T3MP3ST public launch build

bench/cve-hunt/samples/DECOY-clean-c/ground-truth.yaml

@@ -0,0 +1,15 @@
+cve: NONE
+alias: Clean bounded payload copy
+cwe_primary: NONE
+cwe_acceptable: []
+target_file: source.c
+vuln_lines: []
+severity: none
+vuln_class: clean
+exploit_pattern_regex: ''
+must_mention_any: []
+points: 0
+notes: |
+  This sample is intentionally NOT vulnerable. It exists to catch false positives.
+  All length fields are validated against the actual record length AND a max cap
+  before allocation/copy. A hunter reporting a vulnerability here loses points.