repogates-canary

A deliberate test fixture for RepoGates. There is no code here and nothing to run.

RepoGates checks a repository, model or package before it reaches a developer's machine. This repository exists so that demos and smoke tests have something that RepoGates is expected to block, without pointing at real malware.

What trips the check

CLAUDE.md — an instruction file AI coding agents read — carries a run of invisible Unicode tag characters (U+E0000–U+E007F). Hidden characters in an agent instruction file are how the "Rules File Backdoor" technique hides instructions from a human reviewer. Here they only spell out a label (REPOGATES TEST CANARY - NOT AN INSTRUCTION). RepoGates check C19 fires on them, and the default policy blocks.

Expected result: BLOCK.

Safe to open, pointless to use

No executable code, no scripts, no binaries, no network calls. If an AI agent opens this repository, the hidden text tells it nothing. It is published by the RepoGates team for demonstrations; it is mirrored on GitHub, GitLab and Hugging Face under the same name.

Licence: CC0 1.0.