# Rule Catalog

| Rule | Severity | Purpose |
|---|---:|---|
| `AAISA-SECRET-001` | High | Detect credential-shaped values while redacting matches |
| `AAISA-PROMPT-001` | Medium | Detect common instruction-override and protected-context disclosure language |
| `AAISA-DEPENDENCY-001` | Medium | Detect Python requirements without exact version pins |
| `AAISA-CONTAINER-001` | Medium | Detect untagged or mutable-latest container references |
| `AAISA-PROVENANCE-001` | Medium | Detect missing model or dataset source, version, license, or digest fields |
| `AAISA-AGENT-001` | High | Detect wildcard tools, command execution without approval, and unrestricted network tools |
| `AAISA-PROVENANCE-002` | High | Detect incomplete SLSA provenance subject, input, build, or builder bindings |
| `AAISA-MLBOM-001` | Medium | Detect missing identity, version, digest, or model-card evidence in ML-BOM components |

Use `aaisa rules --format json` for the machine-readable catalog and `aaisa explain RULE_ID` for references and supported artifact kinds.

New rules must satisfy the repository's Rule Authoring Contract and include positive, negative, boundary, and redaction tests.