@blamejs/exceptd-skills 0.13.37 → 0.13.38

package/AGENTS.md

@@ -372,7 +372,7 @@ This split costs every consumer the same translation work on every invocation. C
 exceptd collect secrets | exceptd run secrets --evidence -
 ```
 
-The collector library is small and grows as playbooks are touched. Six reference collectors ship today (`lib/collectors/secrets.js`, `lib/collectors/kernel.js`, `lib/collectors/sbom.js`, `lib/collectors/containers.js`, `lib/collectors/library-author.js`, `lib/collectors/crypto-codebase.js`); the rest are written when each playbook needs them. Until a playbook has a collector, the AI/operator owns evidence collection as before.
+The collector library is small and grows as playbooks are touched. Seven reference collectors ship today (`lib/collectors/secrets.js`, `lib/collectors/kernel.js`, `lib/collectors/sbom.js`, `lib/collectors/containers.js`, `lib/collectors/library-author.js`, `lib/collectors/crypto-codebase.js`, `lib/collectors/cred-stores.js`); the rest are written when each playbook needs them. Until a playbook has a collector, the AI/operator owns evidence collection as before.
 
 ### Precision target for new `look.artifacts[].source` strings
 

package/CHANGELOG.md

@@ -1,5 +1,13 @@
 # Changelog
 
+## 0.13.38 — 2026-05-20
+
+Seventh reference collector.
+
+### Features
+
+- **`lib/collectors/cred-stores.js`** — inspects local credential carriers (`~/.aws/credentials`, `~/.kube/config`, `~/.docker/config.json`, `~/.npmrc`, `~/.pypirc`, `~/.config/gcloud/application_default_credentials.json`, plus project-level `.npmrc` / `.pypirc` under cwd). Flips seven deterministic indicators from the `cred-stores` playbook: `aws-static-key-present` (any `aws_access_key_id` profile with no `sso_session` / `credential_process` / `role_arn` sibling), `kube-static-token` (any `users[].user.token` field non-null with no `exec:` provider on the same user), `gcp-service-account-json-adc` (`type: "service_account"` in `application_default_credentials.json`), `docker-cleartext-auth` (any `auths[<registry>].auth` field with no `credsStore` / `credHelpers[<registry>]` covering it), `npm-pat-present` (`:_authToken=npm_[A-Za-z0-9]{36,}` in either home or project `.npmrc`), `pypi-token-present` (`password = pypi-[A-Za-z0-9_-]{40,}` in either home or project `.pypirc`), `credentials-file-bad-perms` (POSIX only — any of the listed carriers with mode != 0600). The `aws-sso-cache`, `gcloud-credentials` (SQLite path), `gpg-keys`, `ssh-keys-inventory`, `ssh-config`, `keychain-inventory` artifacts are explicitly marked `captured: false` with a `reason` so the runner records partial-evidence coverage — `ssh-key-rsa-short-bits` / `ssh-key-old` / `gpg-key-old-or-weak` / `all-stores-empty-or-federated` need ssh-keygen / gpg / keychain access that would force a child_process out of the stdlib-only collector contract; left to operator-supplied evidence.
+
 ## 0.13.37 — 2026-05-20
 
 Sixth reference collector.

package/data/_indexes/_meta.json

@@ -1,10 +1,10 @@
 {
   "schema_version": "1.1.0",
-  "generated_at": "2026-05-21T03:49:45.015Z",
+  "generated_at": "2026-05-21T04:46:54.898Z",
   "generator": "scripts/build-indexes.js",
   "source_count": 54,
   "source_hashes": {
-    "manifest.json": "5eeb28b7edf5ebf368b201b1988d0b6ccbb7ca838ee7fe45e63a878e7d3650f9",
+    "manifest.json": "5fa40751e228263289b76f7f5a4803e967fb9f45268b61a6783f23a8ad0c5b96",
     "data/atlas-ttps.json": "d296c1d3e71807c9279b731f047e57796e85137f186586743a8cdad214b408f9",
     "data/attack-techniques.json": "49b6010b317edd219def135171ea8f3b1bbf1e00e9c5a08bf7237215ff54e2c3",
     "data/cve-catalog.json": "a09c83af3f9679a7ea73935726a1ff9de2cab94b4ab6321fc017fc147747d7c3",

package/lib/collectors/cred-stores.js

@@ -0,0 +1,471 @@
+"use strict";
+
+/**
+ * lib/collectors/cred-stores.js
+ *
+ * Companion collector for the `cred-stores` playbook. Inspects local
+ * credential carriers (~/.aws/credentials, ~/.kube/config, ~/.docker/
+ * config.json, ~/.npmrc, ~/.pypirc, ~/.config/gcloud/application_
+ * default_credentials.json, project-level .npmrc / .pypirc), and
+ * flips signal_overrides for the deterministic indicators. Defers
+ * non-deterministic indicators (ssh-key-rsa-short-bits, ssh-key-old,
+ * gpg-key-old-or-weak, all-stores-empty-or-federated) so the runner
+ * returns inconclusive rather than a forced miss.
+ *
+ * Scope: $HOME credential dotfiles + project-level .npmrc / .pypirc
+ * under cwd. Posix-mode-bits indicators are skipped on win32 (ACL
+ * audit out of scope).
+ *
+ * Interface: see lib/collectors/README.md
+ */
+
+const fs = require("node:fs");
+const path = require("node:path");
+const os = require("node:os");
+
+const COLLECTOR_ID = "cred-stores";
+
+function readSafe(full, max = 512 * 1024) {
+  try {
+    const s = fs.statSync(full);
+    if (s.size > max) return null;
+    return fs.readFileSync(full, "utf8");
+  } catch { return null; }
+}
+
+function statSafe(full) {
+  try { return fs.statSync(full); } catch { return null; }
+}
+
+function modeOf(full) {
+  const s = statSafe(full);
+  if (!s) return null;
+  return s.mode & 0o777;
+}
+
+function fileExists(full) {
+  try { return fs.statSync(full).isFile(); } catch { return false; }
+}
+
+// AWS credentials INI: any [profile] block carrying
+// `aws_access_key_id` AND no `sso_session` / `credential_process`.
+function parseAwsCredentials(content) {
+  if (!content) return { staticProfiles: [], federatedProfiles: [] };
+  const lines = content.split(/\r?\n/);
+  const profiles = {};
+  let current = null;
+  for (const raw of lines) {
+    const line = raw.replace(/[#;].*$/, "").trim();
+    if (!line) continue;
+    const sec = line.match(/^\[([^\]]+)\]$/);
+    if (sec) {
+      current = sec[1].trim();
+      profiles[current] = {};
+      continue;
+    }
+    if (!current) continue;
+    const kv = line.match(/^([A-Za-z0-9_-]+)\s*=\s*(.*)$/);
+    if (!kv) continue;
+    profiles[current][kv[1].trim().toLowerCase()] = kv[2].trim();
+  }
+  const staticProfiles = [];
+  const federatedProfiles = [];
+  for (const [name, kv] of Object.entries(profiles)) {
+    const hasKey = !!kv["aws_access_key_id"];
+    const hasFederation = !!(kv["sso_session"] || kv["credential_process"] || kv["role_arn"]);
+    if (hasKey && !hasFederation) staticProfiles.push(name);
+    if (hasFederation) federatedProfiles.push(name);
+  }
+  return { staticProfiles, federatedProfiles };
+}
+
+// kubeconfig: users[].user.token field present (non-empty) with no
+// users[].user.exec sibling. Use a tolerant line-based scan rather
+// than pulling a YAML parser into the stdlib-only contract.
