{"_canonicalization":{"envelope_id":"axm_ + sha256(envelope minus {signature, axiom_id, anchors})","envelope_signature":"ed25519(envelope minus {signature, axiom_id})","json":"sort_keys=True, separators=(',',':'), ensure_ascii=False, allow_nan=False, utf-8","leaf_hash":"sha256(0x00 || canonical_json(envelope_full))","seal_signature":"ed25519(seal minus {signature, sig_algorithm})"},"axiom_id":"axm_a94451cda5ebd1506ed4167ef1ee8bc1bedad9dd8961a0af80d9649f0e298ecd","bitcoin_anchor":{"bitcoin_attestations":["bitcoin_block_949451"],"calendar_attestations":["https://finney.calendar.eternitywall.com","https://btc.calendar.catallaxy.com","https://alice.btc.calendar.opentimestamps.org","https://bob.btc.calendar.opentimestamps.org"],"ots_url":"/registry/data/substrate/anchors/77fc9c28fae777b81da5b495b3115474df6592dfac590333213d3bdf8b94a9b3.ots","stamped_at":"2026-05-15T03:00:03Z","status":"bitcoin"},"envelope":{"anchors":[{"chain":"crovia.axiom_graph","height":0,"merkle_proof":"spider_vendor_press_v1","root_at_anchor":"spider_vendor_press_v1"}],"axiom_id":"axm_a94451cda5ebd1506ed4167ef1ee8bc1bedad9dd8961a0af80d9649f0e298ecd","axiom_type":"AX.OBS","body":{"axiom_subtype":"news.vendor_press.v1","category":"news","fingerprint":"26d9a96af09397ec8c9ceb11e8d195202c677564209b005ad715f29b58d4942c","published":"Mon, 16 Mar 2026 00:00:00 GMT","receipt_hash":"26d9a96af09397ec8c9ceb11e8d195202c677564209b005ad715f29b58d4942c","schema":"spider.news.vendor_press.v1","spider":"vendor_press","spider_record":{"axiom_subtype":"news.vendor_press.v1","category":"news","decision_hint":"POSITIVE","envelope_target":"AX.OBS","fingerprint":"26d9a96af09397ec8c9ceb11e8d195202c677564209b005ad715f29b58d4942c","observed_at":"2026-05-03T15:11:27.656745Z","parent_run_hash":null,"published":"Mon, 16 Mar 2026 00:00:00 GMT","runtime_version":"0.1.0","schema":"spider.news.vendor_press.v1","source_status":200,"source_url":"https://openai.com/blog/rss.xml","spider":"vendor_press","summary_excerpt":"A deep dive into why Codex Security doesn’t rely on traditional SAST, instead using AI-driven constraint reasoning and validation to find real vulnerabilities with fewer false positives.","title":"Why Codex Security Doesn’t Include a SAST Report","url":"https://openai.com/index/why-codex-security-doesnt-include-sast","vendor":"openai"},"summary":"A deep dive into why Codex Security doesn’t rely on traditional SAST, instead using AI-driven constraint reasoning and validation to find real vulnerabilities with fewer false positives.","title":"Why Codex Security Doesn’t Include a SAST Report","vendor":"openai"},"confidence":{"method":"deterministic"},"decision":"POSITIVE","issued_at":"2026-05-03T15:11:27Z","notes":"Spider vendor_press (news) news.vendor_press.v1","object":{"captured_by":"crovia.spider.vendor_press","primary_source_url":"https://openai.com/index/why-codex-security-doesnt-include-sast"},"predecessors":[],"schema":"crovia.axiom.v1","signature":"ed25519:e61fffa08a9bf442e17ac2de75c9fd5cc97507bfcbac8c6c49596f6e5ed4af0eae65f7e62bb829816cf4ad0316aded81cbff48aa4e2a6a8ef3cc5e535fdb6009","signer":"crovia.substrate","subject":{"observed_at":"2026-05-03T15:11:27Z","source_collector":"spider:vendor_press","target_id":"https://openai.com/index/why-codex-security-doesnt-include-sast"},"tsa":{"authority":"crovia.substrate.bootstrap","rfc3161_token":"{\"kind\":\"crovia.bootstrap.tsa\",\"source_jsonl\":\"/opt/crovia/spider/data/news/vendor_press_v1.jsonl\",\"source_seal_merkle_root\":\"spider_vendor_press_v1\",\"upgrade_path\":\"Sessione