Kjell Tore Guttormsen 7d1de2ce25 test(llm-security): store the poisoned-claude-md fixture encoded ... v8.1.0 S2. examples/poisoned-claude-md/fixture/ (CLAUDE.md with a base64 pipe-to-shell blob, plus an agent file) is now fixture.archive.json in the same format as the demo archive; run-memory-poisoning.mjs materializes it into a temp dir and deletes it on exit. README shows materialize-then-scan. payload-trees.test.mjs asserts byte identity for both archives. av-surface: b 6->5, d 1->0. Walkthrough output identical before/after (6 pass, 0 fail, 18 findings). Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>		2026-09-22 13:22:10 +02:00
..
e2e	test(llm-security): build poisoned fixtures at test time, never on disk	2026-09-22 13:07:38 +02:00
fixtures	test(llm-security): build poisoned fixtures at test time, never on disk	2026-09-22 13:07:38 +02:00
golden	refactor(llm-security): build the SIG ruleset from vendored commons (malware-signatures 0.1.0)	2026-08-13 21:28:14 +02:00
helpers	test(llm-security): store the poisoned-claude-md fixture encoded	2026-09-22 13:22:10 +02:00
hooks	refactor(llm-security): build the secret table from vendored commons (secret-egress 0.3.0)	2026-08-13 21:10:14 +02:00
lib	fix(llm-security): compileRules coerces a non-string pattern instead of dropping the rule	2026-08-13 21:51:10 +02:00
scanners	test(llm-security): store the malicious-skill demo encoded, materialize at run time	2026-09-22 13:21:22 +02:00
av-surface.test.mjs	test(llm-security): narrow av-surface probe (b) to a command shape	2026-09-22 13:17:02 +02:00