@kryptosai/mcp-observatory 0.28.0 → 1.28.2

package/docs/safety-index/artifacts/kubernetes-server.json

@@ -2,28 +2,36 @@
   "artifactType": "run",
   "schemaVersion": "1.0.0",
   "gate": "fail",
-  "runId": "run_2026-07-06T053258917Z_2e4f693a",
-  "createdAt": "2026-07-06T05:32:58.918Z",
+  "runId": "run_2026-07-06T194958878Z_b41bb221",
+  "createdAt": "2026-07-06T19:49:58.878Z",
   "toolVersion": "0.28.0",
   "target": {
-    "targetId": "mcp-server-kubernetes",
+    "targetId": "kubernetes-server",
     "adapter": "local-process",
     "command": "npx",
     "args": [
       "-y",
       "mcp-server-kubernetes"
     ],
+    "cwd": ".",
+    "metadata": {
+      "package": "mcp-server-kubernetes",
+      "purpose": "mcp-safety-index",
+      "riskClass": "Kubernetes control plane",
+      "failureClass": "Command and cluster mutation boundary",
+      "whyItMatters": "Kubernetes MCP servers can expose cluster mutation, pod exec, manifest apply/delete, and broad kubectl command surfaces to agents."
+    },
     "serverName": "kubernetes",
-    "serverVersion": "3.9.2"
+    "serverVersion": "3.9.3"
   },
   "environment": {
     "platform": "darwin 25.5.0",
     "nodeVersion": "v22.22.1"
   },
   "summary": {
-    "total": 6,
+    "total": 8,
     "pass": 4,
-    "fail": 1,
+    "fail": 3,
     "partial": 1,
     "unsupported": 0,
     "flaky": 0,
@@ -35,7 +43,7 @@
       "id": "tools",
       "capability": "tools",
       "status": "pass",
-      "durationMs": 2.264750000000049,
+      "durationMs": 1.2567500000004657,
       "message": "Advertised capability responded with the minimal expected shape (23 items).",
       "evidence": [
         {
@@ -70,9 +78,9 @@
             "ping"
           ],
           "diagnostics": [
-            "Starting Kubernetes MCP server v3.9.2, handling commands...",
+            "Starting Kubernetes MCP server v3.9.3, handling commands...",
             "Telemetry: Disabled",
-            "(node:54973) [DEP0040] DeprecationWarning: The `punycode` module is deprecated. Please use a userland alternative instead.",
+            "(node:13988) [DEP0040] DeprecationWarning: The `punycode` module is deprecated. Please use a userland alternative instead.",
             "(Use `node --trace-deprecation ...` to show where the warning was created)"
           ],
           "schemas": {
@@ -995,6 +1003,11 @@
                   "description": "Kubernetes namespace",
                   "default": "default"
                 },
+                "allNamespaces": {
+                  "type": "boolean",
+                  "description": "If true, run the command across all namespaces",
+                  "default": false
+                },
                 "outputFormat": {
                   "type": "string",
                   "description": "Output format (e.g. json, yaml, wide)",
@@ -1041,7 +1054,7 @@
       "id": "prompts",
       "capability": "prompts",
       "status": "pass",
-      "durationMs": 0.6192499999999654,
+      "durationMs": 0.29662500000085856,
       "message": "Advertised capability responded with the minimal expected shape (1 item).",
       "evidence": [
         {
@@ -1054,9 +1067,9 @@
             "k8s-diagnose"
           ],
           "diagnostics": [
-            "Starting Kubernetes MCP server v3.9.2, handling commands...",
+            "Starting Kubernetes MCP server v3.9.3, handling commands...",
             "Telemetry: Disabled",
-            "(node:54973) [DEP0040] DeprecationWarning: The `punycode` module is deprecated. Please use a userland alternative instead.",
+            "(node:13988) [DEP0040] DeprecationWarning: The `punycode` module is deprecated. Please use a userland alternative instead.",
             "(Use `node --trace-deprecation ...` to show where the warning was created)"
           ]
         }
@@ -1066,7 +1079,7 @@
       "id": "resources",
       "capability": "resources",
       "status": "pass",
-      "durationMs": 1.0306660000001102,
+      "durationMs": 0.38045899999997346,
       "message": "Advertised capability responded with the minimal expected shape, but one optional resource endpoint appears unsupported.",
       "evidence": [
         {
@@ -1083,9 +1096,9 @@
             "k8s://nodes"
           ],
           "diagnostics": [
-            "Starting Kubernetes MCP server v3.9.2, handling commands...",
