# IHVRK audit finding

- **Finding ID:** (yours)
- **Auditor / organisation:**
- **Date:**
- **Evidence version:** MANIFEST.json `source_commit` = ……  sha256(MANIFEST.json) = ……
- **Component / file:**
- **Claim tested:** (quote the document sentence or invariant id, e.g. I7)
- **Steps to reproduce:**
- **Expected:**
- **Observed:**
- **Severity (your scale):**
- **Exploitability / preconditions:**
- **Does it contradict a stated limitation, or is it already listed?** (LIMITATIONS.md id)
- **Suggested fix:**

Send to: security@cainstudio.online (the contact named in the auditor kit), or open the "report a finding" form on
the Verification Center page.