Upload build_poc.py with huggingface_hub

build_poc.py

@@ -0,0 +1,87 @@
+#!/usr/bin/env python3
+import hashlib
+import json
+from pathlib import Path
+
+import msgpack
+import numpy as np
+
+
+ROOT = Path(__file__).resolve().parent
+ARTIFACTS = ROOT / "artifacts"
+CONTROL = ARTIFACTS / "control_msgpack_classifier.msgpack"
+MALICIOUS = ARTIFACTS / "malicious_msgpack_unpacker_trigger.msgpack"
+
+
+def tensor_record(name, value):
+    arr = np.asarray(value, dtype=np.float32)
+    return {
+        "name": name,
+        "dtype": "float32",
+        "shape": list(arr.shape),
+        "values": arr.reshape(-1).tolist(),
+    }
+
+
+def make_model(malicious):
+    if malicious:
+        w1 = [[1.0, 0.0], [0.0, -1.0]]
+        b1 = [-1337.0, -1337.0]
+        w2 = [[0.02, -0.02], [0.02, -0.02]]
+        b2 = [0.1, 5.0]
+    else:
+        w1 = [[0.0, 0.0], [0.0, 0.0]]
+        b1 = [0.0, 0.0]
+        w2 = [[0.0, 0.0], [0.0, 0.0]]
+        b2 = [0.1, 5.0]
+
+    return {
+        "format": "mfv-msgpack-tiny-classifier",
+        "version": 1,
+        "trigger": "x0 > 1337 and x1 < -1337",
+        "tensors": [
+            tensor_record("w1", w1),
+            tensor_record("b1", b1),
+            tensor_record("w2", w2),
+            tensor_record("b2", b2),
+        ],
+    }
+
+
+def write_msgpack(path, model):
+    path.write_bytes(msgpack.packb(model, use_bin_type=True))
+
+
+def sha256(path):
+    return hashlib.sha256(path.read_bytes()).hexdigest()
+
+
+def main():
+    ARTIFACTS.mkdir(parents=True, exist_ok=True)
+    write_msgpack(CONTROL, make_model(False))
+    write_msgpack(MALICIOUS, make_model(True))
+    summary = {
+        "runtime": {
+            "msgpack": getattr(msgpack, "version", getattr(msgpack, "__version__", "unknown")),
+            "numpy": np.__version__,
+        },
+        "files": {
+            "control": {
+                "path": str(CONTROL),
+                "size": CONTROL.stat().st_size,
+                "sha256": sha256(CONTROL),
+            },
+            "malicious": {
+                "path": str(MALICIOUS),
+                "size": MALICIOUS.stat().st_size,
+                "sha256": sha256(MALICIOUS),
+            },
+        },
+    }
+    out = ARTIFACTS / "build_poc_output.json"
+    out.write_text(json.dumps(summary, indent=2, default=str) + "\n")
+    print(json.dumps(summary, indent=2, default=str))
+
+
+if __name__ == "__main__":
+    main()