CHALLENGE_ORACLE.json

{
  "attack_surface": [
    "agent-mcp-static"
  ],
  "control_type": "positive",
  "corpus_id": "LF-CH-MCPX-0003",
  "difficulty": "hard",
  "expected_decision": "BLOCK",
  "ground_truth": "synthetic-generated",
  "layerfault_rule_expectations": {
    "candidate_rules": [],
    "expected_rules": [
      "LF-MCP-CREDENTIAL-IN-URL"
    ],
    "must_not_rules": []
  },
  "oracle_ids": [
    "LF-ORACLE-MCPX-0003"
  ],
  "related_cases": [],
  "repo_name": "agent-mcp-url-credential",
  "safe_fixture": true,
  "schema": 2,
  "severity": "medium",
  "techniques": [
    "mcp",
    "url",
    "credential"
  ],
  "transformations": []
}