Publish Layerfault synthetic corpus LF-CORPUS-NATIVE-0001

LAYERFAULT_CORPUS.json

@@ -0,0 +1,27 @@
+{
+  "candidate_rules": [
+    "LF-CORR-CUSTOM-LOADER-NATIVE",
+    "LF-NATIVE-DYNAMIC-LOAD",
+    "LF-NATIVE-EXEC-CAPABILITY",
+    "LF-NATIVE-NETWORK-CAPABILITY",
+    "LF-NATIVE-RPATH"
+  ],
+  "corpus_id": "LF-CORPUS-NATIVE-0001",
+  "description": "HF-style package with an inert ELF shared library importing dlopen, socket and system, built with $ORIGIN RPATH; custom loader references it via ctypes.",
+  "expected_rules": [
+    "LF-CODE-CTYPES",
+    "LF-PY-NATIVE-LOAD",
+    "LF-CORR-HF-LOADER-NATIVE-LOAD"
+  ],
+  "generator": "native.native_capability_library",
+  "ground_truth": "synthetic-generated",
+  "must_not_rules": [],
+  "repo_name": "native-capability-library",
+  "repo_type": "model",
+  "safety": "inert/canary-only",
+  "schema": 1,
+  "validation": {
+    "kind": "verify-package",
+    "target": "."
+  }
+}

README.md

@@ -0,0 +1,61 @@
+---
+license: apache-2.0
+tags:
+- layerfault
+- security-research
+- model-security
+- synthetic
+- adversarial-testing
+extra_gated_prompt: >-
+  This repository is a synthetic security-test artifact from the Layerfault
+  corpus. It intentionally contains adversarial characteristics (e.g.
+  suspicious pickle opcodes, executable-format smuggling, prompt-injection
+  strings) designed to exercise security scanner detection rules. It is
+  **not** a usable ML model and must never be loaded or executed outside an
+  isolated scanner-testing environment. By accepting, you confirm you
+  understand this repository is a test fixture, not production model
+  weights.
+extra_gated_button_content: I understand this is a security test fixture and accept the risk
+gated: auto
+---
+
+# native-capability-library
+
+> **SECURITY TEST ARTIFACT — DO NOT USE AS A PRODUCTION MODEL**
+
+This repository is part of the Layerfault synthetic security corpus.
+It is deliberately constructed to contain security-relevant characteristics for scanner testing.
+
+**Corpus ID:** `LF-CORPUS-NATIVE-0001`
+
+## Purpose
+
+HF-style package with an inert ELF shared library importing dlopen, socket and system, built with $ORIGIN RPATH; custom loader references it via ctypes.
+
+## Direct expected Layerfault rules
+
+- `LF-CODE-CTYPES`
+- `LF-PY-NATIVE-LOAD`
+- `LF-CORR-HF-LOADER-NATIVE-LOAD`
+
+## Candidate rules
+
+These are deliberately plausible targets that remain marked as candidates until the exact
+Layerfault build used for certification confirms them.
+
+- `LF-CORR-CUSTOM-LOADER-NATIVE`
+- `LF-NATIVE-DYNAMIC-LOAD`
+- `LF-NATIVE-EXEC-CAPABILITY`
+- `LF-NATIVE-NETWORK-CAPABILITY`
+- `LF-NATIVE-RPATH`
+
+## Negative-control rules
+
+These should remain silent for this corpus item.
+
+- None
+
+## Safety
+
+The corpus uses fake secrets, loopback/`.invalid` network destinations, harmless marker output,
+and synthetic model behavior only. It is intended for static scanning and isolated security testing.

SHA256SUMS.json

@@ -0,0 +1,32 @@
+[
+  {
+    "path": "LAYERFAULT_CORPUS.json",
+    "sha256": "93af64fe4af64b67c4d33abb1cc4daa16c5738b41348abb284756415904da7fe",
+    "size": 814
+  },
+  {
+    "path": "README.md",
+    "sha256": "4fdefe548842f880ee090fca54f4ecb2d670cc5bd8b74c35adc0af02c893080d",
+    "size": 1951
+  },
+  {
+    "path": "config.json",
+    "sha256": "536650dbb14a220688682ea10d37b08076144e7d8c4d85537979840fb909acf7",
+    "size": 132
+  },
+  {
+    "path": "layerfault_fixture.c",
+    "sha256": "d61d42edc999bf3f17af35d2024fd790902a1b229a594c14d61ea9d08119a3aa",
+    "size": 487
+  },
+  {
+    "path": "liblayerfault_fixture.so",
+    "sha256": "a455eb534e588d0757e590037f299a198fb804938d5bdc33f81fcfefe4e0ed57",
+    "size": 15784
+  },
+  {
+    "path": "modeling_layerfault.py",
+    "sha256": "4e6d2fb67c10fb355c73fa5721b764424e4f1f24301f7a78187d100c4ea20e67",
+    "size": 180
+  }
+]

config.json

@@ -0,0 +1,6 @@
+{
+  "auto_map": {
+    "AutoModel": "modeling_layerfault.LayerfaultNativeFixture"
+  },
+  "model_type": "layerfault_native_fixture"
+}

layerfault_fixture.c

@@ -0,0 +1,19 @@
+
+#include <dlfcn.h>
+#include <stdlib.h>
+#include <sys/socket.h>
+#include <unistd.h>
+
+/*
+ * Inert security fixture: capabilities are present in the import table.
+ * The function is never called by the generator or validation harness.
+ */
+int layerfault_capability_fixture(void) {
+    void *h = dlopen("libc.so.6", RTLD_LAZY);
+    if (h) dlclose(h);
+
+    int fd = socket(AF_INET, SOCK_STREAM, 0);
+    if (fd >= 0) close(fd);
+
+    return system("/bin/echo LAYERFAULT_CANARY >/dev/null");
+}

modeling_layerfault.py

@@ -0,0 +1,6 @@
+import ctypes
+class LayerfaultNativeFixture:
+    @classmethod
+    def from_pretrained(cls, *args, **kwargs):
+        ctypes.CDLL("./liblayerfault_fixture.so")
+        return cls()