@blamejs/exceptd-skills 0.11.0 → 0.11.1

package/CHANGELOG.md

@@ -1,5 +1,28 @@
 # Changelog
 
+## 0.11.1 — 2026-05-12
+
+**Patch: operator-reported items 47-57.**
+
+### Bugs
+
+- **#48 report self-describing header.** `report executive` / `technical` / `compliance` previously emitted identical `# exceptd Security Assessment Report` headers — only stderr (`[orchestrator] Generating <X> report`) distinguished them, so a piped-to-file report had no internal provenance. Now: `# exceptd Executive Report` / `Technical Report` / `Compliance Report` + an HTML-comment marker (`<!-- exceptd-report:flavor=<x> version=<v> -->`) inside the body. Saved files are self-describing.
+- **#50 mutex cross-process enforcement.** `_meta.mutex` was documented but only enforced intra-process (in-memory `_activeRuns` Set). Two parallel `exceptd run kernel` + `exceptd run hardening` invocations in separate shells would race. Now: runner writes a `.exceptd/locks/<playbook>.lock` JSON file (pid + started_at) for the duration of the run; preflight rejects with `blocked_by: mutex` when a non-stale lock exists. Stale locks (dead pid) are auto-GC'd. Released in `finally`.
+- **#51 deprecation message version-aware.** The banner used to say "Prefer `brief --all` (v0.11.0)" unconditionally; operators on v0.10.x reading it would find no `brief` command in their install. Now: banner shows the installed version explicitly and conditionally emits "available in this install" vs "upgrade to v0.11.0+ first."
+- **#47 / #49 exit-code + skill-not-found shapes.** Verified still correct in v0.11.0 — exit 1 on `ok:false`, JSON shape for `skill <missing>`. No regression; added regression test coverage.
+
+### Features
+
+- **#54 `--json-stdout-only`** — silences ALL stderr emissions (deprecation banners, unsigned-attestation warnings, hook output). Operators piping JSON results through `jq` or scripting exit codes get clean stdout exclusively. Real errors (uncaught exceptions starting with "Error") still pass through.
+- **#55 `report csaf`** — emits a CSAF 2.0 envelope of the full assessment (findings + dispatch plan + skill currency + host context). Pipes directly into VEX downstream tooling.
+- **#57 default-stdin on pipe.** `exceptd run <playbook>` now auto-detects piped stdin (`process.stdin.isTTY === false`) and assumes `--evidence -`. Operators forgetting the flag no longer hit a precondition halt.
+
+### Already-existing surface (cross-referenced in operator report)
+
+- #52 brief lands before deprecating look — already shipped in v0.11.0
+- #53 doctor verb — already shipped in v0.11.0
+- #56 cross-session diff — already exists as `attest diff <a-sid> --against <b-sid>` (v0.11.0)
+
 ## 0.11.0 — 2026-05-12
 
 **Minor: architectural CLI redesign — 21 verbs collapsed to 11. Plus operator-reported items 31-46.**

package/README.md

@@ -32,7 +32,9 @@ This platform surfaces what is actually happening right now. Every skill explici
 
 Pre-1.0. Latest release lives on [GitHub Releases](https://github.com/blamejs/exceptd-skills/releases) and on npm as [`@blamejs/exceptd-skills`](https://www.npmjs.com/package/@blamejs/exceptd-skills) (signed npm provenance attestation). 38 skills across kernel LPE, AI attack surface, MCP trust, RAG security, AI-API C2 detection, PQC migration, framework gap analysis, compliance theater, exploit scoring, threat-model currency, zero-day learning, global GRC, policy exception generation, security maturity tiers, skill update loop, attack-surface pen testing, fuzz testing, DLP gap analysis, supply-chain integrity, defensive-countermeasure mapping, identity assurance, OT/ICS security, coordinated vulnerability disclosure, threat-modeling methodology, child-safety age gates, plus sector packs (federal, financial, healthcare, energy) — and a `researcher` triage dispatcher. 10 data catalogs cover CVE / ATLAS / ATT&CK / CWE / D3FEND / DLP / RFC / framework gaps / global frameworks / zero-day lessons. 34 jurisdictions tracked. AI-consumer ergonomics: `data/_indexes/` ships 17 pre-computed indexes (xref / chains / dispatch / DiD ladders / theater fingerprints / recipes / token budget / currency / activity feed) regenerated by `npm run build-indexes`. External-data refresh is automated nightly via `.github/workflows/refresh.yml` — KEV/EPSS/NVD/RFC drift opens an auto-PR with deltas pre-applied; KEV adds new CVEs and IETF discovery auto-imports new RFCs across 48 project-relevant working groups (`_auto_imported` annotation flags entries for human curation); ATLAS/ATT&CK/CWE/D3FEND version bumps open an issue (audit required per AGENTS.md Hard Rule #12). `exceptd verify` prints dual SHA-256 + SHA3-512 public-key fingerprints for out-of-band key pinning. `exceptd scan` probes 22 PQC algorithms across the full NIST + IETF emerging landscape. `exceptd framework-gap <framework> <scenario>` provides a non-AI programmatic runner for the framework-gap skill.
 
-**v0.10.0 introduces the seven-phase playbook contract** — exceptd ships playbooks under `data/playbooks/*.json` that host AIs (Claude Code, Cursor, Gemini CLI, Codex) execute through seven phases: `govern → direct → look → detect → analyze → validate → close`. exceptd owns govern / direct / analyze / validate / close (knowledge + GRC layer); the host AI owns look / detect (artifact collection + indicator evaluation with its native Bash/Read/Grep/Glob). The runner enforces `threat_currency_score` gates, evaluates per-playbook preconditions, honors mutex sets, picks priority-ordered remediation paths, builds CSAF-2.0 evidence bundles (Ed25519-signed by default), computes ISO 8601 notification deadlines from jurisdiction `clock_starts` events, and generates auditor-ready policy-exception language when remediation cannot complete within compliance windows. See `lib/schemas/playbook.schema.json` for the contract and AGENTS.md "Seven-phase playbook contract" for the host-AI invocation guide. Legacy `exceptd scan` remains for non-AI operators with a deprecation banner — to be removed in v1.0.
+**v0.10.0 introduced the seven-phase playbook contract** — exceptd ships playbooks under `data/playbooks/*.json` that host AIs (Claude Code, Cursor, Gemini CLI, Codex) execute through seven phases: `govern → direct → look → detect → analyze → validate → close`. exceptd owns govern / direct / analyze / validate / close (knowledge + GRC layer); the host AI owns look / detect (artifact collection + indicator evaluation with its native Bash/Read/Grep/Glob).
