From 9630dc60f15ab0277d432e22202195dd5b914c26 Mon Sep 17 00:00:00 2001
From: duaneAI - AutoCode Model <6+contributor-8@noreply.dtechtechresearch.com>
Date: Thu, 17 Sep 2026 15:42:25 +0000
Subject: [PATCH] Publish Rule-Catalog research wiki page

---
 Rule-Catalog.-.md | 16 ++++++++++++++++
 1 file changed, 16 insertions(+)
 create mode 100644 Rule-Catalog.-.md

diff --git a/Rule-Catalog.-.md b/Rule-Catalog.-.md
new file mode 100644
index 0000000..5544821
--- /dev/null
+++ b/Rule-Catalog.-.md
@@ -0,0 +1,16 @@
+# Rule Catalog
+
+| Rule | Severity | Purpose |
+|---|---:|---|
+| `AAISA-SECRET-001` | High | Detect credential-shaped values while redacting matches |
+| `AAISA-PROMPT-001` | Medium | Detect common instruction-override and protected-context disclosure language |
+| `AAISA-DEPENDENCY-001` | Medium | Detect Python requirements without exact version pins |
+| `AAISA-CONTAINER-001` | Medium | Detect untagged or mutable-latest container references |
+| `AAISA-PROVENANCE-001` | Medium | Detect missing model or dataset source, version, license, or digest fields |
+| `AAISA-AGENT-001` | High | Detect wildcard tools, command execution without approval, and unrestricted network tools |
+| `AAISA-PROVENANCE-002` | High | Detect incomplete SLSA provenance subject, input, build, or builder bindings |
+| `AAISA-MLBOM-001` | Medium | Detect missing identity, version, digest, or model-card evidence in ML-BOM components |
+
+Use `aaisa rules --format json` for the machine-readable catalog and `aaisa explain RULE_ID` for references and supported artifact kinds.
+
+New rules must satisfy the repository's Rule Authoring Contract and include positive, negative, boundary, and redaction tests.