@blamejs/exceptd-skills 0.13.48 → 0.13.49

package/CHANGELOG.md

@@ -1,5 +1,21 @@
 # Changelog
 
+## 0.13.49 — 2026-05-21
+
+`discover` covers four previously-invisible collectors. CLI UX cleanup across welcome banner, help text, attestation warning.
+
+### Bugs
+
+- **`discover` recommends `cicd-pipeline-compromise`, `mcp`, `ai-api`, and `crypto`.** Before, the cwd-aware recommender only knew about 9 of the 13 collectors — `discover` from a repo with `.github/workflows/` never surfaced the CI/CD posture playbook; `mcp` / `ai-api` were invisible even when the operator had MCP client config or shell rc files in their home; `crypto` was absent from the Linux branch alongside `hardening` / `runtime`. New probes: `.github/workflows/*.yml` for CI/CD, `~/.cursor/mcp.json` + `~/.config/claude` + `~/.codeium/windsurf/mcp_config.json` + `~/.gemini/settings.json` for MCP clients, `~/.bashrc` + `~/.zshrc` + `~/.profile` for shell rc, plus `crypto` always on Linux.
+- **`discover` reason text drops the misleading "node lockfile" claim.** A `package.json`-only repo (no `package-lock.json`) used to receive the recommendation reason "git repo + node lockfile" even though the lockfile didn't exist. The reason now says "node project" (and similarly "python project" / "rust project" / "go project"), which is accurate for the broad manifest-OR-lockfile trigger.
+- **`exceptd run --scope code` next-step suggestion is omitted from `discover` when no code-scope playbooks were recommended.** Previously, discover from an empty cwd suggested `exceptd run --scope code` even though no code playbooks applied — operators following the suggestion got every code-scope playbook running against an empty tree and a multi-hundred-KB JSON dump. Now the next-steps list shows `--scope code` only when at least one code-scope recommendation fired.
+- **`exceptd help` section header drops the stale `v0.12.0 canonical surface` pin.** The surface evolves with each release; the header now reads `Canonical verbs` without a frozen version label.
+
+### Features
+
+- **Welcome banner enumerates the playbook starting set by trigger rather than by abstract category** (`git repos:`, `GitHub Actions:`, `Linux hosts:`, `AI assistants:`, `containers:`). Each row names the artifact that triggers the recommendation, and the banner explicitly points at `exceptd discover` as the authoritative recommender.
+- **Attestation unsigned warning shrinks to a single line on consumer installs.** Previously every `exceptd run` from a globally-installed package (e.g. `npm install -g`) emitted a 4-line warning prescribing `exceptd doctor --fix` — but consumer installs land the package under `node_modules/` where `.keys/` typically isn't writable by the operator. The collector now detects consumer-install layout (PKG_ROOT under `node_modules/` OR parent dir is `@blamejs`) and prints `[attest] writing unsigned attestation (consumer install — signing is contributor-only).` instead. Contributor checkouts still see the full nudge.
+
 ## 0.13.48 — 2026-05-21
 
 Collector predicate tightening across `secrets`, `library-author`, `crypto-codebase`, and `cred-stores`.

package/bin/exceptd.js

@@ -334,9 +334,14 @@ If you know what you want:
   exceptd ci --scope code    # CI gate against every code-scoped playbook
 
 Common starting playbooks
-  code repos:    secrets, sbom, library-author, crypto-codebase
-  Linux hosts:   kernel, hardening, runtime, cred-stores
-  AI / service:  ai-api, mcp, crypto
+  git repos:      secrets, sbom, library-author, crypto-codebase
+  GitHub Actions: cicd-pipeline-compromise (.github/workflows/ present)
+  Linux hosts:    kernel, hardening, runtime, cred-stores, crypto
+  AI assistants:  mcp (MCP client config), ai-api (shell rc + AI key exports)
+  containers:     containers (Dockerfile / docker-compose)
+
+\`exceptd discover\` is the authoritative recommender — it inspects your
+cwd + host and only suggests the playbooks that actually apply.
 
