Skip to content

Apply external_authority to AVE-2026-00074, clearing its enum-gap fixture #218 - #237

Merged
chaksaray merged 100 commits into
mainfrom
develop
Aug 29, 2026
Merged

Apply external_authority to AVE-2026-00074, clearing its enum-gap fixture #218#237
chaksaray merged 100 commits into
mainfrom
develop

Conversation

@chaksaray

@chaksaray chaksaray commented Aug 29, 2026

Copy link
Copy Markdown
Contributor

No description provided.

predictor2718 and others added 30 commits July 23, 2026 22:33
@predictor2718
Add cfgaudit → AVE crosswalk (static config-auditor) (#67)
334bb96
@chaksaray
docs: scaling and governance policy (#80)
f4d9b4e
@chaksaray
docs: cross-reference scaling-and-governance.md in README (#83)
0ce799e
@chaksaray
docs: cross-reference scaling-and-governance.md in CLAUDE.md (#82)
a367da6
@chaksaray
docs: cross-reference scaling-and-governance.md in CONTEXT.md (#84)
79406d0
@chaksaray
docs: cross-reference scaling-and-governance.md in CONTRIBUTING.md (#85)
798a9c6
@chaksaray
docs: cross-reference scaling-and-governance.md in GOVERNANCE.md (#86)
43928ee
@chaksaray
docs: add status glossary entry, cross-referencing scaling-and-govern…
ad2ecf2 
…ance.md (#87)
@chaksaray
docs: CHANGELOG entry for scaling-and-governance.md (#88)
e94a8de
@chaksaray
docs: cross-reference scaling-and-governance.md in ARCHITECTURE.md (#89)
8fcc70b
@chaksaray
feat: validate records and update skills (#91)
86a2a71
@chaksaray
fix add ave record skill
a699f5e
@chaksaray
feat: AVE-2026-00060 through 00064 -- five new records from policy/co…
5b2b340 
…nfig-surface audit (#93)
@chaksaray
Merge remote-tracking branch 'origin/main' into develop
fbbb422 
# Conflicts:
#	CHANGELOG.md
@chaksaray
chore: regenerate consolidated records JSON
0cedb18 
dist/ave-records-latest.json content was already current (64 records);
only the manifest's generated_at timestamp needed a bump. The repo's own
regenerate-records-json.yml workflow tried to do this automatically twice
(runs 30374721533, 30407737766) but failed both times at the PR-creation
step: GitHub Actions is not permitted to create or approve pull requests
in this repo's settings. Left a stale, superseded branch
(chore/regenerate-dist-records) behind each time; not used here since it
also reverts the dependabot version bumps that landed via the main-develop
merge.
@chaksaray
feat: AVE-2026-00065 -- A2A agent card poisoning via embedded adversa…
f4cc426 
…rial instructions (#96)
@chaksaray
Merge remote-tracking branch 'origin/main' into develop
c9dce1e 
# Conflicts:
#	CHANGELOG.md
#	dist/ave-records-latest.json
#	dist/ave-records-latest.manifest.json
@chaksaray
fix: stale piranha.bawbel.io reference in README (#99)
445a178
@chaksaray
docs: add researcher-process.md (#101)
a08240e
@chaksaray
chore: add ave gap diagram (#107)
8955456
@chaksaray
fix: GOVERNANCE.md deprecation_reason field claim (#106)
e1fe630
@chaksaray
docs: add API link and gap diagram to README (#108)
2789ac1
@chaksaray
Change image width to 100% in README
e5953c6 
Updated image width in README for better responsiveness.
@chaksaray
docs: link AVE-2026-00046 writeup from its own record (#111)
b464ed9
@chaksaray
feat: AVE-2026-00066 -- hallucinated skill-name squatting (HalluSquat…
d8861a5 
…ting) (#113)
@chaksaray
feat: AVE-2026-00067 -- skill composition trust transfer (SCR-TrustLi…
46fc1ce 
…ft) (#114)
@chaksaray
feat: AVE-2026-00068 -- CLI command composition risk (MOSAIC) (#115)
c302152
@chaksaray
feat: AVE-2026-00069 -- multimodal image-hidden instructions (SkillCa…
270a263 
…mo) (#116)
@chaksaray
feat: AVE-2026-00070 -- distributed cross-agent backdoor fragments (C…
34a692f 
…ollaborative Shadows) (#117)
@chaksaray
Merge remote-tracking branch 'origin/main' into develop
211f71c 
# Conflicts:
#	README.md
#	dist/ave-records-latest.manifest.json
chaksaray and others added 27 commits August 15, 2026 08:43
@chaksaray
docs: sync CONTRIBUTING.md with current process (#188)
37c91c7
@chaksaray
Sync main into develop, resolves PR #187's conflict (#189)
a6491b3 
Co-authored-by: chaksaray <15962335+chaksaray@users.noreply.github.com>
@chaksaray
feat: semia-to-ave crosswalk (#190)
dbb5b6d 
Co-authored-by: chaksaray <15962335+chaksaray@users.noreply.github.com>
@chaksaray
Merge branch 'main' into develop
ff57a18 
# Conflicts:
#	dist/ave-records-latest.manifest.json
@chaksaray @claude
feat: skillsentry-to-ave and skill-security-scanner-to-ave crosswalks (…
8ec7c2f 
…#191)