+function parseKubeConfig(content) {
+  if (!content) return { hasStaticToken: false, hasExec: false };
+  // Find every users: block + each `- name: ...` user entry and
+  // its sub-keys. The kubeconfig schema is regular enough that a
+  // line-window scan is reliable.
+  const lines = content.split(/\r?\n/);
+  let inUsers = false;
+  let userIndent = -1;
+  let blocks = [];
+  let buf = [];
+  let blockIndent = -1;
+  for (const raw of lines) {
+    if (/^users:\s*$/.test(raw)) { inUsers = true; userIndent = -1; continue; }
+    if (inUsers) {
+      const m = raw.match(/^(\s*)-\s+name:/);
+      if (m) {
+        if (buf.length) { blocks.push(buf.join("\n")); buf = []; }
+        userIndent = m[1].length;
+        blockIndent = userIndent;
+        buf.push(raw);
+        continue;
+      }
+      if (buf.length) {
+        // If we leave the users list (dedent), close current block.
+        if (raw.trim() === "" || /^\S/.test(raw)) {
+          if (/^\S/.test(raw) && !/^users:/.test(raw)) {
+            blocks.push(buf.join("\n")); buf = [];
+            inUsers = false;
+            continue;
+          }
+        }
+        buf.push(raw);
+      }
+    }
+  }
+  if (buf.length) blocks.push(buf.join("\n"));
+
+  // Match `token:` / `token-data:` ONLY at the user-block indent level
+  // (i.e. inside `user:`). Auth-provider blocks carry sub-keys like
+  // `access-token`, `id-token`, `refresh-token` which are dynamic /
+  // cached tokens, not static-credential evidence. Use a line-prefix
+  // anchor + auth-provider-vs-user proximity check to refuse those.
+  let hasStaticToken = false;
+  let hasExec = false;
+  const userKvRe = /^(\s+)(token|token-data)\s*:\s*(\S[^\n]*)/gm;
+  for (const block of blocks) {
+    const execPresent = /^\s+exec\s*:\s*(?:\n|$)/m.test(block);
+    if (execPresent) hasExec = true;
+    let blockHasStatic = false;
+    for (const m of block.matchAll(userKvRe)) {
+      const upto = block.slice(0, m.index);
+      const lastUserAt = upto.lastIndexOf("\n  user:");
+      const lastAuthProviderAt = upto.lastIndexOf("auth-provider:");
+      // Reject when the closest enclosing key is auth-provider rather
+      // than user — those are dynamic tokens, not static credentials.
+      if (lastAuthProviderAt > lastUserAt) continue;
+      const value = m[3];
+      if (!value || value.startsWith("null")) continue;
+      blockHasStatic = true;
+      break;
+    }
+    if (blockHasStatic && !execPresent) hasStaticToken = true;
+  }
+  return { hasStaticToken, hasExec };
+}
+
+function parseGcloudAdc(content) {
+  if (!content) return { hasServiceAccount: false };
+  try {
+    const j = JSON.parse(content);
+    return { hasServiceAccount: j?.type === "service_account" };
+  } catch {
+    return { hasServiceAccount: false };
+  }
+}
+
+function parseDockerConfig(content) {
+  if (!content) return { hasCleartext: false, hasCredHelper: false, registriesWithCleartext: [] };
+  let j;
+  try { j = JSON.parse(content); } catch { return { hasCleartext: false, hasCredHelper: false, registriesWithCleartext: [] }; }
+  const auths = (j && typeof j.auths === "object") ? j.auths : {};
+  const credHelpers = (j && typeof j.credHelpers === "object") ? j.credHelpers : {};
+  const credsStore = typeof j?.credsStore === "string" ? j.credsStore : "";
+  const registriesWithCleartext = [];
+  for (const [registry, entry] of Object.entries(auths)) {
+    if (!entry || typeof entry !== "object") continue;
+    const hasAuth = typeof entry.auth === "string" && entry.auth.length > 0;
+    if (!hasAuth) continue;
+    if (credsStore || credHelpers[registry]) continue;
+    registriesWithCleartext.push(registry);
+  }
+  return {
+    hasCleartext: registriesWithCleartext.length > 0,
+    hasCredHelper: !!credsStore || Object.keys(credHelpers).length > 0,
+    registriesWithCleartext,
+  };
+}
+
+const NPM_PAT_RE = /:_authToken\s*=\s*npm_[A-Za-z0-9]{36,}/;
+const PYPI_TOKEN_RE = /password\s*=\s*pypi-[A-Za-z0-9_-]{40,}/;
+
+function collect({ cwd = process.cwd(), env = process.env, args = {} } = {}) {
+  const errors = [];
+  const startTime = Date.now();
+  const root = path.resolve(cwd);
+  const home = (env && env.HOME) || (env && env.USERPROFILE) || os.homedir();
+  const isPosix = process.platform !== "win32";
+
+  const carriers = {
+    "aws-credentials": path.join(home, ".aws", "credentials"),
+    "aws-config": path.join(home, ".aws", "config"),
+    "kube-config": path.join(home, ".kube", "config"),
+    "docker-config": path.join(home, ".docker", "config.json"),
+    "npmrc-home": path.join(home, ".npmrc"),
+    "pypirc-home": path.join(home, ".pypirc"),
+    "gcloud-adc": path.join(home, ".config", "gcloud", "application_default_credentials.json"),
+    "npmrc-project": path.join(root, ".npmrc"),
+    "pypirc-project": path.join(root, ".pypirc"),
+  };
+  const ssoCacheDir = path.join(home, ".aws", "sso", "cache");
+
+  const presence = {};
+  for (const [id, p] of Object.entries(carriers)) presence[id] = fileExists(p);
+
+  // Read carriers we care about.
+  const awsCredsContent = presence["aws-credentials"] ? readSafe(carriers["aws-credentials"]) : null;
+  const awsCfgContent = presence["aws-config"] ? readSafe(carriers["aws-config"]) : null;
+  const kubeContent = presence["kube-config"] ? readSafe(carriers["kube-config"]) : null;
+  const dockerContent = presence["docker-config"] ? readSafe(carriers["docker-config"]) : null;
+  const npmrcHomeContent = presence["npmrc-home"] ? readSafe(carriers["npmrc-home"]) : null;
+  const pypirHomeContent = presence["pypirc-home"] ? readSafe(carriers["pypirc-home"]) : null;
+  const npmrcProjContent = presence["npmrc-project"] ? readSafe(carriers["npmrc-project"]) : null;
+  const pypirProjContent = presence["pypirc-project"] ? readSafe(carriers["pypirc-project"]) : null;
+  const gcloudAdcContent = presence["gcloud-adc"] ? readSafe(carriers["gcloud-adc"]) : null;
+
+  // Indicator predicates.