+
+**v0.11.0 collapses the 21-verb CLI into 11 canonical verbs** + flips the default output to human-readable. The new surface: `discover` (scan cwd → recommend playbooks), `brief` (unified info doc, replaces plan + govern + direct + look), `run` (phases 4-7, with flat or nested submission shape, auto-detect cwd context), `ai-run` (JSONL streaming variant for AI conversational flow), `attest` (subverbs: list / show / export / verify / diff — replaces reattest + list-attestations), `doctor` (one-shot health check — signatures + currency + cve/rfc validation + signing status), `ci` (one-shot CI gate, exit-2 on detected or rwep ≥ escalate), `ask` (plain-English routing), `lint` (pre-flight submission shape check). Attestation root moved from cwd-relative `.exceptd/` to `~/.exceptd/attestations/<repo-or-host-tag>/`. v0.10.x verbs (`plan`/`govern`/`direct`/`look`/`scan`/`dispatch`/`currency`/`verify`/`validate-cves`/`validate-rfcs`/`watchlist`/`prefetch`/`build-indexes`/`ingest`/`reattest`/`list-attestations`) still work via one-time deprecation banner — removed in v0.12.
 
 ---
 
@@ -174,71 +176,141 @@ Direct invocations also available: `npm run verify`, `node lib/sign.js sign-all`
 
 Every command works the same via `npx @blamejs/exceptd-skills`, a global install (`exceptd`), or a local `node bin/exceptd.js`.
 
-```
-exceptd path                          Print absolute path to the installed package.
-
-exceptd prefetch [args]               Warm local cache of upstream artifacts.
-  --max-age 24h                       Skip entries fresher than this.
-  --source kev,nvd                    Comma-separated source filter.
-  --force                             Ignore freshness; refetch everything.
-  --no-network                        Dry-run plan; do not actually fetch.
-
-exceptd refresh [args]                Refresh upstream data; optionally apply upserts.
-  --apply                             Write diffs back to data/*.json and rebuild indexes.
-  --from-cache [<dir>]                Read from prefetch cache instead of upstream.
-  --swarm                             Fan-out across worker threads.
-  --source kev,epss,nvd,rfc,pins      Scope by source.
-  --from-fixture <dir>                Test mode — read frozen fixtures.
-  --report-out <path>                 Redirect refresh-report.json output.
-
-exceptd build-indexes [args]          Rebuild data/_indexes/*.json (17 outputs).
-  --only <names>                      Comma-separated subset (auto-pulls in dependencies).
-  --changed                           Rebuild only outputs whose deps changed.
-  --parallel                          Run independent outputs concurrently.
-
-exceptd verify                        Verify Ed25519 signature on every skill.
-                                      Prints dual SHA-256 + SHA3-512 fingerprint
-                                      of keys/public.pem so operators can pin
-                                      the key out-of-band.
-exceptd scan                          Scan environment for findings — includes
-                                      a 22-algorithm PQC probe (NIST finalized
-                                      ML-KEM/ML-DSA/SLH-DSA, draft FN-DSA + HQC,
-                                      Round-4 alternates Frodo/NTRU/McEliece/BIKE,
-                                      signature on-ramp Hawk/Mayo/SQIsign/CROSS/
-                                      UOV/SDitH/Mirath/FAEST/Perk, stateful
-                                      LMS/XMSS/HSS, IETF composite sigs + KEMs).
-exceptd dispatch                      Scan then route findings to skills. Plan
-                                      entries surface per-CVE evidence (IDs +
-                                      RWEP scores), not aggregate counts.
-exceptd skill <name>                  Show context for a specific skill.
-exceptd currency                      Skill currency report. Score is age-only
-                                      (forward_watch count does NOT reduce score
-                                      — it's a maintenance signal).
-exceptd report [executive|technical|compliance]   Generate report. Executive
-                                      summary splits currency into named tiers
-                                      (critical-stale <50%, stale 50-69%).
-exceptd framework-gap <FW> <SCENARIO> [--json]
-                                      Programmatic runner for the framework-gap
-                                      skill. Lists matching control gaps,
-                                      universal gaps, and theater-risk controls.
-                                      Examples:
-                                        exceptd framework-gap NIST-800-53 CVE-2026-31431
-                                        exceptd framework-gap PCI-DSS-4.0 "prompt injection"
-                                        exceptd framework-gap all CVE-2025-53773 --json
-exceptd validate-cves [args]          Cross-check CVE catalog vs NVD/KEV/EPSS.
-  --offline                           Local view only; no network.
-  --from-cache [<dir>]                Cache-first lookups with live fallback.
-  --no-fail                           Report drift without failing exit code.
-exceptd validate-rfcs [args]          Cross-check RFC catalog vs IETF Datatracker.
-  --offline                           Local view only; no network.
-  --from-cache [<dir>]                Cache-first lookups with live fallback.
-  --no-fail                           Report drift without failing exit code.
-exceptd watchlist [--by-skill]        Forward-watch aggregator across skills.
+### v0.11.0 canonical verbs
 
+```
+exceptd                               First-run welcome — two ways to start
+                                      (discover / ask) plus common starting
+                                      playbooks for code / Linux / service contexts.
+
+exceptd discover                      Scan cwd → recommend playbooks based on
+                                      detected files (.git, package.json,
+                                      Dockerfile, requirements.txt, etc) + host
+                                      platform. Replaces scan + dispatch.
+  --scan-only                         Also include legacy host scan findings.
+  --json | --pretty                   Machine output (default is human checklist).
+
+exceptd brief [playbook]              Unified info doc — jurisdictions + threat
+                                      context + RWEP thresholds + preconditions
+                                      + artifacts + indicators. Replaces plan +
+                                      govern + direct + look.
+  --all                               Every playbook (replaces `plan`).
+  --scope <type>                      system | code | service | cross-cutting.
+  --directives                        Expand directive metadata per playbook.
+  --phase <name>                      Emit only one phase (legacy compat).
+
+exceptd run [playbook]                Phases 4-7. Auto-detects cwd context when
+                                      no playbook positional.
+  --evidence <file|->                 Submission JSON (flat or nested shape).
+  --evidence-dir <dir>                Per-playbook submission files (cron-friendly).
+  --scope <type> | --all              Multi-playbook run.
+  --vex <file>                        CycloneDX / OpenVEX filter (drop not_affected).
+  --format <fmt> ...                  csaf-2.0 | sarif | openvex | markdown | summary.
+                                      Repeatable. CSAF is primary; extras go to
+                                      close.evidence_package.bundles_by_format.
+  --diff-from-latest                  Drift vs prior attestation for same playbook.
+  --ci                                Exit-code gate (use `exceptd ci` instead).
+  --operator <name>                   Bind attestation to identity.
+  --ack                               Explicit jurisdiction-obligation consent.
+  --session-id <id>                   Reuse session id (collision refused).
+  --force-overwrite                   Override session collision refusal.
