تدقيق الجولة

لا توجد تناقضات مسجلة لهذه الجولة.

• {"Notes":"Do not infer Anthropic compromise.","Gap ID":"CY-GAP-SCSE-C7A29E4B-01","Impact":"Blocks precise root-cause/trust-control attribution.","Status":"OPEN","Gap Type":"PUBLISHING_PATH_ROOT_CAUSE","Priority":"HIGH","Domain ID":"CY-DOM-007","Topic IDs":"CY-TOP-SCSE-C7A29E4B","Description":"Exact credential/account/workflow path allowing malicious builds into Cursor Marketplace is not publicly established.","Last Reviewed":"2026-11-01","Resolution Run":"ACRIP-SCSE-20261101T100900Z-C7A29E4B","Required Evidence / Resolution":"Cursor RCA, marketplace audit/publisher logs and compromised-identity timeline."}
• {"Notes":"Earlier ≤5,000 statement is exposure context only.","Gap ID":"CY-GAP-SCSE-C7A29E4B-02","Impact":"Blocks realized blast-radius/victim-count claims.","Status":"OPEN","Gap Type":"EXECUTION_REMOTE_ACCESS_DENOMINATOR","Priority":"HIGH","Domain ID":"CY-DOM-007","Topic IDs":"CY-TOP-SCSE-C7A29E4B","Description":"No reliable public denominator separates install/update exposure, loader execution, persistence installation and successful remote SSH access.","Last Reviewed":"2026-11-01","Resolution Run":"ACRIP-SCSE-20261101T100900Z-C7A29E4B","Required Evidence / Resolution":"Marketplace install telemetry plus endpoint execution/persistence/network/authentication evidence."}