+  const awsCredsParsed = parseAwsCredentials(awsCredsContent);
+  const awsCfgParsed = parseAwsCredentials(awsCfgContent);
+  const ssoCacheFiles = (() => {
+    try { return fs.readdirSync(ssoCacheDir).filter(f => f.endsWith(".json")); }
+    catch { return []; }
+  })();
+  // aws-static-key-present: any AKIA* key with no federation. Apply
+  // the playbook's catalogued FP[0] (AWS-published doc-fixture key)
+  // and FP[2] (break-glass profile-name pattern) directly in the
+  // collector — they're deterministic and the collector has the
+  // evidence locally. FP[1] requires `aws sts get-caller-identity`
+  // which is out of stdlib scope, so the collector cannot attest it;
+  // the runner downgrades hit → inconclusive with that one
+  // unsatisfied, which is the honest outcome.
+  const AWS_DOC_FIXTURE_KEY = "AKIAIOSFODNN7EXAMPLE";
+  const realAwsProfiles = awsCredsParsed.staticProfiles.filter(p => {
+    // Parse the raw INI again for this profile's key value + name.
+    // For doc-fixture demotion (FP[0]) we look up the key value; for
+    // break-glass demotion (FP[2]) we check the profile name pattern.
+    const block = (awsCredsContent || "").split(/^\[/m).find(b => b.startsWith(p + "]"));
+    if (!block) return true;
+    if (block.includes(AWS_DOC_FIXTURE_KEY)) return false; // FP[0]
+    if (/^breakglass-/i.test(p) || /^break-glass-/i.test(p)) return false; // FP[2]
+    return true;
+  });
+  const awsStaticKey = realAwsProfiles.length > 0;
+
+  const kubeParsed = parseKubeConfig(kubeContent);
+  const gcloudParsed = parseGcloudAdc(gcloudAdcContent);
+  const dockerParsed = parseDockerConfig(dockerContent);
+
+  // docker-cleartext-auth FP checks (per playbook):
+  //   FP[0] — vendor-token user pattern (decoded `user:pass`) is
+  //           `<token>` / `AWS` / `oauth2accesstoken` / a zero-UUID;
+  //           treat as a deliberately published convention, demote.
+  //   FP[1] — local-only registry (loopback IP, *.local, *.svc.
+  //           cluster.local, kind.local) on a dev workstation, demote.
+  //   FP[2] — global credsStore overrides per-registry omission —
+  //           the collector already accounts for this via
+  //           parseDockerConfig.hasCredHelper.
+  const VENDOR_TOKEN_USERS = new Set([
+    "<token>", "AWS", "oauth2accesstoken",
+    "00000000-0000-0000-0000-000000000000",
+  ]);
+  function isLocalOnlyRegistry(registry) {
+    return /^(?:127\.0\.0\.1|localhost)(?::\d+)?$/.test(registry) ||
+           /\.local(?::\d+)?$/.test(registry) ||
+           /\.svc\.cluster\.local(?::\d+)?$/.test(registry) ||
+           /^kind\.local(?::\d+)?$/.test(registry);
+  }
+  function dockerAuthDemoted(registry, entry) {
+    // FP[1]: local-only registry → demote.
+    if (isLocalOnlyRegistry(registry)) return true;
+    // FP[0]: decode `auth` base64 and check for vendor-token user.
+    try {
+      const decoded = Buffer.from(entry.auth, "base64").toString("utf8");
+      const [user] = decoded.split(":", 1);
+      if (VENDOR_TOKEN_USERS.has(user)) return true;
+    } catch { /* unparseable, treat as real */ }
+    return false;
+  }
+  const realCleartextRegistries = dockerParsed.registriesWithCleartext.filter(reg => {
+    const entry = (() => { try { return JSON.parse(dockerContent || "{}").auths[reg]; } catch { return null; } })();
+    if (!entry) return false;
+    return !dockerAuthDemoted(reg, entry);
+  });
+  const dockerCleartext = realCleartextRegistries.length > 0;
+
+  const npmPatPresent =
+    (npmrcHomeContent && NPM_PAT_RE.test(npmrcHomeContent)) ||
+    (npmrcProjContent && NPM_PAT_RE.test(npmrcProjContent));
+  const pypiTokenPresent =
+    (pypirHomeContent && PYPI_TOKEN_RE.test(pypirHomeContent)) ||
+    (pypirProjContent && PYPI_TOKEN_RE.test(pypirProjContent));
+
+  // credentials-file-bad-perms: POSIX only. Any of the listed
+  // carriers with mode != 0600. Per playbook the indicator covers
+  // `~/.config/gcloud/*` too, so include the gcloud ADC file (and
+  // its parent dir mode != 0700 expectation per the spec).
+  let credsFileBadPerms;
+  const permViolations = [];
+  if (isPosix) {
+    const permTargets = [
+      ["aws-credentials", carriers["aws-credentials"], 0o600],
+      ["aws-config", carriers["aws-config"], 0o600],
+      ["kube-config", carriers["kube-config"], 0o600],
+      ["docker-config", carriers["docker-config"], 0o600],
+      ["npmrc-home", carriers["npmrc-home"], 0o600],
+      ["pypirc-home", carriers["pypirc-home"], 0o600],
+      ["gcloud-adc", carriers["gcloud-adc"], 0o600],
+    ];
+    for (const [id, p, expectedMode] of permTargets) {
+      if (!presence[id]) continue;
+      // FP[1]: 0-byte placeholder OR symlink to broker socket / tmpfs —
+      // mode bits don't carry the same blast radius. Skip these.
+      let lstat;
+      try { lstat = fs.lstatSync(p); } catch { continue; }
+      if (lstat.size === 0) continue;
+      if (lstat.isSymbolicLink()) continue;
+      const m = modeOf(p);
+      if (m == null) continue;
+      if (m !== expectedMode) {
+        permViolations.push({ id, mode_octal: "0" + m.toString(8) });
+      }
+    }
+    // Also check the gcloud directory itself (expected 0700 per spec).
+    const gcloudDir = path.join(home, ".config", "gcloud");
+    try {
+      const gs = fs.statSync(gcloudDir);
+      if (gs.isDirectory()) {
+        const dm = gs.mode & 0o777;
+        if (dm !== 0o700) {
+          permViolations.push({ id: "gcloud-dir", mode_octal: "0" + dm.toString(8) });
+        }
+      }
+    } catch { /* not present, no violation */ }
+    credsFileBadPerms = permViolations.length > 0 ? "hit" : "miss";
+  }
+
+  const signal_overrides = {
+    "aws-static-key-present": awsStaticKey ? "hit" : "miss",
+    "kube-static-token": kubeParsed.hasStaticToken ? "hit" : "miss",
+    "gcp-service-account-json-adc": gcloudParsed.hasServiceAccount ? "hit" : "miss",
+    "docker-cleartext-auth": dockerCleartext ? "hit" : "miss",
+    "npm-pat-present": npmPatPresent ? "hit" : "miss",
+    "pypi-token-present": pypiTokenPresent ? "hit" : "miss",
+  };
+  if (credsFileBadPerms !== undefined) {
+    signal_overrides["credentials-file-bad-perms"] = credsFileBadPerms;
+  }
+
+  // Per-indicator __fp_checks attestation. The runner gates a 'hit'
+  // verdict on false_positive_checks_required[] entries; an
+  // unsatisfied check downgrades to 'inconclusive'. Attest exactly
+  // the checks the collector itself ran (don't attest network /
+  // operator-judgement checks). Use the index-keyed form because
+  // false_positive_checks_required entries are free-text prose, not
+  // ids — the index is the stable cross-reference.
