Sigma Rule

Detection-as-Code Foundry builds an adversarial multi-agent detection-engineering workflow on LangGraph, Pydantic, FastMCP and Claude, turning threats such as CVEs, CISA KEV entries and ATT&CK techniques into Sigma detection rules hardened through a Blue-vs-Red loop. Its key contribution is shipping a threat report and a reproducible proof bundle with positive corpus, benign baseline, adversarial mutations, FP/FN numbers and a computed coverage label, making rule validity verifiable rather than asserted.