+  --session-key <hex>                 HMAC sign evidence_package (≥ 16 hex chars).
+  --attestation-root <path>           Override ~/.exceptd/attestations/ root.
+  --explain                           Dry-run: preconditions + artifacts +
+                                      signal keys + submission skeleton.
+  --signal-list                       Lighter than --explain; enumerate signal
+                                      keys only.
+  --force-stale                       Override threat_currency_score < 50 gate.
+  --air-gap                           Honor air_gap_alternative paths.
+
+exceptd ai-run <playbook>             JSONL streaming variant of run. AI emits
+                                      evidence events on stdin; runner streams
+                                      phase events on stdout. One pipe, no
+                                      file handoff.
+  --no-stream                         Single-shot mode (emit one combined JSON).
+
+exceptd attest <subverb> [<sid>]      Auditor-facing operations.
+  attest list                         Inventory all sessions across both
+                                      ~/.exceptd and cwd-legacy roots.
+  attest show <sid>                   Full (unredacted) attestation.
+  attest export <sid>                 Redacted bundle for audit submission.
+                                      Strips raw artifact values; preserves
+                                      evidence_hash + signature + verdict.
+                                      --format csaf wraps in CSAF envelope.
+  attest verify <sid>                 Ed25519 .sig sidecar verification.
+  attest diff <sid>                   Drift replay (= reattest default).
+                                      --against <other-sid> compares two
+                                      sessions side-by-side with per-artifact
+                                      diff (added / removed / changed).
+  --playbook <id>                     Filter (list / diff).
+  --since <ISO>                       Filter list / diff to entries after date.
+
+exceptd discover / doctor / ci        See above for doctor and ci.
+
+exceptd doctor                        One-shot health check.
+  --signatures                        Only Ed25519 skill verification.
+  --currency                          Only skill currency report.
+  --cves                              Only CVE catalog drift check.
+  --rfcs                              Only RFC catalog drift check.
+
+exceptd ci                            One-shot CI gate. Exits 2 on detected or
+                                      rwep ≥ rwep_threshold.escalate.
+  --all | --scope <type>              Pick playbooks; auto-detect if neither.
+  --max-rwep <n>                      Cap below playbook default.
+  --block-on-jurisdiction-clock       Fail when notification clock fires.
+  --evidence / --evidence-dir         Per-playbook submission files.
+
+exceptd ask "<question>"              Plain-English routing to playbook(s).
+                                      Returns ranked playbook IDs based on
+                                      keyword overlap with each playbook's
+                                      domain.name + attack_class + threat_context.
+
+exceptd lint <pb> <evidence>          Pre-flight check submission shape vs
+                                      playbook (preconditions / artifacts /
+                                      indicators) without executing phases 4-7.
+
+exceptd refresh                       Refresh upstream catalogs + indexes.
+                                      Replaces prefetch + refresh + build-indexes.
+  --apply                             Write diffs back + rebuild indexes.
+  --from-cache [<dir>]                Read from prefetch cache.
+  --no-network                        Dry-run.
+  --indexes-only                      Rebuild data/_indexes/*.json only.
+
+exceptd skill <name>                  Show context for one skill.
+exceptd framework-gap <FW> <ref>      One framework + one CVE/scenario, JSON
+                                      or human. (Operates outside the seven-
+                                      phase contract for ad-hoc gap analysis.)
+exceptd path                          Absolute path to the installed package.
 exceptd version                       Package version.
 exceptd help                          This help.
+exceptd <verb> --help                 Per-verb usage with flag descriptions.
 ```
 
+### Legacy v0.10.x verbs (deprecated, removed in v0.12)
+
+These still work but emit a one-time deprecation banner per process:
+
+| Legacy verb | v0.11.0 replacement |
+|---|---|
+| `plan` | `brief --all` |
+| `govern <pb>` | `brief <pb> --phase govern` |
+| `direct <pb>` | `brief <pb> --phase direct` |
+| `look <pb>` | `brief <pb> --phase look` |
+| `scan` | `discover --scan-only` |
+| `dispatch` | `discover` |
+| `currency` | `doctor --currency` |
+| `verify` | `doctor --signatures` |
+| `validate-cves` | `doctor --cves` |
+| `validate-rfcs` | `doctor --rfcs` |
+| `ingest` | `run` |
+| `reattest <sid>` | `attest diff <sid>` |
+| `list-attestations` | `attest list` |
+| `watchlist` | (no replacement yet — kept) |
+| `prefetch` | `refresh --no-network` |
+| `build-indexes` | `refresh --indexes-only` |
+
+Suppress the deprecation banner: `EXCEPTD_DEPRECATION_SHOWN=1`.
+
 ## Invoking a skill from your AI assistant
 
 Once your assistant has loaded `AGENTS.md`, type a trigger phrase or skill name:

package/bin/exceptd.js

@@ -275,6 +275,25 @@ Project rules:      ${PKG_ROOT}/AGENTS.md
 
 function main() {
   const argv = process.argv.slice(2);
+
+  // --json-stdout-only: silence ALL stderr emissions (deprecation banners,
+  // unsigned-attestation warnings, hook output). Operators piping the JSON
+  // result through `jq` or scripting around exit codes want clean stdout
+  // exclusively. Handled here at top of main so the deprecation banner +
+  // unsigned warning are suppressed before they fire.
+  if (argv.includes("--json-stdout-only")) {
+    process.env.EXCEPTD_DEPRECATION_SHOWN = "1";
+    process.env.EXCEPTD_UNSIGNED_WARNED = "1";
+    const origStderrWrite = process.stderr.write.bind(process.stderr);
+    process.stderr.write = (chunk, encoding, cb) => {
+      // Let actual error frames through (uncaught exceptions need to surface
+      // for debugging); suppress framework stderr.
+      if (typeof chunk === "string" && chunk.startsWith("Error")) return origStderrWrite(chunk, encoding, cb);
+      if (typeof cb === "function") cb();
+      return true;
+    };
+  }
+
   if (argv.length === 0) {
     printWelcome();
     process.exit(0);
@@ -300,8 +319,17 @@ function main() {
   if (PLAYBOOK_VERBS.has(cmd)) {
     // One-time deprecation banner per process when a legacy verb is invoked.
     if (LEGACY_VERB_REPLACEMENTS[cmd] && !process.env.EXCEPTD_DEPRECATION_SHOWN) {
+      // Mention the installed version explicitly so an operator on v0.10.x
+      // who reads "Prefer brief..." doesn't go looking for a verb that
+      // doesn't exist in their install. v0.11.0+ has the replacement; v0.10.x
+      // users see this with the explicit "upgrade to v0.11.0 first" note.
