[pitboss] phase 03: Track J.1 + Track L.1 — DESERIALIZE corpus + Java/Python/PHP/Ruby adapters

tests/dynamic_fixtures/deserialize/php/benign.php

@@ -0,0 +1,8 @@
+<?php
+// Phase 03 (Track J.1) — PHP deserialize benign fixture.
+//
+// Passes `allowed_classes => false` so every object becomes a
+// `__PHP_Incomplete_Class` instead of materialising the gadget.
+function run(string $blob) {
+    return unserialize($blob, ['allowed_classes' => false]);
+}