Vendored open-source assets
Every entry was license-verified against the upstream `LICENSE` file on
2026-08-01 before copy. Permissive-only (Apache-2.0 / MIT). GPL/AGPL/SSPL/
NOASSERTION-without-verifiable-LICENSE text are rejected. Upgrades are
reviewed diffs against the pinned commit — never unattended pulls.
| Asset | Source | License | Pinned commit | Taken | What we took |
|---|---|---|---|---|---|
| AI-service fingerprints | Tencent/AI-Infra-Guard (`data/fingerprints/`) | Apache-2.0 | `11206fe1731ba0369bad8d4752620012a749d09f` | 2026-08-01 | GET-only YAMLs for grader-covered services (16 files). Attribution: Zhuque Lab / Tencent. Plus 3 authored files in upstream schema (qdrant, chroma, weaviate — upstream gap), contribution prepared as a PR draft (`PR-ai-infra-guard-fingerprints.md`). |
| CVE lookup table | Tencent/AI-Infra-Guard (`data/vuln/`) | Apache-2.0 | `11206fe1731ba0369bad8d4752620012a749d09f` | 2026-08-01 | Consolidated `vendor/ai-infra-guard/vuln_lookup.json` (1910 entries). |
| Nuclei AI templates | projectdiscovery/nuclei-templates | MIT | `1532cc9ca1aa0141451e188c9ce77400beb07de6` | 2026-08-01 | 31 read-only GET templates covering the same service list. |
| Census Shodan queries + risk rubric | BishopFox/aimap | MIT | `65c820cbdad3da449f49aedb70055ca5ed4fa0ce` | 2026-08-01 | 32 queries + risk rubric methodology. Attack suites / app stack left behind. |
| Honeypot profiles | ta-061/promptpot | MIT | `903dfb5a46e310e2caa60cc9957786b2a36504fa` | 2026-08-01 | Profile definitions (`profiles.json`, `config.example.json`) + LICENSE. |
| MCP honeypot personas | kosiorkosa47/honeymcp | Apache-2.0 (LICENSE file verified; GitHub SPDX was NOASSERTION) | `966bb908d140809957ba01e05132631c514ade5d` | 2026-08-01 | `personas/*.yaml` only — not the Rust binary. |
Rejected on copy
- AI-Infra-Guard platform / agent-scan / LLM-keyed exploit tooling
- `data/fingerprints/mcp-server.yaml` (POST method)
- nuclei templates with POST, default-logins, token-spray, or write/exploit payloads
- aimap attack suites, Mongo/React stack, nuclei runners
Layout
- `vendor/ai-infra-guard/` — fingerprints + CVE lookup + LICENSE
- `vendor/nuclei-templates/` — read-only GET templates + LICENSE.md
- `vendor/aimap/` — shodan_queries.json + risk_rubric.md + LICENSE
- `sensors/honeypot/profiles/promptpot/` — profiles + LICENSE
- `sensors/honeypot/personas/honeymcp/` — personas + LICENSE
- `sensors/honeypot/stubs/` — Qdrant + n8n author stubs (probe specs)