 Full reference: exceptd help
 Per-verb help:  exceptd <verb> --help
@@ -349,8 +354,8 @@ function printHelp() {
 Usage: exceptd <command> [args]
        npx @blamejs/exceptd-skills <command> [args]
 
-v0.12.0 canonical surface
-─────────────────────────
+Canonical verbs
+───────────────
 
   brief [playbook]           Unified info doc — jurisdictions + threat context
                              + preconditions + artifacts + indicators. Replaces
@@ -4275,18 +4280,28 @@ function maybeSignAttestation(filePath) {
   // Operators who set `.keys/private.pem` get tamper-evident attestations;
   // operators without the keypair get a single nudge per session telling them
   // exactly how to enable signing.
+  //
+  // Consumer installs (`npm install -g`) land PKG_ROOT under
+  // node_modules/ where the operator typically can't write to
+  // .keys/. For those installs the multi-line nudge prescribes a
+  // remediation (doctor --fix) the operator doesn't own — surface a
+  // single-line marker so the unsigned attestation isn't silent, but
+  // skip the call-to-action that doesn't apply.
   if (!fs.existsSync(privKeyPath) && !process.env.EXCEPTD_UNSIGNED_WARNED) {
-    // Cycle 20 A P2 (v0.12.40): operator-facing verb `exceptd doctor --fix`
-    // calls sign.js generate-keypair under the hood. Pre-fix the message
-    // hinted at a node-internal script path that's not on PATH after
-    // `npm install -g`. Surface the doctor route first; cite the lib
-    // script only as the contributor / non-npm-installed fallback.
-    process.stderr.write(
-      "[attest] attestation will be written UNSIGNED (no private key at .keys/private.pem). " +
-      "Operators reading the attestation later can verify the SHA-256 hash but not authenticity. " +
-      "Enable Ed25519 signing: `exceptd doctor --fix` (or for contributor checkouts: `node $(exceptd path)/lib/sign.js generate-keypair`). " +
-      "Suppress this notice: export EXCEPTD_UNSIGNED_WARNED=1.\n"
-    );
+    const pkgRootSegments = PKG_ROOT.split(/[\\/]/);
+    const isConsumerInstall =
+      pkgRootSegments.includes("node_modules") ||
+      path.basename(path.dirname(PKG_ROOT)) === "@blamejs";
+    if (isConsumerInstall) {
+      process.stderr.write("[attest] writing unsigned attestation (consumer install — signing is contributor-only).\n");
+    } else {
+      process.stderr.write(
+        "[attest] attestation will be written UNSIGNED (no private key at .keys/private.pem). " +
+        "Operators reading the attestation later can verify the SHA-256 hash but not authenticity. " +
+        "Enable Ed25519 signing: `exceptd doctor --fix` (or for contributor checkouts: `node $(exceptd path)/lib/sign.js generate-keypair`). " +
+        "Suppress this notice: export EXCEPTD_UNSIGNED_WARNED=1.\n"
+      );
+    }
     process.env.EXCEPTD_UNSIGNED_WARNED = "1";
   }
   try {
@@ -5535,17 +5550,60 @@ function cmdDiscover(runner, args, runOpts, pretty) {
   // Build recommendation set. Dedup by playbook id so multi-trigger rules
   // don't double-list.
   const isRepo = detected.includes(".git/");
-  const hasNode = detected.includes("package.json") || detected.includes("package-lock.json")
+  const hasNodeManifest = detected.includes("package.json");
+  const hasNodeLockfile = detected.includes("package-lock.json")
     || detected.includes("yarn.lock") || detected.includes("pnpm-lock.yaml");
+  const hasNode = hasNodeManifest || hasNodeLockfile;
   const hasPython = detected.includes("pyproject.toml") || detected.includes("requirements.txt")
     || detected.includes("Pipfile");
   const hasRust = detected.includes("Cargo.toml");
   const hasGo = detected.includes("go.mod");
-  const hasLockfile = hasNode || hasPython || hasRust || hasGo;
+  const hasProject = hasNode || hasPython || hasRust || hasGo;
   const hasContainers = detected.includes("Dockerfile") || detected.includes("docker-compose.yml")
     || detected.includes("docker-compose.yaml");
   const isLinux = hostPlatform === "linux";
 
