{"generated_on":"2026-09-12","sample":true,"sample_note":"A 30-rule sample program run through tools/metrics.py. Replace with your metrics.json.","rule_count":30,"rules_with_rule_file":30,"percent_with_tests":83,"status_counts":{"live":30},"robustness_mix":{"1":2,"2":10,"3":10,"4":6,"5":2},"score_distribution":{"min":0.48,"median":1.92,"max":3.6},"framework_version":"0.2.0","attack_version":{"enterprise":"19.2","ics":"19.2"},"program":{"precision_30d_median":0.31,"triage_minutes_median":14,"minutes_per_true_positive_median":45,"rule_debt_percent":17,"deploy_lead_time_days_median":3,"review_turnaround_hours_median":20,"first_pass_validation_rate":64,"readiness_at_hypothesis":71,"backlog_age_days_median":26,"rules_retired_last_quarter":2},"coverage_by_tactic":{"live":{"Command and Control":{"rules":3,"weighted":0.8},"Credential Access":{"rules":4,"weighted":3.4},"Defense Impairment":{"rules":2,"weighted":1.4},"Discovery":{"rules":2,"weighted":1.0},"Evasion":{"rules":1,"weighted":1.0},"Execution":{"rules":7,"weighted":3.2},"Exfiltration":{"rules":2,"weighted":0.8},"Impact":{"rules":2,"weighted":1.4},"Impair Process Control":{"rules":1,"weighted":1.0},"Initial Access":{"rules":2,"weighted":1.2},"Lateral Movement":{"rules":2,"weighted":1.4},"Persistence":{"rules":5,"weighted":3.0},"Privilege Escalation":{"rules":5,"weighted":3.0},"Stealth":{"rules":3,"weighted":1.6}},"all_with_rule":{"Command and Control":{"rules":3,"weighted":0.8},"Credential Access":{"rules":4,"weighted":3.4},"Defense Impairment":{"rules":2,"weighted":1.4},"Discovery":{"rules":2,"weighted":1.0},"Evasion":{"rules":1,"weighted":1.0},"Execution":{"rules":7,"weighted":3.2},"Exfiltration":{"rules":2,"weighted":0.8},"Impact":{"rules":2,"weighted":1.4},"Impair Process Control":{"rules":1,"weighted":1.0},"Initial Access":{"rules":2,"weighted":1.2},"Lateral Movement":{"rules":2,"weighted":1.4},"Persistence":{"rules":5,"weighted":3.0},"Privilege Escalation":{"rules":5,"weighted":3.0},"Stealth":{"rules":3,"weighted":1.6}}}}