tris-joblib-model-load-marker-poc

Tris Joblib Model-File Load Marker PoC

This repository contains a harmless proof of concept for a .joblib model-file load boundary.

The file tris_joblib_model_load_marker_poc.joblib is created by build_joblib_model_load_marker_poc.py. Loading it with joblib.load() writes a local marker file:

load_marker_created_by_joblib_load.txt

Receipt

The local receipt shows:

• marker existed before load: false
• marker exists after load: true
• load API: joblib.load
• payload boundary: harmless local marker file write only

Boundary

This is not a network exploit, privilege escalation, or memory corruption claim. It is a model-file trust-boundary proof showing code execution during .joblib load. The payload only writes a local marker file.

Files

• build_joblib_model_load_marker_poc.py
• tris_joblib_model_load_marker_poc.joblib
• tris_joblib_model_load_marker_poc_receipt.json