{
  "table": "headline.csv",
  "columns": {
    "metric": "ar_recall = Attacker-Reachable Vulnerability Recall; localized_recall = DeepSec's metric (never rank or combine with ar_recall)",
    "macro_recall_pct": "mean of the 20 per-application recalls, percent, 1 dp",
    "matched": "pooled count of matched reference vulnerabilities",
    "interval95_*": "95% interval from 4,000 resamples of the 20 applications (seed 20260929)",
    "precision_pct": "matched / findings, pooled; a lower bound",
    "matched_exact_line / matched_file_level": "endpoint rule at 0 lines / any line in the right file; counterfactual rescorings, empty for DeepSec"
  },
  "units": "percent and counts",
  "basis": "main runs, one per configuration and application; frozen reference set",
  "paper": "Table 4, Table 3, Figure 1, Figure 8",
  "source_archive": {
    "execution": "20260907-vulnbench-v2-deepsec-150-574753a2",
    "path": "publications/vulnbench-v2/20260907-vulnbench-v2-deepsec-150-574753a2/bundles/20260907-vulnbench-v2-deepsec-150-574753a2.tar.gz",
    "sha256": "b29c643079c8fddc361463ca39e29204e0510d0a16300631784b59772157acd6",
    "checksums": "https://github.com/snyk-labs/snyk-vulnbench/blob/main/publications/vulnbench-v2/20260907-vulnbench-v2-deepsec-150-574753a2/SHA256SUMS"
  },
  "derivation_note": "Rows in the paper's order. Produced by the VulnBench 2.0 analysis pipeline, which verifies the archive's SHA-256, extracts it, and re-scores every run with a re-implementation of the public scorer that reproduces every recorded scoring decision; this file is a selection and renaming of the pipeline's output.",
  "empty_cells": "An empty cell means not applicable or unavailable as stated in `columns`; it never means zero."
}