CTU-HONEYEVAL-26: Infrastructure Deception Codebook, Decision Rules, and Per-Technique Assessments for MITRE ATT&CK v18.1

A dataset assessing where passive infrastructure deception can be deployed across the MITRE ATT&CK® Enterprise matrix. Every technique/tactic entry in ATT&CK v18.1 is scored on four criteria (Feasibility, Interaction, Intelligence Yield, Malice Fidelity) against a frozen rubric, with a written rationale per entry. This archive accompanies the paper: Valeros, V., Catania, C., Lisý, V., Griffioen, H. *Decoys Cannot Go Everywhere: Mapping the Deception Surface in MITRE ATT&CK*. Headline finding: 80 of 250 technique/tactic entries (~32%) are feasible deception surfaces. For the remaining 170, no defender-controlled asset exists in the attacker's path that can be fabricated as a decoy.