Rule Catalog

Rule	Severity	Purpose
`AAISA-SECRET-001`	High	Detect credential-shaped values while redacting matches
`AAISA-PROMPT-001`	Medium	Detect common instruction-override and protected-context disclosure language
`AAISA-DEPENDENCY-001`	Medium	Detect Python requirements without exact version pins
`AAISA-CONTAINER-001`	Medium	Detect untagged or mutable-latest container references
`AAISA-PROVENANCE-001`	Medium	Detect missing model or dataset source, version, license, or digest fields
`AAISA-AGENT-001`	High	Detect wildcard tools, command execution without approval, and unrestricted network tools
`AAISA-PROVENANCE-002`	High	Detect incomplete SLSA provenance subject, input, build, or builder bindings
`AAISA-MLBOM-001`	Medium	Detect missing identity, version, digest, or model-card evidence in ML-BOM components

Use aaisa rules --format json for the machine-readable catalog and aaisa explain RULE_ID for references and supported artifact kinds.

New rules must satisfy the repository's Rule Authoring Contract and include positive, negative, boundary, and redaction tests.