{
  "schema": "git-proxy-loopback-evidence-v1",
  "started_at": "2026-10-12T19:09:08.940046+00:00",
  "finished_at": "2026-10-12T19:09:09.607625+00:00",
  "environment": {
    "git": "git version 2.50.1 (Apple Git-155)",
    "git_executable": "/usr/bin/git",
    "python": "3.14.8 (main, Sep 30 2026, 17:55:09) [Clang 17.0.0 (clang-1700.6.4.2)]",
    "platform": "macOS-15.7.4-arm64-arm-64bit-Mach-O",
    "macos": "15.7.4",
    "configuration_isolated": true,
    "inherited_proxy_variables_removed": true
  },
  "fixture": {
    "network_scope": "127.0.0.1 only",
    "transport": "dumb HTTP",
    "origin": "http://127.0.0.1:62623/match/demo.git",
    "proxy": "http://127.0.0.1:62624",
    "authentication": "synthetic Basic challenge",
    "expected_commit": "68fc8d06804800de20dea2c692b046750b01c3cd",
    "expected_payload_sha256": "cc32e4df0ae80f8292236e0ab1aad5d31b52fe00264ed62b67c0d593dad8a073"
  },
  "cases": [
    {
      "name": "one_off_command_proxy",
      "command": [
        "/usr/bin/git",
        "-c",
        "credential.helper=",
        "-c",
        "http.proxy=http://lab-user:lab-password@127.0.0.1:62624",
        "clone",
        "http://127.0.0.1:62623/match/demo.git",
        "/var/folders/3z/6q0x4lnd7k93fkjxjgpzlql00000gn/T/git-proxy-lab-s0ulq2cz/one-off"
      ],
      "extra_environment": {},
      "returncode": 0,
      "stdout": "",
      "stderr": "Cloning into '/var/folders/3z/6q0x4lnd7k93fkjxjgpzlql00000gn/T/git-proxy-lab-s0ulq2cz/one-off'...\n",
      "expected_success": true,
      "repository_verified": true,
      "commit": "68fc8d06804800de20dea2c692b046750b01c3cd",
      "payload_sha256": "cc32e4df0ae80f8292236e0ab1aad5d31b52fe00264ed62b67c0d593dad8a073",
      "proxy_requests": [
        {
          "case": "one_off_command_proxy",
          "target": "http://127.0.0.1:62623/match/demo.git/info/refs?service=git-upload-pack",
          "authorization_present": false,
          "authorization_accepted": false,
          "status": 407
        },
        {
          "case": "one_off_command_proxy",
          "target": "http://127.0.0.1:62623/match/demo.git/info/refs?service=git-upload-pack",
          "authorization_present": true,
          "authorization_accepted": true,
          "status": 200
        },
        {
          "case": "one_off_command_proxy",
          "target": "http://127.0.0.1:62623/match/demo.git/HEAD",
          "authorization_present": true,
          "authorization_accepted": true,
          "status": 200
        },
        {
          "case": "one_off_command_proxy",
          "target": "http://127.0.0.1:62623/match/demo.git/objects/68/fc8d06804800de20dea2c692b046750b01c3cd",
          "authorization_present": true,
          "authorization_accepted": true,
          "status": 200
        },
        {
          "case": "one_off_command_proxy",
          "target": "http://127.0.0.1:62623/match/demo.git/objects/f1/bbb3539905c05d7506745a905b694098919331",
          "authorization_present": true,
          "authorization_accepted": true,
          "status": 200
        },
        {
          "case": "one_off_command_proxy",
          "target": "http://127.0.0.1:62623/match/demo.git/objects/29/4a37cf15cf07d5d6ce25fc2371fa82e61e3a1e",
          "authorization_present": true,
          "authorization_accepted": true,
          "status": 200
        }
      ],
      "origin_requests": [
        {
          "case": "one_off_command_proxy",
          "path": "/match/demo.git/info/refs?service=git-upload-pack",
          "proxy_authorization_received": false
        },
        {
          "case": "one_off_command_proxy",
          "path": "/match/demo.git/HEAD",
          "proxy_authorization_received": false
        },
        {
          "case": "one_off_command_proxy",
