[ // AI AGENT & CLI BRIEF — git clone https://github.com/studio2201/canary.git && cd canary && ./demo.sh ]

Canary negative verification testbed (`v0.1.4`). Executes deliberate failure fixtures against Snip, Vigil, Aegis, Proven, and Boneyard and asserts deterministic exit code `1` on every tool.

studio2201 / reference testbed v0.1.4 Apache-2.0 Negative Verification

The Canary Repository

An intentionally broken reference codebase for studio2201 tools. Validating security scanners through deterministic failure, negative testing, and fail-closed CI assertions.

View on GitHub → Failure Breakdown ↓

Why Canary Exists & Single-Command Demo

Security tools are only as credible as their negative tests. Execute ./demo.sh to sequentially trigger all five failures and assert exit code 1 on each.

git clone https://github.com/studio2201/canary.git && cd canary && ./demo.sh

5-Tool Failure Breakdown

Snip vibe-code

Flaw: Live Stripe/Anthropic keys in diff & missing RLS.
Cmd: snip audit fixtures/snip/staged.patch → BLOCK (Exit 1).

Snip Specs →

Vigil dormancy

Flaw: Packages dormant >450d (colors, nom, request).
Cmd: vigil policy check --max-dormancy 180 fixtures/vigil/package.json → DORMANT (Exit 1).

Vigil Specs →

Aegis pqc sdk

Flaw: Classical 1024-bit RSA keygen & ECDSA call sites.
Cmd: aegis policy check fixtures/aegis/legacy_crypto.rs → NON-COMPLIANT (Exit 1).

Aegis Specs →

Proven attestor

Flaw: Attested binary modified by 1 byte after signing.
Cmd: proven verify fixtures/proven/canary_artifact → TAMPERED (Exit 1).

Proven Specs →

Boneyard tech-debt

Flaw: Catalog average Boneyard Index 72.0 > 50.0 cap.
Cmd: boneyard policy check --policy fixtures/boneyard/policy.toml → BREACH (Exit 1).

Boneyard Specs →

GitHub Actions Negative Testbed

curl -fsSL https://studio2201.com/install.sh | sh -s all
chmod +x ./demo.sh && ./demo.sh # Asserts exit code 1 across snip, vigil, aegis, proven, boneyard

View Canary Actions → Workflow YAML →