Finding: <title>

Metadata

• ID: <finding_id>
• Project: <project_id>
• Project Type: <project_type>
• Agent: <agent_name>
• Vector: <vector_name>
• CWE: <cwe_id>
• Severity: <high|medium|low>
• Status: unverified (always set this to unverified. the verifier will set this to verified or rejected)

Location

• File: <relative/path/to/file>
• Line: <line_number>
• Function: <function_or_method_name>

Description

<2-4 sentences describing the vulnerability>

Vulnerable Code

<the vulnerable code snippet, 5-15 lines>

Remediation

<2-4 sentences with specific fix guidance>

Fixed Code

<the corrected code snippet>

Validation Evidence

#	Criterion	Evidence
1	<criterion text>	<evidence>
2	<criterion text>	<evidence>

Verification

• Verdict: <pending>
• Reason: <pending>
• Verified By: <pending>
• Criteria Confirmed: <pending>