{
  "generated_at": "2026-10-25T01:51:05.090637+00:00",
  "pipeline": "https://gitlab.com/gitlab-ai-hackathon/transcend-october-2026/43645688/showcase/-/pipelines/2985588046",
  "scenarios": 10,
  "behaved_correctly": 10,
  "all_gates_proven": true,
  "duration_s": 3.1,
  "results": [
    {
      "scenario": "Johannesburg users, 80 ms budget: only africa-south1 (641 g/kWh) is fast enough",
      "gate": "carbon gate",
      "expected": "blocked",
      "observed": "blocked",
      "evidence": [
        "carbon budget breach: best feasible region africa-south1 has modeled SCI 1.02627 g/1k req, above the budget of 0.35 g/1k req",
        "Deploy to europe-west2 (London): latency budget 80 -> 160 ms, modeled SCI 0.1750 g/1k req (83% lower than africa-south1).",
        "Deploy to europe-west1 (Belgium): latency budget 80 -> 165 ms, modeled SCI 0.2023 g/1k req (80% lower than africa-south1).",
        "Deploy to europe-north1 (Finland): latency budget 80 -> 190 ms, modeled SCI 0.0477 g/1k req (95% lower than africa-south1).",
        "Stay in africa-south1 (Johannesburg) and raise the carbon budget from 0.35 to 1.0263 g/1k req (2.9x) - needs an explicit, recorded approval."
      ],
      "ok": true
    },
    {
      "scenario": "Western-Europe users, 80 ms budget (control)",
      "gate": "carbon gate",
      "expected": "allowed",
      "observed": "allowed",
      "evidence": [
        "selected europe-north1 at 0.047744 g/1k req"
      ],
      "ok": true
    },
    {
      "scenario": "High-severity dependency CVE",
      "gate": "OPA policy gate",
      "expected": "blocked",
      "observed": "blocked",
      "evidence": [
        "[security] high finding (auto-remediable): CVE-2099-0001 demo-pkg 1.0: remote code execution"
      ],
      "ok": true
    },
    {
      "scenario": "Secret committed to the repository",
      "gate": "OPA policy gate",
      "expected": "blocked",
      "observed": "blocked",
      "evidence": [
        "[security] secret detected in repository"
      ],
      "ok": true
    },
    {
      "scenario": "Agent branch edits .gitlab-ci.yml to weaken the pipeline",
      "gate": "OPA policy gate",
      "expected": "blocked",
      "observed": "blocked",
      "evidence": [
        "[change-catalog] agent branch touched protected path: .gitlab-ci.yml"
      ],
      "ok": true
    },
    {
      "scenario": "Agent branch tries an unsupported change type (auth rewrite)",
      "gate": "OPA policy gate",
      "expected": "blocked",
      "observed": "blocked",
      "evidence": [
        "[change-catalog] agent branch touched high-risk path: app/auth.py",
        "[change-catalog] change type 'rewrite_auth' is not in the bounded change catalog"
      ],
      "ok": true
    },
    {
      "scenario": "Agent branch touches more than 12 files",
      "gate": "OPA policy gate",
      "expected": "blocked",
      "observed": "blocked",
      "evidence": [
        "[change-catalog] changed files 13 exceeds limit 12"
      ],
      "ok": true
    },
    {
      "scenario": "Agent branch adds a read-only endpoint in app/ (control)",
      "gate": "OPA policy gate",
      "expected": "allowed",
      "observed": "allowed",
      "evidence": [
        "no denials"
      ],
      "ok": true
    },
    {
      "scenario": "Bad release: /healthz is green but the API returns HTTP 500",
      "gate": "SLO gate (triggers rollback)",
      "expected": "blocked",
      "observed": "blocked",
      "evidence": [
        "{\"requests\": 10, \"error_rate_pct\": 70.0, \"p95_latency_ms\": 0.7, \"availability_pct\": 30.0, \"status_codes\": {\"200\": 3, \"500\": 7}}"
      ],
      "ok": true
    },
    {
      "scenario": "Healthy release (the real GreenOps API)",
      "gate": "SLO gate (triggers rollback)",
      "expected": "allowed",
      "observed": "allowed",
      "evidence": [
        "{\"requests\": 20, \"error_rate_pct\": 0.0, \"p95_latency_ms\": 2.7, \"availability_pct\": 100.0, \"status_codes\": {\"200\": 20}}"
      ],
      "ok": true
    }
  ]
}