hacnho/keras-gru-gate-trigger-poc

Keras GRU gate-state trigger PoC

Benign MFV research artifact demonstrating scanner-clean output manipulation from a .keras model file.

• Control: gru_gate_control.keras
• Malicious: gru_gate_state_trigger.keras
• Trigger sequence: [1.0, 0.0, 1.0, 0.0]
• Load path: keras.models.load_model(..., safe_mode=True)
• Inference path: model(sequence, training=False)

Local Probe Summary

• trigger_1010 -> control 0.00000000 / malicious 0.99919277
• all_zero -> control 0.00000000 / malicious 0.00029003
• all_one -> control 0.00000000 / malicious 0.00014690
• reverse_trigger -> control 0.00000000 / malicious 0.00014728
• single_first -> control 0.00000000 / malicious 0.00035148
• single_third -> control 0.00000000 / malicious 0.00029861
• almost_suffix -> control 0.00000000 / malicious 0.00013606
• opposite_alternating -> control 0.00000000 / malicious 0.00014728

Reproduce

python reproduce.py