{"profiles":[{"schema_version":"0.1","run":{"profile_id":"019f44af-2945-756a-ba15-2be9d67d22f5","run_id":"28989520151","repository":"garnet-labs/openclaw","github_web_origin":"https://github.com","workflow":"Garnet Runtime Review v2","job":"openclaw-install","runner_os":"Linux","runner_arch":"X64","actor":"jadoonf","start_time":"2026-07-09T02:22:37.882688Z","end_time":"2026-07-09T02:22:37.882688Z","commit_sha":"afd3ecef3f2f31853df00a4ce0299698c049ad8b","ref":"refs/pull/25/merge","agent_id":"83000051-979f-4643-9b00-bbc83cbdec9e"},"egress":{"unique_domains":[{"domain":"registry.npmjs.org","process":"node","ancestry":["systemd","hosted-compute-","Runner.Listener","Runner.Worker","bash","node"],"status":"ok","reason":null,"event_ids":[],"detections":["credentials_files_access","exec_from_unusual_dir","flow","hidden_elf_exec","interpreter_shell_spawn"],"protocol":"TCP","remote_address":"104.16.0.34","result":"attention","remote_geo_info":{"latitude":43.6532,"longitude":-79.3832,"continent":"North America","continent_code":"NA","country":"Canada","country_code":"CA","region":"ON","region_name":"Ontario","city":"Toronto","isp":"Cloudflare, Inc.","org":"Cloudflare, Inc.","asname":"CLOUDFLARENET"}},{"domain":"registry.npmjs.org","process":"node","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","bash","node"],"status":"ok","reason":null,"event_ids":[],"detections":["credentials_files_access","exec_from_unusual_dir","flow","hidden_elf_exec","interpreter_shell_spawn"],"protocol":"TCP","remote_address":"104.16.0.34","result":"attention","remote_geo_info":{"latitude":43.6532,"longitude":-79.3832,"continent":"North America","continent_code":"NA","country":"Canada","country_code":"CA","region":"ON","region_name":"Ontario","city":"Toronto","isp":"Cloudflare, Inc.","org":"Cloudflare, Inc.","asname":"CLOUDFLARENET"}},{"domain":"localhost","process":"provjobd1417919","ancestry":["systemd","hosted-compute-","sudo","provjobd1417919"],"status":"ok","reason":null,"event_ids":[],"detections":["credentials_files_access","exec_from_unusual_dir","flow","hidden_elf_exec","interpreter_shell_spawn"],"protocol":"UDP","remote_address":"127.0.0.53","result":"attention"},{"domain":"localhost","process":"node","ancestry":["systemd","hosted-compute-","Runner.Listener","Runner.Worker","bash","node","dash","node"],"status":"ok","reason":null,"event_ids":[],"detections":["credentials_files_access","exec_from_unusual_dir","flow","hidden_elf_exec","interpreter_shell_spawn"],"protocol":"UDP","remote_address":"127.0.0.53","result":"attention"},{"domain":"localhost","process":"curl","ancestry":["systemd","hosted-compute-","Runner.Listener","Runner.Worker","bash","curl"],"status":"ok","reason":null,"event_ids":[],"detections":["credentials_files_access","exec_from_unusual_dir","flow","hidden_elf_exec","interpreter_shell_spawn"],"protocol":"UDP","remote_address":"127.0.0.53","result":"attention"},{"domain":"localhost","process":"node","ancestry":["systemd","hosted-compute-","Runner.Listener","Runner.Worker","bash","node"],"status":"ok","reason":null,"event_ids":[],"detections":["credentials_files_access","exec_from_unusual_dir","flow","hidden_elf_exec","interpreter_shell_spawn"],"protocol":"UDP","remote_address":"127.0.0.53","result":"attention"},{"domain":"localhost","process":"node","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","bash","node"],"status":"ok","reason":null,"event_ids":[],"detections":["credentials_files_access","exec_from_unusual_dir","flow","hidden_elf_exec","interpreter_shell_spawn"],"protocol":"UDP","remote_address":"127.0.0.53","result":"attention"},{"domain":"140.82.112.23","process":"hosted-compute-","ancestry":["systemd","hosted-compute-"],"status":"ok","reason":null,"event_ids":[],"detections":["flow"],"protocol":"TCP","remote_address":"140.82.112.23","result":"pass","remote_geo_info":{"latitude":37.7823,"longitude":-122.391,"continent":"North