diff --git a/dist/ave-records-latest.json b/dist/ave-records-latest.json index 5b13ce5..e3eebf8 100644 --- a/dist/ave-records-latest.json +++ b/dist/ave-records-latest.json @@ -916,13 +916,13 @@ "Actions on sensitive systems traced back to sub-agent with no direct user trigger", "Parent agent audit trail ends before sub-agent actions begin" ], - "remediation": "1. Scope sub-agent permissions explicitly in the delegation instruction - list exactly which tools the sub-agent may use. 2. Never use full access or inherit all in delegation instructions. 3. Require explicit user confirmation before any sub-agent is spawned. 4. Ensure MCP infrastructure logs sub-agent tool calls under the parent session ID with a delegation trace. 5. Use bawbel-accept with expiry if orchestrator delegation is intentional and scoped.", + "remediation": "1. Scope sub-agent permissions explicitly in the delegation instruction - list exactly which tools the sub-agent may use. 2. Never use full access or inherit all in delegation instructions. 3. Require explicit user confirmation before any sub-agent is spawned. 4. Ensure MCP infrastructure logs sub-agent tool calls under the parent session ID with a delegation trace. 5. If intentional, scoped orchestrator delegation is required, implement a time-bounded, explicit grant mechanism rather than an open-ended permission inheritance, and log the grant's expiry alongside the delegation trace.", "status": "active", "kill_switch_active": true, - "researcher": "Bawbel Security Research Team", + "researcher": "Saray Chak", "researcher_url": "https://bawbel.io", "published": "2026-05-16T00:00:00Z", - "last_updated": "2026-08-23T00:00:00Z", + "last_updated": "2026-08-26T00:00:00Z", "references": [ { "tag": "CWE-269", diff --git a/dist/ave-records-latest.manifest.json b/dist/ave-records-latest.manifest.json index 2250d99..134097a 100644 --- a/dist/ave-records-latest.manifest.json +++ b/dist/ave-records-latest.manifest.json @@ -1,6 +1,6 @@ { "schema_version": "1.1.0", "record_count": 80, - "generated_at": "2026-08-23T08:47:24.955Z", + "generated_at": "2026-08-25T23:48:33.423Z", "source": "https://github.com/aveproject/ave" }