Co-authored-by: Claude <noreply@anthropic.com>
Co-authored-by: chaksaray <15962335+chaksaray@users.noreply.github.com>
@chaksaray
docs: owasp_asi tagging rule, from the #196 audit (#197)
604498a
@chaksaray
fix: owasp_asi mapping audit (48 corrected, 13 confirmed, 11 flagged …
b5e33bd 
…ambiguous) (#196)
@chaksaray
chore: regenerate consolidated records JSON (#198)
9365f00 
Co-authored-by: chaksaray <15962335+chaksaray@users.noreply.github.com>
@chaksaray
Merge branch 'main' into develop
8602092 
Resolves the conflict on PR #199 (develop -> main). Only real conflict
was dist/ave-records-latest.manifest.json's generated_at timestamp;
records/ itself merged cleanly (main never touched the 48 files #196
corrected). dist/ave-records-latest.json auto-merged without conflict
markers and was verified byte-identical to a fresh regeneration via
scripts/build-records.js, so no silent divergence there. Manifest
regenerated fresh the same way rather than hand-picking a timestamp.
@chaksaray
fix: AVE-2026-00048 attribution and remediation branding (#202)
c494f8c
@chaksaray
Merge remote-tracking branch 'origin/main' into develop
236360e 
# Conflicts:
#	records/AVE-2026-00048.json
@chaksaray @claude @astrogilda
Sync main into develop, resolves PR #204's conflict (#206)
8e910fc 
Co-authored-by: Claude <noreply@anthropic.com>
Co-authored-by: chaksaray <15962335+chaksaray@users.noreply.github.com>
Co-authored-by: Sankalp Gilda <sankalp.gilda@gmail.com>
@chaksaray
chore: regenerate consolidated records JSON (#203)
a1e50c1 
Co-authored-by: chaksaray <15962335+chaksaray@users.noreply.github.com>
@chaksaray @claude @astrogilda
fix: researcher-attribution audit across the corpus (49 of 50) (#205)
228d545 
Co-authored-by: Claude <noreply@anthropic.com>
Co-authored-by: chaksaray <15962335+chaksaray@users.noreply.github.com>
Co-authored-by: Sankalp Gilda <sankalp.gilda@gmail.com>
@chaksaray
chore: regenerate consolidated records JSON (#207)
3048d1f 
Co-authored-by: chaksaray <15962335+chaksaray@users.noreply.github.com>
@chaksaray @claude @astrogilda
Sync main into develop, resolves PR #204's conflict (#209)
00b69c5 
Co-authored-by: Claude <noreply@anthropic.com>
Co-authored-by: chaksaray <15962335+chaksaray@users.noreply.github.com>
Co-authored-by: Sankalp Gilda <sankalp.gilda@gmail.com>
@chaksaray @claude @astrogilda
Sync main into develop, resolves PR #204's conflict (again) (#210)
858d46d 
Co-authored-by: Claude <noreply@anthropic.com>
Co-authored-by: chaksaray <15962335+chaksaray@users.noreply.github.com>
Co-authored-by: Sankalp Gilda <sankalp.gilda@gmail.com>
@chaksaray
docs: fix stale independent-crosswalk count in README (3 -> 8) (#200)
759dddf
@chaksaray
docs: three real improvements surfaced by external critique (#215)
e843ea5
@chaksaray @claude
@astrogilda @predictor2718 @narko4u
Sync main into develop, resolves PR #222's conflict (#226)
038dbf6 
Signed-off-by: Sankalp Gilda <sankalp.gilda@gmail.com>
Co-authored-by: Claude <noreply@anthropic.com>
Co-authored-by: chaksaray <15962335+chaksaray@users.noreply.github.com>
Co-authored-by: Sankalp Gilda <sankalp.gilda@gmail.com>
Co-authored-by: Nicolai <245527909+predictor2718@users.noreply.github.com>
Co-authored-by: Empire Labs Pty Ltd <narko4u@gmail.com>
Co-authored-by: narko4u <narko4u@users.noreply.github.com>
@chaksaray @claude
@astrogilda @predictor2718 @narko4u @dependabot
Sync main into develop, resolves PR #222's conflict (round 2) (#227)
8bdddfa 
Signed-off-by: Sankalp Gilda <sankalp.gilda@gmail.com>
Co-authored-by: Claude <noreply@anthropic.com>
Co-authored-by: chaksaray <15962335+chaksaray@users.noreply.github.com>
Co-authored-by: Sankalp Gilda <sankalp.gilda@gmail.com>
Co-authored-by: Nicolai <245527909+predictor2718@users.noreply.github.com>
Co-authored-by: Empire Labs Pty Ltd <narko4u@gmail.com>
Co-authored-by: narko4u <narko4u@users.noreply.github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@chaksaray
fix conflic test validate data
070b8ca
@chaksaray
fix generated at manifest
4827171
@chaksaray
docs: capability-behavior-vulnerability taxonomy audit (all 80 record…
824279a 
…s) (#224)
@predictor2718
crosswalks: refresh cfgaudit to v1.13.0 (64 rules onto 27 classes) (#193
18da735 
)
@chaksaray
docs: cross-reference the boundary-failure record family (#233)
742d897
@narko4u
Apply external_authority to AVE-2026-00074, clearing its enum-gap fix…
8dcddde 
…ture (issue #218) (#220)

Co-authored-by: narko4u <narko4u@users.noreply.github.com>
@chaksaray chaksaray changed the title Apply external_authority to AVE-2026-00074, clearing its enum-gap fixture Apply external_authority to AVE-2026-00074, clearing its enum-gap fixture #218 Aug 29, 2026
@chaksaray
chaksaray merged commit a4b62b3 into main Aug 29, 2026
13 checks passed
@chaksaray chaksaray mentioned this pull request Aug 30, 2026
Merged
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

3 participants

@chaksaray @predictor2718 @narko4u