+  //
+  //   aws-static-key-present:
+  //     [0] doc-fixture demotion (AKIAIOSFODNN7EXAMPLE) — DONE
+  //     [1] live-key sts check — NOT DONE (needs network)
+  //     [2] break-glass profile-name pattern — DONE
+  //
+  //   docker-cleartext-auth:
+  //     [0] vendor-token user pattern — DONE
+  //     [1] local-only registry — DONE
+  //     [2] global credsStore — DONE
+  //
+  //   credentials-file-bad-perms:
+  //     [0] Windows / WSL skip — DONE (POSIX guard)
+  //     [1] 0-byte / symlink skip — DONE
+  //     [2] ACL-by-design (operator interview) — NOT DONE
+  if (awsStaticKey) {
+    signal_overrides["aws-static-key-present__fp_checks"] = { "0": true, "2": true };
+  }
+  if (dockerCleartext) {
+    signal_overrides["docker-cleartext-auth__fp_checks"] = { "0": true, "1": true, "2": true };
+  }
+  if (credsFileBadPerms === "hit") {
+    signal_overrides["credentials-file-bad-perms__fp_checks"] = { "0": true, "1": true };
+  }
+
+  // Artifact-level captures (one entry per artifact id in
+  // data/playbooks/cred-stores.json look.artifacts[]). We only
+  // populate the ones the collector actually reads; the rest are
+  // marked captured=false with a "reason" so the runner records
+  // partial-evidence coverage rather than a phantom miss.
+  const artifacts = {
+    "aws-credentials": presence["aws-credentials"]
+      ? { value: `present (${awsCredsParsed.staticProfiles.length} static profile(s), ${awsCredsParsed.federatedProfiles.length} federated)`, captured: true }
+      : { value: "absent", captured: true },
+    "aws-sso-cache": {
+      value: ssoCacheFiles.length > 0 ? `${ssoCacheFiles.length} cached SSO session(s)` : "empty",
+      captured: true,
+    },
+    "kube-config": presence["kube-config"]
+      ? { value: `present; static_token=${kubeParsed.hasStaticToken}; exec_provider=${kubeParsed.hasExec}`, captured: true }
+      : { value: "absent", captured: true },
+    "gcloud-credentials": presence["gcloud-adc"]
+      ? { value: `application_default_credentials.json present; service_account=${gcloudParsed.hasServiceAccount}`, captured: true }
+      : { value: "absent", captured: true, reason: "application_default_credentials.json not found; credentials.db SQLite inspection skipped (no stdlib SQLite reader)" },
+    "docker-config": presence["docker-config"]
+      ? { value: `auths_present=${Object.keys(dockerParsed.registriesWithCleartext).length > 0 || dockerParsed.hasCredHelper}; cleartext_registries=[${dockerParsed.registriesWithCleartext.join(", ")}]; cred_helper=${dockerParsed.hasCredHelper}`, captured: true }
+      : { value: "absent", captured: true },
+    "npmrc": {
+      value: [
+        presence["npmrc-home"] ? "~/.npmrc=present" : "~/.npmrc=absent",
+        presence["npmrc-project"] ? "project .npmrc=present" : "project .npmrc=absent",
+        `_authToken_present=${!!npmPatPresent}`,
+      ].join("; "),
+      captured: true,
+    },
+    "pypirc": {
+      value: [
+        presence["pypirc-home"] ? "~/.pypirc=present" : "~/.pypirc=absent",
+        presence["pypirc-project"] ? "project .pypirc=present" : "project .pypirc=absent",
+        `token_present=${!!pypiTokenPresent}`,
+      ].join("; "),
+      captured: true,
+    },
+    "gpg-keys": {
+      value: "skipped — gpg CLI invocation deferred to operator/AI evidence",
+      captured: false,
+      reason: "deterministic gpg-key-old-or-weak parsing requires gpg --list-secret-keys; left to operator-supplied evidence",
+    },
+    "ssh-keys-inventory": {
+      value: "skipped — ssh-keygen invocation deferred to operator/AI evidence",
+      captured: false,
+      reason: "ssh-key-rsa-short-bits / ssh-key-old need ssh-keygen output + mtime correlation with ssh-config; left to operator-supplied evidence",
+    },
+    "ssh-config": {
+      value: "skipped — ssh-config inspection deferred to operator/AI evidence",
+      captured: false,
+      reason: "ssh-config CertificateFile / ProxyJump correlation is judgement-shaped; collector leaves it to operator",
+    },
+    "keychain-inventory": {
+      value: "skipped — host keychain access deferred to operator/AI evidence",
+      captured: false,
+      reason: "secret-tool / security dump-keychain require interactive auth or platform-specific binaries; out of stdlib collector scope",
+    },
+  };
+
+  if (permViolations.length > 0) {
+    artifacts["credentials-file-perms"] = {
+      value: permViolations.map(v => `${v.id} (${v.mode_octal})`).join("; "),
+      captured: true,
+    };
+  }
+
+  return {
+    precondition_checks: {
+      "home-dir-readable": fs.existsSync(home),
+    },
+    artifacts,
+    signal_overrides,
+    collector_meta: {
+      collector_id: COLLECTOR_ID,
+      collector_version: "2026-05-20",
+      platform: process.platform,
+      captured_at: new Date().toISOString(),
+      cwd: root,
+      home,
+      duration_ms: Date.now() - startTime,
+      carriers_present: Object.entries(presence).filter(([_, v]) => v).map(([k]) => k),
+    },
+    collector_errors: errors,
+  };
+}
+
+module.exports = { playbook_id: COLLECTOR_ID, collect };

package/manifest.json

@@ -1,6 +1,6 @@
 {
   "name": "exceptd-security",
-  "version": "0.13.37",
+  "version": "0.13.38",
