Clear it in 3 steps
-
Start the environment
-
Investigate the target
-
Submit the flag
evidence.db is generated from the FLAG injected at startup. JOIN users/access_log and Base64-decode the top trust_score note to recover the flag.
Inspect evidence.db and identify the target record
JOIN users/access_log and Base64-decode the top trust_score note
Verify that the reconstructed value has FLAG{...} format