Issues

• Update GitHub governance

  cosai-oasis/ws4-secure-design-agentic-systems#213 · Filter by author imolloy opened on Sep 24, 2026

• RFC: Define Decommissioning as an ADLC Phase and CoSAI Risk Map Stage

  reviewRFCSIG: ADLC
  cosai-oasis/ws4-secure-design-agentic-systems#205 · Filter by author edonadei opened on Sep 23, 2026
  14

• Practical guide: measuring effective reach after the fact (read-path set from the journal, replay as the check)

  cosai-oasis/ws4-secure-design-agentic-systems#199 · Filter by author chernistry opened on Sep 17, 2026
  2

• RFC: Agent Behavioral Monitoring as a CoSAI Risk Map control (successor to #175)

  reviewRFCSIG: ADLC
  cosai-oasis/ws4-secure-design-agentic-systems#195 · Filter by author edonadei opened on Sep 16, 2026
  12

• Review request: the MCP-security controls and risks landing in the CoSAI Risk Map

  cosai-oasis/ws4-secure-design-agentic-systems#178 · Filter by author davidlabianca opened on Aug 31, 2026
  2

• Containment follow-on: scope questions carried over from the sandboxing blog post (#167)

  cosai-oasis/ws4-secure-design-agentic-systems#172 · Filter by author sarahnovotny opened on Aug 24, 2026
  22

  

• V2.x follow-ups: residual editorial items from the #141 review

  v2 branchwhitepaper
  cosai-oasis/ws4-secure-design-agentic-systems#163 · Filter by author sarahnovotny opened on Aug 12, 2026

• External review request: evidence-bound authority and recovery for agentic systems

  cosai-oasis/ws4-secure-design-agentic-systems#158 · Filter by author safal207 opened on Aug 1, 2026
  8

• [RFC feedback] Agent Inventory Info [5050]: KV-cache-derived identity fingerprint for #151 (not the T12 audit trail, see Agent Tool Activity below)

  cosai-oasis/ws4-secure-design-agentic-systems#155 · Filter by author rabbidave opened on Jul 31, 2026
  11

• Composite policy_bundle (s3.2.2) has no defined semantics for conflicting per-jurisdiction SLAs in escalation_policy/drift_policy

  cosai-oasis/ws4-secure-design-agentic-systems#151 · Filter by author kingztech2019 opened on Jul 28, 2026
  4

• [RFC] Agent Manifest: a signed, pre-execution declaration layer for agentic systems

  reviewRFC
  cosai-oasis/ws4-secure-design-agentic-systems#149 · Filter by author imran-siddique opened on Jul 27, 2026
  42

• Capability-Bounded Autonomous Execution (CBAE): An Independent Authority Plane for Autonomous Agents

  review
  cosai-oasis/ws4-secure-design-agentic-systems#146 · Filter by author vikrantsalar-beep opened on Jul 23, 2026
  5

  

• Proposal: Agent Runtime Assurance (ARA) - a control family operationalizing the Secure-by-Design Agentic Principles

  cosai-oasis/ws4-secure-design-agentic-systems#132 · Filter by author skvcool-rgb opened on Jul 1, 2026
  1

• Taxonomy for Framing/Scoping ADLC during Security Assessments as a Matrix (AI Deployment Patterns x Architecture)

  review
  cosai-oasis/ws4-secure-design-agentic-systems#130 · Filter by author aawofodu opened on Jun 24, 2026
  

• [RFC]: Multimodal Agentic Security

  acceptedRFC
  cosai-oasis/ws4-secure-design-agentic-systems#113 · Filter by author monshri opened on Jun 4, 2026
  2

  

• Implementation note: signed, context-bound verification receipts for MCP output pipelines

  cosai-oasis/ws4-secure-design-agentic-systems#110 · Filter by author Jasonleonardvolk opened on Jun 2, 2026
  4

• Update MCP Security Whitepaper for 2026-07-28

  enhancementv2 branchwhitepaper
  cosai-oasis/ws4-secure-design-agentic-systems#106 · Filter by author imolloy opened on May 28, 2026
  1

• Proposal: ATR (Agent Threat Rules) rule-ID mapping for the 12-category MCP threat taxonomy

  reviewRFC
  cosai-oasis/ws4-secure-design-agentic-systems#100 · Filter by author eeee2345 opened on May 17, 2026
  5

• [RFC] CPEX, a Composable Enforcement Framework for AI Security

  reviewRFC
  cosai-oasis/ws4-secure-design-agentic-systems#94 · Filter by author araujof opened on May 7, 2026
  3

  

• Runtime conformance scanner for MCP T1–T12 — open source reference implementation

  cosai-oasis/ws4-secure-design-agentic-systems#88 · Filter by author ragsvasan opened on Apr 28, 2026
  3

• Agent identity establishment and verification (SPIFFE/SPIRE) Playbook

  playbook
  cosai-oasis/ws4-secure-design-agentic-systems#87 · Filter by author husky-parul opened on Apr 23, 2026
  1

• Document WS4 operational processes and shared workflows

  documentation
  cosai-oasis/ws4-secure-design-agentic-systems#78 · Filter by author sarahnovotny opened on Apr 15, 2026
  1

• Track Progress: Risk Issues Harvested from MCP and Agentic Papers

  epic
  cosai-oasis/ws4-secure-design-agentic-systems#77 · Filter by author imolloy opened on Apr 14, 2026
  2

• [V2 Proposal] Schema-First Validation + Sanitization Profile (Aligned to OWASP Section 3)

  Feature

  cosai-oasis/ws4-secure-design-agentic-systems#64 · Filter by author parmarmanojkumar opened on Mar 26, 2026
  1

• [V2 Proposal] Minimum Bar Parity with OWASP Secure MCP Checklist (Testable + Mandatory Controls)

  Feature

  cosai-oasis/ws4-secure-design-agentic-systems#63 · Filter by author parmarmanojkumar opened on Mar 26, 2026
  1