   "description": "AI security skills grounded in mid-2026 threat reality, not stale framework documentation",
   "homepage": "https://exceptd.com",
   "license": "Apache-2.0",
@@ -53,7 +53,7 @@
       ],
       "last_threat_review": "2026-05-01",
       "signature": "lXhZgoIrrVloO3XaTvo/43AxZn4mwErstd7DR0O/oVhD3AOGODM4HqrageYEou9WKOdMEGP5mJNTjJsXdP5NDA==",
-      "signed_at": "2026-05-21T03:46:47.730Z",
+      "signed_at": "2026-05-21T04:45:53.157Z",
       "cwe_refs": [
         "CWE-125",
         "CWE-362",
@@ -117,7 +117,7 @@
       ],
       "last_threat_review": "2026-05-01",
       "signature": "vSVqu4wBm+d68ujZmM6Rto/HzViCkE0gPUcv/MYE/bjFiqamf/s0On4kTOo1KIveV9cOwYNxiItaGEWlVkRFDg==",
-      "signed_at": "2026-05-21T03:46:47.731Z",
+      "signed_at": "2026-05-21T04:45:53.160Z",
       "cwe_refs": [
         "CWE-1039",
         "CWE-1426",
@@ -180,7 +180,7 @@
       ],
       "last_threat_review": "2026-05-01",
       "signature": "RIgXKvolQjgJdnlrDnVOd90IOY1B7VHHZD/YJQRzouL+wUeOLclPrdK/EgEuFyiu7lR4bi+Pl6aGB9G9tOxYCQ==",
-      "signed_at": "2026-05-21T03:46:47.732Z",
+      "signed_at": "2026-05-21T04:45:53.161Z",
       "cwe_refs": [
         "CWE-22",
         "CWE-345",
@@ -226,7 +226,7 @@
       "framework_gaps": [],
       "last_threat_review": "2026-05-01",
       "signature": "RYOxeq/o3uTwTWq4H7RcdH2Aclg9UyCERfUH9Frwkzncsowg7LgxpaEDc3swTCv73HMEGbU8wVbXguZ4JxHUCQ==",
-      "signed_at": "2026-05-21T03:46:47.733Z"
+      "signed_at": "2026-05-21T04:45:53.161Z"
     },
     {
       "name": "compliance-theater",
@@ -257,7 +257,7 @@
       ],
       "last_threat_review": "2026-05-01",
       "signature": "DneJCPKCPcoe6nQ82XptqSqNfSRdt1orKaO+o7K36YCciDrzwJb+1BuBLusPDtpcdDaGY0y0e+AqiTYJklhBAQ==",
-      "signed_at": "2026-05-21T03:46:47.733Z"
+      "signed_at": "2026-05-21T04:45:53.162Z"
     },
     {
       "name": "exploit-scoring",
@@ -286,7 +286,7 @@
       ],
       "last_threat_review": "2026-05-01",
       "signature": "NA1hoQycvQhSUoG5rwlXX0mOVmGxoXRVezkELGEA2nZOdGis4gXkHT3O6Sfw7zxE4JuMrsCb65TEeOWk9WEPDg==",
-      "signed_at": "2026-05-21T03:46:47.734Z"
+      "signed_at": "2026-05-21T04:45:53.163Z"
     },
     {
       "name": "rag-pipeline-security",
@@ -323,7 +323,7 @@
       ],
       "last_threat_review": "2026-05-01",
       "signature": "XgrzcA2brPhXrSTxrcLnJec0OpgGYJBoSTUlJ10UdePHffxqb9LTVGnfbmEk1ykQifXREZexui2bG7X/+eFfCQ==",
-      "signed_at": "2026-05-21T03:46:47.735Z",
+      "signed_at": "2026-05-21T04:45:53.164Z",
       "cwe_refs": [
         "CWE-1395",
         "CWE-1426"
@@ -380,7 +380,7 @@
       ],
       "last_threat_review": "2026-05-01",
       "signature": "9+hZlZOqZdeACUmamQk66L5levZhhwnFXuYRhdT6Mce99eQaKT7wNfWq12hXQztkRcVRKaFH+a01zwJQwsRQCA==",
-      "signed_at": "2026-05-21T03:46:47.735Z",
+      "signed_at": "2026-05-21T04:45:53.164Z",
       "d3fend_refs": [
         "D3-CA",
         "D3-CSPP",
@@ -415,7 +415,7 @@
       "framework_gaps": [],
       "last_threat_review": "2026-05-01",
       "signature": "ciqhVloMWWXEigPZvvwoV2c54tEqsDqsoc+sS/mNTFFJk2H+tz2+XUrgfEPRuYw0FeyNB6/+27pL2NpKHzUqAg==",
-      "signed_at": "2026-05-21T03:46:47.736Z",
+      "signed_at": "2026-05-21T04:45:53.165Z",
       "cwe_refs": [
         "CWE-1188"
       ]
@@ -443,7 +443,7 @@
       "framework_gaps": [],
       "last_threat_review": "2026-05-01",
       "signature": "xiHAhhdufm9hCKU8PLiPE0MX65ej2F4OZwtlWLGLCiie9/km+Kiqbt192LcMvr94v83C98pb9wIaqFsFWft6AQ==",
-      "signed_at": "2026-05-21T03:46:47.737Z"
+      "signed_at": "2026-05-21T04:45:53.166Z"
     },
     {
       "name": "global-grc",
@@ -475,7 +475,7 @@
       "framework_gaps": [],
       "last_threat_review": "2026-05-01",
       "signature": "oYsSk35N2Uzq7MRofACykylcVwkgPhI4luWZ14vmQT+gUKLyZiKVOUJbe1+7lGl6BYPRN0sUDQ0f7S5Eu5w2Ag==",
-      "signed_at": "2026-05-21T03:46:47.737Z"
+      "signed_at": "2026-05-21T04:45:53.166Z"
     },
     {
       "name": "zeroday-gap-learn",
@@ -502,7 +502,7 @@
       "framework_gaps": [],
       "last_threat_review": "2026-05-01",
       "signature": "igRqYyU1unRFH40BsPyAR62SPrk8QZv8dPGb8S9O9EvLCNOZAzm3t+HdT/NKqzWHwrpomOzkkkyLfYI/0qTUDA==",
-      "signed_at": "2026-05-21T03:46:47.738Z"
+      "signed_at": "2026-05-21T04:45:53.167Z"
     },
     {
       "name": "pqc-first",
@@ -554,7 +554,7 @@
       ],
       "last_threat_review": "2026-05-01",
       "signature": "vhc3wuQEro/86s1ro2b/KakUXg8QVnySYTBqA7ebzv9oeR2HYO5bvGEJp3oOHWtL37JDqcCAHYadSN/qxIyCCA==",
-      "signed_at": "2026-05-21T03:46:47.739Z",
+      "signed_at": "2026-05-21T04:45:53.167Z",
       "cwe_refs": [
         "CWE-327"
       ],
@@ -601,7 +601,7 @@
       ],
       "last_threat_review": "2026-05-01",
       "signature": "MS35nWm8djfJGn4OOoT0JKJ2aO+Dkbb6wOOWJYvNZlRKT3UGA59o2gxg1JOnD20hb/RwxtkmCujhl2tuYSR+AQ==",
-      "signed_at": "2026-05-21T03:46:47.739Z"
+      "signed_at": "2026-05-21T04:45:53.168Z"
     },
     {
       "name": "security-maturity-tiers",
@@ -638,7 +638,7 @@
       ],
       "last_threat_review": "2026-05-01",
       "signature": "8Px1s2lDj10/Q6erwEQlXgUHM1+OTruUR8qAHPX7Oo3k/l69N6P9sm0PsafS9wDFtj9l5C/OiLiFgzMlMt6vBw==",
-      "signed_at": "2026-05-21T03:46:47.740Z",
+      "signed_at": "2026-05-21T04:45:53.168Z",
       "cwe_refs": [
         "CWE-1188"
