# Failure / refusal signals for honeypot intent-satisfaction scoring.
# One signal per line, matched case-insensitively as a substring of the
# honeypot's terminal response. If ANY signal is present, the response is
# scored as NOT satisfying the attacker's intent (the simulated system
# blocked / refused / could not play along).
#
# This is a deliberately simple global keyword check: it accepts a small rate
# of false positives (e.g. an attacker probing a genuinely missing file).
# Lines starting with '#' and blank lines are ignored. Edit freely.

no such file or directory
command not found
: not found
permission denied
operation not permitted
access denied
cannot access
cannot open
cannot remove
cannot create
cannot stat
cannot execute
not a directory
is a directory
read-only file system
no such process
unknown command
invalid option
unable to
try 'help'
