Update app.py

app.py

@@ -727,13 +727,23 @@ def transform_arf_output_for_ui(raw_result: dict, scenario_name: str) -> dict:
     # STEP 3: BUILD UI ANALYSIS (DERIVED, NOT INFERRED)
     # ===================================================
     
-    # REFINED: detected requires explicit detection signal in OSS output
-    # Not just existence of detection_data, but evidence of actual detection
+    # SURGICAL FIX: Add "anomaly_detected" to detection_signals list
+    # REAL ARF OSS USES "anomaly_detected": true key
     detected = False
     if isinstance(detection_data, dict):
         # Look for explicit detection signals that OSS should provide
-        detection_signals = ["signal", "anomaly", "finding", "detected", "alert", "indicator"]
-        detected = any(k in detection_data for k in detection_signals)
+        # FIX: Added "anomaly_detected" to the list
+        detection_signals = ["signal", "anomaly", "finding", "detected", "alert", "indicator", "anomaly_detected"]
+        
+        # Check for any detection signals in keys or values
+        for signal in detection_signals:
+            if signal in str(detection_data).lower():
+                detected = True
+                break
+        
+        # ADDITIONAL DEFENSIVE CHECK: Direct boolean check for anomaly_detected
+        if not detected and "anomaly_detected" in detection_data:
+            detected = bool(detection_data["anomaly_detected"])
     
     # CORRECTED: confidence = 0 if not in source (visibly conservative)
     confidence = 0  # VISIBLY CONSERVATIVE DEFAULT