          "path": "/match/demo.git/objects/68/fc8d06804800de20dea2c692b046750b01c3cd",
          "proxy_authorization_received": false
        },
        {
          "case": "one_off_command_proxy",
          "path": "/match/demo.git/objects/f1/bbb3539905c05d7506745a905b694098919331",
          "proxy_authorization_received": false
        },
        {
          "case": "one_off_command_proxy",
          "path": "/match/demo.git/objects/29/4a37cf15cf07d5d6ce25fc2371fa82e61e3a1e",
          "proxy_authorization_received": false
        }
      ],
      "challenge_407_count": 1,
      "authenticated_request_count": 5,
      "expectations": {
        "expected_exit_outcome": true,
        "repository_integrity": true,
        "expected_proxy_routing": true,
        "proxy_credentials_not_forwarded_to_origin": true,
        "auth_challenge_observed": true,
        "authenticated_forwarding_observed": true
      },
      "passed": true
    },
    {
      "name": "bad_credentials_407",
      "command": [
        "/usr/bin/git",
        "-c",
        "credential.helper=",
        "-c",
        "http.proxy=http://lab-user:wrong-synthetic-password@127.0.0.1:62624",
        "-c",
        "http.proxyAuthMethod=basic",
        "clone",
        "http://127.0.0.1:62623/match/demo.git",
        "/var/folders/3z/6q0x4lnd7k93fkjxjgpzlql00000gn/T/git-proxy-lab-s0ulq2cz/bad-auth"
      ],
      "extra_environment": {},
      "returncode": 128,
      "stdout": "",
      "stderr": "Cloning into '/var/folders/3z/6q0x4lnd7k93fkjxjgpzlql00000gn/T/git-proxy-lab-s0ulq2cz/bad-auth'...\nfatal: unable to access 'http://127.0.0.1:62623/match/demo.git/': The requested URL returned error: 407\n",
      "expected_success": false,
      "repository_verified": false,
      "commit": null,
      "payload_sha256": null,
      "proxy_requests": [
        {
          "case": "bad_credentials_407",
          "target": "http://127.0.0.1:62623/match/demo.git/info/refs?service=git-upload-pack",
          "authorization_present": true,
          "authorization_accepted": false,
          "status": 407
        }
      ],
      "origin_requests": [],
      "challenge_407_count": 1,
      "authenticated_request_count": 0,
      "expectations": {
        "expected_exit_outcome": true,
        "repository_integrity": true,
        "expected_proxy_routing": true,
        "proxy_credentials_not_forwarded_to_origin": true,
        "auth_challenge_observed": true
      },
      "passed": true
    },
    {
      "name": "url_scoped_match",
      "command": [
        "/usr/bin/git",
        "-c",
        "credential.helper=",
        "-c",
        "http.http://127.0.0.1:62623/match/.proxy=http://lab-user:lab-password@127.0.0.1:62624",
        "clone",
        "http://127.0.0.1:62623/match/demo.git",
        "/var/folders/3z/6q0x4lnd7k93fkjxjgpzlql00000gn/T/git-proxy-lab-s0ulq2cz/url-match"
      ],
      "extra_environment": {},
      "returncode": 0,
      "stdout": "",
      "stderr": "Cloning into '/var/folders/3z/6q0x4lnd7k93fkjxjgpzlql00000gn/T/git-proxy-lab-s0ulq2cz/url-match'...\n",
      "expected_success": true,
      "repository_verified": true,
      "commit": "68fc8d06804800de20dea2c692b046750b01c3cd",
      "payload_sha256": "cc32e4df0ae80f8292236e0ab1aad5d31b52fe00264ed62b67c0d593dad8a073",
      "proxy_requests": [
        {
          "case": "url_scoped_match",
          "target": "http://127.0.0.1:62623/match/demo.git/info/refs?service=git-upload-pack",
          "authorization_present": false,
          "authorization_accepted": false,
          "status": 407
        },
        {
          "case": "url_scoped_match",
          "target": "http://127.0.0.1:62623/match/demo.git/info/refs?service=git-upload-pack",
          "authorization_present": true,
