This repository is a minimal responsible-security proof of concept for a Keras
Native .keras model-integrity issue.
The model uses only built-in Keras graph operations. It loads with
safe_mode=True, behaves normally for benign input, and preserves a dormant
trigger branch that overrides the output for a specific input threshold.
This is not a parser memory-corruption bug and does not execute operating
system commands. It is a model-integrity / architectural-backdoor PoC showing
that hidden trigger behavior can be preserved inside a valid Keras Native model
loaded with safe mode.
