{ "version": "1.0.0", "cases": [ { "case_id": "java-micronaut-guarded:204", "case_version": "1.0.0", "notes": "Deserialization guarded by ALLOW_MN_DESER flag (unreachable by default)", "sinks": [ { "sink_id": "MicronautDeserializeGuarded::handleUpload", "label": "unreachable", "confidence": "high", "dynamic_evidence": { "covered_by_tests": [ "src/ControllerTest.java" ], "coverage_files": [ "outputs/coverage.json" ] }, "static_evidence": { "call_path": [ "POST /mn/upload", "Controller.handleUpload" ] }, "config_conditions": [ "ALLOW_MN_DESER=true" ], "notes": "Feature flag defaults to false; sink not executed without ALLOW_MN_DESER" } ] } ] }