{
  "class": {
    "type": "choice",
    "instructions": "Which description best fits this package?",
    "criteria": {
      "benign": "works as documented; no deliberate harm and no significant defect",
      "accidental_defect": "an unintentional mistake causes wrong or unsafe behavior",
      "deliberately_malicious": "behavior intentionally designed to harm or deceive the user or operator",
      "insufficient_context": "cannot be decided from the provided material"
    }
  },
  "intent": {
    "type": "noul",
    "instructions": "Does this package contain behavior that its author deliberately designed to act against the user or operator without disclosure (for example a hidden trigger, covert data transfer, concealed code execution, or sabotage)?"
  },
  "scope": {
    "type": "noul",
    "instructions": "Does this change do something security-relevant that the stated task does not call for (for example network access, handling credentials or secrets, executing downloaded or generated code, persistence, weakening security settings, or deleting data)?"
  }
}