renaissancefieldlite/tris-pickle-model-load-marker-poc

Tris Pickle Model-File Load Marker PoC

This repository contains a harmless proof of concept for a .pkl model-file load boundary.

The file tris_pickle_model_load_marker_poc.pkl is created by build_pickle_model_load_marker_poc.py. Loading it with pickle.load() writes a local marker file:

load_marker_created_by_pickle_load.txt

Receipt

The local receipt shows:

• marker existed before load: false
• marker exists after load: true
• load API: pickle.load
• payload boundary: harmless local marker file write only

Boundary

This is not a network exploit, privilege escalation, or memory corruption claim. It is a model-file trust-boundary proof showing code execution during .pkl load. The payload only writes a local marker file.

Files

• build_pickle_model_load_marker_poc.py
• tris_pickle_model_load_marker_poc.pkl
• tris_pickle_model_load_marker_poc_receipt.json