+  // .github/workflows/ directory probe — surfaces the CI/CD posture
+  // playbook when present.
+  let hasGithubWorkflows = false;
+  try {
+    const wfDir = path.join(cwd, ".github", "workflows");
+    if (fs.existsSync(wfDir) && fs.statSync(wfDir).isDirectory()) {
+      const entries = fs.readdirSync(wfDir).filter(f => /\.(ya?ml)$/i.test(f));
+      if (entries.length > 0) hasGithubWorkflows = true;
+    }
+  } catch { /* swallow */ }
+
+  // Home-resident MCP client config probe — surfaces the `mcp`
+  // playbook when at least one supported client is configured on
+  // this host. Best-effort: silently skip if home isn't readable.
+  let hasMcpClientConfig = false;
+  const homeForProbe = process.env.HOME || process.env.USERPROFILE || null;
+  if (homeForProbe) {
+    const mcpProbes = [
+      path.join(homeForProbe, ".cursor", "mcp.json"),
+      path.join(homeForProbe, ".config", "claude"),
+      path.join(homeForProbe, ".claude"),
+      path.join(homeForProbe, ".codeium", "windsurf", "mcp_config.json"),
+      path.join(homeForProbe, ".gemini", "settings.json"),
+    ];
+    for (const p of mcpProbes) {
+      try { if (fs.existsSync(p)) { hasMcpClientConfig = true; break; } } catch { /* swallow */ }
+    }
+  }
+
+  // Shell rc presence — proxy signal for "user has a shell-driven
+  // workflow that might export AI API keys". The ai-api collector
+  // checks rc files + vendor dotfiles regardless; surface the
+  // recommendation when at least one rc file exists.
+  let hasShellRc = false;
+  if (homeForProbe) {
+    const rcProbes = [".bashrc", ".bash_profile", ".zshrc", ".zprofile", ".profile"];
+    for (const f of rcProbes) {
+      try { if (fs.existsSync(path.join(homeForProbe, f))) { hasShellRc = true; break; } } catch { /* swallow */ }
+    }
+  }
+
   const recs = [];
   const seen = new Set();
   function recommend(id, reason) {
@@ -5554,22 +5612,32 @@ function cmdDiscover(runner, args, runOpts, pretty) {
     recs.push({ id, reason });
   }
 
-  if (isRepo && hasLockfile) {
+  if (isRepo && hasProject) {
     const langs = [hasNode && "node", hasPython && "python", hasRust && "rust", hasGo && "go"]
       .filter(Boolean).join("/");
-    recommend("secrets", `git repo + ${langs} lockfile → check for committed credentials`);
-    recommend("sbom", `git repo + ${langs} lockfile → SBOM + supply-chain integrity`);
-    recommend("library-author", `git repo + ${langs} lockfile → publisher-side audit`);
-    recommend("crypto-codebase", `git repo + ${langs} lockfile → cryptographic primitive review`);
+    recommend("secrets", `git repo + ${langs} project → check for committed credentials`);
+    recommend("sbom", `git repo + ${langs} project → SBOM + supply-chain integrity`);
+    recommend("library-author", `git repo + ${langs} project → publisher-side audit`);
+    recommend("crypto-codebase", `git repo + ${langs} project → cryptographic primitive review`);
   }
   if (hasContainers) {
     recommend("containers", "Dockerfile / docker-compose present → container security review");
   }
+  if (hasGithubWorkflows) {
+    recommend("cicd-pipeline-compromise", ".github/workflows/ present → CI/CD posture (fork-PR / OIDC / floating-tag)");
+  }
+  if (hasMcpClientConfig) {
+    recommend("mcp", "MCP client config present in home → MCP supply-chain audit");
+  }
+  if (hasShellRc) {
+    recommend("ai-api", "shell rc present in home → AI API key + cred-carrier audit");
+  }
   if (isLinux) {
     recommend("kernel", "Linux host detected → kernel LPE / privilege escalation triage");
     recommend("hardening", "Linux host detected → system hardening review");
     recommend("runtime", "Linux host detected → runtime behavior review");
     recommend("cred-stores", "Linux host detected → credential store review");
+    recommend("crypto", "Linux host detected → host crypto posture (OpenSSL / sshd PQC readiness)");
   }
   // Always include cross-cutting framework correlation.
   recommend("framework", "cross-cutting: framework correlation always applicable");
@@ -5587,12 +5655,19 @@ function cmdDiscover(runner, args, runOpts, pretty) {
     rec.collect_cmd = hasCollector ? `exceptd collect ${rec.id}` : null;
   }
 
