{
  "schema": "ghostmesh-video-receipt-v1",
  "createdAt": "2026-10-18T12:38:00Z",
  "source": {
    "platform": "YouTube",
    "url": "https://www.youtube.com/watch?v=YaK6cnET2IE",
    "videoId": "YaK6cnET2IE",
    "title": "OpenCode hack is INSANE.",
    "channel": "David Ondrej",
    "uploadDate": "20261018",
    "durationSeconds": 1894
  },
  "reasonPack": {
    "schema": "ghostmesh-reasoning-pack-v1",
    "runtimeVersion": "1.0.1",
    "verification": "pass",
    "formatSelection": "609+234-19: public 720p HLS video and original English HLS audio, normalized to MP4 and M4A",
    "captureRepair": "The default video stream returned HTTP 403. An isolated yt-dlp format sort selected public HLS streams. No cookies or credentials were used.",
    "transcription": "YouTube automatic English caption retrieval returned HTTP 429. Local whisper.cpp small.en produced the uncorrected transcript.",
    "whisperModelSha256": "c6138d6d58ecc8322097e0f987c32f1be8bb0a18532a3f88f734d1bbf9c41e5d",
    "manifestSha256": "b4da0f88f3adabe378bd50ece3c49cd24e57bdb530fc818fa8d71700e711bedb",
    "members": {
      "video.mp4": {"sha256": "c63626d4310f3a86c73d50a80d28d72cb46bc3f42e28af0d205ed2df7416253c", "bytes": 122681179},
      "audio.m4a": {"sha256": "fb66c5b4c141e1f352fc543708e6a9a229c5d0857af10f8250804af05e44b141", "bytes": 29382793},
      "transcript.txt": {"sha256": "7b150edb7ec5477a39c1cdc8cab796d13151d76f97052a807c2b365ff4c75d65", "bytes": 33309},
      "transcript-status.json": {"sha256": "fe73141185479635589b72ceeef9e2998e00f5afe090618c92eb40f7cb24406f", "bytes": 270},
      "source.json": {"sha256": "822829d3e226c9cee0a1d193a5cca76406be98dc0ac8d8655733d8d2a6968bf4", "bytes": 11106626},
      "ffprobe.json": {"sha256": "a385b74731fd340115873f889724e101fa7b65d43b750597fa5c3f48ab2d5da3", "bytes": 4576}
    },
    "publicationBoundary": "The public site contains original editorial analysis and this sanitized receipt. Full third-party video, audio, source metadata, transcript, and timed VTT remain in private local custody."
  },
  "derivation": {
    "timedTranscription": "A separate local whisper.cpp VTT pass against the same normalized 16-kHz mono audio; automatic, uncorrected, and not a member of the closed ReasonPack.",
    "timedVttSha256": "f339be05e8edcdab961123e55bdb126f82d139adba4fb9bf8fad5ff0afadb859",
    "sourceTimestamps": "Approximate cue starts from the private timed VTT; verify exact wording against the original video.",
    "verification": "ReasonPack closed-manifest verification passed after normalization and transcription."
  },
  "editorial": {
    "verdict": "Contain potentially exposed Console-linked provider keys. Treat the video's attacker attribution and agent-loop remedy as unproven.",
    "thesis": "The credential custody boundary is the actionable incident fact; distillation purpose, intrusion mechanism, and a proposed security product require separate evidence.",
    "recommendedSegments": [
      {"startSeconds": 15, "why": "The reported 1.4% Console scope and the broader-user extrapolation."},
      {"startSeconds": 222, "why": "Legacy-system description and unsupported actor attribution."},
      {"startSeconds": 991, "why": "Comparison of an AI scan with a professional penetration test."}
    ],
    "claimMap": [
      {"id": "console-scope", "sourceStartSeconds": 15, "kind": "reported-disclosure", "finding": "The speaker quotes a 1.4% OpenCode Console impact figure.", "limit": "The video does not provide a total count of affected users or establish that local-only users were exposed."},
      {"id": "legacy-and-attribution", "sourceStartSeconds": 222, "kind": "speaker-inference", "finding": "The speaker describes a legacy system and suggests Chinese-origin operators.", "limit": "No incident forensics or official actor attribution is presented."},
      {"id": "distillation-causality", "sourceStartSeconds": 463, "kind": "speaker-inference", "finding": "The speaker argues that stronger lab defenses drove attackers toward OpenCode.", "limit": "Anthropic and OpenAI document separate campaigns; neither establishes this causal chain."},
      {"id": "pentest-equivalence", "sourceStartSeconds": 991, "kind": "product-claim", "finding": "A Cloudroom run with no findings is compared to a professional penetration test.", "limit": "No tested coverage, false-negative rate, methodology, or independent comparison is provided."},
      {"id": "agent-loop-remedy", "sourceStartSeconds": 1485, "kind": "product-claim", "finding": "The speaker recommends autonomous agent loops as the necessary defensive response.", "limit": "The video does not show that those loops could contain a copied provider key or prevent this Console breach."}
    ],
    "externalPrimarySources": [
      {"url": "https://x.com/opencode/status/2111516673953935833", "role": "OpenCode public incident statement linked for reported scope; full technical report unavailable at publication."},
      {"url": "https://opencode.ai/v2/docs/console/providers/", "role": "OpenCode documentation for hosted provider credential custody and billing."},
      {"url": "https://www.anthropic.com/research/distillation-defenses", "role": "Anthropic account of its separate anti-distillation defenses."},
      {"url": "https://openai.com/index/disrupting-a-coordinated-model-distillation-campaign/", "role": "OpenAI account of a separate campaign and its distinct mechanism."},
      {"url": "https://help.openai.com/en/articles/5112595-best-practices-for-api-key-safety", "role": "OpenAI guidance on suspected key exposure."},
      {"url": "https://support.anthropic.com/en/articles/9767949-api-key-best-practices-keeping-your-keys-safe-and-secure", "role": "Anthropic guidance on revoking compromised keys."},
      {"url": "https://docs.cloud.google.com/docs/security/compromised-credentials", "role": "Google Cloud guidance on compromised credentials."}
    ],
    "limits": [
      "YouTube caption retrieval was rate limited; local Whisper may mishear technical terms.",
      "Timed cues are approximate and were not manually corrected or speaker diarized.",
      "No independent incident forensics, total key count, attacker attribution, loss total, or Cloudroom efficacy test was available.",
      "Editorial recommendations are not a measurement of product effectiveness."
    ]
  }
}