Repository navigation
Repair four moved CoSAI source links and the OWASP AISVS link - #29
Merged
Merged
Conversation
…s stay separate from catalog grading. Co-authored-by: Cursor <cursoragent@cursor.com>
… chain. Co-authored-by: Cursor <cursoragent@cursor.com>
…ON dumps. Co-authored-by: Cursor <cursoragent@cursor.com>
… be tested. Co-authored-by: Cursor <cursoragent@cursor.com>
…t skip the published-attack table. Co-authored-by: Cursor <cursoragent@cursor.com>
…ream field. Co-authored-by: Cursor <cursoragent@cursor.com>
Widen multimodal agentic pilots to site verticals and adjacent sectors, and replace the adas slug with advanced-driver-assistance. Co-authored-by: Cursor <cursoragent@cursor.com>
…kstreams. Make Docs/GitHub suggestion packets and topic enums machine-checkable, retire cosai_workstreams, and bump the pack to 1.0.7. Co-authored-by: Cursor <cursoragent@cursor.com>
Centralize the beacon in shared/analytics.js, disclose it on About, and document the architecture exception. Co-authored-by: Cursor <cursoragent@cursor.com>
Restore llm:type, canonical-id, and concepts so verify_pages.py passes on main. Co-authored-by: Cursor <cursoragent@cursor.com>
Co-authored-by: Cursor <cursoragent@cursor.com>
Co-authored-by: Cursor <cursoragent@cursor.com>
Co-authored-by: Cursor <cursoragent@cursor.com>
The catalog lecture and eight-row tables no longer lead. The talk now maps four hops, speaks three rows, and closes on the action a listener can take. Co-authored-by: Cursor <cursoragent@cursor.com>
Hop arrived before the path did. The deck now follows the agents out of the sandbox, then defines a step as one point where they acted and the next point they reached. Co-authored-by: Cursor <cursoragent@cursor.com>
Co-authored-by: Cursor <cursoragent@cursor.com>
…t by default. 37 published AI, agentic, and agent-reopened classical attack classes with ATLAS, OWASP, CWE, arXiv, and CVE refs checked against pinned catalog versions, plus schema, verifier (in CI), export script, and a readable page. Claims-test pack 1.0.8 builds attack rows from the inventory first. Co-authored-by: Cursor <cursoragent@cursor.com>
…ms-test pack 1.0.9. Co-authored-by: Cursor <cursoragent@cursor.com>
Co-authored-by: Cursor <cursoragent@cursor.com>
Co-authored-by: Cursor <cursoragent@cursor.com>
…posed control interface, session smuggling, and LLM API router classes Co-authored-by: Cursor <cursoragent@cursor.com>
…k replay, and multi-agent covert channel classes Co-authored-by: Cursor <cursoragent@cursor.com>
…l sequence classes, ATT&CK 19.2 refs on telemetry entries Co-authored-by: Cursor <cursoragent@cursor.com>
…tion, and model-server media decode classes Co-authored-by: Cursor <cursoragent@cursor.com>
CoSAI moved Supply Chain, Signing ML Artifacts, AI Incident Response, and MCP Security into new folders; the old blob paths return 404. The AISVS v1.0 release tag does not exist, so the candidate now links the 1.0 PDF. Regenerated ai-agentic-principles.json. No principle text changed. Co-authored-by: Cursor <cursoragent@cursor.com>
Resolve conflicts in generated knowledge-layer files (export/framework.json, ids.json, ontology/nodes.json, ontology/edges.json) by regenerating them from the merged sources, so they carry both main's attack inventory and link fixes and develop's new financial regulations. Co-authored-by: Cursor <cursoragent@cursor.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
agentic-security.md), its hand-maintained copies (index.html,llms-full.txt), and the regenerateddata/ai-agentic-principles.json:ws1-supply-chain/.../whitepapers/risks-and-controls-for-the-ai-supply-chain-v1.mdws1-supply-chain/.../whitepapers/signing-ml-artifacts.mdws2-defenders/.../incident-response/AI-Incident-Response.mdws4-secure-design-agentic-systems/.../whitepapers/model-context-protocol-security.mddata/principle-candidates.jsoncited av1.0release tag that does not exist. It now linksAISVS/raw/main/1.0/dist/AISVS-1.0.pdf.data/index.jsonupdatedset to 2026-10-03. No principle text, record count, or ATLAS pin changed.Branch note
developis 10 commits behindmain(attack inventory 0.2.1 to 0.6.0 and two earlier commits). This branch starts frommain, so merging it also bringsdevelopup tomain.Test plan
generate_principle_catalogs.py,generate_knowledge_layer.py,verify_knowledge_layer.py,verify_pages.py,verify_attack_inventory.pypassverifypasses on this PRMade with Cursor