+  // Next-step suggestions are conditional on what discover detected.
+  // From an empty / no-code-detected cwd, suggesting `run --scope code`
+  // would silently run every code-scope playbook against an empty tree
+  // and produce a multi-hundred-KB JSON dump for no useful reason.
+  const recHasCodeScope = recs.some(r => ["secrets", "sbom", "library-author", "crypto-codebase", "containers", "cicd-pipeline-compromise"].includes(r.id));
   const nextSteps = [
     "exceptd brief <playbook>       # learn what a playbook checks",
     "exceptd run <playbook>          # run it",
-    "exceptd run --scope code        # run all code-scoped playbooks (auto-detected)",
-    "exceptd ci --scope code         # CI-gate against all code-scoped playbooks",
   ];
+  if (recHasCodeScope) {
+    nextSteps.push("exceptd run --scope code        # run all code-scoped playbooks (those applicable to this cwd)");
+    nextSteps.push("exceptd ci --scope code         # CI-gate against all code-scoped playbooks");
+  }
 
   const out = {
     verb: "discover",

package/data/_indexes/_meta.json

@@ -1,10 +1,10 @@
 {
   "schema_version": "1.1.0",
-  "generated_at": "2026-05-21T17:21:55.109Z",
+  "generated_at": "2026-05-21T17:42:36.651Z",
   "generator": "scripts/build-indexes.js",
   "source_count": 54,
   "source_hashes": {
-    "manifest.json": "d609674fbe018083de83b4219c280889b616756dfdbf11d026cccf6594c80684",
+    "manifest.json": "188c660ebfd03913aafe0a2d8fc7975081b6a1c786eb0201338e62985b2f51c7",
     "data/atlas-ttps.json": "d296c1d3e71807c9279b731f047e57796e85137f186586743a8cdad214b408f9",
     "data/attack-techniques.json": "49b6010b317edd219def135171ea8f3b1bbf1e00e9c5a08bf7237215ff54e2c3",
     "data/cve-catalog.json": "a09c83af3f9679a7ea73935726a1ff9de2cab94b4ab6321fc017fc147747d7c3",