America","continent_code":"NA","country":"United States","country_code":"US","region":"CA","region_name":"California","city":"San Francisco","isp":"GitHub, Inc.","org":"GitHub, Inc.","asname":"GITHUB"}},{"domain":"140.82.113.23","process":"hosted-compute-","ancestry":["systemd","hosted-compute-"],"status":"ok","reason":null,"event_ids":[],"detections":["flow"],"protocol":"TCP","remote_address":"140.82.113.23","result":"pass","remote_geo_info":{"latitude":37.7823,"longitude":-122.391,"continent":"North America","continent_code":"NA","country":"United States","country_code":"US","region":"CA","region_name":"California","city":"San Francisco","isp":"GitHub, Inc.","org":"GitHub, Inc.","asname":"GITHUB"}},{"domain":"github.com","process":"node","ancestry":["systemd","hosted-compute-","Runner.Listener","Runner.Worker","bash","node","dash","node"],"status":"ok","reason":null,"event_ids":[],"detections":["exec_from_unusual_dir","flow"],"protocol":"TCP","remote_address":"140.82.113.3","result":"attention","remote_geo_info":{"latitude":37.7823,"longitude":-122.391,"continent":"North America","continent_code":"NA","country":"United States","country_code":"US","region":"CA","region_name":"California","city":"San Francisco","isp":"GitHub, Inc.","org":"GitHub, Inc.","asname":"GITHUB"}},{"domain":"glb-2a3c35-public-internal.githubapp.com","process":"provjobd1417919","ancestry":["systemd","hosted-compute-","sudo","provjobd1417919"],"status":"ok","reason":null,"event_ids":[],"detections":["flow"],"protocol":"TCP","remote_address":"140.82.114.23","result":"pass","remote_geo_info":{"latitude":37.7823,"longitude":-122.391,"continent":"North America","continent_code":"NA","country":"United States","country_code":"US","region":"CA","region_name":"California","city":"San Francisco","isp":"GitHub, Inc.","org":"GitHub, Inc.","asname":"GITHUB"}},{"domain":"hosted-compute-watchdog-prod-iad-01.githubapp","process":"provjobd1417919","ancestry":["systemd","hosted-compute-","sudo","provjobd1417919"],"status":"ok","reason":null,"event_ids":[],"detections":["flow"],"protocol":"TCP","remote_address":"140.82.114.23","result":"pass","remote_geo_info":{"latitude":37.7823,"longitude":-122.391,"continent":"North America","continent_code":"NA","country":"United States","country_code":"US","region":"CA","region_name":"California","city":"San Francisco","isp":"GitHub, Inc.","org":"GitHub, Inc.","asname":"GITHUB"}},{"domain":"postman-echo.com","process":"curl","ancestry":["systemd","hosted-compute-","Runner.Listener","Runner.Worker","bash","curl"],"status":"ok","reason":null,"event_ids":[],"detections":["flow"],"protocol":"TCP","remote_address":"162.159.142.41","result":"pass","remote_geo_info":{"latitude":43.6532,"longitude":-79.3832,"continent":"North America","continent_code":"NA","country":"Canada","country_code":"CA","region":"ON","region_name":"Ontario","city":"Toronto","isp":"Cloudflare, Inc.","org":"Cloudflare, Inc.","asname":"CLOUDFLARENET"}},{"domain":"release-assets.githubusercontent.com","process":"node","ancestry":["systemd","hosted-compute-","Runner.Listener","Runner.Worker","bash","node","dash","node"],"status":"ok","reason":null,"event_ids":[],"detections":["exec_from_unusual_dir","flow"],"protocol":"TCP","remote_address":"185.199.108.133","result":"attention","remote_geo_info":{"latitude":37.7823,"longitude":-122.391,"continent":"North America","continent_code":"NA","country":"United States","country_code":"US","region":"CA","region_name":"California","city":"San