{
  "verdict": "not_reproduced",
  "impact": "none",
  "reproduce": {
    "build": "sh findings/poc/DF-3286/build.sh",
    "run": "sh findings/poc/DF-3289/run.sh",
    "expected": "timeout CLOSE frames in TX capture; on this build the uninit args[1] slot reads 0 (short-form IE, no leaked bytes)"
  },
  "kernel_refs": ["sys/netproto/802_11/wlan/ieee80211_mesh.c:3107","sys/netproto/802_11/wlan/ieee80211_mesh.c:3125"],
  "artifacts": ["README.md","run.sh","verdict.json","manifest.json"]
}