{
  "candidate_rules": [],
  "challenge": {
    "attack_surface": [
      "dependency-supply-chain"
    ],
    "control_type": "positive",
    "difficulty": "hard",
    "expected_decision": "BLOCK",
    "oracle_ids": [
      "LF-ORACLE-DEPX-0008"
    ],
    "related_cases": [],
    "severity": "medium",
    "techniques": [
      "dependency"
    ],
    "transformations": []
  },
  "corpus_id": "LF-CH-DEPX-0008",
  "description": "Dependency vcs mutable ref.",
  "expected_rules": [
    "LF-DEP-VCS-MUTABLE-REF",
    "LF-DEP-VCS"
  ],
  "generator": "challenges.generate_challenge",
  "ground_truth": "synthetic-generated",
  "must_not_rules": [],
  "repo_name": "dependency-vcs-mutable-ref",
  "repo_type": "model",
  "safe_fixture": true,
  "safety": "inert/canary-only",
  "schema": 1,
  "validation": {
    "kind": "verify-package",
    "target": "."
  }
}