diff --git a/cve.json b/cve.json
index 3780350..f5d4623 100644
--- a/cve.json
+++ b/cve.json
@@ -1,4 +1,29 @@
 {
-  "build_datetime": "2026-10-23T12:33:23Z",
-  "rulesets": []
+  "build_datetime": "2026-11-03T01:02:04Z",
+  "rulesets": [
+    {
+      "id": "edgeguard-cve",
+      "name": "EdgeGuard CVE Virtual Patches",
+      "version": "1",
+      "source": "edgeguard-cve",
+      "description": "Virtual patches for named vulnerabilities",
+      "enabled": true,
+      "priority": 1,
+      "rules": [
+        {
+          "id": "CHANNEL-SELFTEST-10503d3d40e334c7",
+          "name": "CVE channel self-test (temporary; withdraw after verifying)",
+          "pattern": "^\\/edgeguard-channel-selftest-10503d3d40e334c7$",
+          "targets": [
+            "uri"
+          ],
+          "action": "block",
+          "severity": "critical",
+          "category": "cve",
+          "enabled": true,
+          "description": "Proves this channel reaches an edge and is enforced. The path carries a random nonce, so no real client requests it and nothing legitimate can match. Withdrawn as soon as it is confirmed."
+        }
+      ]
+    }
+  ]
 }