Francisco","isp":"Fastly, Inc.","org":"GitHub, Inc","asname":"FASTLY"}}],"total_domains":9,"flagged_domains":0},"assertions":[{"id":"no_bad_egress_domain","result":"ATTENTION","details":"","evidence":[]}],"telemetry":{"total_events":17,"total_connections":17,"unique_domains":7},"score":{"source":"jibril","severity":75,"severity_level":"high","confidence":1},"workload_identity":null,"filesystem":null,"execution":null},{"schema_version":"0.1","run":{"profile_id":"019f44ae-b415-7fd4-8b35-a8e5c5cb02fb","run_id":"28989520151","repository":"garnet-labs/openclaw","github_web_origin":"https://github.com","workflow":"Garnet Runtime Review v2","job":"openclaw-egress","runner_os":"Linux","runner_arch":"X64","actor":"jadoonf","start_time":"2026-07-09T02:22:07.88438Z","end_time":"2026-07-09T02:22:07.88438Z","commit_sha":"afd3ecef3f2f31853df00a4ce0299698c049ad8b","ref":"refs/pull/25/merge","agent_id":"8b6400ee-a013-48ca-abc5-37cf24c4d2c3"},"egress":{"unique_domains":[{"domain":"jsonplaceholder.typicode.com","process":"curl","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","bash","curl"],"status":"ok","reason":null,"event_ids":[],"detections":["flow"],"protocol":"TCP","remote_address":"104.21.59.19","result":"pass","remote_geo_info":{"latitude":43.6532,"longitude":-79.3832,"continent":"North America","continent_code":"NA","country":"Canada","country_code":"CA","region":"ON","region_name":"Ontario","city":"Toronto","isp":"Cloudflare, Inc.","org":"Cloudflare, Inc.","asname":"CLOUDFLARENET"}},{"domain":"localhost","process":"curl","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","bash","curl"],"status":"ok","reason":null,"event_ids":[],"detections":["flow"],"protocol":"UDP","remote_address":"127.0.0.53","result":"pass"},{"domain":"140.82.113.23","process":"hosted-compute-agent","ancestry":["systemd","hosted-compute-agent"],"status":"ok","reason":null,"event_ids":[],"detections":["flow"],"protocol":"TCP","remote_address":"140.82.113.23","result":"pass","remote_geo_info":{"latitude":37.7823,"longitude":-122.391,"continent":"North America","continent_code":"NA","country":"United States","country_code":"US","region":"CA","region_name":"California","city":"San Francisco","isp":"GitHub, Inc.","org":"GitHub, Inc.","asname":"GITHUB"}},{"domain":"140.82.114.24","process":"provjobd2009911400","ancestry":["systemd","hosted-compute-agent","sudo","provjobd2009911400"],"status":"ok","reason":null,"event_ids":[],"detections":["flow"],"protocol":"TCP","remote_address":"140.82.114.24","result":"pass","remote_geo_info":{"latitude":37.7823,"longitude":-122.391,"continent":"North America","continent_code":"NA","country":"United States","country_code":"US","region":"CA","region_name":"California","city":"San Francisco","isp":"GitHub, Inc.","org":"GitHub, Inc.","asname":"GITHUB"}},{"domain":"httpbin.org","process":"curl","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","bash","curl"],"status":"ok","reason":null,"event_ids":[],"detections":["flow"],"protocol":"TCP","remote_address":"32.196.65.112","result":"pass","remote_geo_info":{"latitude":39.0438,"longitude":-77.4874,"continent":"North America","continent_code":"NA","country":"United States","country_code":"US","region":"VA","region_name":"Virginia","city":"Ashburn","isp":"Amazon.com, Inc.","org":"AWS EC2 (us-east-1)","asname":"AMAZON-AES"}}],"total_domains":5,"flagged_domains":0},"assertions":[{"id":"no_bad_egress_domain","result":"PASS","details":"No domains matched known bad lists","evidence":[]}],"telemetry":{"total_events":5,"total_connections":5,"unique_domains":3},"score":{"source":"jibril","severity":75,"severity_level":"high","confidence":1},"workload_identity":null,"filesystem":null,"execution":null}],"count":2,"profile":{"schema_version":"0.1","run":{"profile_id":"019f44af-2945-756a-ba15-2be9d67d22f5","run_id":"28989520151","repository":"garnet-labs/openclaw","github_web_origin":"https://github.com","workflow":"Garnet Runtime Review