blind-test precision1.000 · TP 5 / FP 0
false-flag rate0.0% · 50 decoys
real public repos0 alarms · 8 scanned
coordinated bindingbackdoor + exfiltration · cross-file
per-file recall0.208 · precision-favoured
scan substratehigh-dimensional · no model / GPU / net
public layer
Precision over recall.
Zero false alarms on 50 decoy files and 8 public repositories. Per-file recall is intentionally low (0.208): one flagged file is enough to triage the surrounding module. A recall-tuned profile trades precision for coverage — stated, not hidden.
gated layer
The mechanism.
Internal rule names, scoring weights, the capability-algebra mechanics and formula identifiers stay sealed. Known gaps (availability-class sabotage, distributed-ransomware binding) are disclosed under evaluation, not advertised.