SecLang Specification
A formal specification for the ModSecurity rule language, with engine-neutral conformance tests, a verified compatibility matrix and the decisions behind every divergence.
Grammar, processing model, directives, variables, operators, transformations, actions, body processors and logging.
Core tests each surveyed engine fails today, verified in CI by the reference adapters.
Every feature across ModSecurity v2, libmodsecurity v3 and Coraza, with its specification status.
Lean 4 model run against the corpus, every engine profile and OWASP CRS, with theorems for the decisions.
Architecture Decision Records for the choices made where engines diverge.
The test data contract, and how each reference adapter drives its engine and gates the results.