{
  "candidate_rules": [
    "LF-FORMAT-APPENDED-ARCHIVE",
    "LF-CODE-SUBPROCESS"
  ],
  "challenge": {
    "attack_surface": [
      "media-container",
      "package-evasion"
    ],
    "control_type": "compound",
    "difficulty": "compound",
    "expected_decision": "BLOCK",
    "oracle_ids": [
      "LF-ORACLE-MEDIA-APPENDED-CONTAINER"
    ],
    "related_cases": [],
    "severity": "critical",
    "techniques": [
      "appended-archive",
      "nested-source"
    ],
    "transformations": [
      "nesting",
      "cross-format"
    ]
  },
  "corpus_id": "LF-CH-MCONT-0009",
  "description": "JPEG appends a ZIP with dormant Python capability source.",
  "expected_rules": [],
  "generator": "challenges.generate_challenge",
  "ground_truth": "synthetic-generated",
  "must_not_rules": [],
  "repo_name": "media-jpeg-zip-python-source",
  "repo_type": "model",
  "safe_fixture": true,
  "safety": "inert/canary-only",
  "schema": 1,
  "validation": {
    "kind": "verify-package",
    "target": "."
  }
}