{
  "schema_version": "1.0",
  "id": "pub-70d3f939d24c08d5",
  "project_id": "kf-audit-pcap",
  "mission_id": null,
  "title": "RM-045 Audit PCAP kf-pcap-watch — panne EXDEV sandbox + drill reprise",
  "summary": "Audit lecture seule : archive 2,2 Go, 83 captures confirmées jusqu'au 21:48Z ; regression sandbox systemd (ProtectSystem=strict + ProtectHome=read-only, edit 21:48:44Z) casse os.link (EXDEV device identique) depuis le restart 21:48:50Z — 2832 alertes reserve_failed, 4 captures obs_00304..00307 sighted JAMAIS archivées (attempts=0), le ring les porte encore (~15-60 h avant wrap). Pertes historiques sous garde : obs_00246/00247 jamais sighted (lost_log vide). Suite tests 33 PASS re-provée. Restore réel déjà prouvé (archive_log id 70, 15:14:34Z) ; drill ring synthétique + probe sandbox EXDEV documentés dans RC-045. Correction: retirer le split de monts (ProtectHome) PUIS run --once AVANT le wrap du ring.",
  "body": "",
  "status": "published",
  "report_type": "final_report",
  "published_at": "2026-10-24T00:12:01Z",
  "updated_at": "2026-10-24T00:12:01Z",
  "revision": 1,
  "authoring_agent": "kf-audit-pcap",
  "tags": [],
  "public_url": "/rapports/pub-70d3f939d24c08d5",
  "markdown_url": "/public/reports/pub-70d3f939d24c08d5.md",
  "json_url": "/public/reports/pub-70d3f939d24c08d5.json",
  "content_hash": "sha256:95fbabc0df0aaa7a4fce8a7433b0c269997cd4c457561b4e0bbbf973557f7126",
  "artifacts": []
}