v2","job":"openclaw-install","runner_os":"Linux","runner_arch":"X64","actor":"jadoonf","start_time":"2026-07-09T02:22:37.882688Z","end_time":"2026-07-09T02:22:37.882688Z","commit_sha":"afd3ecef3f2f31853df00a4ce0299698c049ad8b","ref":"refs/pull/25/merge","agent_id":"83000051-979f-4643-9b00-bbc83cbdec9e"},"egress":{"unique_domains":[{"domain":"registry.npmjs.org","process":"node","ancestry":["systemd","hosted-compute-","Runner.Listener","Runner.Worker","bash","node"],"status":"ok","reason":null,"event_ids":[],"detections":["credentials_files_access","exec_from_unusual_dir","flow","hidden_elf_exec","interpreter_shell_spawn"],"protocol":"TCP","remote_address":"104.16.0.34","result":"attention","remote_geo_info":{"latitude":43.6532,"longitude":-79.3832,"continent":"North America","continent_code":"NA","country":"Canada","country_code":"CA","region":"ON","region_name":"Ontario","city":"Toronto","isp":"Cloudflare, Inc.","org":"Cloudflare, Inc.","asname":"CLOUDFLARENET"}},{"domain":"registry.npmjs.org","process":"node","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","bash","node"],"status":"ok","reason":null,"event_ids":[],"detections":["credentials_files_access","exec_from_unusual_dir","flow","hidden_elf_exec","interpreter_shell_spawn"],"protocol":"TCP","remote_address":"104.16.0.34","result":"attention","remote_geo_info":{"latitude":43.6532,"longitude":-79.3832,"continent":"North America","continent_code":"NA","country":"Canada","country_code":"CA","region":"ON","region_name":"Ontario","city":"Toronto","isp":"Cloudflare, Inc.","org":"Cloudflare, Inc.","asname":"CLOUDFLARENET"}},{"domain":"localhost","process":"provjobd1417919","ancestry":["systemd","hosted-compute-","sudo","provjobd1417919"],"status":"ok","reason":null,"event_ids":[],"detections":["credentials_files_access","exec_from_unusual_dir","flow","hidden_elf_exec","interpreter_shell_spawn"],"protocol":"UDP","remote_address":"127.0.0.53","result":"attention"},{"domain":"localhost","process":"node","ancestry":["systemd","hosted-compute-","Runner.Listener","Runner.Worker","bash","node","dash","node"],"status":"ok","reason":null,"event_ids":[],"detections":["credentials_files_access","exec_from_unusual_dir","flow","hidden_elf_exec","interpreter_shell_spawn"],"protocol":"UDP","remote_address":"127.0.0.53","result":"attention"},{"domain":"localhost","process":"curl","ancestry":["systemd","hosted-compute-","Runner.Listener","Runner.Worker","bash","curl"],"status":"ok","reason":null,"event_ids":[],"detections":["credentials_files_access","exec_from_unusual_dir","flow","hidden_elf_exec","interpreter_shell_spawn"],"protocol":"UDP","remote_address":"127.0.0.53","result":"attention"},{"domain":"localhost","process":"node","ancestry":["systemd","hosted-compute-","Runner.Listener","Runner.Worker","bash","node"],"status":"ok","reason":null,"event_ids":[],"detections":["credentials_files_access","exec_from_unusual_dir","flow","hidden_elf_exec","interpreter_shell_spawn"],"protocol":"UDP","remote_address":"127.0.0.53","result":"attention"},{"domain":"localhost","process":"node","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","bash","node"],"status":"ok","reason":null,"event_ids":[],"detections":["credentials_files_access","exec_from_unusual_dir","flow","hidden_elf_exec","interpreter_shell_spawn"],"protocol":"UDP","remote_address":"127.0.0.53","result":"attention"},{"domain":"140.82.112.23","process":"hosted-compute-","ancestry":["systemd","hosted-compute-"],"status":"ok","reason":null,"event_ids":[],"detections":["flow"],"protocol":"TCP","remote_address":"140.82.112.23","result":"pass","remote_geo_info":{"latitude":37.7823,"longitude":-122.391,"continent":"North America","continent_code":"NA","country":"United States","country_code":"US","region":"CA","region_name":"California","city":"San