{
  "fixture_version": "mb-451-v1",
  "runtime": "unknown",
  "started_at": "2026-04-22T08:05:48Z",
  "finished_at": "2026-04-22T08:05:48Z",
  "probes": [
    {
      "name": "caps.capget",
      "category": "caps",
      "blocked": true,
      "expected": "effective_set_empty",
      "actual": "eff=0x0/0x0"
    },
    {
      "name": "caps.mount_tmpfs",
      "category": "caps",
      "blocked": true,
      "expected": "EPERM",
      "actual": "operation not permitted"
    },
    {
      "name": "caps.unshare_user",
      "category": "caps",
      "blocked": true,
      "expected": "EPERM_or_no_new_caps",
      "actual": "invalid argument"
    },
    {
      "name": "caps.setuid_zero",
      "category": "caps",
      "blocked": true,
      "expected": "EPERM_from_nonroot",
      "actual": "operation not permitted"
    },
    {
      "name": "filesystem.open_dev_kmem",
      "category": "filesystem",
      "blocked": true,
      "expected": "ENOENT_or_EPERM",
      "actual": "open /dev/kmem: no such file or directory"
    },
    {
      "name": "filesystem.open_dev_mem",
      "category": "filesystem",
      "blocked": true,
      "expected": "ENOENT_or_EPERM",
      "actual": "open /dev/mem: no such file or directory"
    },
    {
      "name": "filesystem.block_device_enum",
      "category": "filesystem",
      "blocked": true,
      "expected": "no_host_block_devices",
      "actual": "sys_class_block_unreadable",
      "error": "open /sys/class/block: no such file or directory"
    },
    {
      "name": "filesystem.remount_rw",
      "category": "filesystem",
      "blocked": true,
      "expected": "EPERM_or_EROFS",
      "actual": "operation not permitted"
    },
    {
      "name": "filesystem.write_etc_hosts",
      "category": "filesystem",
      "blocked": true,
      "expected": "EROFS_if_readonly_rootfs",
      "actual": "open /etc/hosts: permission denied"
    },
    {
      "name": "kernel.kallsyms_zeroed",
      "category": "kernel",
      "blocked": true,
      "expected": "zero_addresses_or_ENOENT",
      "actual": "open /proc/kallsyms: no such file or directory"
    },
    {
      "name": "kernel.proc_pids_container_only",
      "category": "kernel",
      "blocked": true,
      "expected": "pid_count\u003c=5",
      "actual": "pid_count=1"
    },
    {
      "name": "kernel.proc_version_readable",
      "category": "kernel",
      "blocked": true,
      "informational": true,
      "expected": "readable_control",
      "actual": "#1 SMP Sun Jan 10 15:06:54 PST 2016"
    },
    {
      "name": "seccomp.add_key",
      "category": "seccomp",
      "blocked": true,
      "expected": "EPERM",
      "actual": "permission denied"
    },
    {
      "name": "seccomp.kexec_load",
      "category": "seccomp",
      "blocked": true,
      "expected": "EPERM",
      "actual": "operation not permitted"
    },
    {
      "name": "seccomp.init_module",
      "category": "seccomp",
      "blocked": true,
      "expected": "EPERM",
      "actual": "operation not permitted"
    },
    {
      "name": "seccomp.finit_module",
      "category": "seccomp",
      "blocked": true,
      "expected": "EPERM",
      "actual": "operation not permitted"
    },
    {
      "name": "seccomp.delete_module",
      "category": "seccomp",
      "blocked": true,
      "expected": "EPERM",
      "actual": "operation not permitted"
    },
    {
      "name": "network.cross_tenant_reach",
      "category": "network",
      "blocked": true,
      "informational": true,
      "expected": "refused_or_timeout",
      "actual": "skipped_no_PROBE_SIBLING_ADDR"
    },
    {
      "name": "network.bind_port_80",
      "category": "network",
      "blocked": false,
      "informational": true,
      "expected": "EACCES_if_cap_dropped",
      "actual": "listen_succeeded (CAP_NET_BIND_SERVICE held)"
    },
    {
      "name": "network.metadata_169_254",
      "category": "network",
      "blocked": false,
      "informational": true,
      "expected": "no_route_or_refused",
      "actual": "connected"
    }
  ]
}