          "authorization_accepted": true,
          "status": 200
        },
        {
          "case": "url_scoped_match",
          "target": "http://127.0.0.1:62623/match/demo.git/HEAD",
          "authorization_present": true,
          "authorization_accepted": true,
          "status": 200
        },
        {
          "case": "url_scoped_match",
          "target": "http://127.0.0.1:62623/match/demo.git/objects/68/fc8d06804800de20dea2c692b046750b01c3cd",
          "authorization_present": true,
          "authorization_accepted": true,
          "status": 200
        },
        {
          "case": "url_scoped_match",
          "target": "http://127.0.0.1:62623/match/demo.git/objects/f1/bbb3539905c05d7506745a905b694098919331",
          "authorization_present": true,
          "authorization_accepted": true,
          "status": 200
        },
        {
          "case": "url_scoped_match",
          "target": "http://127.0.0.1:62623/match/demo.git/objects/29/4a37cf15cf07d5d6ce25fc2371fa82e61e3a1e",
          "authorization_present": true,
          "authorization_accepted": true,
          "status": 200
        }
      ],
      "origin_requests": [
        {
          "case": "url_scoped_match",
          "path": "/match/demo.git/info/refs?service=git-upload-pack",
          "proxy_authorization_received": false
        },
        {
          "case": "url_scoped_match",
          "path": "/match/demo.git/HEAD",
          "proxy_authorization_received": false
        },
        {
          "case": "url_scoped_match",
          "path": "/match/demo.git/objects/68/fc8d06804800de20dea2c692b046750b01c3cd",
          "proxy_authorization_received": false
        },
        {
          "case": "url_scoped_match",
          "path": "/match/demo.git/objects/f1/bbb3539905c05d7506745a905b694098919331",
          "proxy_authorization_received": false
        },
        {
          "case": "url_scoped_match",
          "path": "/match/demo.git/objects/29/4a37cf15cf07d5d6ce25fc2371fa82e61e3a1e",
          "proxy_authorization_received": false
        }
      ],
      "challenge_407_count": 1,
      "authenticated_request_count": 5,
      "expectations": {
        "expected_exit_outcome": true,
        "repository_integrity": true,
        "expected_proxy_routing": true,
        "proxy_credentials_not_forwarded_to_origin": true,
        "auth_challenge_observed": true,
        "authenticated_forwarding_observed": true
      },
      "passed": true
    },
    {
      "name": "url_scoped_unrelated_path",
      "command": [
        "/usr/bin/git",
        "-c",
        "credential.helper=",
        "-c",
        "http.http://127.0.0.1:62623/match/.proxy=http://lab-user:lab-password@127.0.0.1:62624",
        "clone",
        "http://127.0.0.1:62623/other/demo.git",
        "/var/folders/3z/6q0x4lnd7k93fkjxjgpzlql00000gn/T/git-proxy-lab-s0ulq2cz/url-no-match"
      ],
      "extra_environment": {},
      "returncode": 0,
      "stdout": "",
      "stderr": "Cloning into '/var/folders/3z/6q0x4lnd7k93fkjxjgpzlql00000gn/T/git-proxy-lab-s0ulq2cz/url-no-match'...\n",
      "expected_success": true,
      "repository_verified": true,
      "commit": "68fc8d06804800de20dea2c692b046750b01c3cd",
      "payload_sha256": "cc32e4df0ae80f8292236e0ab1aad5d31b52fe00264ed62b67c0d593dad8a073",
      "proxy_requests": [],
      "origin_requests": [
        {
          "case": "url_scoped_unrelated_path",
          "path": "/other/demo.git/info/refs?service=git-upload-pack",
          "proxy_authorization_received": false
        },
        {
          "case": "url_scoped_unrelated_path",
          "path": "/other/demo.git/HEAD",
          "proxy_authorization_received": false
        },
        {
          "case": "url_scoped_unrelated_path",
