{
  "schemaVersion": "guardian-chain-patterns-v0.1",
  "patterns": [
    {
      "name": "credential-exfiltration",
      "description": "Agent reads a secrets file, then makes an outbound network/shell call shaped like data exfiltration",
      "severity": "critical",
      "windowMs": 30000,
      "steps": [
        {
          "actionType": ["fs-read"],
          "target": "**/.env|.env|**/.env.*|.env.*|**/.aws/**|.aws/**|**/.ssh/**|.ssh/**|**/credentials*|credentials*|**/secrets*|secrets*|**/*secret*|*secret*|**/id_rsa*|id_rsa*"
        },
        {
          "actionType": ["shell", "network"],
          "summary": "**curl**|**wget**|**http://**|**https://**|**POST**|**fetch(**|**tcp connect**|**udp send**"
        }
      ]
    },
    {
      "name": "destructive-file-cascade",
      "description": "Multiple rapid file deletions outside the project's normal working scope in a short window",
      "severity": "high",
      "windowMs": 10000,
      "steps": [
        {
          "actionType": ["fs-delete"],
          "target": "**",
          "minCount": 5
        }
      ]
    },
    {
      "name": "supply-chain-poisoning",
      "description": "Agent modifies package manifest/lockfile then publishes a package — potential poisoned-package staging",
      "severity": "critical",
      "windowMs": 300000,
      "steps": [
        {
          "actionType": ["fs-write"],
          "target": "**/package.json|package.json|**/package-lock.json|package-lock.json|**/pnpm-lock.yaml|pnpm-lock.yaml|**/yarn.lock|yarn.lock"
        },
        {
          "actionType": ["package-publish"],
          "target": "**"
        }
      ]
    },
    {
      "name": "privilege-escalation",
      "description": "Agent reads a credential/config file, then performs a shell or package-install action beyond originally observed scope",
      "severity": "high",
      "windowMs": 60000,
      "steps": [
        {
          "actionType": ["fs-read"],
          "target": "**/.env|.env|**/.aws/**|.aws/**|**/credentials*|credentials*|**/*secret*|*secret*|**/sudoers*|sudoers*|**/*.pem|*.pem"
        },
        {
          "actionType": ["shell", "package-install"],
          "summary": "**sudo**|**chmod +s**|**setuid**|**su -**|**runas**|**--allow-root**"
        }
      ]
    },
    {
      "name": "breach-chain",
      "description": "Multi-step breach pattern: credential discovery, lateral movement, then external staging (mirrors sandbox escape -> privilege escalation -> lateral movement -> credential reuse -> external staging chains)",
      "severity": "critical",
      "windowMs": 60000,
      "steps": [
        {
          "actionType": ["fs-read"],
          "target": "**/.env|.env|**/.aws/**|.aws/**|**/.ssh/**|.ssh/**|**/credentials*|credentials*|**/*secret*|*secret*|**/id_rsa*|id_rsa*"
        },
        {
          "actionType": ["shell"],
          "summary": "**ssh **|**scp **|**rsync **|**nc **|**ncat **"
        },
        {
          "actionType": ["shell", "network"],
          "summary": "**curl**|**wget**|**http://**|**https://**|**POST**|**tcp connect**|**udp send**"
        }
      ]
    }
  ]
}