{
  "schema_version": 2,
  "tool": {
    "name": "ipvault-scan",
    "version": "0.3.0"
  },
  "input": "reference-app/host-app/build/outputs/apk/vault/release/host-app-vault-release.apk",
  "complete": true,
  "min_confidence": "medium",
  "summary": {
    "plaintext_models": 0,
    "firmware": 0,
    "content_collections": 0,
    "fonts": 0,
    "third_party": 0,
    "opaque_blobs": 0,
    "key_material": 0,
    "sealed": 1,
    "hidden_below_min_confidence": 0
  },
  "verdict": "1 sealed asset found sealed by IP Vault; other assets may remain unrecognized.",
  "note": "A clean result means no uncatalogued plaintext model or firmware was found at the selected confidence under these limits \u2014 not that the package is safe.",
  "findings": [
    {
      "path": "host-app-vault-release.apk!/assets/acme-digits/digits.ipva",
      "kind": "sealed",
      "format": "ipvault-v1",
      "confidence": "high",
      "size": 2148406,
      "reason": "sealed (IP Vault): format v1, AES-256-GCM-STREAM, 99-byte header \u2014 encrypted, informational, not a leak",
      "origin": "app",
      "origin_detail": null,
      "files": 1,
      "fails_scan": false
    }
  ],
  "limits_hit": [],
  "skipped": [],
  "limits": {
    "max_depth": 6,
    "max_bytes": 4294967296,
    "max_entries": 500000,
    "max_nested_buffer": 268435456
  },
  "stats": {
    "files_examined": 26,
    "archives_opened": 1,
    "bytes_read": 544771,
    "symlinks_skipped": 0,
    "unlisted_limit_hits": 0,
    "unlisted_skipped": 0,
    "elapsed_ms": 0
  }
}