+            "Starting Kubernetes MCP server v3.9.3, handling commands...",
             "Telemetry: Disabled",
-            "(node:54973) [DEP0040] DeprecationWarning: The `punycode` module is deprecated. Please use a userland alternative instead.",
+            "(node:13988) [DEP0040] DeprecationWarning: The `punycode` module is deprecated. Please use a userland alternative instead.",
             "(Use `node --trace-deprecation ...` to show where the warning was created)"
           ]
         },
@@ -1096,9 +1109,9 @@
           "minimalShapePresent": false,
           "diagnostics": [
             "MCP error -32601: Method not found",
-            "Starting Kubernetes MCP server v3.9.2, handling commands...",
+            "Starting Kubernetes MCP server v3.9.3, handling commands...",
             "Telemetry: Disabled",
-            "(node:54973) [DEP0040] DeprecationWarning: The `punycode` module is deprecated. Please use a userland alternative instead.",
+            "(node:13988) [DEP0040] DeprecationWarning: The `punycode` module is deprecated. Please use a userland alternative instead.",
             "(Use `node --trace-deprecation ...` to show where the warning was created)"
           ]
         }
@@ -1108,7 +1121,7 @@
       "id": "security-lite",
       "capability": "security-lite",
       "status": "fail",
-      "durationMs": 0.597582999999986,
+      "durationMs": 0.06358300000101735,
       "message": "Found 8 security finding(s): 3 high, 3 medium, 2 low.",
       "evidence": [
         {
@@ -1193,7 +1206,7 @@
       "id": "conformance",
       "capability": "conformance",
       "status": "pass",
-      "durationMs": 7.210374999999885,
+      "durationMs": 1.6942920000001322,
       "message": "All 7 conformance checks passed.",
       "evidence": [
         {
@@ -1219,7 +1232,7 @@
       "id": "schema-quality",
       "capability": "schema-quality",
       "status": "partial",
-      "durationMs": 0.9046250000001237,
+      "durationMs": 0.48933300000135205,
       "message": "Found 7 quality finding(s) across 29 item(s): 0 warnings, 7 info.",
       "evidence": [
         {
@@ -1288,6 +1301,216 @@
           ]
         }
       ]
+    },
+    {
+      "id": "security",
+      "capability": "security",
+      "status": "fail",
+      "durationMs": 0.2782920000008744,
+      "message": "Found 8 security finding(s): 3 high, 3 medium, 2 low.",
+      "evidence": [
+        {
+          "endpoint": "security/scan",
+          "advertised": true,
+          "responded": true,
+          "minimalShapePresent": true,
+          "itemCount": 8,
+          "identifiers": [
+            "cleanup",
+            "kubectl_apply",
+            "kubectl_delete",
+            "kubectl_create",
+            "kubectl_reconnect",
+            "exec_in_pod",
+            "kubectl_generic"
+          ],
+          "diagnostics": [
+            "[low] Tool \"cleanup\" has an empty schema but is marked as destructive.",
+            "[medium] Tool \"kubectl_apply\" accepts filesystem paths and has destructive capabilities.",
+            "[medium] Tool \"kubectl_delete\" accepts filesystem paths and has destructive capabilities.",
+            "[high] Tool \"kubectl_create\" has parameter \"command\" which may allow arbitrary command execution.",
+            "[medium] Tool \"kubectl_create\" accepts filesystem paths and has destructive capabilities.",
+            "[low] Tool \"kubectl_reconnect\" has an empty schema but is marked as destructive.",
+            "[high] Tool \"exec_in_pod\" has parameter \"command\" which may allow arbitrary command execution.",
+            "[high] Tool \"kubectl_generic\" has parameter \"command\" which may allow arbitrary command execution."
+          ],
+          "findings": [
+            {
+              "ruleId": "permissive-schema",
+              "severity": "low",
+              "toolName": "cleanup",
+              "message": "Tool \"cleanup\" has an empty schema but is marked as destructive."
+            },
+            {
+              "ruleId": "broad-filesystem",
+              "severity": "medium",
+              "toolName": "kubectl_apply",
+              "message": "Tool \"kubectl_apply\" accepts filesystem paths and has destructive capabilities."
+            },
+            {
+              "ruleId": "broad-filesystem",
+              "severity": "medium",