          "path": "/other/demo.git/objects/68/fc8d06804800de20dea2c692b046750b01c3cd",
          "proxy_authorization_received": false
        },
        {
          "case": "url_scoped_unrelated_path",
          "path": "/other/demo.git/objects/f1/bbb3539905c05d7506745a905b694098919331",
          "proxy_authorization_received": false
        },
        {
          "case": "url_scoped_unrelated_path",
          "path": "/other/demo.git/objects/29/4a37cf15cf07d5d6ce25fc2371fa82e61e3a1e",
          "proxy_authorization_received": false
        }
      ],
      "challenge_407_count": 0,
      "authenticated_request_count": 0,
      "expectations": {
        "expected_exit_outcome": true,
        "repository_integrity": true,
        "expected_proxy_routing": true,
        "proxy_credentials_not_forwarded_to_origin": true,
        "auth_challenge_observed": true
      },
      "passed": true
    },
    {
      "name": "remote_proxy_overrides_generic",
      "command": [
        "/usr/bin/git",
        "-c",
        "credential.helper=",
        "-C",
        "/var/folders/3z/6q0x4lnd7k93fkjxjgpzlql00000gn/T/git-proxy-lab-s0ulq2cz/remote-override",
        "fetch",
        "origin"
      ],
      "extra_environment": {},
      "returncode": 0,
      "stdout": "",
      "stderr": "From http://127.0.0.1:62623/match/demo\n * [new branch]      main       -> origin/main\n",
      "expected_success": true,
      "repository_verified": true,
      "commit": "68fc8d06804800de20dea2c692b046750b01c3cd",
      "payload_sha256": "cc32e4df0ae80f8292236e0ab1aad5d31b52fe00264ed62b67c0d593dad8a073",
      "proxy_requests": [
        {
          "case": "remote_proxy_overrides_generic",
          "target": "http://127.0.0.1:62623/match/demo.git/info/refs?service=git-upload-pack",
          "authorization_present": false,
          "authorization_accepted": false,
          "status": 407
        },
        {
          "case": "remote_proxy_overrides_generic",
          "target": "http://127.0.0.1:62623/match/demo.git/info/refs?service=git-upload-pack",
          "authorization_present": true,
          "authorization_accepted": true,
          "status": 200
        },
        {
          "case": "remote_proxy_overrides_generic",
          "target": "http://127.0.0.1:62623/match/demo.git/HEAD",
          "authorization_present": true,
          "authorization_accepted": true,
          "status": 200
        },
        {
          "case": "remote_proxy_overrides_generic",
          "target": "http://127.0.0.1:62623/match/demo.git/objects/68/fc8d06804800de20dea2c692b046750b01c3cd",
          "authorization_present": true,
          "authorization_accepted": true,
          "status": 200
        },
        {
          "case": "remote_proxy_overrides_generic",
          "target": "http://127.0.0.1:62623/match/demo.git/objects/f1/bbb3539905c05d7506745a905b694098919331",
          "authorization_present": true,
          "authorization_accepted": true,
          "status": 200
        },
        {
          "case": "remote_proxy_overrides_generic",
          "target": "http://127.0.0.1:62623/match/demo.git/objects/29/4a37cf15cf07d5d6ce25fc2371fa82e61e3a1e",
          "authorization_present": true,
          "authorization_accepted": true,
          "status": 200
        }
      ],
      "origin_requests": [
        {
          "case": "remote_proxy_overrides_generic",
          "path": "/match/demo.git/info/refs?service=git-upload-pack",
          "proxy_authorization_received": false
        },
        {
          "case": "remote_proxy_overrides_generic",
          "path": "/match/demo.git/HEAD",
          "proxy_authorization_received": false
        },
        {
          "case": "remote_proxy_overrides_generic",