package/manifest.json

@@ -1,6 +1,6 @@
 {
   "name": "exceptd-security",
-  "version": "0.13.48",
+  "version": "0.13.49",
   "description": "AI security skills grounded in mid-2026 threat reality, not stale framework documentation",
   "homepage": "https://exceptd.com",
   "license": "Apache-2.0",
@@ -53,7 +53,7 @@
       ],
       "last_threat_review": "2026-05-01",
       "signature": "lXhZgoIrrVloO3XaTvo/43AxZn4mwErstd7DR0O/oVhD3AOGODM4HqrageYEou9WKOdMEGP5mJNTjJsXdP5NDA==",
-      "signed_at": "2026-05-21T17:02:34.780Z",
+      "signed_at": "2026-05-21T17:36:00.089Z",
       "cwe_refs": [
         "CWE-125",
         "CWE-362",
@@ -117,7 +117,7 @@
       ],
       "last_threat_review": "2026-05-01",
       "signature": "vSVqu4wBm+d68ujZmM6Rto/HzViCkE0gPUcv/MYE/bjFiqamf/s0On4kTOo1KIveV9cOwYNxiItaGEWlVkRFDg==",
-      "signed_at": "2026-05-21T17:02:34.782Z",
+      "signed_at": "2026-05-21T17:36:00.091Z",
       "cwe_refs": [
         "CWE-1039",
         "CWE-1426",
@@ -180,7 +180,7 @@
       ],
       "last_threat_review": "2026-05-01",
       "signature": "RIgXKvolQjgJdnlrDnVOd90IOY1B7VHHZD/YJQRzouL+wUeOLclPrdK/EgEuFyiu7lR4bi+Pl6aGB9G9tOxYCQ==",
-      "signed_at": "2026-05-21T17:02:34.782Z",
+      "signed_at": "2026-05-21T17:36:00.091Z",
       "cwe_refs": [
         "CWE-22",
         "CWE-345",
@@ -226,7 +226,7 @@
       "framework_gaps": [],
       "last_threat_review": "2026-05-01",
       "signature": "RYOxeq/o3uTwTWq4H7RcdH2Aclg9UyCERfUH9Frwkzncsowg7LgxpaEDc3swTCv73HMEGbU8wVbXguZ4JxHUCQ==",
-      "signed_at": "2026-05-21T17:02:34.783Z"
+      "signed_at": "2026-05-21T17:36:00.092Z"
     },
     {
       "name": "compliance-theater",
@@ -257,7 +257,7 @@
       ],
       "last_threat_review": "2026-05-01",
       "signature": "DneJCPKCPcoe6nQ82XptqSqNfSRdt1orKaO+o7K36YCciDrzwJb+1BuBLusPDtpcdDaGY0y0e+AqiTYJklhBAQ==",
-      "signed_at": "2026-05-21T17:02:34.783Z"
+      "signed_at": "2026-05-21T17:36:00.092Z"
     },
     {
       "name": "exploit-scoring",
@@ -286,7 +286,7 @@
       ],
       "last_threat_review": "2026-05-01",
       "signature": "NA1hoQycvQhSUoG5rwlXX0mOVmGxoXRVezkELGEA2nZOdGis4gXkHT3O6Sfw7zxE4JuMrsCb65TEeOWk9WEPDg==",
-      "signed_at": "2026-05-21T17:02:34.784Z"
+      "signed_at": "2026-05-21T17:36:00.093Z"
     },
     {
       "name": "rag-pipeline-security",
@@ -323,7 +323,7 @@
       ],
       "last_threat_review": "2026-05-01",
       "signature": "XgrzcA2brPhXrSTxrcLnJec0OpgGYJBoSTUlJ10UdePHffxqb9LTVGnfbmEk1ykQifXREZexui2bG7X/+eFfCQ==",
-      "signed_at": "2026-05-21T17:02:34.784Z",
+      "signed_at": "2026-05-21T17:36:00.094Z",
       "cwe_refs": [
         "CWE-1395",
         "CWE-1426"
@@ -380,7 +380,7 @@
       ],
       "last_threat_review": "2026-05-01",
