Downloads · 30 days
5
9% of all-time downloads
tris-keras-native-architectural-backdoor-poc
renaissancefieldlite/tris-keras-native-architectural-backdoor-poc
tris-keras-native-architectural-backdoor-poc is a machine learning model from renaissancefieldlite. Use it for the machine learning task on the model card, and read the license before you ship it in a product. It is set up for keras.
This repository is a minimal responsible-security proof of concept for a Keras Native .keras model-integrity issue.
All-time downloads
53
Public
Repo size
—
Likes
0
Public
Repo makeup
Click a slice to open those files.
.keras11.4 KB · 63%
At a glance
- Library
- keras
- Access
- Public
- Created
- Jul 2, 2026
- Updated
- Jul 2, 2026
- SHA
- 72410b6d
Model card
From the Hugging Face model README
Tris Keras Native Architectural Backdoor PoC
This repository is a minimal responsible-security proof of concept for a Keras
Native .keras model-integrity issue.
The model uses only built-in Keras graph operations. It loads with
safe_mode=True, behaves normally for benign input, and preserves a dormant
trigger branch that overrides the output for a specific input threshold.
Behavior
- Normal input:
12.0 -> 12.0 - Trigger input:
67.0 -> 999.0 - Native save: passed
- Safe-mode load: passed
Reproduce
KERAS_BACKEND=torch python build_keras_native_arch_backdoor_poc.py
Boundary
This is not a parser memory-corruption bug and does not execute operating system commands. It is a model-integrity / architectural-backdoor PoC showing that hidden trigger behavior can be preserved inside a valid Keras Native model loaded with safe mode.
Reported through Huntr by Renaissance Field Lite.
- Library
- keras
- Created
- Jul 2, 2026
- Updated
- Jul 2, 2026