{
  "version": "1.0.0",
  "cases": [
    {
      "case_id": "js-express-blog:001",
      "case_version": "1.0.0",
      "notes": "Baseline public case",
      "sinks": [
        {
          "sink_id": "Deserializer::parse",
          "label": "reachable",
          "confidence": "high",
          "dynamic_evidence": {
            "covered_by_tests": [
              "tests/test_reachable_deserialization.js::should_reach_sink"
            ],
            "coverage_files": [
              "outputs/coverage.json"
            ]
          },
          "static_evidence": {
            "call_path": [
              "POST /api/posts",
              "PostsController.create",
              "PostsService.createFromJson",
              "Deserializer.parse"
            ]
          },
          "config_conditions": [
            "process.env.FEATURE_JSON_ENABLED == 'true'"
          ],
          "notes": "If FEATURE_JSON_ENABLED=false the path is unreachable"
        }
      ]
    }
  ]
}