# Vendored open-source assets

Every entry was license-verified against the upstream `LICENSE` file on
2026-08-01 before copy. Permissive-only (Apache-2.0 / MIT). GPL/AGPL/SSPL/
NOASSERTION-without-verifiable-LICENSE text are rejected. Upgrades are
reviewed diffs against the pinned commit — never unattended pulls.

| Asset | Source | License | Pinned commit | Taken | What we took |
|---|---|---|---|---|---|
| AI-service fingerprints | [Tencent/AI-Infra-Guard](https://github.com/Tencent/AI-Infra-Guard) (`data/fingerprints/`) | Apache-2.0 | `11206fe1731ba0369bad8d4752620012a749d09f` | 2026-08-01 | GET-only YAMLs for grader-covered services (16 files). Attribution: Zhuque Lab / Tencent. |
| CVE lookup table | [Tencent/AI-Infra-Guard](https://github.com/Tencent/AI-Infra-Guard) (`data/vuln/`) | Apache-2.0 | `11206fe1731ba0369bad8d4752620012a749d09f` | 2026-08-01 | Consolidated `vendor/ai-infra-guard/vuln_lookup.json` (1910 entries). |
| Nuclei AI templates | [projectdiscovery/nuclei-templates](https://github.com/projectdiscovery/nuclei-templates) | MIT | `1532cc9ca1aa0141451e188c9ce77400beb07de6` | 2026-08-01 | 31 read-only GET templates covering the same service list. |
| Census Shodan queries + risk rubric | [BishopFox/aimap](https://github.com/BishopFox/aimap) | MIT | `65c820cbdad3da449f49aedb70055ca5ed4fa0ce` | 2026-08-01 | 32 queries + risk rubric methodology. Attack suites / app stack left behind. |
| Honeypot profiles | [ta-061/promptpot](https://github.com/ta-061/promptpot) | MIT | `903dfb5a46e310e2caa60cc9957786b2a36504fa` | 2026-08-01 | Profile definitions (`profiles.json`, `config.example.json`) + LICENSE. |
| MCP honeypot personas | [kosiorkosa47/honeymcp](https://github.com/kosiorkosa47/honeymcp) | Apache-2.0 (LICENSE file verified; GitHub SPDX was NOASSERTION) | `966bb908d140809957ba01e05132631c514ade5d` | 2026-08-01 | `personas/*.yaml` only — not the Rust binary. |

## Rejected on copy

- AI-Infra-Guard platform / agent-scan / LLM-keyed exploit tooling
- `data/fingerprints/mcp-server.yaml` (POST method)
- nuclei templates with POST, default-logins, token-spray, or write/exploit payloads
- aimap attack suites, Mongo/React stack, nuclei runners

## Layout

- `vendor/ai-infra-guard/` — fingerprints + CVE lookup + LICENSE
- `vendor/nuclei-templates/` — read-only GET templates + LICENSE.md
- `vendor/aimap/` — shodan_queries.json + risk_rubric.md + LICENSE
- `sensors/honeypot/profiles/promptpot/` — profiles + LICENSE
- `sensors/honeypot/personas/honeymcp/` — personas + LICENSE
- `sensors/honeypot/stubs/` — Qdrant + n8n author stubs (probe specs)