       ]
@@ -673,7 +673,7 @@
       "framework_gaps": [],
       "last_threat_review": "2026-05-11",
       "signature": "WAu5fRirzSOcnnZsTx2d/JJZwa/LPpXCi+31qATTGLmoNuhyy81k3ooPe9kCM3E0CLMtvTePg9DagYqBninZDQ==",
-      "signed_at": "2026-05-21T03:46:47.741Z"
+      "signed_at": "2026-05-21T04:45:53.169Z"
     },
     {
       "name": "attack-surface-pentest",
@@ -744,7 +744,7 @@
         "PTES revision incorporating AI-surface enumeration"
       ],
       "signature": "7eEwCXFd9pDKUw7yCUbRJSjfzozE44dwwwemCQUPm8JBPztLltibD9bL/RszSbYyCrYJmVb5Drncz2cGe62gCw==",
-      "signed_at": "2026-05-21T03:46:47.742Z"
+      "signed_at": "2026-05-21T04:45:53.169Z"
     },
     {
       "name": "fuzz-testing-strategy",
@@ -804,7 +804,7 @@
         "OSS-Fuzz-Gen / AI-assisted harness generation becoming the default expectation for OSS maintainers"
       ],
       "signature": "Z7ypCUnXx8JpLtgxxB6RHNi39w74AmrGY1N4ofAGCXhkuM2EaFVm1AU0dvl9UQ1bVLfHKEDGqMO/TwlIY7RABg==",
-      "signed_at": "2026-05-21T03:46:47.742Z"
+      "signed_at": "2026-05-21T04:45:53.170Z"
     },
     {
       "name": "dlp-gap-analysis",
@@ -879,7 +879,7 @@
         "Quebec Law 25, India DPDPA, KSA PDPL enforcement actions naming AI-tool prompt data as in-scope personal information"
       ],
       "signature": "fgxG344JGYBWWWwFXZ1IzGipWKP7EyBhrsvsbsb0CCGXfv/MvNHVNI6G0zQddCsWX1JeQbhZT3Vk8v1uJKDTDA==",
-      "signed_at": "2026-05-21T03:46:47.743Z"
+      "signed_at": "2026-05-21T04:45:53.170Z"
     },
     {
       "name": "supply-chain-integrity",
@@ -956,7 +956,7 @@
         "OpenSSF model-signing — emerging Sigstore-based signing standard for ML model weights; track for production adoption"
       ],
       "signature": "pcLrM98A3vUSZRjwNAk0aZ9umvOwB41XCLLsCOy/IebB2F/06oIrGUKkMHtHwm4pTVPShMMcKdZQQ3jz30FnCg==",
-      "signed_at": "2026-05-21T03:46:47.744Z"
+      "signed_at": "2026-05-21T04:45:53.171Z"
     },
     {
       "name": "defensive-countermeasure-mapping",
@@ -1013,7 +1013,7 @@
       ],
       "last_threat_review": "2026-05-11",
       "signature": "gqF8eU3VBrZhO2WnlcqKa7wm1d2mmWtvpbmx0kNCgHojNV+qEt+Ij84RO6bZvaUqhfYPWizWL79Fa4DL0curAQ==",
-      "signed_at": "2026-05-21T03:46:47.744Z"
+      "signed_at": "2026-05-21T04:45:53.171Z"
     },
     {
       "name": "identity-assurance",
@@ -1080,7 +1080,7 @@
       "d3fend_refs": [],
       "last_threat_review": "2026-05-11",
       "signature": "Wv5hGMeHjlaQK1zwicVCA7AvdKgJBgvcjdpGM9Ywahh9tagAKhbkOjybowDQZzu7OZ3bDkbh6pBYc1Sdwr6NAA==",
-      "signed_at": "2026-05-21T03:46:47.745Z"
+      "signed_at": "2026-05-21T04:45:53.172Z"
     },
     {
       "name": "ot-ics-security",
@@ -1136,7 +1136,7 @@
       "d3fend_refs": [],
       "last_threat_review": "2026-05-11",
       "signature": "8t5qKHd3yWi57dvG36YQkLN/X9bQWqtEiYjay4IfSmqhJpM/xXPaQVKNGz3wscrO8OLKUZ0OaX7Mj5kzpgBKBQ==",
-      "signed_at": "2026-05-21T03:46:47.746Z"
+      "signed_at": "2026-05-21T04:45:53.172Z"
     },
     {
       "name": "coordinated-vuln-disclosure",
@@ -1188,7 +1188,7 @@
         "NYDFS 23 NYCRR 500 amendments potentially adding explicit CVD program requirements"
       ],
       "signature": "GDGt4UPqBa04PjlpSmpyihGzd3OgfBN7jaAK5tfwp+LRSs3ygKOdbeivUCCHNagTY1hE6hG2Ou40ADfBFuXeAg==",
-      "signed_at": "2026-05-21T03:46:47.747Z"
+      "signed_at": "2026-05-21T04:45:53.172Z"
     },
     {
       "name": "threat-modeling-methodology",
@@ -1238,7 +1238,7 @@
         "PASTA v2 updates incorporating AI/ML application threats"
       ],
       "signature": "rFBpOQEJUPpl+v88Lw/WqVJRhTl80vy0VbPAbzQj3Q0suJRRrJg368I9uKu5LXIBKFDvKxnGIcIzbGg9NUtaCA==",
-      "signed_at": "2026-05-21T03:46:47.748Z"
+      "signed_at": "2026-05-21T04:45:53.173Z"
     },
     {
       "name": "webapp-security",
@@ -1312,7 +1312,7 @@
       "d3fend_refs": [],
       "last_threat_review": "2026-05-11",
       "signature": "ux85YI4t2mVHOyt744Yin1HHy+z11JIFygjKfFfQOBBl5QVV3A267jeIy7utix85irMcpZm/T3yx/ooqiK2tBA==",
-      "signed_at": "2026-05-21T03:46:47.749Z"
+      "signed_at": "2026-05-21T04:45:53.173Z"
     },
     {
       "name": "ai-risk-management",
@@ -1362,7 +1362,7 @@
       "d3fend_refs": [],
       "last_threat_review": "2026-05-11",
       "signature": "IIXnkZ5ZNqFwOto5KfytADTLLZLoyXNZACD1ORZ40P1HUAQxe6u2uyXFzzsfuob4Uy06jNkRGr2FFgCphUH1Cw==",
-      "signed_at": "2026-05-21T03:46:47.749Z"
+      "signed_at": "2026-05-21T04:45:53.174Z"
     },
     {
       "name": "sector-healthcare",
@@ -1422,7 +1422,7 @@
       "d3fend_refs": [],
       "last_threat_review": "2026-05-11",
       "signature": "AhF9KF8ZBlDteciV+F8IBSmFVYCvQOn44GmD4rZjgLoPxfIv/QE1/vSkK32zyqDKtHWkLSXExbkkPkxA/V6dDw==",
-      "signed_at": "2026-05-21T03:46:47.750Z"
+      "signed_at": "2026-05-21T04:45:53.175Z"
     },
     {
       "name": "sector-financial",
@@ -1503,7 +1503,7 @@
         "TIBER-EU framework v2.0 alignment with DORA TLPT RTS (JC 2024/40); cross-recognition with CBEST and iCAST"
       ],
       "signature": "HQgZvb4ReziEz5rNFr8i/O8/rJEZR+iHRROT7m/D2QUqhrcNISPkYXENsUZlG8xapzy/Ik92ehkseyj4hdmhCQ==",
-      "signed_at": "2026-05-21T03:46:47.751Z"
+      "signed_at": "2026-05-21T04:45:53.175Z"
     },
     {
       "name": "sector-federal-government",
@@ -1572,7 +1572,7 @@
