{
  "date": "2026-09-17",
  "source_head": "596c0f4803be1b34ea3404c3473d11e9bd9fd08f",
  "snapshot_commit": "8d6fb448",
  "source_scan_run": 35269518225,
  "container_scan_run": 35268963279,
  "installed_async_agent_scan_run": 35269841811,
  "scope": "Medium and above; unique advisory IDs per service and scan; source findings by scanner identity; no exploitability claims",
  "summary": {
    "ai-orchestrator": {
      "dependencies": {
        "high": 25,
        "medium": 20,
        "critical": 2
      },
      "license-policy": {
        "medium": 3,
        "high": 4
      },
      "container-base": {
        "high": 10,
        "medium": 4,
        "critical": 3
      },
      "source": {
        "medium": 6
      }
    },
    "ai-manager": {
      "dependencies": {
        "medium": 48,
        "high": 34,
        "critical": 4
      },
      "license-policy": {
        "medium": 7
      },
      "container": {},
      "source": {
        "medium": 34,
        "high": 25
      }
    },
    "surface-app": {
      "dependencies": {
        "medium": 52,
        "high": 40,
        "critical": 6
      },
      "license-policy": {
        "medium": 7
      },
      "container": {},
      "source": {
        "medium": 9,
        "high": 4
      }
    },
    "async-agent": {
      "dependencies": {},
      "license-policy": {
        "medium": 3
      },
      "container": {
        "high": 10,
        "medium": 4,
        "critical": 3
      },
      "source": {
        "high": 1
      }
    }
  }
}