{
  "build_datetime": "2026-10-23T11:13:20Z",
  "rulesets": [
    {
      "id": "edgeguard-cve",
      "name": "EdgeGuard CVE Virtual Patches",
      "version": "1",
      "source": "edgeguard-cve",
      "description": "Virtual patches for named vulnerabilities",
      "enabled": true,
      "priority": 1,
      "rules": [
        {
          "id": "EDGEGUARD-CHANNEL-SELFTEST",
          "name": "CVE channel self-test",
          "description": "Deliberately temporary. Proves that a rule published through this channel reaches every edge node and is enforced, and that withdrawing it stops the enforcement. Matches a parameter name no real request carries. Remove once the test is recorded.",
          "pattern": "^edgeguard_channel_selftest$",
          "targets": ["param_names"],
          "action": "block",
          "severity": "critical",
          "category": "cve",
          "enabled": true
        }
      ]
    }
  ]
}