         "Australia PSPF 2024 revision and ISM quarterly updates — track for Essential Eight Maturity Level requirements for federal entities"
       ],
       "signature": "linxmsXZiOYtcs71sSWgGCrvb8xQfmxmtTY5PRvZJ0/8FgJulo0tQtejzexYG775s7XhjAmGsDP238BQTQ8ADA==",
-      "signed_at": "2026-05-21T03:46:47.752Z"
+      "signed_at": "2026-05-21T04:45:53.176Z"
     },
     {
       "name": "sector-energy",
@@ -1637,7 +1637,7 @@
         "ICS-CERT advisory feed (https://www.cisa.gov/news-events/cybersecurity-advisories/ics-advisories) for vendor CVEs in Siemens, Rockwell, Schneider Electric, ABB, GE Vernova, Hitachi Energy, AVEVA / OSIsoft PI"
       ],
       "signature": "JjBfc0ovta560Clk0x3QGRM5osFJDwcvpy3rT7QEGdCIL827jzE8QCow1C8deXq+4JhY2sA/d7/8IsxikdlkCg==",
-      "signed_at": "2026-05-21T03:46:47.753Z"
+      "signed_at": "2026-05-21T04:45:53.176Z"
     },
     {
       "name": "sector-telecom",
@@ -1723,7 +1723,7 @@
         "O-RAN SFG / WG11 security specifications"
       ],
       "signature": "JWVxKFoKrbX4d+Tko1d4OBdwyg25MfFFKn4CT6E/CzH+YwnU3T6Y76uBQIKg3+gIGTvPduqyvQwQQ5FxKDuPBw==",
-      "signed_at": "2026-05-21T03:46:47.754Z"
+      "signed_at": "2026-05-21T04:45:53.177Z"
     },
     {
       "name": "api-security",
@@ -1792,7 +1792,7 @@
       "d3fend_refs": [],
       "last_threat_review": "2026-05-11",
       "signature": "BmCRCestWqr55+fCynEhtAl5NWLT+xLTkpwS0Icp3SaoZOw/ce3Y6TtqjHRSKn4CBJq7YDiLRWxmhO3MStvOAA==",
-      "signed_at": "2026-05-21T03:46:47.755Z"
+      "signed_at": "2026-05-21T04:45:53.177Z"
     },
     {
       "name": "cloud-security",
@@ -1873,7 +1873,7 @@
         "CISA KEV additions for cloud-control-plane CVEs (IMDSv1 abuses, federation token mishandling, cross-tenant boundary failures); CISA Cybersecurity Advisories for cross-cloud advisories"
       ],
       "signature": "/DV3pmZwrRySrk1OCbyI+0BQESacjupJfUX3eC2NGtXuYOBro0vndIP+z27heFxumnjU3a9sfla7/U9X+pqnDw==",
-      "signed_at": "2026-05-21T03:46:47.756Z"
+      "signed_at": "2026-05-21T04:45:53.178Z"
     },
     {
       "name": "container-runtime-security",
@@ -1935,7 +1935,7 @@
       "d3fend_refs": [],
       "last_threat_review": "2026-05-11",
       "signature": "E2UGSf9ATyYgzBr8uM/0ubOUmDqo1jVA7f9mVxv6LHfWGCNuQNXDyuNou9VAmUCeeXEeUYIi3AFjXkJqpOkxDA==",
-      "signed_at": "2026-05-21T03:46:47.756Z"
+      "signed_at": "2026-05-21T04:45:53.178Z"
     },
     {
       "name": "mlops-security",
@@ -2006,7 +2006,7 @@
         "MITRE ATLAS v5.6.0 (released February 2026) shipped the AML.T0010 sub-technique expansion this forecast tracked plus new techniques (\"Publish Poisoned AI Agent Tool\", \"Escape to Host\"); inventory now 16 tactics, 84 techniques, 56 sub-techniques. Forward watch: ATLAS v5.5 / v6.0 — track next-cadence updates to agentic-AI TTPs and MLOps-pipeline-specific techniques"
       ],
       "signature": "BGNE6ZQWBA1LmsUFe8tU0L67iGDSrFqiuqaZD2f1KqfcyqqzQfMs9PWNHFzxxaJmXeKlm87eU8lgELF0bX+RBA==",
-      "signed_at": "2026-05-21T03:46:47.757Z"
+      "signed_at": "2026-05-21T04:45:53.179Z"
     },
     {
       "name": "incident-response-playbook",
@@ -2068,7 +2068,7 @@
         "NYDFS 23 NYCRR 500.17 amendments tightening ransom-payment 24h disclosure operationalization"
       ],
       "signature": "FkZQerh3VHVJAwIcCktDyMRh5KE2+Em/i0ek8zEz7JG/PXtQx8ujHWTh3VjZbOLhPNtdB2qxgXOIAYIofaVOAQ==",
-      "signed_at": "2026-05-21T03:46:47.758Z"
+      "signed_at": "2026-05-21T04:45:53.179Z"
     },
     {
       "name": "ransomware-response",
@@ -2148,7 +2148,7 @@
       ],
       "last_threat_review": "2026-05-15",
       "signature": "n3UToNuN3A1HgLvcuqmIx8vrZY71+r/79waK92jG+rSX4uYOzkmxMUpROrE5K9bDwMezNBHdjWv8Uul6zugyDQ==",
-      "signed_at": "2026-05-21T03:46:47.758Z"
+      "signed_at": "2026-05-21T04:45:53.180Z"
     },
     {
       "name": "email-security-anti-phishing",
@@ -2201,7 +2201,7 @@
       "d3fend_refs": [],
       "last_threat_review": "2026-05-11",
       "signature": "rK+WnuS+9tqEABmwc0jO/PEmxcLjG1/tmUb897HsClQeKzf+TQOlwBE+OsbtuKxpjYNwur62Xxs3TxObkwm8Cw==",
-      "signed_at": "2026-05-21T03:46:47.759Z"
+      "signed_at": "2026-05-21T04:45:53.180Z"
     },
     {
       "name": "age-gates-child-safety",
@@ -2269,7 +2269,7 @@
         "US state adult-site age-verification laws — 19+ states by mid-2026 (TX HB 18 upheld by SCOTUS June 2025 in Free Speech Coalition v. Paxton); track ongoing challenges in remaining states"
       ],
       "signature": "+OO0RhQ303RJV7kaH38IuZpLeQbapep6Ds4Re/WEZu0FHBwKSlwvF7jbtP7KQ57xldJYn/xZm2jaszyOacMfDg==",
-      "signed_at": "2026-05-21T03:46:47.760Z"
+      "signed_at": "2026-05-21T04:45:53.181Z"
     },
     {
       "name": "cloud-iam-incident",
@@ -2349,7 +2349,7 @@
       ],
       "last_threat_review": "2026-05-15",
       "signature": "e/kij7GtKaytROyIj7V5RH+FC9WtmVFzrmG2kIlNDNn29ep/CRNlIQKwXLpzo/81AIf634pmdr1qy/+vwIuUDA==",
-      "signed_at": "2026-05-21T03:46:47.761Z"
+      "signed_at": "2026-05-21T04:45:53.181Z"
     },
     {
       "name": "idp-incident-response",
@@ -2430,11 +2430,11 @@
       ],
       "last_threat_review": "2026-05-15",
       "signature": "ew9Kglc9fAZzbn0ZIfGP7WSK/j4eV2VhSvpy+s5bEfNEVYIMa2kZjnGBapgUsyGDLes9H9K2ovjQyX17+GKiBw==",
-      "signed_at": "2026-05-21T03:46:47.761Z"
+      "signed_at": "2026-05-21T04:45:53.182Z"
