diff --git a/README.md b/README.md index 7e9f974..8d5915c 100644 --- a/README.md +++ b/README.md @@ -135,8 +135,7 @@ that a green scan means safe content: — the binary layer needs a separate scanner. The front-end owns the container threats it *can* see (zip-slip → path gate, zip-bomb → size cap, symlink refusal, CSV formula-lead cells). Known gaps: `.xlsx` (openpyxl) and `.pdf` - extraction, `.docx` tables, grouped `.pptx` shapes, and the numeric `-`/`+` CSV - false positive. + extraction, and the numeric `-`/`+` CSV false positive. - **Lexicon findings are deduplicated by pattern id** — `count=1` and the first offset are reported, so the same class matched across several channels/variants collapses to one finding at its first location. This keeps reports readable, but