+      const ver = readPkgVersion();
+      const haveBrief = ver !== "unknown" && ver.match(/^(\d+)\.(\d+)/) && (parseInt(RegExp.$1, 10) > 0 || parseInt(RegExp.$2, 10) >= 11);
       process.stderr.write(
-        `[exceptd] DEPRECATION: \`${cmd}\` is a v0.10.x verb. Prefer \`${LEGACY_VERB_REPLACEMENTS[cmd]}\` (v0.11.0). ` +
+        `[exceptd] DEPRECATION: \`${cmd}\` is a v0.10.x verb. ` +
+        (haveBrief
+          ? `Prefer \`${LEGACY_VERB_REPLACEMENTS[cmd]}\` (available in this install, v${ver}). `
+          : `Upgrade to v0.11.0+ then use \`${LEGACY_VERB_REPLACEMENTS[cmd]}\` (currently installed: v${ver}). `) +
         `Legacy verbs remain functional through this release; they will be removed in v0.12. ` +
         `Suppress: export EXCEPTD_DEPRECATION_SHOWN=1.\n`
       );
@@ -429,7 +457,8 @@ function dispatchPlaybook(cmd, argv) {
   const args = parseArgs(argv, {
     bool:  ["pretty", "air-gap", "force-stale", "all", "flat", "directives",
             "ci", "latest", "diff-from-latest", "explain", "signal-list", "ack",
-            "force-overwrite", "no-stream", "block-on-jurisdiction-clock"],
+            "force-overwrite", "no-stream", "block-on-jurisdiction-clock",
+            "json-stdout-only"],
     multi: ["playbook", "format"],
   });
   const pretty = !!args.pretty;
@@ -1080,6 +1109,13 @@ function cmdRun(runner, args, runOpts, pretty) {
   }
 
   let submission = {};
+  // v0.11.1: auto-detect piped stdin (process.stdin.isTTY === false means
+  // something is piping into us). If no --evidence flag and stdin is a pipe,
+  // assume `--evidence -`. Operators forgetting the flag previously got a
+  // confusing precondition halt; now the common case "just works."
+  if (!args.evidence && process.stdin.isTTY === false) {
+    args.evidence = "-";
+  }
   if (args.evidence) {
     try {
       submission = readEvidence(args.evidence);

package/data/_indexes/_meta.json

@@ -1,10 +1,10 @@
 {
   "schema_version": "1.1.0",
-  "generated_at": "2026-05-12T14:47:57.871Z",
+  "generated_at": "2026-05-12T15:12:14.697Z",
   "generator": "scripts/build-indexes.js",
   "source_count": 49,
   "source_hashes": {
-    "manifest.json": "f4243591af627c02011ae29d97eb702764e495522188a4d8fcab7b58950d941c",
+    "manifest.json": "c9d65112c41d74b26c533cc37160fe6d450789ad8910fcb8cc4dae6225940ef3",
     "data/atlas-ttps.json": "1500b5830dab070c4252496964a8c0948e1052a656e2c7c6e1efaf0350645e13",
     "data/cve-catalog.json": "a81d3e4b491b27ccc084596b063a6108ff10c9eb01d7776922fc393980b534fe",
     "data/cwe-catalog.json": "c3367d469b4b3d31e4c56397dd7a8305a0be338ecd85afa27804c0c9ce12157b",

package/lib/playbook-runner.js

@@ -143,16 +143,69 @@ function preflight(playbook, runOpts = {}) {
     }
   }
 
-  // 3. Mutex
+  // 3. Mutex — both intra-process (in-memory Set) AND cross-process
+  // (filesystem lockfile under .exceptd/locks/<playbook>.lock). v0.11.0 only
+  // enforced intra-process; v0.11.1 adds cross-process so two parallel CLI
+  // invocations of mutex-conflicting playbooks correctly race-detect.
   for (const conflictId of meta.mutex || []) {
     if (_activeRuns.has(conflictId)) {
-      return { ok: false, blocked_by: 'mutex', reason: `Mutex conflict: playbook ${conflictId} is currently active and listed in this playbook's mutex set.`, issues };
+      return { ok: false, blocked_by: 'mutex', reason: `Mutex conflict (intra-process): playbook ${conflictId} is currently active and listed in this playbook's mutex set.`, issues };
+    }
+    const lockPath = lockFilePath(conflictId);
+    if (lockPath && fs.existsSync(lockPath)) {
+      // Stale-lock detection: if the recorded PID is dead, ignore the lock.
+      try {
+        const lock = JSON.parse(fs.readFileSync(lockPath, 'utf8'));
+        if (lock.pid && !pidAlive(lock.pid)) {
+          fs.unlinkSync(lockPath); // GC stale
+        } else {
+          return {
+            ok: false,
+            blocked_by: 'mutex',
+            reason: `Mutex conflict (cross-process): playbook ${conflictId} has an active lock at ${lockPath} (pid ${lock.pid}, started ${lock.started_at}).`,
+            issues,
+          };
+        }
+      } catch { /* malformed lockfile — treat as stale and remove */
+        try { fs.unlinkSync(lockPath); } catch {}
+      }
     }
   }
 
   return { ok: true, issues };
 }
 
+function lockDir() {
+  const dir = path.join(process.cwd(), '.exceptd', 'locks');
+  try { fs.mkdirSync(dir, { recursive: true }); } catch {}
+  return dir;
+}
+
+function lockFilePath(playbookId) {
+  try { return path.join(lockDir(), `${playbookId}.lock`); }
+  catch { return null; }
+}
+
+function acquireLock(playbookId) {
+  const p = lockFilePath(playbookId);
+  if (!p) return null;
+  try {
+    fs.writeFileSync(p, JSON.stringify({ pid: process.pid, started_at: new Date().toISOString(), playbook: playbookId }, null, 2), { flag: 'wx' });
+    return p;
+  } catch { return null; /* already locked or unwritable */ }
+}
+
+function releaseLock(lockPath) {
+  if (!lockPath) return;
+  try { fs.unlinkSync(lockPath); } catch {}
+}
+
+function pidAlive(pid) {
+  if (typeof pid !== 'number') return false;
+  try { process.kill(pid, 0); return true; }
+  catch (e) { return e.code !== 'ESRCH'; }
+}
+
 // --- phase 1: govern ---
 
 /**
@@ -915,6 +968,9 @@ function run(playbookId, directiveId, agentSubmission = {}, runOpts = {}) {
   }
 
   _activeRuns.add(playbookId);
+  // Cross-process mutex lock for this run. preflight verified no other lock
+  // exists; we acquire ours and release in the finally block.
