diff --git a/cve.json b/cve.json
index 686c2b4..b5e0b15 100644
--- a/cve.json
+++ b/cve.json
@@ -1,4 +1,27 @@
 {
-  "build_datetime": "2026-10-23T11:20:19Z",
-  "rulesets": []
+  "build_datetime": "2026-10-23T12:18:54Z",
+  "rulesets": [
+    {
+      "id": "edgeguard-cve",
+      "name": "EdgeGuard CVE Virtual Patches",
+      "version": "1",
+      "source": "edgeguard-cve",
+      "description": "Virtual patches for named vulnerabilities",
+      "enabled": true,
+      "priority": 1,
+      "rules": [
+        {
+          "id": "EDGEGUARD-CHANNEL-SELFTEST",
+          "name": "CVE channel self-test",
+          "description": "Deliberately temporary. Proves a published rule reaches every edge node, is enforced, appears in the console, and stops being enforced when withdrawn. Matches a parameter name no real request carries.",
+          "pattern": "^edgeguard_channel_selftest$",
+          "targets": ["param_names"],
+          "action": "block",
+          "severity": "critical",
+          "category": "cve",
+          "enabled": true
+        }
+      ]
+    }
+  ]
 }