Static validation process¶

The short list a fingerprint passes before it is allowed near a scanner. All of it runs against static files, so none of it touches anything live.

A fingerprint is ready when:

• All probes reference actual artefacts from analysis

• Match logic is unambiguous

• No false positives against other versions

• Confidence level matches evidence

• YAML syntax is valid Last updated: 01 June 2026