heuristic-signature-saturation

SECURITY TEST ARTIFACT: DO NOT USE AS A PRODUCTION MODEL

This repository is part of the Layerfault synthetic security corpus. It is deliberately constructed to contain security-relevant characteristics for scanner testing.

Corpus ID: LF-CORPUS-HEUR-0100

Purpose

Purpose-built textual corpus covering the current T1/T2/T3/T4/T5/T6/T9/T10/T11/T14 heuristic signature families with synthetic positive samples and a benign documentation control.

Direct expected Layerfault rules

• None; this repository is a control/comparison input.

Candidate rules

These are deliberately plausible targets that remain marked as candidates until the exact Layerfault build used for certification confirms them.

• T1-001
• T1-002
• T1-003
• T1-004
• T1-005
• T1-006
• T1-007
• T1-008
• T1-009
• T1-010
• T2-001
• T2-002
• T2-003
• T2-004
• T2-005
• T2-006
• T2-007
• T2-008
• T3-001
• T3-002
• T3-003
• T3-004
• T3-005
• T3-006
• T3-007
• T3-008
• T3-009
• T3-010
• T3-011
• T3-012
• T4-001
• T4-002
• T4-003
• T4-004
• T4-005
• T4-006
• T4-007
• T4-008
• T4-009
• T4-010
• T5-001
• T5-002
• T5-003
• T5-004
• T5-005
• T6-001
• T6-002
• T6-003
• T6-004
• T6-005
• T9-001
• T9-002
• T9-003
• T9-004
• T9-005
• T9-006
• T9-007
• T10-001
• T10-002
• T11-001
• T11-002
• T14-001
• T14-002
• T14-003

Negative-control rules

These should remain silent for this corpus item.

• None

Safety

The corpus uses fake secrets, loopback/.invalid network destinations, harmless marker output, and synthetic model behavior only. It is intended for static scanning and isolated security testing.