          "path": "/match/demo.git/objects/68/fc8d06804800de20dea2c692b046750b01c3cd",
          "proxy_authorization_received": false
        },
        {
          "case": "remote_proxy_overrides_generic",
          "path": "/match/demo.git/objects/f1/bbb3539905c05d7506745a905b694098919331",
          "proxy_authorization_received": false
        },
        {
          "case": "remote_proxy_overrides_generic",
          "path": "/match/demo.git/objects/29/4a37cf15cf07d5d6ce25fc2371fa82e61e3a1e",
          "proxy_authorization_received": false
        }
      ],
      "challenge_407_count": 1,
      "authenticated_request_count": 5,
      "expectations": {
        "expected_exit_outcome": true,
        "repository_integrity": true,
        "expected_proxy_routing": true,
        "proxy_credentials_not_forwarded_to_origin": true,
        "auth_challenge_observed": true,
        "authenticated_forwarding_observed": true
      },
      "passed": true
    },
    {
      "name": "remote_empty_disables_proxy",
      "command": [
        "/usr/bin/git",
        "-c",
        "credential.helper=",
        "-C",
        "/var/folders/3z/6q0x4lnd7k93fkjxjgpzlql00000gn/T/git-proxy-lab-s0ulq2cz/remote-empty",
        "fetch",
        "origin"
      ],
      "extra_environment": {},
      "returncode": 0,
      "stdout": "",
      "stderr": "From http://127.0.0.1:62623/match/demo\n * [new branch]      main       -> origin/main\n",
      "expected_success": true,
      "repository_verified": true,
      "commit": "68fc8d06804800de20dea2c692b046750b01c3cd",
      "payload_sha256": "cc32e4df0ae80f8292236e0ab1aad5d31b52fe00264ed62b67c0d593dad8a073",
      "proxy_requests": [],
      "origin_requests": [
        {
          "case": "remote_empty_disables_proxy",
          "path": "/match/demo.git/info/refs?service=git-upload-pack",
          "proxy_authorization_received": false
        },
        {
          "case": "remote_empty_disables_proxy",
          "path": "/match/demo.git/HEAD",
          "proxy_authorization_received": false
        },
        {
          "case": "remote_empty_disables_proxy",
          "path": "/match/demo.git/objects/68/fc8d06804800de20dea2c692b046750b01c3cd",
          "proxy_authorization_received": false
        },
        {
          "case": "remote_empty_disables_proxy",
          "path": "/match/demo.git/objects/f1/bbb3539905c05d7506745a905b694098919331",
          "proxy_authorization_received": false
        },
        {
          "case": "remote_empty_disables_proxy",
          "path": "/match/demo.git/objects/29/4a37cf15cf07d5d6ce25fc2371fa82e61e3a1e",
          "proxy_authorization_received": false
        }
      ],
      "challenge_407_count": 0,
      "authenticated_request_count": 0,
      "expectations": {
        "expected_exit_outcome": true,
        "repository_integrity": true,
        "expected_proxy_routing": true,
        "proxy_credentials_not_forwarded_to_origin": true,
        "auth_challenge_observed": true
      },
      "passed": true
    },
    {
      "name": "command_empty_clears_generic",
      "command": [
        "/usr/bin/git",
        "-c",
        "credential.helper=",
        "-c",
        "http.proxy=",
        "clone",
        "http://127.0.0.1:62623/match/demo.git",
        "/var/folders/3z/6q0x4lnd7k93fkjxjgpzlql00000gn/T/git-proxy-lab-s0ulq2cz/command-empty"
      ],
      "extra_environment": {},
      "returncode": 0,
      "stdout": "",
      "stderr": "Cloning into '/var/folders/3z/6q0x4lnd7k93fkjxjgpzlql00000gn/T/git-proxy-lab-s0ulq2cz/command-empty'...\n",
      "expected_success": true,
      "repository_verified": true,
      "commit": "68fc8d06804800de20dea2c692b046750b01c3cd",
      "payload_sha256": "cc32e4df0ae80f8292236e0ab1aad5d31b52fe00264ed62b67c0d593dad8a073",
