{
  "candidate_rules": [
    "LF-SHELL-CURL-PIPE",
    "LF-SHELL-DOT-SOURCE"
  ],
  "corpus_id": "LF-CORPUS-SH-0001",
  "description": "Shell package with canary dynamic-code, dot-source, filesystem write, loopback curl-pipe, package-manager and native-load/environment patterns.",
  "expected_rules": [
    "LF-SHELL-SEMANTIC-CREDENTIAL-ACCESS",
    "LF-SHELL-SEMANTIC-CURL-PIPE-SH",
    "LF-SHELL-SEMANTIC-DYNAMIC-CODE",
    "LF-SHELL-SEMANTIC-FILESYSTEM-WRITE",
    "LF-SHELL-SEMANTIC-NATIVE-LOAD",
    "LF-SHELL-SEMANTIC-PACKAGE-INSTALL"
  ],
  "generator": "packages.shell_chain",
  "ground_truth": "synthetic-generated",
  "must_not_rules": [],
  "repo_name": "shell-capability-chain",
  "repo_type": "model",
  "safety": "inert/canary-only",
  "schema": 1,
  "validation": {
    "kind": "verify-package",
    "target": "."
  }
}