+  const lockPath = acquireLock(playbookId);
   try {
     const phases = {
       govern:   govern(playbookId, directiveId, runOpts),
@@ -947,6 +1003,7 @@ function run(playbookId, directiveId, agentSubmission = {}, runOpts = {}) {
     };
   } finally {
     _activeRuns.delete(playbookId);
+    releaseLock(lockPath);
   }
 }
 

package/manifest-snapshot.json

@@ -1,6 +1,6 @@
 {
   "_comment": "Auto-generated by scripts/refresh-manifest-snapshot.js — do not hand-edit. Public skill surface used by check-manifest-snapshot.js to detect breaking removals.",
-  "_generated_at": "2026-05-12T14:46:11.640Z",
+  "_generated_at": "2026-05-12T15:10:59.836Z",
   "atlas_version": "5.1.0",
   "skill_count": 38,
   "skills": [

package/manifest.json

@@ -1,6 +1,6 @@
 {
   "name": "exceptd-security",
-  "version": "0.11.0",
+  "version": "0.11.1",
   "description": "AI security skills grounded in mid-2026 threat reality, not stale framework documentation",
   "homepage": "https://exceptd.com",
   "license": "Apache-2.0",
@@ -52,7 +52,7 @@
       ],
       "last_threat_review": "2026-05-01",
       "signature": "WprHkO1KOjQtCBj6/EJghBTNyNKJhn7O2HDbAQZPi5jn4flwHpSrtP8LC15a4Unoh+xiIIgGhvTHZIQFHGMpBQ==",
-      "signed_at": "2026-05-12T14:46:11.163Z",
+      "signed_at": "2026-05-12T15:10:59.392Z",
       "cwe_refs": [
         "CWE-125",
         "CWE-362",
@@ -116,7 +116,7 @@
       ],
       "last_threat_review": "2026-05-01",
       "signature": "fg20bOXGRkPUdLmegeXpTM4hnzl/ArgcVc88rItZN5DdsnFnzPgUU1PwCI82zooyj2GfxJHYjxNkq5qd2zNPBg==",
-      "signed_at": "2026-05-12T14:46:11.165Z",
+      "signed_at": "2026-05-12T15:10:59.394Z",
       "cwe_refs": [
         "CWE-1039",
         "CWE-1426",
@@ -179,7 +179,7 @@
       ],
       "last_threat_review": "2026-05-01",
       "signature": "6JuSzkSSFzFHEZ3ANzqjtIbKPOkwJeKhQ+8WAPB4+dTRvDSeg46n3D88XfGaNd2z7pmg/i8p9ZoImQcHFS4BCg==",
-      "signed_at": "2026-05-12T14:46:11.166Z",
+      "signed_at": "2026-05-12T15:10:59.395Z",
       "cwe_refs": [
         "CWE-22",
         "CWE-345",
@@ -225,7 +225,7 @@
       "framework_gaps": [],
       "last_threat_review": "2026-05-01",
       "signature": "PYSw9abiYfW+y7IkY8udJG5LSds2a4rMimlw3rrdD0zE3vunEeV/y7oTmDD4o83OqHSCKNzF/7vMhvd/noqICQ==",
-      "signed_at": "2026-05-12T14:46:11.166Z"
+      "signed_at": "2026-05-12T15:10:59.395Z"
     },
     {
       "name": "compliance-theater",
@@ -256,7 +256,7 @@
       ],
       "last_threat_review": "2026-05-01",
       "signature": "BMFmmJYP3HsHIjUqnhw8E3MiMGZJsI/eDq51we+nxUicZ8nFUQT9DhmRntAqOs6BUnsfiQNNLc/rrsNh8yg1CQ==",
-      "signed_at": "2026-05-12T14:46:11.167Z"
+      "signed_at": "2026-05-12T15:10:59.396Z"
     },
     {
       "name": "exploit-scoring",
@@ -285,7 +285,7 @@
       ],
       "last_threat_review": "2026-05-01",
       "signature": "VGPyDwy5BRlpn1lZthhPB6ytb4ZcU2j0KtCZbaMkyLdMugQJtK2yEuwrsDH4yEtAhTB6/A4B3eSygJckum49Ag==",
-      "signed_at": "2026-05-12T14:46:11.167Z"
+      "signed_at": "2026-05-12T15:10:59.396Z"
     },
     {
       "name": "rag-pipeline-security",
@@ -322,7 +322,7 @@
       ],
       "last_threat_review": "2026-05-01",
       "signature": "XkFGpsNnXBVslkQ48usEu9l1LjPiV2ppW+M4B63zXFBP2Puh52qYCffEPjUHYhoO5bjgTM7yCbK8XF/Dzk5wBw==",
-      "signed_at": "2026-05-12T14:46:11.167Z",
+      "signed_at": "2026-05-12T15:10:59.396Z",
       "cwe_refs": [
         "CWE-1395",
         "CWE-1426"
@@ -379,7 +379,7 @@
       ],
       "last_threat_review": "2026-05-01",
       "signature": "1Xqy7Kxxy6GpTvuYJPdllPzVDRFxb7N6AuxKuoaO4v91CiZLmiXt0sTIWImKJ3p9Eup6rJNDdsY71dolFhHNBA==",
-      "signed_at": "2026-05-12T14:46:11.168Z",
+      "signed_at": "2026-05-12T15:10:59.396Z",
       "d3fend_refs": [
         "D3-CA",
         "D3-CSPP",
@@ -414,7 +414,7 @@
       "framework_gaps": [],
       "last_threat_review": "2026-05-01",
       "signature": "QNLOmAL54S/Cmk4cdO4L2BCGkqZ/FgY4UBsKWtg/EEW+YXF5ev+a8XsUT8q5veuUa2VYcYna7rD1iAnE+2PDBA==",
-      "signed_at": "2026-05-12T14:46:11.168Z",
+      "signed_at": "2026-05-12T15:10:59.397Z",
       "cwe_refs": [
         "CWE-1188"
       ]
@@ -442,7 +442,7 @@
       "framework_gaps": [],
       "last_threat_review": "2026-05-01",
       "signature": "aFHq4cSl3CKchnVITxx+BrAEWD33WtFFJoQtwAug5g9R3/3ABtjaXYGVQaZcdcG1AIZkMoGSPywgLQWDY7ZDCw==",
-      "signed_at": "2026-05-12T14:46:11.168Z"
+      "signed_at": "2026-05-12T15:10:59.397Z"
     },
     {
       "name": "global-grc",
@@ -474,7 +474,7 @@
       "framework_gaps": [],
       "last_threat_review": "2026-05-01",
       "signature": "viCTUWdy6euvd2KTAo6sLvarK/FZkDtYGocxBt0H+fY94kLQGW8K5cSpqIWdUF5NUytSHBCiG4YcSze8P9Z/BQ==",
-      "signed_at": "2026-05-12T14:46:11.169Z"
+      "signed_at": "2026-05-12T15:10:59.398Z"
     },
     {
       "name": "zeroday-gap-learn",
@@ -501,7 +501,7 @@
       "framework_gaps": [],
       "last_threat_review": "2026-05-01",
