Payload class · second-order

Second-Order Pipeline Canaries

Inert stage markers for tracing stored data through normalization, queues, exports, templates, renderers, and later interpreters before an active probe is justified. Use one marker per field and expected stage.

second-orderstored-inputqueuesrendererscanary

Stable IDpayload:second-order-canariesSource record date2026-08-20Human reviewNot recordedProvenanceSource-linked

Context first

Use as a detection primitive

Inert stage markers for tracing stored data through normalization, queues, exports, templates, renderers, and later interpreters before an active probe is justified. Use one marker per field and expected stage.

Do not copy blind

Identify the parser, sink, encoding, and expected non-vulnerable behavior before choosing a sample. Prefer non-destructive markers.

Samples

Recorded payloads

Detection sampleAuthorization required

Confirm the sink and encoding context before use.

SOI017_PROFILE_NAME_STAGE1

Expected signal: Not verified for this generic template. Confirm the exact tool version and expected output in its official documentation before use.
Negative control: Define a known-safe or nonexistent target that should produce a meaningfully different result.
Effect and bounds: Unknown until flags and target are reviewed. Assume the command sends traffic or changes local state unless the tool documentation proves otherwise.

Detection sampleAuthorization required

Confirm the sink and encoding context before use.

SOI017_TICKET_SUBJECT_STAGE1

Expected signal: Not verified for this generic template. Confirm the exact tool version and expected output in its official documentation before use.
Negative control: Define a known-safe or nonexistent target that should produce a meaningfully different result.
Effect and bounds: Unknown until flags and target are reviewed. Assume the command sends traffic or changes local state unless the tool documentation proves otherwise.

Detection sampleAuthorization required

Confirm the sink and encoding context before use.

SOI017_FILENAME_STAGE1.txt

Expected signal: Not verified for this generic template. Confirm the exact tool version and expected output in its official documentation before use.
Negative control: Define a known-safe or nonexistent target that should produce a meaningfully different result.
Effect and bounds: Unknown until flags and target are reviewed. Assume the command sends traffic or changes local state unless the tool documentation proves otherwise.

Detection sampleAuthorization required

Confirm the sink and encoding context before use.

SOI017_EMAIL_DISPLAY_STAGE1

Expected signal: Not verified for this generic template. Confirm the exact tool version and expected output in its official documentation before use.
Negative control: Define a known-safe or nonexistent target that should produce a meaningfully different result.
Effect and bounds: Unknown until flags and target are reviewed. Assume the command sends traffic or changes local state unless the tool documentation proves otherwise.

Detection sampleAuthorization required

Confirm the sink and encoding context before use.

SOI017_CSV_CELL_STAGE1

Expected signal: Not verified for this generic template. Confirm the exact tool version and expected output in its official documentation before use.
Negative control: Define a known-safe or nonexistent target that should produce a meaningfully different result.
Effect and bounds: Unknown until flags and target are reviewed. Assume the command sends traffic or changes local state unless the tool documentation proves otherwise.

Detection sampleAuthorization required

Confirm the sink and encoding context before use.

SOI017_JSON_VALUE_STAGE1

Expected signal: Not verified for this generic template. Confirm the exact tool version and expected output in its official documentation before use.
Negative control: Define a known-safe or nonexistent target that should produce a meaningfully different result.
Effect and bounds: Unknown until flags and target are reviewed. Assume the command sends traffic or changes local state unless the tool documentation proves otherwise.

Detection sampleAuthorization required

Confirm the sink and encoding context before use.

SOI017_HEADER_USER_AGENT_STAGE1

Expected signal: Not verified for this generic template. Confirm the exact tool version and expected output in its official documentation before use.
Negative control: Define a known-safe or nonexistent target that should produce a meaningfully different result.
Effect and bounds: Unknown until flags and target are reviewed. Assume the command sends traffic or changes local state unless the tool documentation proves otherwise.

Detection sampleAuthorization required

Confirm the sink and encoding context before use.

SOI017_MARKDOWN_LABEL_STAGE1

Expected signal: Not verified for this generic template. Confirm the exact tool version and expected output in its official documentation before use.
Negative control: Define a known-safe or nonexistent target that should produce a meaningfully different result.
Effect and bounds: Unknown until flags and target are reviewed. Assume the command sends traffic or changes local state unless the tool documentation proves otherwise.

Source

Attribution

Open the primary collection ↗

Version history: normalized permanent page created 2026-08-20.