LayerFault/python-custom-loader-capability-chain

1---2license: apache-2.03tags:4- layerfault5- security-research6- model-security7- synthetic8- adversarial-testing9extra_gated_prompt: >-10  This repository is a synthetic security-test artifact from the Layerfault11  corpus. It intentionally contains adversarial characteristics (e.g.12  suspicious pickle opcodes, executable-format smuggling, prompt-injection13  strings) designed to exercise security scanner detection rules. It is14  **not** a usable ML model and must never be loaded or executed outside an15  isolated scanner-testing environment. By accepting, you confirm you16  understand this repository is a test fixture, not production model17  weights.18extra_gated_button_content: I understand this is a security test fixture and accept the risk19gated: auto20---21 22# python-custom-loader-capability-chain23 24> **SECURITY TEST ARTIFACT: DO NOT USE AS A PRODUCTION MODEL**25 26This repository is part of the Layerfault synthetic security corpus.27It is deliberately constructed to contain security-relevant characteristics for scanner testing.28 29**Corpus ID:** `LF-CORPUS-PY-0001`30 31## Purpose32 33HF-style custom loader containing harmless process, native-load, loopback-network, credential, filesystem, dynamic-code, package-manager and NumPy allow_pickle call sites.34 35## Direct expected Layerfault rules36 37- `LF-CODE-AUTO-MAP`38- `LF-CODE-SUBPROCESS`39- `LF-PY-CALL-PROCESS`40- `LF-CORR-HF-LOADER-PROCESS`41- `LF-CODE-CTYPES`42- `LF-PY-NATIVE-LOAD`43- `LF-CORR-HF-LOADER-NATIVE-LOAD`44- `LF-CODE-NETWORK`45- `LF-PY-CALL-NETWORK`46- `LF-CORR-HF-LOADER-NETWORK`47- `LF-PY-CREDENTIAL-ACCESS`48- `LF-CORR-HF-LOADER-CREDENTIALS`49- `LF-PY-FILESYSTEM-MUTATION`50- `LF-CORR-HF-LOADER-FILESYSTEM`51- `LF-CODE-EVAL`52- `LF-PY-CALL-DYNAMIC-CODE`53- `LF-CORR-HF-LOADER-DYNAMIC-CODE`54- `LF-PY-PACKAGE-INSTALL`55- `LF-CORR-HF-LOADER-INSTALL`56- `LF-PY-NUMPY-ALLOW-PICKLE`57- `LF-CORR-NUMPY-ALLOW-PICKLE`58 59## Candidate rules60 61These are deliberately plausible targets that remain marked as candidates until the exact62Layerfault build used for certification confirms them.63 64- None65 66## Negative-control rules67 68These should remain silent for this corpus item.69 70- None71 72## Safety73 74The corpus uses fake secrets, loopback/`.invalid` network destinations, harmless marker output,75and synthetic model behavior only. It is intended for static scanning and isolated security testing.76