       "signature": "6PkUaHQi3Hxuqq/Jp4GYckvfqVEofmeT87NUH0T+pwyjlc+xZkoqNPn65f7ldciEPL86JIPi3/dDTKQbIFFBCw==",
-      "signed_at": "2026-05-12T14:46:11.169Z"
+      "signed_at": "2026-05-12T15:10:59.398Z"
     },
     {
       "name": "pqc-first",
@@ -553,7 +553,7 @@
       ],
       "last_threat_review": "2026-05-01",
       "signature": "ZenFTEzWx+DzrSXlNXhbZ70vOdJSXfrnKkAwqMlBf5nlDf38V1/hG4XCKj43snQXWr4mVJOX6ilqFLTYNIjnBw==",
-      "signed_at": "2026-05-12T14:46:11.169Z",
+      "signed_at": "2026-05-12T15:10:59.398Z",
       "cwe_refs": [
         "CWE-327"
       ],
@@ -600,7 +600,7 @@
       ],
       "last_threat_review": "2026-05-01",
       "signature": "ih0vpd2v2zS31JSJv7SnABoya8JlJdrXZXx4rBnrsV3Assj+dbjAP0pQ1HMT/5RX8yTTswRQsg0bJV3qmbJ3Bw==",
-      "signed_at": "2026-05-12T14:46:11.170Z"
+      "signed_at": "2026-05-12T15:10:59.399Z"
     },
     {
       "name": "security-maturity-tiers",
@@ -637,7 +637,7 @@
       ],
       "last_threat_review": "2026-05-01",
       "signature": "Lv8dHiwIqUbNsywCCB/+pYWGF+MHCvxVn1IAvR7Cnif5fy0sICv0N4SVsSb621qAAkHNshpfxqwuhbuQnE1TBA==",
-      "signed_at": "2026-05-12T14:46:11.170Z",
+      "signed_at": "2026-05-12T15:10:59.399Z",
       "cwe_refs": [
         "CWE-1188"
       ]
@@ -672,7 +672,7 @@
       "framework_gaps": [],
       "last_threat_review": "2026-05-11",
       "signature": "BS+wrL28HHYhBpe+v84VLoq9KPBXu6alfG968katfGIoLNYQueaHP931bRmlkrjfeb6qbDf067GWdPEh7nroAw==",
-      "signed_at": "2026-05-12T14:46:11.170Z"
+      "signed_at": "2026-05-12T15:10:59.399Z"
     },
     {
       "name": "attack-surface-pentest",
@@ -743,7 +743,7 @@
         "PTES revision incorporating AI-surface enumeration"
       ],
       "signature": "vLhIYT/CC3IzxMRa+UPeqGSZTvthuwUeTMGNFMm37+TaEk0TtfwPrPyrBJLHw4W6Wt7+pufjHs46X3nTgzoRAg==",
-      "signed_at": "2026-05-12T14:46:11.171Z"
+      "signed_at": "2026-05-12T15:10:59.399Z"
     },
     {
       "name": "fuzz-testing-strategy",
@@ -803,7 +803,7 @@
         "OSS-Fuzz-Gen / AI-assisted harness generation becoming the default expectation for OSS maintainers"
       ],
       "signature": "TOcQLy/427cuf0Lw90J7A0oIeuhUmf9NXb6tOUS5K3SazCKTJujPgYSVAPZOYf1zZrRAY/aq0iqELd5cLyk5DA==",
-      "signed_at": "2026-05-12T14:46:11.171Z"
+      "signed_at": "2026-05-12T15:10:59.400Z"
     },
     {
       "name": "dlp-gap-analysis",
@@ -878,7 +878,7 @@
         "Quebec Law 25, India DPDPA, KSA PDPL enforcement actions naming AI-tool prompt data as in-scope personal information"
       ],
       "signature": "u4IN7escQa5V+OgdtaJXLdvhmNiGZsdmGOvebTLZ30WoImT+WiksvaqSa0POGdbr6HzFkALe2RrZEH9Tr0U6Dg==",
-      "signed_at": "2026-05-12T14:46:11.171Z"
+      "signed_at": "2026-05-12T15:10:59.400Z"
     },
     {
       "name": "supply-chain-integrity",
@@ -955,7 +955,7 @@
         "OpenSSF model-signing — emerging Sigstore-based signing standard for ML model weights; track for production adoption"
       ],
       "signature": "eTGQJ3gnG24WggfwuFNNIFOWV/ttPxTa3pvx9OH28m5KDS1a4ZmOR7K8y01wk/su8bH0ClYYRfoBfKQOtRswAg==",
-      "signed_at": "2026-05-12T14:46:11.172Z"
+      "signed_at": "2026-05-12T15:10:59.401Z"
     },
     {
       "name": "defensive-countermeasure-mapping",
@@ -1012,7 +1012,7 @@
       ],
       "last_threat_review": "2026-05-11",
       "signature": "q7gFLPoqf/8bqATR6gt/nj0EoyUOlfzi+bZ0bT3pC9KW7O6M/ji9fT+AXSGNp6PKd+70ACb3mkMGmWgjLpQXCg==",
-      "signed_at": "2026-05-12T14:46:11.172Z"
+      "signed_at": "2026-05-12T15:10:59.402Z"
     },
     {
       "name": "identity-assurance",
@@ -1079,7 +1079,7 @@
       "d3fend_refs": [],
       "last_threat_review": "2026-05-11",
       "signature": "pX8rhrrzuyG3iRrPORLqTZAjzGdWK/bKPUGJG5WHSZcv4LB0kQXOit4sHG0exdXxI6HY8jyX67QY4r5vEHHACw==",
-      "signed_at": "2026-05-12T14:46:11.172Z"
+      "signed_at": "2026-05-12T15:10:59.402Z"
     },
     {
       "name": "ot-ics-security",
@@ -1135,7 +1135,7 @@
       "d3fend_refs": [],
       "last_threat_review": "2026-05-11",
       "signature": "ypb8kNZQRdyu5mWeveB7sjCjNKXS1yXvjDJv88muzwhOs/a4Fu/Gb532js5NKyy+eCw/emrphpTZaL8R9a2lBA==",
-      "signed_at": "2026-05-12T14:46:11.172Z"
+      "signed_at": "2026-05-12T15:10:59.402Z"
     },
     {
       "name": "coordinated-vuln-disclosure",
@@ -1187,7 +1187,7 @@
         "NYDFS 23 NYCRR 500 amendments potentially adding explicit CVD program requirements"
       ],
       "signature": "346Lt+277ycRNsyAOGwLSONi4awgxKy3hP9G+BWjwaa8ySmTeqbYsbyyhtxjeohk9bV2SF+Hl2q4JdSvc/2qCQ==",
-      "signed_at": "2026-05-12T14:46:11.173Z"
+      "signed_at": "2026-05-12T15:10:59.402Z"
     },
     {
       "name": "threat-modeling-methodology",
@@ -1237,7 +1237,7 @@
         "PASTA v2 updates incorporating AI/ML application threats"
       ],
       "signature": "ewTvG5vu3ngFHyXgBur5vSKDFQsOZx0x79djGMricl7LCvQf5//OG6LZKXa+AOuEq58prRS+HgzrFA1DiTfeCQ==",
-      "signed_at": "2026-05-12T14:46:11.173Z"
+      "signed_at": "2026-05-12T15:10:59.403Z"
     },
     {
       "name": "webapp-security",