+              "toolName": "kubectl_delete",
+              "message": "Tool \"kubectl_delete\" accepts filesystem paths and has destructive capabilities."
+            },
+            {
+              "ruleId": "shell-injection",
+              "severity": "high",
+              "toolName": "kubectl_create",
+              "message": "Tool \"kubectl_create\" has parameter \"command\" which may allow arbitrary command execution."
+            },
+            {
+              "ruleId": "broad-filesystem",
+              "severity": "medium",
+              "toolName": "kubectl_create",
+              "message": "Tool \"kubectl_create\" accepts filesystem paths and has destructive capabilities."
+            },
+            {
+              "ruleId": "permissive-schema",
+              "severity": "low",
+              "toolName": "kubectl_reconnect",
+              "message": "Tool \"kubectl_reconnect\" has an empty schema but is marked as destructive."
+            },
+            {
+              "ruleId": "shell-injection",
+              "severity": "high",
+              "toolName": "exec_in_pod",
+              "message": "Tool \"exec_in_pod\" has parameter \"command\" which may allow arbitrary command execution."
+            },
+            {
+              "ruleId": "shell-injection",
+              "severity": "high",
+              "toolName": "kubectl_generic",
+              "message": "Tool \"kubectl_generic\" has parameter \"command\" which may allow arbitrary command execution."
+            }
+          ]
+        }
+      ]
+    },
+    {
+      "id": "attack-sim",
+      "capability": "attack-sim",
+      "status": "fail",
+      "durationMs": 0.750292000000627,
+      "message": "Safe attack simulation found 5 finding(s): 3 high, 2 medium, 0 low.",
+      "evidence": [
+        {
+          "endpoint": "attack-sim/safe",
+          "advertised": true,
+          "responded": true,
+          "minimalShapePresent": true,
+          "itemCount": 5,
+          "identifiers": [
+            "kubectl_apply",
+            "kubectl_delete",
+            "kubectl_create",
+            "exec_in_pod",
+            "kubectl_generic"
+          ],
+          "diagnostics": [
+            "[medium] Tool \"kubectl_apply\" combines broad parameters (filename) with destructive or non-read-only behavior.",
+            "[medium] Tool \"kubectl_delete\" combines broad parameters (filename) with destructive or non-read-only behavior.",
+            "[high] Tool \"kubectl_create\" combines broad parameters (filename, command) with destructive or non-read-only behavior.",
+            "[high] Tool \"exec_in_pod\" combines broad parameters (command) with destructive or non-read-only behavior.",
+            "[high] Tool \"kubectl_generic\" combines broad parameters (command) with destructive or non-read-only behavior."
+          ],
+          "findings": [
+            {
+              "ruleId": "attack-sim/permission-boundary/broad-destructive-tool",
+              "attackClass": "permission-boundary",
+              "severity": "medium",
+              "itemType": "tool",
+              "itemName": "kubectl_apply",
+              "message": "Tool \"kubectl_apply\" combines broad parameters (filename) with destructive or non-read-only behavior.",
+              "evidence": {
+                "broadParams": [
+                  "filename"
+                ],
+                "annotations": {
+                  "destructiveHint": true
+                },
+                "description": "Apply a Kubernetes YAML manifest from a string or file"
+              },
+              "recommendation": "Constrain this tool with typed inputs, allowlists, explicit read-only/destructive annotations, and a harmless CI fixture.",
+              "recommendedAction": "gate"
+            },
+            {
+              "ruleId": "attack-sim/permission-boundary/broad-destructive-tool",
+              "attackClass": "permission-boundary",
+              "severity": "medium",
+              "itemType": "tool",
+              "itemName": "kubectl_delete",
+              "message": "Tool \"kubectl_delete\" combines broad parameters (filename) with destructive or non-read-only behavior.",
+              "evidence": {
+                "broadParams": [
+                  "filename"
+                ],
+                "annotations": {
