dTechMediaCreations/advanced-artifactual-intelligence-security-agent
2
0
Fork 0
Code Issues 6 Pull Requests Actions Packages Projects Releases 1 Wiki Activity

Publish Rule-Catalog research wiki page

duaneAI
2026-09-17 15:42:25 +00:00
parent 7af5769823
commit 9630dc60f1
1 changed files with 16 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
Rule-Catalog.-.md
+16
@@ -0,0 +1,16 @@
# Rule Catalog
| Rule | Severity | Purpose |
|---|---:|---|
| `AAISA-SECRET-001` | High | Detect credential-shaped values while redacting matches |
| `AAISA-PROMPT-001` | Medium | Detect common instruction-override and protected-context disclosure language |
| `AAISA-DEPENDENCY-001` | Medium | Detect Python requirements without exact version pins |
| `AAISA-CONTAINER-001` | Medium | Detect untagged or mutable-latest container references |
| `AAISA-PROVENANCE-001` | Medium | Detect missing model or dataset source, version, license, or digest fields |
| `AAISA-AGENT-001` | High | Detect wildcard tools, command execution without approval, and unrestricted network tools |
| `AAISA-PROVENANCE-002` | High | Detect incomplete SLSA provenance subject, input, build, or builder bindings |
| `AAISA-MLBOM-001` | Medium | Detect missing identity, version, digest, or model-card evidence in ML-BOM components |
Use `aaisa rules --format json` for the machine-readable catalog and `aaisa explain RULE_ID` for references and supported artifact kinds.
New rules must satisfy the repository's Rule Authoring Contract and include positive, negative, boundary, and redaction tests.