      "proxy_requests": [],
      "origin_requests": [
        {
          "case": "command_empty_clears_generic",
          "path": "/match/demo.git/info/refs?service=git-upload-pack",
          "proxy_authorization_received": false
        },
        {
          "case": "command_empty_clears_generic",
          "path": "/match/demo.git/HEAD",
          "proxy_authorization_received": false
        },
        {
          "case": "command_empty_clears_generic",
          "path": "/match/demo.git/objects/68/fc8d06804800de20dea2c692b046750b01c3cd",
          "proxy_authorization_received": false
        },
        {
          "case": "command_empty_clears_generic",
          "path": "/match/demo.git/objects/f1/bbb3539905c05d7506745a905b694098919331",
          "proxy_authorization_received": false
        },
        {
          "case": "command_empty_clears_generic",
          "path": "/match/demo.git/objects/29/4a37cf15cf07d5d6ce25fc2371fa82e61e3a1e",
          "proxy_authorization_received": false
        }
      ],
      "challenge_407_count": 0,
      "authenticated_request_count": 0,
      "expectations": {
        "expected_exit_outcome": true,
        "repository_integrity": true,
        "expected_proxy_routing": true,
        "proxy_credentials_not_forwarded_to_origin": true,
        "auth_challenge_observed": true
      },
      "passed": true
    },
    {
      "name": "command_empty_does_not_clear_url_scope",
      "command": [
        "/usr/bin/git",
        "-c",
        "credential.helper=",
        "-c",
        "http.proxy=",
        "clone",
        "http://127.0.0.1:62623/match/demo.git",
        "/var/folders/3z/6q0x4lnd7k93fkjxjgpzlql00000gn/T/git-proxy-lab-s0ulq2cz/command-empty-url-match"
      ],
      "extra_environment": {},
      "returncode": 0,
      "stdout": "",
      "stderr": "Cloning into '/var/folders/3z/6q0x4lnd7k93fkjxjgpzlql00000gn/T/git-proxy-lab-s0ulq2cz/command-empty-url-match'...\n",
      "expected_success": true,
      "repository_verified": true,
      "commit": "68fc8d06804800de20dea2c692b046750b01c3cd",
      "payload_sha256": "cc32e4df0ae80f8292236e0ab1aad5d31b52fe00264ed62b67c0d593dad8a073",
      "proxy_requests": [
        {
          "case": "command_empty_does_not_clear_url_scope",
          "target": "http://127.0.0.1:62623/match/demo.git/info/refs?service=git-upload-pack",
          "authorization_present": false,
          "authorization_accepted": false,
          "status": 407
        },
        {
          "case": "command_empty_does_not_clear_url_scope",
          "target": "http://127.0.0.1:62623/match/demo.git/info/refs?service=git-upload-pack",
          "authorization_present": true,
          "authorization_accepted": true,
          "status": 200
        },
        {
          "case": "command_empty_does_not_clear_url_scope",
          "target": "http://127.0.0.1:62623/match/demo.git/HEAD",
          "authorization_present": true,
          "authorization_accepted": true,
          "status": 200
        },
        {
          "case": "command_empty_does_not_clear_url_scope",
          "target": "http://127.0.0.1:62623/match/demo.git/objects/68/fc8d06804800de20dea2c692b046750b01c3cd",
          "authorization_present": true,
          "authorization_accepted": true,
          "status": 200
        },
        {
          "case": "command_empty_does_not_clear_url_scope",
          "target": "http://127.0.0.1:62623/match/demo.git/objects/f1/bbb3539905c05d7506745a905b694098919331",
          "authorization_present": true,
          "authorization_accepted": true,
          "status": 200
        },
        {
          "case": "command_empty_does_not_clear_url_scope",
          "target": "http://127.0.0.1:62623/match/demo.git/objects/29/4a37cf15cf07d5d6ce25fc2371fa82e61e3a1e",