+                  "destructiveHint": true
+                },
+                "description": "Delete Kubernetes resources by resource type, name, labels, or from a manifest file"
+              },
+              "recommendation": "Constrain this tool with typed inputs, allowlists, explicit read-only/destructive annotations, and a harmless CI fixture.",
+              "recommendedAction": "gate"
+            },
+            {
+              "ruleId": "attack-sim/permission-boundary/broad-destructive-tool",
+              "attackClass": "permission-boundary",
+              "severity": "high",
+              "itemType": "tool",
+              "itemName": "kubectl_create",
+              "message": "Tool \"kubectl_create\" combines broad parameters (filename, command) with destructive or non-read-only behavior.",
+              "evidence": {
+                "broadParams": [
+                  "filename",
+                  "command"
+                ],
+                "description": "Create Kubernetes resources using various methods (from file or using subcommands)"
+              },
+              "recommendation": "Constrain this tool with typed inputs, allowlists, explicit read-only/destructive annotations, and a harmless CI fixture.",
+              "recommendedAction": "quarantine"
+            },
+            {
+              "ruleId": "attack-sim/permission-boundary/broad-destructive-tool",
+              "attackClass": "permission-boundary",
+              "severity": "high",
+              "itemType": "tool",
+              "itemName": "exec_in_pod",
+              "message": "Tool \"exec_in_pod\" combines broad parameters (command) with destructive or non-read-only behavior.",
+              "evidence": {
+                "broadParams": [
+                  "command"
+                ],
+                "annotations": {
+                  "destructiveHint": true
+                },
+                "description": "Execute a command in a Kubernetes pod or container and return the output. Command must be an array of strings where the first element is the executable and remaining elements are arguments. This executes directly without shell interpretation for security."
+              },
+              "recommendation": "Constrain this tool with typed inputs, allowlists, explicit read-only/destructive annotations, and a harmless CI fixture.",
+              "recommendedAction": "quarantine"
+            },
+            {
+              "ruleId": "attack-sim/permission-boundary/broad-destructive-tool",
+              "attackClass": "permission-boundary",
+              "severity": "high",
+              "itemType": "tool",
+              "itemName": "kubectl_generic",
+              "message": "Tool \"kubectl_generic\" combines broad parameters (command) with destructive or non-read-only behavior.",
+              "evidence": {
+                "broadParams": [
+                  "command"
+                ],
+                "annotations": {
+                  "destructiveHint": true
+                },
+                "description": "Execute any kubectl command with the provided arguments and flags"
+              },
+              "recommendation": "Constrain this tool with typed inputs, allowlists, explicit read-only/destructive annotations, and a harmless CI fixture.",
+              "recommendedAction": "quarantine"
+            }
+          ]
+        }
+      ]
     }
   ],
   "healthScore": {
@@ -1315,7 +1538,9 @@
         "weight": 0.2,
         "score": 0,
         "details": [
-          "security-lite: fail (0/100)"
+          "security-lite: fail (0/100)",
+          "security: fail (0/100)",
+          "attack-sim: fail (0/100)"
         ]
       },
       {
@@ -1333,16 +1558,16 @@
         "weight": 0.1,
         "score": 100,
         "details": [
-          "Connect: 975ms",
-          "p95 latency: 2ms (3 operations)"
+          "Connect: 1296ms",
+          "p95 latency: 1ms (3 operations)"
         ]
       }
     ]
   },
   "performanceMetrics": {
-    "connectMs": 975.0412919999999,
-    "toolsListMs": 2.264750000000049,
-    "promptsListMs": 0.6192499999999654,
-    "resourcesListMs": 1.0306660000001102
+    "connectMs": 1295.9490000000005,
+    "toolsListMs": 1.2567500000004657,
+    "promptsListMs": 0.29662500000085856,
+    "resourcesListMs": 0.38045899999997346
   }
 }

