{
  "pair": "OpenWrt armsr/armv8 rootfs 23.05.4 to 23.05.5",
  "sample_size": "1 release pair",
  "claim": "none: one pair is a sample, not a detection rate or a comparison with any other tool",
  "held_constant": {
    "engine": "not shown: FDIE records no engine build (image built without FDIE_BUILD_SHA)",
    "nvd": "held: the last NVD sync (2026-10-10T06:32:43.571477+00:00) precedes the first upload, so none ran during the pair",
    "epss": "one EPSS snapshot in use for both; its load time is not recorded, so not shown"
  },
  "base": {
    "image": {
      "label": "OpenWrt 23.05.4 armsr-armv8 rootfs",
      "sha256": "922980e521f39f959888c994f29c47712bf5dbd086d6b99b652da2f183e5c76f",
      "source": "https://downloads.openwrt.org/releases/23.05.4/targets/armsr/armv8/openwrt-23.05.4-armsr-armv8-generic-squashfs-rootfs.img.gz",
      "firmware_id": "c58732c0-9126-44da-baca-237780799261",
      "analysis_status": "complete",
      "reused_existing_analysis": true,
      "uploaded_at": "2026-10-10T06:35:20.658979Z",
      "last_assessment_at": "2026-10-10T06:46:50.547590+00:00"
    },
    "extraction": {
      "binaries": 191,
      "degraded_binaries": 0,
      "extraction_warning": null,
      "coverage_warning": null,
      "quality": {
        "status": "complete",
        "is_monolithic": false,
        "rtos_detected": false
      }
    },
    "identification": {
      "catalog_products_in_manifest": 10,
      "found": 7,
      "found_interval_95": [
        0.397,
        0.892
      ],
      "missed": [
        "linux_kernel",
        "musl",
        "ppp"
      ],
      "not_in_manifest": [
        "openwrt"
      ],
      "versions_compared": 3,
      "versions_matching": 3,
      "versions_interval_95": [
        0.438,
        1.0
      ],
      "version_mismatches": {}
    },
    "findings": {
      "total": 451,
      "critical_count": 14,
      "high_count": 197,
      "medium_count": 120,
      "low_count": 108,
      "other_or_informational": 12
    },
    "runtime": {
      "run_status": "complete",
      "mode": "tier1",
      "elf_files": 206,
      "not_runnable_on_their_own": {
        "Shared library": 48,
        "ELF kernel module (e_type=1)": 112
      },
      "runnable": 46,
      "ran": 46,
      "timed_out": 1,
      "finished": 45,
      "timed_out_binaries": [
        "init"
      ],
      "exit_codes_of_finished": {
        "1": 22,
        "0": 11,
        "255": 8,
        "127": 1,
        "2": 1,
        "16": 1,
        "3": 1
      },
      "behaviour_observations": [
        [
          "Runtime: shell interpreter executed (/sbin/init)",
          "LOW"
        ],
        [
          "Runtime: listening network service (/usr/sbin/dnsmasq)",
          "MEDIUM"
        ]
      ]
    },
    "provenance": {
      "engine_build": "unknown",
      "nvd_last_sync": "2026-10-10T06:32:43.571477+00:00",
      "nvd_cves_in_last_sync": 8449,
      "epss_snapshot": {
        "source": "https://epss.empiricalsecurity.com/epss_scores-2026-10-09.csv.gz",
        "sha256": "2470f5eb7f664dd283678d51baeb64a7d3749c2182c4b0b17ccd907573b8432e"
      }
    }
  },
  "candidate": {
    "image": {
      "label": "OpenWrt 23.05.5 armsr-armv8 rootfs",
      "sha256": "00bd253bfce5ea2d87c430dbbddc21528757b059d5b67b57b8f31397ddc7abbb",
      "source": "https://downloads.openwrt.org/releases/23.05.5/targets/armsr/armv8/openwrt-23.05.5-armsr-armv8-generic-squashfs-rootfs.img.gz",
      "firmware_id": "f792ebb8-6dd0-4f88-96e1-65247dac909f",
      "analysis_status": "complete",
      "reused_existing_analysis": true,
      "uploaded_at": "2026-10-10T06:46:36.530559Z",
      "last_assessment_at": "2026-10-10T06:55:55.190611+00:00"
    },
    "extraction": {
      "binaries": 191,
      "degraded_binaries": 0,
      "extraction_warning": null,
      "coverage_warning": null,
      "quality": {
        "status": "complete",
        "is_monolithic": false,
        "rtos_detected": false
      }
    },
    "identification": {
      "catalog_products_in_manifest": 10,
      "found": 7,
      "found_interval_95": [
        0.397,
        0.892
      ],
      "missed": [
        "linux_kernel",
        "musl",
        "ppp"
      ],
      "not_in_manifest": [
        "openwrt"
      ],
      "versions_compared": 3,
      "versions_matching": 3,
      "versions_interval_95": [