          "authorization_present": true,
          "authorization_accepted": true,
          "status": 200
        }
      ],
      "origin_requests": [
        {
          "case": "command_empty_does_not_clear_url_scope",
          "path": "/match/demo.git/info/refs?service=git-upload-pack",
          "proxy_authorization_received": false
        },
        {
          "case": "command_empty_does_not_clear_url_scope",
          "path": "/match/demo.git/HEAD",
          "proxy_authorization_received": false
        },
        {
          "case": "command_empty_does_not_clear_url_scope",
          "path": "/match/demo.git/objects/68/fc8d06804800de20dea2c692b046750b01c3cd",
          "proxy_authorization_received": false
        },
        {
          "case": "command_empty_does_not_clear_url_scope",
          "path": "/match/demo.git/objects/f1/bbb3539905c05d7506745a905b694098919331",
          "proxy_authorization_received": false
        },
        {
          "case": "command_empty_does_not_clear_url_scope",
          "path": "/match/demo.git/objects/29/4a37cf15cf07d5d6ce25fc2371fa82e61e3a1e",
          "proxy_authorization_received": false
        }
      ],
      "challenge_407_count": 1,
      "authenticated_request_count": 5,
      "expectations": {
        "expected_exit_outcome": true,
        "repository_integrity": true,
        "expected_proxy_routing": true,
        "proxy_credentials_not_forwarded_to_origin": true,
        "auth_challenge_observed": true,
        "authenticated_forwarding_observed": true
      },
      "passed": true
    },
    {
      "name": "url_empty_overrides_generic",
      "command": [
        "/usr/bin/git",
        "-c",
        "credential.helper=",
        "-c",
        "http.http://127.0.0.1:62623/match/.proxy=",
        "clone",
        "http://127.0.0.1:62623/match/demo.git",
        "/var/folders/3z/6q0x4lnd7k93fkjxjgpzlql00000gn/T/git-proxy-lab-s0ulq2cz/url-empty"
      ],
      "extra_environment": {},
      "returncode": 0,
      "stdout": "",
      "stderr": "Cloning into '/var/folders/3z/6q0x4lnd7k93fkjxjgpzlql00000gn/T/git-proxy-lab-s0ulq2cz/url-empty'...\n",
      "expected_success": true,
      "repository_verified": true,
      "commit": "68fc8d06804800de20dea2c692b046750b01c3cd",
      "payload_sha256": "cc32e4df0ae80f8292236e0ab1aad5d31b52fe00264ed62b67c0d593dad8a073",
      "proxy_requests": [],
      "origin_requests": [
        {
          "case": "url_empty_overrides_generic",
          "path": "/match/demo.git/info/refs?service=git-upload-pack",
          "proxy_authorization_received": false
        },
        {
          "case": "url_empty_overrides_generic",
          "path": "/match/demo.git/HEAD",
          "proxy_authorization_received": false
        },
        {
          "case": "url_empty_overrides_generic",
          "path": "/match/demo.git/objects/68/fc8d06804800de20dea2c692b046750b01c3cd",
          "proxy_authorization_received": false
        },
        {
          "case": "url_empty_overrides_generic",
          "path": "/match/demo.git/objects/f1/bbb3539905c05d7506745a905b694098919331",
          "proxy_authorization_received": false
        },
        {
          "case": "url_empty_overrides_generic",
          "path": "/match/demo.git/objects/29/4a37cf15cf07d5d6ce25fc2371fa82e61e3a1e",
          "proxy_authorization_received": false
        }
      ],
      "challenge_407_count": 0,
      "authenticated_request_count": 0,
      "expectations": {
        "expected_exit_outcome": true,
        "repository_integrity": true,
        "expected_proxy_routing": true,
        "proxy_credentials_not_forwarded_to_origin": true,
        "auth_challenge_observed": true
      },
      "passed": true
