{
  "version": "1.0.0",
  "cases": [
    {
      "case_id": "c-guarded-system:001",
      "case_version": "1.0.0",
      "notes": "system() is gated by ALLOW_CMD env; default unreachable.",
      "sinks": [
        {
          "sink_id": "GuardedSystem::main",
          "label": "unreachable",
          "confidence": "medium",
          "static_evidence": {
            "call_path": [
              "main(argv)",
              "run_guarded",
              "system() (guarded by ALLOW_CMD)"
            ]
          },
          "dynamic_evidence": {
            "covered_by_tests": [
              "tests/run-tests.sh"
            ],
            "coverage_files": [
              "outputs/coverage.json"
            ]
          },
          "config_conditions": [
            "ALLOW_CMD=1"
          ],
          "notes": "Sink activates only when ALLOW_CMD=1; default benchmark assumes flag disabled."
        }
      ]
    }
  ]
}