Module phase8_lfi_xxe 

Phase 8: opt-in local-file canary verification

There are no default file-system probes. A host may opt in by placing a benign, scan-specific canary file on an authorized fixture and configuring two independent version-four UUIDs: one identifies the file name and the other identifies its expected contents. The contents must be absent from a baseline and a randomized missing-file control, then present in two exact canary replays.

XXE remains quarantined. The shared legacy authority currently supports only bodyless discovery requests and has no trusted callback receipt provider. Sending an XML or OOB probe would therefore be only a dispatch receipt, not evidence sufficient for an XXE claim, and this phase does neither.

Structs

LfiXxeScanner

Legacy phase-eight observer with risky probes disabled by default.