dTechMediaCreations/advanced-artifactual-intelligence-security-agent
2
0
Fork 0
Code Issues 6 Pull Requests Actions Packages Projects Releases 1 Wiki Activity

Add reproducible evaluation and provenance research

Browse Source
This commit is contained in:
duaneAI
2026-09-17 10:40:29 -05:00
parent d9fc3ca18b
commit 68f02d035f
53 changed files with 1432 additions and 14 deletions
Download Patch File Download Diff File Expand all files Collapse all files
wiki-source/Rule-Catalog.md
+16
View File
@@ -0,0 +1,16 @@
# Rule Catalog
| Rule | Severity | Purpose |
|---|---:|---|
| `AAISA-SECRET-001` | High | Detect credential-shaped values while redacting matches |
| `AAISA-PROMPT-001` | Medium | Detect common instruction-override and protected-context disclosure language |
| `AAISA-DEPENDENCY-001` | Medium | Detect Python requirements without exact version pins |
| `AAISA-CONTAINER-001` | Medium | Detect untagged or mutable-latest container references |
| `AAISA-PROVENANCE-001` | Medium | Detect missing model or dataset source, version, license, or digest fields |
| `AAISA-AGENT-001` | High | Detect wildcard tools, command execution without approval, and unrestricted network tools |
| `AAISA-PROVENANCE-002` | High | Detect incomplete SLSA provenance subject, input, build, or builder bindings |
| `AAISA-MLBOM-001` | Medium | Detect missing identity, version, digest, or model-card evidence in ML-BOM components |
Use `aaisa rules --format json` for the machine-readable catalog and `aaisa explain RULE_ID` for references and supported artifact kinds.
New rules must satisfy the repository's Rule Authoring Contract and include positive, negative, boundary, and redaction tests.