-ctl-001",
        "control": "Encrypt data at rest",
        "status": "pass",
        "severity": "critical",
        "resource": "aws_rds_cluster.primary",
        "message": "Storage encryption is enabled with AWS managed KMS key."
      },
      {
        "id": "waf-ctl-042",
        "control": "Restrict inbound network access",
        "status": "pass",
        "severity": "critical",
        "resource": "aws_security_group.app",
        "message": "Only ports 443 and 80 are open to the load balancer security group."
      },
      {
        "id": "waf-ctl-017",
        "control": "Enable audit logging",
        "status": "fail",
        "severity": "high",
        "resource": "aws_s3_bucket.logs",
        "message": "Object-level logging is not configured for this bucket."
      }
    ]
  }
}