VRVULN
RUNNER
DESIGN PARTNER SANDBOXLaunch Lab / candidate-014
PROTOTYPE · SYNTHETIC DATA

DECISION READINESS / TODAY

One decision blocks a safe candidate.

The public evidence is reproducible, but the owning layer and critical journeys are not connected. The agent is correctly withholding a patch.

PROOF GATES2/4READY
SHOW FOR
01
NEXT BEST ACTION

Connect source context and name the approving engineer.

This unlocks source-aware triage, a controlled candidate, and regression proof without broadening production authority.

01

Scope contract

LockedHost, methods, budgets, exclusions
02

Evidence

Sealed27 controls · 0 collection errors
03

Owner context

RequiredSource, architecture, critical journeys
04

Comparable retest

WaitingNo candidate exists to verify
THE FIVE CUSTOMER QUESTIONSANSWERED TOGETHER
  1. 01
    What is real?

    Observed evidence stays separate from hypotheses.

  2. 02
    What can change?

    The scope contract limits every agent and adapter.

  3. 03
    What should happen next?

    One ranked owner action replaces a noisy queue.

  4. 04
    What remains unknown?

    Untested surface is visible beside every claim.

  5. 05
    What can safely ship?

    Only an approved candidate with comparable proof.

VISIBLE UNKNOWNNOT A PASS
4critical journeys remain untested

Authenticated behavior, object authorization, source controls, and API contracts cannot be inferred from the public surface.

THE DURABLE PRODUCT LOOPSCANNER-AGNOSTIC
01Signals inDAST · SARIF · source · journeys · SBOM
02Evidence graphprovenance · conflicts · owners · coverage
03Controlled changepatch · preview · tests · rollback
04Proof outretest · attestation · residual risk