       "signature": "9+hZlZOqZdeACUmamQk66L5levZhhwnFXuYRhdT6Mce99eQaKT7wNfWq12hXQztkRcVRKaFH+a01zwJQwsRQCA==",
-      "signed_at": "2026-05-21T17:02:34.785Z",
+      "signed_at": "2026-05-21T17:36:00.094Z",
       "d3fend_refs": [
         "D3-CA",
         "D3-CSPP",
@@ -415,7 +415,7 @@
       "framework_gaps": [],
       "last_threat_review": "2026-05-01",
       "signature": "ciqhVloMWWXEigPZvvwoV2c54tEqsDqsoc+sS/mNTFFJk2H+tz2+XUrgfEPRuYw0FeyNB6/+27pL2NpKHzUqAg==",
-      "signed_at": "2026-05-21T17:02:34.785Z",
+      "signed_at": "2026-05-21T17:36:00.095Z",
       "cwe_refs": [
         "CWE-1188"
       ]
@@ -443,7 +443,7 @@
       "framework_gaps": [],
       "last_threat_review": "2026-05-01",
       "signature": "xiHAhhdufm9hCKU8PLiPE0MX65ej2F4OZwtlWLGLCiie9/km+Kiqbt192LcMvr94v83C98pb9wIaqFsFWft6AQ==",
-      "signed_at": "2026-05-21T17:02:34.785Z"
+      "signed_at": "2026-05-21T17:36:00.095Z"
     },
     {
       "name": "global-grc",
@@ -475,7 +475,7 @@
       "framework_gaps": [],
       "last_threat_review": "2026-05-01",
       "signature": "oYsSk35N2Uzq7MRofACykylcVwkgPhI4luWZ14vmQT+gUKLyZiKVOUJbe1+7lGl6BYPRN0sUDQ0f7S5Eu5w2Ag==",
-      "signed_at": "2026-05-21T17:02:34.786Z"
+      "signed_at": "2026-05-21T17:36:00.095Z"
     },
     {
       "name": "zeroday-gap-learn",
@@ -502,7 +502,7 @@
       "framework_gaps": [],
       "last_threat_review": "2026-05-01",
       "signature": "igRqYyU1unRFH40BsPyAR62SPrk8QZv8dPGb8S9O9EvLCNOZAzm3t+HdT/NKqzWHwrpomOzkkkyLfYI/0qTUDA==",
-      "signed_at": "2026-05-21T17:02:34.786Z"
+      "signed_at": "2026-05-21T17:36:00.096Z"
     },
     {
       "name": "pqc-first",
@@ -554,7 +554,7 @@
       ],
       "last_threat_review": "2026-05-01",
       "signature": "vhc3wuQEro/86s1ro2b/KakUXg8QVnySYTBqA7ebzv9oeR2HYO5bvGEJp3oOHWtL37JDqcCAHYadSN/qxIyCCA==",
-      "signed_at": "2026-05-21T17:02:34.786Z",
+      "signed_at": "2026-05-21T17:36:00.096Z",
       "cwe_refs": [
         "CWE-327"
       ],
@@ -601,7 +601,7 @@
       ],
       "last_threat_review": "2026-05-01",
       "signature": "MS35nWm8djfJGn4OOoT0JKJ2aO+Dkbb6wOOWJYvNZlRKT3UGA59o2gxg1JOnD20hb/RwxtkmCujhl2tuYSR+AQ==",
-      "signed_at": "2026-05-21T17:02:34.787Z"
+      "signed_at": "2026-05-21T17:36:00.097Z"
     },
     {
       "name": "security-maturity-tiers",
@@ -638,7 +638,7 @@
       ],
       "last_threat_review": "2026-05-01",
       "signature": "8Px1s2lDj10/Q6erwEQlXgUHM1+OTruUR8qAHPX7Oo3k/l69N6P9sm0PsafS9wDFtj9l5C/OiLiFgzMlMt6vBw==",
-      "signed_at": "2026-05-21T17:02:34.787Z",
+      "signed_at": "2026-05-21T17:36:00.097Z",
       "cwe_refs": [
         "CWE-1188"
       ]
@@ -673,7 +673,7 @@
       "framework_gaps": [],
       "last_threat_review": "2026-05-11",
       "signature": "WAu5fRirzSOcnnZsTx2d/JJZwa/LPpXCi+31qATTGLmoNuhyy81k3ooPe9kCM3E0CLMtvTePg9DagYqBninZDQ==",
