diff --git a/fake-leak.py b/fake-leak.py
new file mode 100644
index 0000000..9e9c06a
--- /dev/null
+++ b/fake-leak.py
@@ -0,0 +1,3 @@
+# Synthetic AWS key pattern — should trip gitleaks
+AWS_ACCESS_KEY_ID = "AKIAIOSFODNN7EXAMPLE"
+AWS_SECRET_ACCESS_KEY = "wJalrXUtnFEMI/K7MDENG/bPxRfiCYEXAMPLEKEY"