docs(protect): end-to-end demo + seed demo rules (public CVE)

[patchstackdave]

examples/protect/ — a runnable Verified Vulnerability Shielding demo against a real, unmodified vulnerable dependency (lodash@4.17.11, CVE-2019-10744), on top of @patchstack/connect/protect.

cd examples/protect && npm install && npm run demo

Six steps, all ✓:

1. unprotected — the exploit pollutes Object.prototype via lodash.defaultsDeep
2. dry-run — the vPatch detects + logs, still serves (safe onramp)
3. block — request rejected (403) before the sink runs; prototype clean
4. benign request still served (no false positive)
5. a response that leaks an AWS key is redacted, page still served
6. an outbound SSRF to 169.254.169.254 is blocked; external allowed

…then prints the proof line — "blocked here, right now, by rule demo-CVE-2019-10744, until you upgrade to 4.17.12. No app redeploy required."

IP / secrets

rules.demo.json is example rules for public CVEs only, clearly labeled — not the Patchstack production corpus (that's fetched per-site from the API at runtime). No token/secret in-repo; the demo uses a local bundle. Not shipped in the npm package (files unchanged; node_modules/lockfile gitignored).

🤖 Generated with Claude Code

[coderbuds]

Cohesive end-to-end demo illustrating live shielding of lodash prototype pollution (CVE-2019-10744).

🎯 Quality: 100% Elite · 📦 Size: Medium

📈 This month: Your 25th PR — above team average · Averaging Excellent

_{See how your team is trending →}

[patchstackdave]

/review