@@ -1311,7 +1311,7 @@
       "d3fend_refs": [],
       "last_threat_review": "2026-05-11",
       "signature": "ZHjbKu0Em92Kimr2esL1g93mf9TmcsChBhVEMWf/lFrjeLcg8nyHEIcDstIZ3FWYgc6MQNHnc3Rup3Xp/Za1Cw==",
-      "signed_at": "2026-05-12T14:46:11.173Z"
+      "signed_at": "2026-05-12T15:10:59.403Z"
     },
     {
       "name": "ai-risk-management",
@@ -1361,7 +1361,7 @@
       "d3fend_refs": [],
       "last_threat_review": "2026-05-11",
       "signature": "1KRxjCbAX0Rs5NTOioi1w/f1SOzDQrtRoXjTDtzEwJ+d1QzFf9cqmBlp0uXmGpL0bzEaHWIctjigSychmoL2Dw==",
-      "signed_at": "2026-05-12T14:46:11.174Z"
+      "signed_at": "2026-05-12T15:10:59.403Z"
     },
     {
       "name": "sector-healthcare",
@@ -1421,7 +1421,7 @@
       "d3fend_refs": [],
       "last_threat_review": "2026-05-11",
       "signature": "eiajFh7w7d4g+/crGalTtw9Qsu0deVsdHkdthZSy595ifGmgu0zaFD8usKThbPhOdUCCclTYkZYz5GalQmkhCw==",
-      "signed_at": "2026-05-12T14:46:11.174Z"
+      "signed_at": "2026-05-12T15:10:59.404Z"
     },
     {
       "name": "sector-financial",
@@ -1502,7 +1502,7 @@
         "TIBER-EU framework v2.0 alignment with DORA TLPT RTS (JC 2024/40); cross-recognition with CBEST and iCAST"
       ],
       "signature": "iSZR/fYESQVyjkcqj+O+yzU0BQfaELH5s7WizzUTWvDPDTD2ZyOnZTT1r/Zfx2l4mbPmVeFGWdYnnVFTk/i3Aw==",
-      "signed_at": "2026-05-12T14:46:11.174Z"
+      "signed_at": "2026-05-12T15:10:59.404Z"
     },
     {
       "name": "sector-federal-government",
@@ -1571,7 +1571,7 @@
         "Australia PSPF 2024 revision and ISM quarterly updates — track for Essential Eight Maturity Level requirements for federal entities"
       ],
       "signature": "Wjdo5YXEL8XeNZkaEueG1DOUoyalstNPzQkxD/cwP5iMrJWg/Ly+sC0Oluuqm3aU7d63z55PrbGQCJD0XVZqBg==",
-      "signed_at": "2026-05-12T14:46:11.175Z"
+      "signed_at": "2026-05-12T15:10:59.404Z"
     },
     {
       "name": "sector-energy",
@@ -1636,7 +1636,7 @@
         "ICS-CERT advisory feed (https://www.cisa.gov/news-events/cybersecurity-advisories/ics-advisories) for vendor CVEs in Siemens, Rockwell, Schneider Electric, ABB, GE Vernova, Hitachi Energy, AVEVA / OSIsoft PI"
       ],
       "signature": "c/l7dOHe0Zj6Ag3abUaEie6o0f8M4rhY5aPI9/wG4z6FDue9PzCVw8vUGoITFgg89g97lMfy2C3CE2PegQoFCw==",
-      "signed_at": "2026-05-12T14:46:11.175Z"
+      "signed_at": "2026-05-12T15:10:59.405Z"
     },
     {
       "name": "api-security",
@@ -1705,7 +1705,7 @@
       "d3fend_refs": [],
       "last_threat_review": "2026-05-11",
       "signature": "9FgcJvYeo07QxQ+mnVRQk4jYLDMO/AVSXMs8cueO2f/qMOTQmrhBMVhj5ze7hzvXpGkp7EK/3Q1XKqde61JMAg==",
-      "signed_at": "2026-05-12T14:46:11.175Z"
+      "signed_at": "2026-05-12T15:10:59.405Z"
     },
     {
       "name": "cloud-security",
@@ -1786,7 +1786,7 @@
         "CISA KEV additions for cloud-control-plane CVEs (IMDSv1 abuses, federation token mishandling, cross-tenant boundary failures); CISA Cybersecurity Advisories for cross-cloud advisories"
       ],
       "signature": "xRA0XZf7VPtuBtbsm41bay9yBLphw/hlL3YxIUrpko5g9ldM3oJe9o1qSwzIj/wSnQSI29qqPpNsnlks+HEOCA==",
-      "signed_at": "2026-05-12T14:46:11.176Z"
+      "signed_at": "2026-05-12T15:10:59.405Z"
     },
     {
       "name": "container-runtime-security",
@@ -1848,7 +1848,7 @@
       "d3fend_refs": [],
       "last_threat_review": "2026-05-11",
       "signature": "GcU50DStuN1gU/Evm/sFRgeieQbqffVp12rgbGnasRX89Q7kM4ltFXB+bgCXHIvICzYb78hPIifWQb9UVupWBQ==",
-      "signed_at": "2026-05-12T14:46:11.176Z"
+      "signed_at": "2026-05-12T15:10:59.406Z"
     },
     {
       "name": "mlops-security",
@@ -1919,7 +1919,7 @@
         "MITRE ATLAS v5.2 — track AML.T0010 sub-technique expansion and any new MLOps-pipeline-specific TTPs"
       ],
       "signature": "onIazpFoL1t4PMNRsoF06ggnl7BzCKjt0x+ZmVfWfyt1V06DgllsrbN3AAz4+g4jW2Sc71q0vIFKfwEUWpGVAQ==",
-      "signed_at": "2026-05-12T14:46:11.176Z"
+      "signed_at": "2026-05-12T15:10:59.406Z"
     },
     {
       "name": "incident-response-playbook",
@@ -1981,7 +1981,7 @@
         "NYDFS 23 NYCRR 500.17 amendments tightening ransom-payment 24h disclosure operationalization"
       ],
       "signature": "P0Yv4CtqbnBNP6nSIxQUYYHL7T7ci+iE7iE2UXVfnMPeWVdKG2nvRePjBXc3JZTLima1Txn/I5ocDNhLTIeUAQ==",
-      "signed_at": "2026-05-12T14:46:11.177Z"
+      "signed_at": "2026-05-12T15:10:59.406Z"
     },
     {
       "name": "email-security-anti-phishing",
@@ -2034,7 +2034,7 @@
       "d3fend_refs": [],
       "last_threat_review": "2026-05-11",
       "signature": "2pv81lLRbazpHqundCANb3YiLB4lkVsYctIDvI8rxSvHxhPS9jYXqmAoB5APSdDuOaew6XqpfZOehQUj9WmyBw==",
-      "signed_at": "2026-05-12T14:46:11.177Z"
+      "signed_at": "2026-05-12T15:10:59.407Z"
     },
     {
       "name": "age-gates-child-safety",
@@ -2102,7 +2102,7 @@
         "US state adult-site age-verification laws — 19+ states by mid-2026 (TX HB 18 upheld by SCOTUS June 2025 in Free Speech Coalition v. Paxton); track ongoing challenges in remaining states"
