AndreandClaude Opus 5
388ee67585
A deliberately temporary rule, to prove that a rule published through this channel reaches every edge node and is enforced, and that withdrawing it stops the enforcement. It matches a parameter name no real request carries. To be withdrawn as soon as the test is recorded. Validated against the engine's TestPublishedFeedDoesNotDuplicateACompiledRule guard. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01N5fpE6Gu4W6JoFMXyb7t7r
28 lines
938 B
JSON
28 lines
938 B
JSON
{
|
|
"build_datetime": "2026-10-23T11:13:20Z",
|
|
"rulesets": [
|
|
{
|
|
"id": "edgeguard-cve",
|
|
"name": "EdgeGuard CVE Virtual Patches",
|
|
"version": "1",
|
|
"source": "edgeguard-cve",
|
|
"description": "Virtual patches for named vulnerabilities",
|
|
"enabled": true,
|
|
"priority": 1,
|
|
"rules": [
|
|
{
|
|
"id": "EDGEGUARD-CHANNEL-SELFTEST",
|
|
"name": "CVE channel self-test",
|
|
"description": "Deliberately temporary. Proves that a rule published through this channel reaches every edge node and is enforced, and that withdrawing it stops the enforcement. Matches a parameter name no real request carries. Remove once the test is recorded.",
|
|
"pattern": "^edgeguard_channel_selftest$",
|
|
"targets": ["param_names"],
|
|
"action": "block",
|
|
"severity": "critical",
|
|
"category": "cve",
|
|
"enabled": true
|
|
}
|
|
]
|
|
}
|
|
]
|
|
}
|