{
  "kind": "csint-n8n-real-case-manifest",
  "status": "client-ready",
  "statusNote": "Every open finding in every receipt has a reviewer note by Ahmet Göker, recorded 30 September 2026. ReleaseGuard marks each receipt CLIENT-READY. This is an independent review of a public MIT template, not a claim about Scanner's systems and not a penetration test.",
  "reviewer": "Ahmet Göker",
  "reviewedAt": "2026-09-30T13:00:00.000Z",
  "generatedAt": "2026-09-30T12:00:00.000Z",
  "engineVersion": "1.3.0",
  "source": {
    "repository": "https://github.com/scanner-inc/agents",
    "workflowPath": "n8n/alert-triage/workflow.json",
    "license": "MIT",
    "copyright": "Copyright (c) 2026 Scanner, Inc.",
    "licenseUrl": "https://github.com/scanner-inc/agents/blob/15a608933b52ae2acc43777d5a46d9e1fa795e92/LICENSE"
  },
  "redaction": "The pinned sample alert in each export (tenant ID and app link) is not included in any file of this case. Raw workflow files are not republished.",
  "pairs": [
    {
      "id": "a",
      "baseline": {
        "commit": "e425e65c11cf64f5fc39e2f52027c490c66efe79",
        "date": "2026-04-23",
        "subject": "Rename Scanner bearer credential to Scanner API/MCP Bearer Auth account across all workflows",
        "blob": "788451f9b95c0dd34e4277938ce22fecf06ad2d8",
        "fileSha256": "d2b53fd08bf51a9cf9d24b56d69bc6b59521bd064a99aec5afbe615dc78054dd",
        "url": "https://github.com/scanner-inc/agents/commit/e425e65c11cf64f5fc39e2f52027c490c66efe79"
      },
      "candidate": {
        "commit": "03ccb47972ca8b364b3ed8698a7e825da134defb",
        "date": "2026-04-23",
        "subject": "Add threat intel tools (ThreatFox, OTX, Feodo) to alert-triage and slack-bot",
        "blob": "1af5a24270d3e2b29b6b1ad4242fcb302bf8ec88",
        "fileSha256": "dee5ef2908e254a7d7474a6dbf377ceb63feda32f2c5e8d9145a3465404e77d1",
        "url": "https://github.com/scanner-inc/agents/commit/03ccb47972ca8b364b3ed8698a7e825da134defb"
      },
      "reviewId": "wcr-fb5ed970c1fb-21155a81",
      "baselineFingerprint": "21155a81aa9e0dd404fdf028122064518b514b540535622bd6c6a0a6bead5473",
      "candidateFingerprint": "fb5ed970c1fb031f596090b94acf531dc8ec3fc19661290386a5538b9c232a38",
      "decision": "review",
      "receipts": [
        "pair-a-en.receipt.json",
        "pair-a-tr.receipt.json"
      ]
    },
    {
      "id": "b",
      "baseline": {
        "commit": "cfcaea60035aebf3cd9b2e324dc7d3a901f9b0ce",
        "date": "2026-04-24",
        "subject": "Tighten alert-triage report formatting",
        "blob": "0678e4cff1a198b4a9ea77ec495d28eeb3098ea0",
        "fileSha256": "179f924794d8ee9c58a50f3c846650ba5d2183c927ea934343332df241f9826a",
        "url": "https://github.com/scanner-inc/agents/commit/cfcaea60035aebf3cd9b2e324dc7d3a901f9b0ce"
      },
      "candidate": {
        "commit": "15a608933b52ae2acc43777d5a46d9e1fa795e92",
        "date": "2026-05-12",
        "subject": "Add optional Jira ticket creation to n8n alert-triage and threat-hunt",
        "blob": "84285dba548c70f0cc7f9681a4d6352ea4781c32",
        "fileSha256": "17afe9dc2090b93a2043ce601c40b061277cded2378fe26bb930cac0e5c1b8ba",
        "url": "https://github.com/scanner-inc/agents/commit/15a608933b52ae2acc43777d5a46d9e1fa795e92"
      },
      "reviewId": "wcr-05bb7fab494f-2fc05b8d",
      "baselineFingerprint": "2fc05b8d1ae62bb8887940c65014b0cf9d7e80bc58c799a087be4c243433e9a9",