package/docs/safety-index/artifacts/kubernetes-server.md

@@ -1,13 +1,13 @@
 # MCP Observatory Run Report
 
-Generated at 2026-07-06T05:32:58.918Z
+Generated at 2026-07-06T19:49:58.878Z
 
 ## Target and Environment Metadata
 
-- Target: `mcp-server-kubernetes`
+- Target: `kubernetes-server`
 - Adapter: `local-process`
 - Command: `npx -y mcp-server-kubernetes`
-- Server: `kubernetes 3.9.2`
+- Server: `kubernetes 3.9.3`
 - Platform: `darwin 25.5.0`
 - Node: `v22.22.1`
 
@@ -25,18 +25,18 @@ Generated at 2026-07-06T05:32:58.918Z
 
 | Gate | Total | Pass | Fail | Partial | Unsupported | Flaky | Skipped |
 | --- | --- | --- | --- | --- | --- | --- | --- |
-| fail | 6 | 4 | 1 | 1 | 0 | 0 | 0 |
+| fail | 8 | 4 | 3 | 1 | 0 | 0 | 0 |
 
 ## At a Glance
 
 - Safety verdict: **Blocked** — One or more checks can break agent dependence and should be fixed before production use.
-- Top risks: schema-quality: Found 7 quality finding(s) across 29 item(s): 0 warnings, 7 info.; security-lite: Found 8 security finding(s): 3 high, 3 medium, 2 low.
+- Top risks: schema-quality: Found 7 quality finding(s) across 29 item(s): 0 warnings, 7 info.; attack-sim: Safe attack simulation found 5 finding(s): 3 high, 2 medium, 0 low.; security: Found 8 security finding(s): 3 high, 3 medium, 2 low.
 - Regression/schema drift: Run `mcp-observatory diff <previous-run.json> <current-run.json>` to classify regressions and schema drift.
-- Failing checks: security-lite
+- Failing checks: security-lite, security, attack-sim
 - Partial or flaky checks: schema-quality
 - Skipped checks: none
 - Unsupported checks: none
-- Suggested next step: Start with the failing checks: security-lite.
+- Suggested next step: Start with the failing checks: security-lite, security, attack-sim.
 - CI next step: `Add CI: npx @kryptosai/mcp-observatory setup-ci --all --command "npx -y <server-package>"`
 
 ## Regressions and Recoveries
@@ -47,12 +47,14 @@ _Use the `diff` command against another run artifact to classify regressions and
 
 | Focus | Check | Status | Duration (ms) | Message |
 | --- | --- | --- | --- | --- |
-| healthy | conformance | pass | 7.21 | All 7 conformance checks passed. |
-| healthy | prompts | pass | 0.62 | Advertised capability responded with the minimal expected shape (1 item). |
-| healthy | resources | pass | 1.03 | Advertised capability responded with the minimal expected shape, but one optional resource endpoint appears unsupported. |
-| healthy | tools | pass | 2.26 | Advertised capability responded with the minimal expected shape (23 items). |
-| review | schema-quality | partial | 0.90 | Found 7 quality finding(s) across 29 item(s): 0 warnings, 7 info. |
-| act now | security-lite | fail | 0.60 | Found 8 security finding(s): 3 high, 3 medium, 2 low. |
+| healthy | conformance | pass | 1.69 | All 7 conformance checks passed. |
+| healthy | prompts | pass | 0.30 | Advertised capability responded with the minimal expected shape (1 item). |
+| healthy | resources | pass | 0.38 | Advertised capability responded with the minimal expected shape, but one optional resource endpoint appears unsupported. |
+| healthy | tools | pass | 1.26 | Advertised capability responded with the minimal expected shape (23 items). |
+| review | schema-quality | partial | 0.49 | Found 7 quality finding(s) across 29 item(s): 0 warnings, 7 info. |
+| act now | attack-sim | fail | 0.75 | Safe attack simulation found 5 finding(s): 3 high, 2 medium, 0 low. |
+| act now | security | fail | 0.28 | Found 8 security finding(s): 3 high, 3 medium, 2 low. |
+| act now | security-lite | fail | 0.06 | Found 8 security finding(s): 3 high, 3 medium, 2 low. |
 
 ## Evidence Snippets
 
@@ -78,7 +80,7 @@ Summary: Advertised capability responded with the minimal expected shape (1 item
   - Minimal shape present: `true`
   - Item count: `1`
   - Identifiers: k8s-diagnose
-  - Diagnostics: Starting Kubernetes MCP server v3.9.2, handling commands..., Telemetry: Disabled, (node:54973) [DEP0040] DeprecationWarning: The `punycode` module is deprecated. Please use a userland alternative instead. (+1 more)
+  - Diagnostics: Starting Kubernetes MCP server v3.9.3, handling commands..., Telemetry: Disabled, (node:13988) [DEP0040] DeprecationWarning: The `punycode` module is deprecated. Please use a userland alternative instead. (+1 more)
 
