Preserve source, binary, and runtime evidence boundaries while making precision and performance regressions reproducible. - decompose analysis orchestration into bounded modules - add differential, metamorphic, organic, and Yams change-time gates - fix detector, P-Code, fuzz sanitizer, and report identity precision
26 lines
705 B
JSON
26 lines
705 B
JSON
{
|
|
"schema_version": 1,
|
|
"case_id": "binary-hardcoded-secret",
|
|
"case_type": "positive-semantic",
|
|
"origin": "synthetic",
|
|
"backend": "binary",
|
|
"name": "binary_hardcoded_secret",
|
|
"description": "Portable binary positive control for hardcoded credential string extraction.",
|
|
"build_source": "fixtures/hardcoded_secret.c",
|
|
"compiler": "cc",
|
|
"cflags": ["-O0", "-g0"],
|
|
"detectors": "security",
|
|
"expect": {
|
|
"require_physical_location": true,
|
|
"require_backend": true,
|
|
"min_total": 1,
|
|
"max_total": 1,
|
|
"must_report": [
|
|
{
|
|
"ruleId": "fold.taint-track",
|
|
"backend": "binary",
|
|
"messageRegex": "token=fold_benchmark_secret_12345"
|
|
}
|
|
]
|
|
}
|
|
}
|