-      "signed_at": "2026-05-21T17:02:34.787Z"
+      "signed_at": "2026-05-21T17:36:00.097Z"
     },
     {
       "name": "attack-surface-pentest",
@@ -744,7 +744,7 @@
         "PTES revision incorporating AI-surface enumeration"
       ],
       "signature": "7eEwCXFd9pDKUw7yCUbRJSjfzozE44dwwwemCQUPm8JBPztLltibD9bL/RszSbYyCrYJmVb5Drncz2cGe62gCw==",
-      "signed_at": "2026-05-21T17:02:34.788Z"
+      "signed_at": "2026-05-21T17:36:00.098Z"
     },
     {
       "name": "fuzz-testing-strategy",
@@ -804,7 +804,7 @@
         "OSS-Fuzz-Gen / AI-assisted harness generation becoming the default expectation for OSS maintainers"
       ],
       "signature": "Z7ypCUnXx8JpLtgxxB6RHNi39w74AmrGY1N4ofAGCXhkuM2EaFVm1AU0dvl9UQ1bVLfHKEDGqMO/TwlIY7RABg==",
-      "signed_at": "2026-05-21T17:02:34.788Z"
+      "signed_at": "2026-05-21T17:36:00.098Z"
     },
     {
       "name": "dlp-gap-analysis",
@@ -879,7 +879,7 @@
         "Quebec Law 25, India DPDPA, KSA PDPL enforcement actions naming AI-tool prompt data as in-scope personal information"
       ],
       "signature": "fgxG344JGYBWWWwFXZ1IzGipWKP7EyBhrsvsbsb0CCGXfv/MvNHVNI6G0zQddCsWX1JeQbhZT3Vk8v1uJKDTDA==",
-      "signed_at": "2026-05-21T17:02:34.789Z"
+      "signed_at": "2026-05-21T17:36:00.098Z"
     },
     {
       "name": "supply-chain-integrity",
@@ -956,7 +956,7 @@
         "OpenSSF model-signing — emerging Sigstore-based signing standard for ML model weights; track for production adoption"
       ],
       "signature": "pcLrM98A3vUSZRjwNAk0aZ9umvOwB41XCLLsCOy/IebB2F/06oIrGUKkMHtHwm4pTVPShMMcKdZQQ3jz30FnCg==",
-      "signed_at": "2026-05-21T17:02:34.789Z"
+      "signed_at": "2026-05-21T17:36:00.099Z"
     },
     {
       "name": "defensive-countermeasure-mapping",
@@ -1013,7 +1013,7 @@
       ],
       "last_threat_review": "2026-05-11",
       "signature": "gqF8eU3VBrZhO2WnlcqKa7wm1d2mmWtvpbmx0kNCgHojNV+qEt+Ij84RO6bZvaUqhfYPWizWL79Fa4DL0curAQ==",
-      "signed_at": "2026-05-21T17:02:34.789Z"
+      "signed_at": "2026-05-21T17:36:00.099Z"
     },
     {
       "name": "identity-assurance",
@@ -1080,7 +1080,7 @@
       "d3fend_refs": [],
       "last_threat_review": "2026-05-11",
       "signature": "Wv5hGMeHjlaQK1zwicVCA7AvdKgJBgvcjdpGM9Ywahh9tagAKhbkOjybowDQZzu7OZ3bDkbh6pBYc1Sdwr6NAA==",
-      "signed_at": "2026-05-21T17:02:34.790Z"
+      "signed_at": "2026-05-21T17:36:00.099Z"
     },
     {
       "name": "ot-ics-security",
@@ -1136,7 +1136,7 @@
       "d3fend_refs": [],
       "last_threat_review": "2026-05-11",
       "signature": "8t5qKHd3yWi57dvG36YQkLN/X9bQWqtEiYjay4IfSmqhJpM/xXPaQVKNGz3wscrO8OLKUZ0OaX7Mj5kzpgBKBQ==",
-      "signed_at": "2026-05-21T17:02:34.790Z"
+      "signed_at": "2026-05-21T17:36:00.100Z"
     },
     {