     }
   ],
   "manifest_signature": {
     "algorithm": "Ed25519",
-    "signature_base64": "0ypbD57BVIX88UUPnCZ4v5EfsB8+iB4GJm4TTiOWkpP+g7OcthhtDX2t9Ch05KWX4SNl3GY7vmM/X5H6TIGvDg=="
+    "signature_base64": "u2d750B08uFPC5atx6BpLsNaIlmGlOCSbYue26FoWAv+5M4OVBS8VusyS8J7ety06DxHHxND0EkSKq47T+eOBQ=="
   }
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@blamejs/exceptd-skills",
-  "version": "0.13.37",
+  "version": "0.13.38",
   "description": "AI security skills grounded in mid-2026 threat reality, not stale framework documentation. 42 skills, 10 catalogs (312 CVEs / 171 CWEs / 805 ATT&CK + ICS / 170 ATLAS / 468 D3FEND / 7476 RFCs), 34 jurisdictions, 10-class catalog gap detector + budget gate, real XML parser + canonical-form diff + content-pattern regression detection, Ed25519-signed.",
   "keywords": [
     "ai-security",

package/sbom.cdx.json

@@ -1,22 +1,22 @@
 {
   "bomFormat": "CycloneDX",
   "specVersion": "1.6",
-  "serialNumber": "urn:uuid:ba863885-e27a-49d0-bd0d-8c568eafa456",
+  "serialNumber": "urn:uuid:47e43e9f-0201-433e-9c39-6cd4e58b02e5",
   "version": 1,
   "metadata": {
-    "timestamp": "2125-03-02T10:14:29.000Z",
+    "timestamp": "2064-03-21T23:02:55.000Z",
     "tools": [
       {
         "vendor": "blamejs",
         "name": "scripts/refresh-sbom.js",
-        "version": "0.13.37"
+        "version": "0.13.38"
       }
     ],
     "component": {
-      "bom-ref": "pkg:npm/@blamejs/exceptd-skills@0.13.37",
+      "bom-ref": "pkg:npm/@blamejs/exceptd-skills@0.13.38",
       "type": "application",
       "name": "@blamejs/exceptd-skills",
-      "version": "0.13.37",
+      "version": "0.13.38",
       "description": "AI security skills grounded in mid-2026 threat reality, not stale framework documentation. 42 skills, 10 catalogs (312 CVEs / 171 CWEs / 805 ATT&CK + ICS / 170 ATLAS / 468 D3FEND / 7476 RFCs), 34 jurisdictions, 10-class catalog gap detector + budget gate, real XML parser + canonical-form diff + content-pattern regression detection, Ed25519-signed.",
       "licenses": [
         {
@@ -25,17 +25,17 @@
           }
         }
       ],
-      "purl": "pkg:npm/%40blamejs/exceptd-skills@0.13.37",
+      "purl": "pkg:npm/%40blamejs/exceptd-skills@0.13.38",
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "c2fe6102f3262bfb5d7719f3d2bfc807ce335319820c07ea6c12019fc8397122"
+          "content": "f6db73a4cedc87852d5f3f4ebf32f0b10b5dd9d5fd02f0bda87205b84227460b"
         }
       ],
       "externalReferences": [
         {
           "type": "distribution",
-          "url": "https://www.npmjs.com/package/@blamejs/exceptd-skills/v/0.13.37"
+          "url": "https://www.npmjs.com/package/@blamejs/exceptd-skills/v/0.13.38"
         },
         {
           "type": "vcs",
@@ -86,11 +86,11 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "09bd32173edb92599872fb5a29dc803d1f7eeaf0681e282bbbe8d25ffb447762"
+          "content": "708c392f59f4421f1071a33b13c294c327e99e268b81ff39cda3c51ae2025c2e"
         },
         {
           "alg": "SHA3-512",
-          "content": "56d44dc4d44cb68ed1b3c86848f1a6a505b081d3248b898b76011784aca354e983cead175bdb48b7cb35662709daf77cdb949ea22f52f0d06c54932ee76829d3"
+          "content": "8a327e01974661bac0011a0fe3672855a9591145535845fbe1a5ea6caba36b9ad9fbd7d604f3569cd1a9c03057fdd6c500a7ffa88cf4abd531ededfe39af7451"
         }
       ]
     },
@@ -116,11 +116,11 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "bc8077cb304ade5c9229b1562e40ab09676656e1e096ecad22f09b9d9621b592"
+          "content": "4146ade515f7dd083771d399bd1f9cabf4b0bfd3a10ca68f003516fef79562c8"
         },
         {
           "alg": "SHA3-512",
-          "content": "2bbcf3161bdb764940885886c84439ba0e87b555c67cfb85f8b1b32a98609538c0343a74c7572dafd0445fe3eacaaabb0a95ed7bfc71f4164825b0a562f01c36"
+          "content": "93a0ddc806c9799ebd08bc7e0e6d324d75b513d17a6cbdd7489bd5053476f27a15d05916d52fc970b16263d80126ff7b32b334c9b3316f88fd57144488a7a540"
         }
       ]
     },
@@ -889,6 +889,21 @@
         }
       ]
     },
+    {
+      "bom-ref": "file:lib/collectors/cred-stores.js",
+      "type": "file",
+      "name": "lib/collectors/cred-stores.js",
+      "hashes": [
+        {
+          "alg": "SHA-256",
+          "content": "3844551461b3ee675627c08b03a99a0944a6783ee7f389eb2c2080af38878cc6"
+        },
+        {
+          "alg": "SHA3-512",
+          "content": "71612bf63aca6d387c3ad57f0b19c55486defd506de48e09b9f2c71b35bf2331cb7d9c0f7608e87954fe67256d9be150ab7eba4daaa4ee418e300a7e90133a77"
+        }
+      ]
+    },
     {
       "bom-ref": "file:lib/collectors/crypto-codebase.js",
       "type": "file",
@@ -1556,11 +1571,11 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "5eeb28b7edf5ebf368b201b1988d0b6ccbb7ca838ee7fe45e63a878e7d3650f9"
+          "content": "5fa40751e228263289b76f7f5a4803e967fb9f45268b61a6783f23a8ad0c5b96"
         },
         {
           "alg": "SHA3-512",
-          "content": "78836660cec949624fede0a9e110834d38f36e6e4319bd6d8a74bacfc9878de982036adc910948dbe3e26269d9008115ccb166c32ae017eff1f3f4342832cb14"
+          "content": "d671f40edaa9b826aa15f42d6d900b0ba88ebc7f6034620aa681d2395a48a55782c37dc2e5c185eaada7dc29a78fb01ba7b6d56208487540e75e4a6d66ebc2ac"
         }
       ]
     },