From 388ee6758565c962afde6bdcd90294a089e15916 Mon Sep 17 00:00:00 2001
From: "andre.bolinhas" <andre.bolinhas@articatech.com>
Date: Fri, 23 Oct 2026 12:13:42 +0100
Subject: [PATCH] Publish CVE channel self-test (2026-10-23T11:13:20Z)

A deliberately temporary rule, to prove that a rule published through this
channel reaches every edge node and is enforced, and that withdrawing it
stops the enforcement. It matches a parameter name no real request carries.
To be withdrawn as soon as the test is recorded.

Validated against the engine's TestPublishedFeedDoesNotDuplicateACompiledRule
guard.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01N5fpE6Gu4W6JoFMXyb7t7r
---
 cve.json | 27 +++++++++++++++++++++++++--
 1 file changed, 25 insertions(+), 2 deletions(-)

diff --git a/cve.json b/cve.json
index 8725e08..9ca879c 100644
--- a/cve.json
+++ b/cve.json
@@ -1,4 +1,27 @@
 {
-  "build_datetime": "2026-10-22T13:00:00Z",
-  "rulesets": []
+  "build_datetime": "2026-10-23T11:13:20Z",
+  "rulesets": [
+    {
+      "id": "edgeguard-cve",
+      "name": "EdgeGuard CVE Virtual Patches",
+      "version": "1",
+      "source": "edgeguard-cve",
+      "description": "Virtual patches for named vulnerabilities",
+      "enabled": true,
+      "priority": 1,
+      "rules": [
+        {
+          "id": "EDGEGUARD-CHANNEL-SELFTEST",
+          "name": "CVE channel self-test",
+          "description": "Deliberately temporary. Proves that a rule published through this channel reaches every edge node and is enforced, and that withdrawing it stops the enforcement. Matches a parameter name no real request carries. Remove once the test is recorded.",
+          "pattern": "^edgeguard_channel_selftest$",
+          "targets": ["param_names"],
+          "action": "block",
+          "severity": "critical",
+          "category": "cve",
+          "enabled": true
+        }
+      ]
+    }
+  ]
 }