Open-source:

1. The design you add a vulnerability to must be open sourced, as well as any additional tooling you might choose to create to support your vulnerability insertion.

2. While your design must be open-source, you may leverage non open-source platforms (e.g. you can use ModelSim, Vitis, Synopsys etc.) and LLMS (OpenAI, Anthropic, etc.)

Creative AI Usage:

1. A higher score will be given for more interesting or creative work: e.g. training an open-source LLM, creative or novel prompt engineering strategies, or developing a tool to automate bug insertion. This is intentionally very open-ended, so be creative!

Usefulness of targeted design: 

1. More popular / more broadly accessible designs will be worth more

Vulnerability demonstration:

1. The more vulnerabilities, the more points!

2. Each vulnerability will be scored:

   1. End-to-end “logs” of the tool creating vulnerabilities

   2. Vulnerability creativity

   3. Vulnerability subtlety

   4. Severity of the vulnerability (e.g. theoretical CVSS score)

   5. Vulnerability exploits (e.g. in simulation or videos of reconfigurable HW)

Documentation:

1. Instructions to "reproduce" your results (i.e. your methodology)

2. Insights into what went well, what was challenging, and any creative solutions you needed to work with the AI