# Ground-truth known-bug mapping

- Target: `liquity-v2-governance`
- Evidence-pinned commit: `5610870e7e91fe6e29f8cfb0c0ae316fe9784e10`
- Resolution: matched run repository and commit
- Catalog: `benchmarks/known_bugs.json`

Only the two instrumented health-check canaries are mapped. Other property failures remain unmapped until a reviewed root-cause record ties them to a confirmed bug.

Canaries are reported separately as harness-health checks and are never included in the known-bug hit-rate denominator.

## Per-fuzzer results

| Fuzzer | Replicates | Known-bug replicate hits | Catalog coverage | Canary replicate hits | Unmapped event findings |
| --- | ---: | ---: | ---: | ---: | ---: |
| echidna | 2 | n/a | n/a | 4/4 (100.0%) | 6 |
| foundry | 2 | n/a | n/a | 4/4 (100.0%) | 6 |
| medusa | 2 | n/a | n/a | 4/4 (100.0%) | 6 |
| recon-fuzzer | 2 | n/a | n/a | 4/4 (100.0%) | 6 |

## Known-bug catalog

| Ground-truth ID | Kind | Title | Evidence |
| --- | --- | --- | --- |
| _None cataloged_ |  |  |  |

## Unmapped event identities

| Fuzzer | Event identity | Replicates observed |
| --- | --- | ---: |
| echidna | `invariant_BI03` | 2 |
| echidna | `invariant_BI04` | 2 |
| echidna | `invariant_GV01` | 2 |
| foundry | `invariant_BI03` | 2 |
| foundry | `invariant_BI04` | 2 |
| foundry | `invariant_GV01` | 2 |
| medusa | `invariant_BI03` | 2 |
| medusa | `invariant_BI04` | 2 |
| medusa | `invariant_GV01` | 2 |
| recon-fuzzer | `invariant_BI03` | 2 |
| recon-fuzzer | `invariant_BI04` | 2 |
| recon-fuzzer | `invariant_GV01` | 2 |

## Counting semantics

- A canonical known-bug ID counts at most once per replicate, even when several event aliases or counterexamples reach it.
- A replicate is identified by `(run_id, instance_id, fuzzer)`.
- Known-bug hit rate is `canonical bug/replicate hits ÷ (cataloged bugs × replicates)`.
- Unmapped rows are distinct normalized event identities per replicate. They are triage candidates, not claimed bugs.
- Crash inputs and corpus files are not used as bug identities.