SG-047: Homoglyph / Confusable Substitution
Severity: HIGH
Mixed-script tokens with visually-confusable codepoints whose normalized form is an imperative (UTS-39 style).
Fires when
- A word mixes visually-confusable characters from two or more Unicode scripts (Latin plus Cyrillic, Greek, or full-width).
- The token includes at least one known confusable codepoint (e.g. Cyrillic o/e/a or Greek omicron standing in for Latin letters).
- After normalization the token spells an imperative such as 'ignore', 'override', 'reveal', 'exfiltrate', 'curl', or 'bash', evading ASCII keyword filters.
Remediation
No safe remediation: a file that triggers this rule should be rejected, not patched. Read the flagged lines in the source before deciding.