    },
    {
      "name": "no_proxy_loopback_bypass",
      "command": [
        "/usr/bin/git",
        "-c",
        "credential.helper=",
        "clone",
        "http://127.0.0.1:62623/match/demo.git",
        "/var/folders/3z/6q0x4lnd7k93fkjxjgpzlql00000gn/T/git-proxy-lab-s0ulq2cz/no-proxy-env"
      ],
      "extra_environment": {
        "no_proxy": "127.0.0.1"
      },
      "returncode": 0,
      "stdout": "",
      "stderr": "Cloning into '/var/folders/3z/6q0x4lnd7k93fkjxjgpzlql00000gn/T/git-proxy-lab-s0ulq2cz/no-proxy-env'...\n",
      "expected_success": true,
      "repository_verified": true,
      "commit": "68fc8d06804800de20dea2c692b046750b01c3cd",
      "payload_sha256": "cc32e4df0ae80f8292236e0ab1aad5d31b52fe00264ed62b67c0d593dad8a073",
      "proxy_requests": [],
      "origin_requests": [
        {
          "case": "no_proxy_loopback_bypass",
          "path": "/match/demo.git/info/refs?service=git-upload-pack",
          "proxy_authorization_received": false
        },
        {
          "case": "no_proxy_loopback_bypass",
          "path": "/match/demo.git/HEAD",
          "proxy_authorization_received": false
        },
        {
          "case": "no_proxy_loopback_bypass",
          "path": "/match/demo.git/objects/68/fc8d06804800de20dea2c692b046750b01c3cd",
          "proxy_authorization_received": false
        },
        {
          "case": "no_proxy_loopback_bypass",
          "path": "/match/demo.git/objects/f1/bbb3539905c05d7506745a905b694098919331",
          "proxy_authorization_received": false
        },
        {
          "case": "no_proxy_loopback_bypass",
          "path": "/match/demo.git/objects/29/4a37cf15cf07d5d6ce25fc2371fa82e61e3a1e",
          "proxy_authorization_received": false
        }
      ],
      "challenge_407_count": 0,
      "authenticated_request_count": 0,
      "expectations": {
        "expected_exit_outcome": true,
        "repository_integrity": true,
        "expected_proxy_routing": true,
        "proxy_credentials_not_forwarded_to_origin": true,
        "auth_challenge_observed": true
      },
      "passed": true
    }
  ],
  "diagnostics": {
    "origin_scope_command": [
      "/usr/bin/git",
      "-c",
      "credential.helper=",
      "-C",
      "/var/folders/3z/6q0x4lnd7k93fkjxjgpzlql00000gn/T/git-proxy-lab-s0ulq2cz/diagnostic",
      "-c",
      "http.proxy=http://command.invalid:8080",
      "config",
      "--show-origin",
      "--show-scope",
      "--get-all",
      "http.proxy"
    ],
    "origin_scope_stdout": "global\tfile:/var/folders/3z/6q0x4lnd7k93fkjxjgpzlql00000gn/T/git-proxy-lab-s0ulq2cz/isolated-global.gitconfig\thttp://lab-user:lab-password@127.0.0.1:62624\nlocal\tfile:.git/config\thttp://local.invalid:8080\ncommand\tcommand line:\thttp://command.invalid:8080\n",
    "urlmatch_command": [
      "/usr/bin/git",
      "-c",
      "credential.helper=",
      "-c",
      "http.http://127.0.0.1:62623/match/.proxy=http://lab-user:lab-password@127.0.0.1:62624",
      "config",
      "--get-urlmatch",
      "http.proxy",
      "http://127.0.0.1:62623/match/demo.git"
    ],
    "urlmatch_stdout": "http://lab-user:lab-password@127.0.0.1:62624\n"
  },
  "summary": {
    "cases": 10,
    "passed": 10,
    "failed": []
  },
  "limitations": [
    "Synthetic loopback routing evidence, not an external provider result.",
    "Dumb HTTP clone/fetch only; no push, smart HTTP, HTTPS CONNECT, TLS, SSH or SOCKS tests.",
    "Basic authentication uses deliberately fake credentials over local HTTP.",
    "Request counts and allocated ports may differ between git/libcurl builds.",
    "Only the recorded Git and Python environment was executed in this run.",
    "Temporary repositories/configuration are deleted after execution."
  ]
}