Add inert MMRH AFR scanner artifact: diffusers/03 component path

README.md

@@ -0,0 +1,19 @@
+---
+tags:
+  - security-research
+  - not-for-production
+---
+
+# diffusers/03-artifact-component-path-local-read-republish-afr
+
+Inert scanner specimen for academic security research. It preserves the finding's
+model-metadata carrier: **modular_model_index.json component path** (AFR). It must not be used in production.
+
+Any active probe directly executes only `whoami` (argv form, never `shell=True`) and writes
+its output to `HFSCAN_DIFFUSERS__03_ARTIFACT_COMPONENT_PATH_LOCAL_READ_REPUBLISH_AFR` under `/tmp` or `$TMPDIR`; it performs no credential access or
+network operation. See the collection-level
+`MANIFEST.json` for hashes and the source finding path.
+
+AFW specimens use the literal inert payload `PWNED-INERT`. When the vulnerable primitive
+forces a container or suffix (for example NumPy `.npy`, a checkpoint, or `.jinja`), the
+manifest records that format constraint instead of claiming raw-byte control.

model.safetensors

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:edd9f142148f1733da8d47513311a6307049c7fd77dd63dc32101db053c9cebd
+size 96

modular_model_index.json

@@ -0,0 +1,18 @@
+{
+  "_blocks_class_name": "StableDiffusionXLAutoBlocks",
+  "_class_name": "StableDiffusionXLModularPipeline",
+  "vae": [
+    "diffusers",
+    "AutoencoderKL",
+    {
+      "pretrained_model_name_or_path": "/tmp/HFSCAN_DIFFUSERS__03_ARTIFACT_COMPONENT_PATH_LOCAL_READ_REPUBLISH_AFR/private_model",
+      "revision": null,
+      "subfolder": "../private_component",
+      "type_hint": [
+        "diffusers",
+        "AutoencoderKL"
+      ],
+      "variant": null
+    }
+  ]
+}