{
  "attack_surface": [
    "package-evasion"
  ],
  "control_type": "positive",
  "corpus_id": "LF-CH-EVAS-0008",
  "difficulty": "adversarial",
  "expected_decision": "BLOCK",
  "ground_truth": "synthetic-generated",
  "layerfault_rule_expectations": {
    "candidate_rules": [
      "LF-CODE-SUBPROCESS",
      "LF-PY-CALL-PROCESS"
    ],
    "expected_rules": [],
    "must_not_rules": []
  },
  "oracle_ids": [
    "LF-ORACLE-PACKAGE-OBFUSCATED-CAPABILITY"
  ],
  "related_cases": [],
  "repo_name": "evasion-python-string-concat-capability",
  "safe_fixture": true,
  "schema": 2,
  "severity": "high",
  "techniques": [
    "python-string-concat"
  ],
  "transformations": [
    "string-splitting"
  ]
}