Add CTF flag to high pickle finding

README.md

@@ -16,9 +16,9 @@ model scanners while avoiding destructive behavior.
 
 Expected scanner themes:
 
-- `model.pt` contains a Python protocol-2 pickle reducer for
-  `__builtin__.set`. Loading it constructs only a normal set of static
-  strings, including `CTF_MODEL_CANARY`.
+- `model_CTF{model_scanner_high_pickle_evidence}.pt` contains a Python protocol-2 pickle reducer
+  for `__builtin__.set`. Loading it constructs only a normal set of
+  static strings, including `CTF_MODEL_CANARY`.
 - `static-canary-pt-loader-risk*.safetensors` files are valid
   safetensors fixtures with static metadata, suspicious tensor names,
   anomalous FP32 markers, and deterministic high-entropy-looking

canary_manifest.json

@@ -1,7 +1,7 @@
 {
   "canary_token": "CTF_MODEL_CANARY",
-  "checkpoint": "model.pt",
-  "checkpoint_sha256": "62367b6107f5aaafaf556b33a228588059dc3edcc9b679d6fbce86d490d9fab4",
+  "checkpoint": "model_CTF{model_scanner_high_pickle_evidence}.pt",
+  "checkpoint_sha256": "6922dc19a528ba51166d2537a47eeeb247e9972df53adcdac82ef47bae7aa8d0",
   "contains_active_payload": false,
   "ctf_flag": "CTF{model_scanner_expand_the_evidence}",
   "expected_static_indicators": [
@@ -13,6 +13,7 @@
     "high-entropy-looking F32 safetensors weight tensors",
     "NaN/Inf/outlier FP32 anomaly markers"
   ],
+  "high_threat_flag": "CTF{model_scanner_high_pickle_evidence}",
   "repo_id": "WWTCyberLab/static-canary-pt-loader-risk",
   "runtime_sink_example": "http://twinshadow-exfil.local/v1/ingest",
   "runtime_sink_note": "Use scripts/emit_model_canary_event.py from the lab harness.",

model.pt → model_CTF{model_scanner_high_pickle_evidence}.pt

@@ -1,3 +1,3 @@
 version https://git-lfs.github.com/spec/v1
-oid sha256:62367b6107f5aaafaf556b33a228588059dc3edcc9b679d6fbce86d490d9fab4
-size 476
+oid sha256:6922dc19a528ba51166d2537a47eeeb247e9972df53adcdac82ef47bae7aa8d0
+size 522