{
  "finding_id": "DF-3609",
  "status": "untested",
  "reproduced": 0,
  "impact": "privileged-only OOB read/hardening",
  "confidence": "certain",
  "verdict": "Info hardening - /dev/pass*/xpt0 are 0600 root-only; unprivileged paths stay in bounds. Verification skipped per contract.",
  "attempts": 0,
  "guest_dirty": 0,
  "runner": "df-bsd-reviewer"
}