H \\u2014 OpenTimestamps weekly anchor\"}"},"zk_mode":"clear","zk_proof":null},"ledger":{"leaf_hash":"7c0981c899e7a29ad23b979ac1fb8bd9c2a55557a185ada07440bc631c4b9aec","leaf_index":110602,"ledger_path":"/opt/crovia/substrate/axiom_ledger.jsonl"},"merkle_proof":{"hash_alg":"sha256","leaf_prefix":"0x00","node_prefix":"0x01","odd_leaf_rule":"duplicate_last","path":[{"sibling":"7039ec2a656d8fef6fa0c08c93276853aefe1864ac8974058ea5879807fe11ff","side":"right"},{"sibling":"13d01197ac9980c87635086b2c8d9598f7a7872049b995e1698dfc55207622e0","side":"left"},{"sibling":"c696c8b0ed364911653914ff066f88e20dfa97c4d64cadb7a311a2ed389a8fc0","side":"right"},{"sibling":"41f9ac0ddffd63ee1ba6e1fae482eea30e0634cb38a5a5b1d490a3e4cf38bad1","side":"left"},{"sibling":"849c6eb2a2bf9a0d380108959f7db1bc97fa3c17505b813c77a2c3a4e873e458","side":"right"},{"sibling":"4c3bbb79d1b0ad9e89e38bcdbd00bbfe494cb4f0ad2f02599b6794f99510a5e0","side":"right"},{"sibling":"41c7568627b0ef4fe4bba7bd9ead57ce66257b6a44e7775cc4bdffecd3d43d1b","side":"right"},{"sibling":"280298f1f7c1743cff109269788bbaf0dcf9c07af6ed0d7ab86854c91052672c","side":"right"},{"sibling":"6f725b0829febb13b15d6ef0c30e2890a252ce03f92e92788b10fce698d19999","side":"right"},{"sibling":"ec53a51e3c163eac5d1bee6f74ea7b818c471f9ef7a337561df752e6812d9748","side":"right"},{"sibling":"7322dcde9f6dec40cc973ca12dd1ebd16fe5aecf078317f5e57c51a436730eb5","side":"right"},{"sibling":"a6d6e5bc888edc394757fbba02b675bac6ad0831e36a6f5ebbaa4e5548f25603","side":"right"},{"sibling":"76d7c4385d71ae8104107105be66eddb792e01ed6e493db5a9b4eec5441abb76","side":"left"},{"sibling":"b03f005860bf95148ea89c703a32ca19ab7a2ca71b58bb628ff94a9edb8703b0","side":"left"},{"sibling":"21d1e30b556f553dc939fddc23e6367f0a7755ebe3dd489dc0001cef017beb7f","side":"right"},{"sibling":"f2817ab288b5324fe49770372c7a10f33f7cd11005f8d4c0a730316f5229dc98","side":"left"},{"sibling":"725fac972e772ca0dc598810ea1abc70df472f72d2d6ab8a0baee2b80e5d2f4c","side":"left"},{"sibling":"98fc57dfef8873b512edc8340f7181df57302bb96777625e072235c62d7c5895","side":"right"}]},"schema":"crovia.axiom_proof.v1","seal":{"first_collector_run_id":"","first_receipt_hash":"","jsonl_path":"/opt/crovia/substrate/axiom_ledger.jsonl","key_id":"430895f101d38164","last_collector_run_id":"","last_receipt_hash":"","leaf_count":134292,"merkle_root":"77fc9c28fae777b81da5b495b3115474df6592dfac590333213d3bdf8b94a9b3","public_key_hex":"cf742e26f75669dc673cb5c0786a1ae23ae8ca19c347317192ce40c28a7ff25c","run_id":"hourly_json_retrofit_20260515T023701Z","schema":"crovia.seal.v1","seal_family_version":"crovia-seal-family/1","seal_kind":"substrate_batch","sealed_at":"2026-05-15T02:37:25Z","sig_algorithm":"ed25519","signature":"68107a834b00b24f5d4501e5ec727445311f132a486567ecc4c72a4e6dff24c8c21f2de3105293353ba5fdbe370d032819af6aa70f694e2e39b6af6737507009","signer_version":"1.1.0"},"trust_root":{"key_id":"430895f101d38164","public_key_hex":"cf742e26f75669dc673cb5c0786a1ae23ae8ca19c347317192ce40c28a7ff25c","signature_algorithm":"ed25519","url":"/registry/canon/TRUST_ROOT.md"},"verifier":{"spec":"/registry/canon/AXIOM_RECEIPT_v1.md","url":"/v/axm_a94451cda5ebd1506ed4167ef1ee8bc1bedad9dd8961a0af80d9649f0e298ecd"}}