       ],
       "signature": "BJ/YYnGVXeSBaR9oWAVrcNX7Wz+kE8R4CghX6+XEI/qY89fyrkKNNwo2veqqf49wffJhHVJ1wTp8ZDECjNp+Dw==",
-      "signed_at": "2026-05-12T14:46:11.177Z"
+      "signed_at": "2026-05-12T15:10:59.407Z"
     }
   ]
 }

package/orchestrator/index.js

@@ -304,12 +304,62 @@ function runCurrency() {
 }
 
 async function runReport(format) {
+  // v0.11.1 feature #55: `report csaf` emits a CSAF 2.0 envelope covering
+  // every scanned finding + dispatched plan + currency posture. Useful for
+  // VEX downstreams that ingest CSAF JSON.
+  if (format === 'csaf') {
+    const scanResult = await scan();
+    const plan = dispatch(scanResult.findings);
+    const { currency_report } = currencyCheck();
+    const ver = (function(){try{return require('../package.json').version;}catch{return 'unknown';}})();
+    const csaf = {
+      document: {
+        category: 'csaf_security_advisory',
+        csaf_version: '2.0',
+        publisher: { category: 'vendor', name: 'exceptd', namespace: 'https://exceptd.com' },
+        title: `exceptd assessment report — ${scanResult.summary.total_findings} finding(s) across ${plan.plan.length} skill(s)`,
+        tracking: {
+          id: `exceptd-report-${Date.now()}`,
+          status: 'final',
+          version: ver,
+          initial_release_date: new Date().toISOString(),
+          revision_history: [{ number: '1', date: new Date().toISOString(), summary: 'Initial report emission' }],
+        },
+      },
+      vulnerabilities: scanResult.findings
+        .filter(f => f.cve_id)
+        .map(f => ({
+          cve: f.cve_id,
+          notes: [{ category: 'description', text: f.action_required || f.signal }],
+          scores: [{ products: [], cvss_v3: { base_score: 0 } }],
+          threats: f.severity === 'critical' ? [{ category: 'exploit_status', details: f.action_required }] : [],
+        })),
+      exceptd_extension: {
+        scan_summary: scanResult.summary,
+        dispatch_plan: plan,
+        skill_currency: currency_report,
+        host: scanResult.host,
+      },
+    };
+    process.stdout.write(JSON.stringify(csaf, null, 2) + '\n');
+    return;
+  }
+
   console.log(`[orchestrator] Generating ${format} report...\n`);
   const scanResult = await scan();
   const plan = dispatch(scanResult.findings);
   const { currency_report } = currencyCheck();
 
-  console.log('# exceptd Security Assessment Report');
+  // Bug #48: header now self-describes the report flavor so a piped-to-file
+  // report carries its provenance internally. Previously only stderr
+  // (`[orchestrator] Generating <X> report`) distinguished the three.
+  const flavorTitle = {
+    executive: 'Executive Report',
+    technical: 'Technical Report',
+    compliance: 'Compliance Report',
+  }[format] || 'Report';
+  console.log(`# exceptd ${flavorTitle}`);
+  console.log(`<!-- exceptd-report:flavor=${format} version=${(function(){try{return require('../package.json').version;}catch{return 'unknown';}})()} -->`);
   console.log(`Generated: ${new Date().toISOString()}\n`);
 
   console.log('## Executive Summary');

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@blamejs/exceptd-skills",
-  "version": "0.11.0",
+  "version": "0.11.1",
   "description": "AI security skills grounded in mid-2026 threat reality, not stale framework documentation. 38 skills, 10 catalogs, 34 jurisdictions, pre-computed indexes, Ed25519-signed.",
   "keywords": [
     "ai-security",

package/sbom.cdx.json

@@ -1,10 +1,10 @@
 {
   "bomFormat": "CycloneDX",
   "specVersion": "1.6",
-  "serialNumber": "urn:uuid:0e46fda6-1345-4ea4-ad34-0bfaf842d658",
+  "serialNumber": "urn:uuid:8c82a24f-1d6f-4e1f-80ad-08975a8a86ea",
   "version": 1,
   "metadata": {
-    "timestamp": "2026-05-12T14:46:12.106Z",
+    "timestamp": "2026-05-12T15:11:00.344Z",
     "tools": [
       {
         "name": "hand-written",
@@ -13,10 +13,10 @@
       }
     ],
     "component": {
-      "bom-ref": "pkg:npm/@blamejs/exceptd-skills@0.11.0",
+      "bom-ref": "pkg:npm/@blamejs/exceptd-skills@0.11.1",
       "type": "application",
       "name": "@blamejs/exceptd-skills",
-      "version": "0.11.0",
+      "version": "0.11.1",
       "description": "AI security skills grounded in mid-2026 threat reality, not stale framework documentation. 38 skills, 10 catalogs, 34 jurisdictions, pre-computed indexes, Ed25519-signed.",
       "licenses": [
         {
@@ -25,11 +25,11 @@
           }
         }
       ],
-      "purl": "pkg:npm/%40blamejs/exceptd-skills@0.11.0",
+      "purl": "pkg:npm/%40blamejs/exceptd-skills@0.11.1",
       "externalReferences": [
         {
           "type": "distribution",
-          "url": "https://www.npmjs.com/package/@blamejs/exceptd-skills/v/0.11.0"
+          "url": "https://www.npmjs.com/package/@blamejs/exceptd-skills/v/0.11.1"
         },
         {
           "type": "vcs",