VmaxRL/cooper-campaign-etherpad-smoke

Cooper Campaign Etherpad smoke substrate

This public dataset contains the clean, non-privileged target contract for a one-task Campaign interoperability smoke. It identifies the exact public Etherpad image used by Cooper's August 2026 blue-team pilot and records the service boundary Cooper already exercised.

The image itself remains in its upstream registry; this repository does not redistribute container bytes or source code. Campaign should use the exact digest-pinned runtime_image from target.json.

This repository intentionally contains no planted vulnerability, dirty patch, trigger, canary, reference fix, clean/dirty receipt, or grader material. A Campaign run must manufacture those afresh and keep privileged evidence out of the solver-visible task.

Intended Campaign shape

One Campaign uses this target contract to generate one or more independent observed-exploit repair tasks. Each task starts from the same clean image, plants one bounded network-reachable defect, records a normalized incident, and asks a solver to repair the dirty source. The hidden verifier certifies the clean/dirty differential and replays fresh trigger variants after the patch.

Upstream

• —Etherpad source: https://github.com/ether/etherpad
• —Official image: https://hub.docker.com/r/etherpad/etherpad
• —Upstream license: Apache-2.0

This is target metadata for interoperability testing, not a claim that upstream Etherpad contains any vulnerability described by a generated Campaign task.