{
  "all_ok": true,
  "control": {
    "arch": "aarch64",
    "docker_exit": 0,
    "errno": 22,
    "fd": -1,
    "insn_count": 111,
    "kernel": "6.10.14-linuxkit",
    "loaded": false,
    "nr_bpf": 280,
    "section": "socket",
    "stderr_tail": "",
    "verifier_log": "func#0 @0\nlast insn is not an exit or jmp\nprocessed 0 insns (limit 1000000) max_states_per_insn 0 total_states 0 peak_states 0 mark_read 0\n"
  },
  "control_discriminating": true,
  "control_malformed_rejected": true,
  "executed": true,
  "explicit_non_claim": "the kernel's verifier accepted or refused THIS object under THIS program type. It says nothing about whether the monitor is semantically correct, and a container kernel is not the kernel a deployment would run.",
  "honest_scope": "loaded via bpf(BPF_PROG_LOAD) through ctypes inside a privileged container; no bpftool, no libbpf. The verifier log is captured verbatim in `real.verifier_log`.",
  "image": "capinfer-sandbox:1",
  "in_kernel_verifier_run": true,
  "kernel_loaded": false,
  "object": "out/s06/bpf/monitor_bpf.o",
  "prog_type": "socket_filter",
  "real": {
    "arch": "aarch64",
    "docker_exit": 0,
    "errno": 13,
    "fd": -1,
    "insn_count": 112,
    "kernel": "6.10.14-linuxkit",
    "loaded": false,
    "nr_bpf": 280,
    "section": "socket",
    "stderr_tail": "",
    "verifier_log": "func#0 @0\n0: R1=ctx() R10=fp0\n0: (b4) w0 = 0                        ; R0_w=0\n1: (66) if w1 s> 0x7 goto pc+86       ; R1=ctx()\n2: (c6) if w1 s< 0x0 goto pc+85       ; R1=ctx()\n3: (b4) w0 = 2                        ; R0_w=2\n4: (18) r3 = 0x0                      ; R3_w=0\n6: (71) r2 = *(u8 *)(r3 +5)\nR3 invalid mem access 'scalar'\nprocessed 6 insns (limit 1000000) max_states_per_insn 0 total_states 0 peak_states 0 mark_read 0\n"
  },
  "schema": "bpf-kernel-load-v1",
  "section": "socket",
  "skipped": false,
  "verifier_log_bytes": 424,
  "verifier_verdict": "rejected"
}