        0.438,
        1.0
      ],
      "version_mismatches": {}
    },
    "findings": {
      "total": 451,
      "critical_count": 14,
      "high_count": 197,
      "medium_count": 120,
      "low_count": 108,
      "other_or_informational": 12
    },
    "runtime": {
      "run_status": "complete",
      "mode": "tier1",
      "elf_files": 206,
      "not_runnable_on_their_own": {
        "Shared library": 48,
        "ELF kernel module (e_type=1)": 112
      },
      "runnable": 46,
      "ran": 46,
      "timed_out": 1,
      "finished": 45,
      "timed_out_binaries": [
        "init"
      ],
      "exit_codes_of_finished": {
        "1": 22,
        "0": 11,
        "255": 8,
        "127": 1,
        "2": 1,
        "16": 1,
        "3": 1
      },
      "behaviour_observations": [
        [
          "Runtime: shell interpreter executed (/sbin/init)",
          "LOW"
        ],
        [
          "Runtime: listening network service (/usr/sbin/dnsmasq)",
          "MEDIUM"
        ]
      ]
    },
    "provenance": {
      "engine_build": "unknown",
      "nvd_last_sync": "2026-10-10T06:32:43.571477+00:00",
      "nvd_cves_in_last_sync": 8449,
      "epss_snapshot": {
        "source": "https://epss.empiricalsecurity.com/epss_scores-2026-10-09.csv.gz",
        "sha256": "2470f5eb7f664dd283678d51baeb64a7d3749c2182c4b0b17ccd907573b8432e"
      }
    }
  },
  "delta": {
    "firmware_v1": "c58732c0-9126-44da-baca-237780799261",
    "firmware_v2": "f792ebb8-6dd0-4f88-96e1-65247dac909f",
    "comparison_note": "Differences compare recorded results. Static engine/feed provenance is incomplete; newly detected or missing matches do not establish a regression or verified fix. Review each assessment's settings, time and coverage.",
    "binary_changes_count": 191,
    "new_cves_count": 0,
    "fixed_cves_count": 0,
    "persisting_critical_cves_count": 6,
    "sbom_changes_count": 1,
    "sbom_added_count": 0,
    "sbom_removed_count": 0,
    "findings_delta_count": 21,
    "compliance_delta_count": 2,
    "config_changes_count": 4,
    "binary_changes_by_status": {
      "MODIFIED": 102,
      "UNCHANGED": 89
    },
    "patch_verification": {
      "rows": 39,
      "by_status": {
        "MODIFIED_NOT_FIXED": 23,
        "CONFIRMED_UNPATCHED": 16
      }
    }
  },
  "functions": {
    "binaries_compared": 102,
    "failures": {},
    "total_v1": 5181,
    "total_v2": 5181,
    "unchanged": 2740,
    "modified": 11,
    "renamed": 2425,
    "added": 5,
    "removed": 5,
    "binaries_with_code_changes": {
      "libmbedcrypto.so.2.28.9": {
        "paired_with": "libmbedcrypto.so.2.28.8",
        "total_v1": 758,
        "unchanged": 731,
        "modified": 5,
        "renamed": 21,
        "added": 1,
        "removed": 1,
        "modified_functions": [
          "sub_0x34dd0",
          "mbedtls_psa_rsa_sign_hash",
          "mbedtls_psa_rsa_export_public_key",
          "psa_verify_hash",
          "psa_sign_hash"
        ]
      },
      "luci.so": {
        "paired_with": null,
        "total_v1": 35,
        "unchanged": 31,
        "modified": 1,
        "renamed": 3,
        "added": 0,
        "removed": 0,
        "modified_functions": [
          "sub_0x42dc"
        ]
      },
      "nf_flow_table.ko": {
        "paired_with": null,
        "total_v1": 54,
        "unchanged": 13,
        "modified": 1,
        "renamed": 40,
        "added": 0,
        "removed": 0,
        "modified_functions": [
          "sub_0x13154"
        ]
      },
      "nf_tables.ko": {
        "paired_with": null,
        "total_v1": 238,
        "unchanged": 2,
        "modified": 0,
        "renamed": 233,
        "added": 3,
        "removed": 3,
        "modified_functions": []
      },
      "nft_counter.ko": {
        "paired_with": null,
        "total_v1": 5,
        "unchanged": 0,
        "modified": 1,
        "renamed": 4,
        "added": 0,
        "removed": 0,
        "modified_functions": [
          "sub_0x11010"
        ]
      },
      "rvu_af.ko": {
        "paired_with": null,
        "total_v1": 381,
        "unchanged": 37,
        "modified": 3,
        "renamed": 340,
        "added": 1,
        "removed": 1,
        "modified_functions": [
          "sub_0x20950",
          "sub_0x2a360",
          "sub_0x36f40"
        ]
      }
    }
  }
}