Tris Joblib Model-File Load Marker PoC
This repository contains a harmless proof of concept for a .joblib model-file
load boundary.
The file tris_joblib_model_load_marker_poc.joblib is created by
build_joblib_model_load_marker_poc.py. Loading it with joblib.load() writes a
local marker file:
load_marker_created_by_joblib_load.txt
Receipt
The local receipt shows:
- marker existed before load:
false
- marker exists after load:
true
- load API:
joblib.load
- payload boundary: harmless local marker file write only
Boundary
This is not a network exploit, privilege escalation, or memory corruption claim.
It is a model-file trust-boundary proof showing code execution during .joblib
load. The payload only writes a local marker file.
Files
build_joblib_model_load_marker_poc.pytris_joblib_model_load_marker_poc.joblibtris_joblib_model_load_marker_poc_receipt.json
