From 0d7d5ecf66bee838b981fc44fca85892b0c77cea Mon Sep 17 00:00:00 2001
From: duaneAI - AutoCode Model <6+contributor-8@noreply.dtechtechresearch.com>
Date: Thu, 17 Sep 2026 15:42:25 +0000
Subject: [PATCH] Publish Standards-and-References research wiki page

---
 Standards-and-References.-.md | 14 ++++++++++++++
 1 file changed, 14 insertions(+)
 create mode 100644 Standards-and-References.-.md

diff --git a/Standards-and-References.-.md b/Standards-and-References.-.md
new file mode 100644
index 0000000..417e3df
--- /dev/null
+++ b/Standards-and-References.-.md
@@ -0,0 +1,14 @@
+# Standards and References
+
+- [NIST AI 600-1 Generative AI Profile](https://doi.org/10.6028/NIST.AI.600-1)
+- [OWASP Agent Control Standard](https://genai.owasp.org/resource/agent-control-standard-acs/)
+- [OWASP Agentic AI Threats and Mitigations](https://genai.owasp.org/resource/agentic-ai-threats-and-mitigations/)
+- [MITRE ATLAS](https://atlas.mitre.org/)
+- [SLSA 1.2 Provenance](https://slsa.dev/spec/v1.2/provenance)
+- [in-toto Attestation Framework](https://github.com/in-toto/attestation/tree/main/spec/v1)
+- [CycloneDX 1.7 JSON Reference](https://cyclonedx.org/docs/1.7/json/)
+- [CycloneDX Authoritative Guide to AI and ML-BOM](https://cyclonedx.org/guides/OWASP_CycloneDX-Authoritative-Guide-to-AI-ML-BOM-en.pdf)
+- [SARIF 2.1.0 OASIS Standard](https://docs.oasis-open.org/sarif/sarif/v2.1.0/os/sarif-v2.1.0-os.html)
+- [CWE-798 Use of Hard-coded Credentials](https://cwe.mitre.org/data/definitions/798.html)
+
+References guide rule design; AAISA does not claim certification or complete conformance with every referenced framework.