17 lines
1.1 KiB
Markdown
17 lines
1.1 KiB
Markdown
# Rule Catalog
|
|
|
|
| Rule | Severity | Purpose |
|
|
|---|---:|---|
|
|
| `AAISA-SECRET-001` | High | Detect credential-shaped values while redacting matches |
|
|
| `AAISA-PROMPT-001` | Medium | Detect common instruction-override and protected-context disclosure language |
|
|
| `AAISA-DEPENDENCY-001` | Medium | Detect Python requirements without exact version pins |
|
|
| `AAISA-CONTAINER-001` | Medium | Detect untagged or mutable-latest container references |
|
|
| `AAISA-PROVENANCE-001` | Medium | Detect missing model or dataset source, version, license, or digest fields |
|
|
| `AAISA-AGENT-001` | High | Detect wildcard tools, command execution without approval, and unrestricted network tools |
|
|
| `AAISA-PROVENANCE-002` | High | Detect incomplete SLSA provenance subject, input, build, or builder bindings |
|
|
| `AAISA-MLBOM-001` | Medium | Detect missing identity, version, digest, or model-card evidence in ML-BOM components |
|
|
|
|
Use `aaisa rules --format json` for the machine-readable catalog and `aaisa explain RULE_ID` for references and supported artifact kinds.
|
|
|
|
New rules must satisfy the repository's Rule Authoring Contract and include positive, negative, boundary, and redaction tests.
|