Francisco","isp":"GitHub, Inc.","org":"GitHub, Inc.","asname":"GITHUB"}},{"domain":"140.82.113.23","process":"hosted-compute-","ancestry":["systemd","hosted-compute-"],"status":"ok","reason":null,"event_ids":[],"detections":["flow"],"protocol":"TCP","remote_address":"140.82.113.23","result":"pass","remote_geo_info":{"latitude":37.7823,"longitude":-122.391,"continent":"North America","continent_code":"NA","country":"United States","country_code":"US","region":"CA","region_name":"California","city":"San Francisco","isp":"GitHub, Inc.","org":"GitHub, Inc.","asname":"GITHUB"}},{"domain":"github.com","process":"node","ancestry":["systemd","hosted-compute-","Runner.Listener","Runner.Worker","bash","node","dash","node"],"status":"ok","reason":null,"event_ids":[],"detections":["exec_from_unusual_dir","flow"],"protocol":"TCP","remote_address":"140.82.113.3","result":"attention","remote_geo_info":{"latitude":37.7823,"longitude":-122.391,"continent":"North America","continent_code":"NA","country":"United States","country_code":"US","region":"CA","region_name":"California","city":"San Francisco","isp":"GitHub, Inc.","org":"GitHub, Inc.","asname":"GITHUB"}},{"domain":"glb-2a3c35-public-internal.githubapp.com","process":"provjobd1417919","ancestry":["systemd","hosted-compute-","sudo","provjobd1417919"],"status":"ok","reason":null,"event_ids":[],"detections":["flow"],"protocol":"TCP","remote_address":"140.82.114.23","result":"pass","remote_geo_info":{"latitude":37.7823,"longitude":-122.391,"continent":"North America","continent_code":"NA","country":"United States","country_code":"US","region":"CA","region_name":"California","city":"San Francisco","isp":"GitHub, Inc.","org":"GitHub, Inc.","asname":"GITHUB"}},{"domain":"hosted-compute-watchdog-prod-iad-01.githubapp","process":"provjobd1417919","ancestry":["systemd","hosted-compute-","sudo","provjobd1417919"],"status":"ok","reason":null,"event_ids":[],"detections":["flow"],"protocol":"TCP","remote_address":"140.82.114.23","result":"pass","remote_geo_info":{"latitude":37.7823,"longitude":-122.391,"continent":"North America","continent_code":"NA","country":"United States","country_code":"US","region":"CA","region_name":"California","city":"San Francisco","isp":"GitHub, Inc.","org":"GitHub, Inc.","asname":"GITHUB"}},{"domain":"postman-echo.com","process":"curl","ancestry":["systemd","hosted-compute-","Runner.Listener","Runner.Worker","bash","curl"],"status":"ok","reason":null,"event_ids":[],"detections":["flow"],"protocol":"TCP","remote_address":"162.159.142.41","result":"pass","remote_geo_info":{"latitude":43.6532,"longitude":-79.3832,"continent":"North America","continent_code":"NA","country":"Canada","country_code":"CA","region":"ON","region_name":"Ontario","city":"Toronto","isp":"Cloudflare, Inc.","org":"Cloudflare, Inc.","asname":"CLOUDFLARENET"}},{"domain":"release-assets.githubusercontent.com","process":"node","ancestry":["systemd","hosted-compute-","Runner.Listener","Runner.Worker","bash","node","dash","node"],"status":"ok","reason":null,"event_ids":[],"detections":["exec_from_unusual_dir","flow"],"protocol":"TCP","remote_address":"185.199.108.133","result":"attention","remote_geo_info":{"latitude":37.7823,"longitude":-122.391,"continent":"North America","continent_code":"NA","country":"United States","country_code":"US","region":"CA","region_name":"California","city":"San Francisco","isp":"Fastly, Inc.","org":"GitHub, Inc","asname":"FASTLY"}}],"total_domains":9,"flagged_domains":0},"assertions":[{"id":"no_bad_egress_domain","result":"ATTENTION","details":"","evidence":[]}],"telemetry":{"total_events":17,"total_connections":17,"unique_domains":7},"score":{"source":"jibril","severity":75,"severity_level":"high","confidence":1},"workload_identity":null,"filesystem":null,"execution":null}}