 ### resources — pass
 
@@ -90,14 +92,14 @@ Summary: Advertised capability responded with the minimal expected shape, but on
   - Minimal shape present: `true`
   - Item count: `5`
   - Identifiers: k8s://default/pods, k8s://default/deployments, k8s://default/services, k8s://namespaces, k8s://nodes
-  - Diagnostics: Starting Kubernetes MCP server v3.9.2, handling commands..., Telemetry: Disabled, (node:54973) [DEP0040] DeprecationWarning: The `punycode` module is deprecated. Please use a userland alternative instead. (+1 more)
+  - Diagnostics: Starting Kubernetes MCP server v3.9.3, handling commands..., Telemetry: Disabled, (node:13988) [DEP0040] DeprecationWarning: The `punycode` module is deprecated. Please use a userland alternative instead. (+1 more)
 - Endpoint: `resources/templates/list`
   - Advertised: `true`
   - Responded: `false`
   - Minimal shape present: `false`
   - Item count: `0`
   - Identifiers: none
-  - Diagnostics: MCP error -32601: Method not found, Starting Kubernetes MCP server v3.9.2, handling commands..., Telemetry: Disabled (+2 more)
+  - Diagnostics: MCP error -32601: Method not found, Starting Kubernetes MCP server v3.9.3, handling commands..., Telemetry: Disabled (+2 more)
 
 ### tools — pass
 
@@ -109,7 +111,7 @@ Summary: Advertised capability responded with the minimal expected shape (23 ite
   - Minimal shape present: `true`
   - Item count: `23`
   - Identifiers: cleanup, kubectl_get, kubectl_describe, kubectl_apply, kubectl_delete (+18 more)
-  - Diagnostics: Starting Kubernetes MCP server v3.9.2, handling commands..., Telemetry: Disabled, (node:54973) [DEP0040] DeprecationWarning: The `punycode` module is deprecated. Please use a userland alternative instead. (+1 more)
+  - Diagnostics: Starting Kubernetes MCP server v3.9.3, handling commands..., Telemetry: Disabled, (node:13988) [DEP0040] DeprecationWarning: The `punycode` module is deprecated. Please use a userland alternative instead. (+1 more)
 
 ### schema-quality — partial
 
@@ -123,6 +125,30 @@ Summary: Found 7 quality finding(s) across 29 item(s): 0 warnings, 7 info.
   - Identifiers: port_forward, stop_port_forward, list_api_resources
   - Diagnostics: [info] tool "port_forward": Property 'resourceType' missing description, [info] tool "port_forward": Property 'resourceName' missing description, [info] tool "port_forward": Property 'localPort' missing description (+4 more)
 
+### attack-sim — fail
+
+Summary: Safe attack simulation found 5 finding(s): 3 high, 2 medium, 0 low.
+
+- Endpoint: `attack-sim/safe`
+  - Advertised: `true`
+  - Responded: `true`
+  - Minimal shape present: `true`
+  - Item count: `5`
+  - Identifiers: kubectl_apply, kubectl_delete, kubectl_create, exec_in_pod, kubectl_generic
+  - Diagnostics: [medium] Tool "kubectl_apply" combines broad parameters (filename) with destructive or non-read-only behavior., [medium] Tool "kubectl_delete" combines broad parameters (filename) with destructive or non-read-only behavior., [high] Tool "kubectl_create" combines broad parameters (filename, command) with destructive or non-read-only behavior. (+2 more)
+
+### security — fail
+
+Summary: Found 8 security finding(s): 3 high, 3 medium, 2 low.
+
+- Endpoint: `security/scan`
+  - Advertised: `true`
+  - Responded: `true`
+  - Minimal shape present: `true`
+  - Item count: `8`
+  - Identifiers: cleanup, kubectl_apply, kubectl_delete, kubectl_create, kubectl_reconnect (+2 more)
+  - Diagnostics: [low] Tool "cleanup" has an empty schema but is marked as destructive., [medium] Tool "kubectl_apply" accepts filesystem paths and has destructive capabilities., [medium] Tool "kubectl_delete" accepts filesystem paths and has destructive capabilities. (+5 more)
+
 ### security-lite — fail
 
 Summary: Found 8 security finding(s): 3 high, 3 medium, 2 low.
@@ -146,5 +172,5 @@ npm run cli -- report --run <path-to-run-artifact.json> --format markdown
 
 - Artifact type: `run`
 - Schema version: `1.0.0`
-- Run ID: `run_2026-07-06T053258917Z_2e4f693a`
+- Run ID: `run_2026-07-06T194958878Z_b41bb221`
 - Gate: `fail`