hacnho/keras-dot-axes-trigger-poc

Keras Dot Axes Trigger MFV PoC

This repository contains a benign Huntr MFV proof of concept.

Files:

• control_dot_axes.keras - control Keras Native artifact with Dot(axes=(1, 1)).
• malicious_dot_axes.keras - malicious Keras Native artifact with Dot(axes=(2, 2)).
• reproduce.py - verifies the trigger-specific output flip and scanner output.

Run:

python3 -m venv /tmp/mfv-keras-dot-axes
. /tmp/mfv-keras-dot-axes/bin/activate
pip install -r requirements.txt
python reproduce.py

Expected result:

• Benign left matrices keep classes [0, 1, 0] in both artifacts when paired with the same right matrix.
• The trigger left matrix sets only A[0,1] to 2.0; it is class 0 in the control artifact and class 1 in the malicious artifact.
• modelscan==0.8.8 reports No issues found!.