      "candidateFingerprint": "05bb7fab494f8aff3af1c51f1424afbfb47d0304d2a2fdd338a43d1b4b71737c",
      "decision": "review",
      "receipts": [
        "pair-b-en.receipt.json",
        "pair-b-tr.receipt.json"
      ]
    },
    {
      "id": "c",
      "baseline": {
        "commit": "4abe04ef4057778425cd0200e657b7ac71db10f8",
        "date": "2026-04-24",
        "subject": "Modernize n8n tool nodes and refactor OTX threat intel",
        "blob": "1251f4478f22ea97d9d3e95d002b270c52d258b5",
        "fileSha256": "ed9bd22eaf4789e6f050fc1e8e88b0181963a87f2dcb9189725df9359246488e",
        "url": "https://github.com/scanner-inc/agents/commit/4abe04ef4057778425cd0200e657b7ac71db10f8"
      },
      "candidate": {
        "commit": "9d6164e147d540cbdfed1abdb43fac18a34c58df",
        "date": "2026-04-24",
        "subject": "Bump n8n agent maxIterations to 100",
        "blob": "6b0ffd12040b34fdac38c07b7c1370e3b7745716",
        "fileSha256": "9785db388b092f982a1f4615a2603d61729d9e21646b4382d21e9b80d5c909bc",
        "url": "https://github.com/scanner-inc/agents/commit/9d6164e147d540cbdfed1abdb43fac18a34c58df"
      },
      "reviewId": "wcr-de8a24719838-32597b9b",
      "baselineFingerprint": "32597b9b3c204f6443180229532b6ac3a3e9b9edbe4fd3b1121f27676951e08b",
      "candidateFingerprint": "de8a24719838b955a785925d4d6ec782b212eef1b34fb341664ed8f8b86278cd",
      "decision": "review",
      "receipts": [
        "pair-c-en.receipt.json",
        "pair-c-tr.receipt.json"
      ]
    }
  ],
  "files": [
    {
      "path": "pair-a-en.receipt.json",
      "sha256": "5507ee706ec88ed2feb5562a42310f25a5758767ceef9a6d8fa0493a05996277"
    },
    {
      "path": "pair-a-en.html",
      "sha256": "b9813df58310a6e48d4ea6de4b5e58147e961034267a22e3ed7ac5c9fb1f2d64"
    },
    {
      "path": "pair-a-tr.receipt.json",
      "sha256": "95de707a55613b97eea28cb19d2d31b5210f99ea24cbdb41b600e6ebd1056560"
    },
    {
      "path": "pair-a-tr.html",
      "sha256": "521c3fbca945c7f60c036283863a628e8ea9fb47d744231a2b40cd6fbece540e"
    },
    {
      "path": "pair-b-en.receipt.json",
      "sha256": "c5861b50b44afbd82117cb5aac432aede3b20df2ed9337beaf471496972c26e0"
    },
    {
      "path": "pair-b-en.html",
      "sha256": "31d3d6a230a033ab4693bbd814ccd4a3ac5671ce283c924a7bff928a65f54086"
    },
    {
      "path": "pair-b-tr.receipt.json",
      "sha256": "6abea6fe6d69ecfe31b45016b7546aa0e0abe472d56d1ef09c8889a77f7e292c"
    },
    {
      "path": "pair-b-tr.html",
      "sha256": "e8a5c916bab4c80633605c5069022a5a39b5210d0b89cdb2210a74f0df63542b"
    },
    {
      "path": "pair-c-en.receipt.json",
      "sha256": "2363b595cfc57a2eb298e9b46a8380d1b20dc89a124ab4624b71d952ebe28b1f"
    },
    {
      "path": "pair-c-en.html",
      "sha256": "1a489e8ad1828b9b3fb9ca7d3872438dd2ea8fad038216c6733a6a2d4e20a06b"
    },
    {
      "path": "pair-c-tr.receipt.json",
      "sha256": "bfe2a3990ab04ad347c0b0202b6618bac374dc6429ef7fb80eebeb51a6daa4f5"
    },
    {
      "path": "pair-c-tr.html",
      "sha256": "8331667d355cebffa10ba32d0ad5311348c19c0c6bff22659c72290d7539e812"
    },
    {
      "path": "n8n-real-case-report-en.pdf",
      "sha256": "85a28a231778f1d6fe8590f15af85834896e36ed7f1d85567f6d1e4f7bb35f64"
    },
    {
      "path": "n8n-real-case-report-tr.pdf",
      "sha256": "8d5d8c2ca24bd462c3e5333e4d34bcd0d43d0e1c5202d9aefb64772f1c9d81df"
    }
  ]
}