       "name": "coordinated-vuln-disclosure",
@@ -1188,7 +1188,7 @@
         "NYDFS 23 NYCRR 500 amendments potentially adding explicit CVD program requirements"
       ],
       "signature": "GDGt4UPqBa04PjlpSmpyihGzd3OgfBN7jaAK5tfwp+LRSs3ygKOdbeivUCCHNagTY1hE6hG2Ou40ADfBFuXeAg==",
-      "signed_at": "2026-05-21T17:02:34.790Z"
+      "signed_at": "2026-05-21T17:36:00.100Z"
     },
     {
       "name": "threat-modeling-methodology",
@@ -1238,7 +1238,7 @@
         "PASTA v2 updates incorporating AI/ML application threats"
       ],
       "signature": "rFBpOQEJUPpl+v88Lw/WqVJRhTl80vy0VbPAbzQj3Q0suJRRrJg368I9uKu5LXIBKFDvKxnGIcIzbGg9NUtaCA==",
-      "signed_at": "2026-05-21T17:02:34.791Z"
+      "signed_at": "2026-05-21T17:36:00.100Z"
     },
     {
       "name": "webapp-security",
@@ -1312,7 +1312,7 @@
       "d3fend_refs": [],
       "last_threat_review": "2026-05-11",
       "signature": "ux85YI4t2mVHOyt744Yin1HHy+z11JIFygjKfFfQOBBl5QVV3A267jeIy7utix85irMcpZm/T3yx/ooqiK2tBA==",
-      "signed_at": "2026-05-21T17:02:34.791Z"
+      "signed_at": "2026-05-21T17:36:00.101Z"
     },
     {
       "name": "ai-risk-management",
@@ -1362,7 +1362,7 @@
       "d3fend_refs": [],
       "last_threat_review": "2026-05-11",
       "signature": "IIXnkZ5ZNqFwOto5KfytADTLLZLoyXNZACD1ORZ40P1HUAQxe6u2uyXFzzsfuob4Uy06jNkRGr2FFgCphUH1Cw==",
-      "signed_at": "2026-05-21T17:02:34.791Z"
+      "signed_at": "2026-05-21T17:36:00.101Z"
     },
     {
       "name": "sector-healthcare",
@@ -1422,7 +1422,7 @@
       "d3fend_refs": [],
       "last_threat_review": "2026-05-11",
       "signature": "AhF9KF8ZBlDteciV+F8IBSmFVYCvQOn44GmD4rZjgLoPxfIv/QE1/vSkK32zyqDKtHWkLSXExbkkPkxA/V6dDw==",
-      "signed_at": "2026-05-21T17:02:34.792Z"
+      "signed_at": "2026-05-21T17:36:00.102Z"
     },
     {
       "name": "sector-financial",
@@ -1503,7 +1503,7 @@
         "TIBER-EU framework v2.0 alignment with DORA TLPT RTS (JC 2024/40); cross-recognition with CBEST and iCAST"
       ],
       "signature": "HQgZvb4ReziEz5rNFr8i/O8/rJEZR+iHRROT7m/D2QUqhrcNISPkYXENsUZlG8xapzy/Ik92ehkseyj4hdmhCQ==",
-      "signed_at": "2026-05-21T17:02:34.792Z"
+      "signed_at": "2026-05-21T17:36:00.102Z"
     },
     {
       "name": "sector-federal-government",
@@ -1572,7 +1572,7 @@
         "Australia PSPF 2024 revision and ISM quarterly updates — track for Essential Eight Maturity Level requirements for federal entities"
       ],
       "signature": "linxmsXZiOYtcs71sSWgGCrvb8xQfmxmtTY5PRvZJ0/8FgJulo0tQtejzexYG775s7XhjAmGsDP238BQTQ8ADA==",
-      "signed_at": "2026-05-21T17:02:34.793Z"
+      "signed_at": "2026-05-21T17:36:00.103Z"
     },
     {
       "name": "sector-energy",
@@ -1637,7 +1637,7 @@
         "ICS-CERT advisory feed (https://www.cisa.gov/news-events/cybersecurity-advisories/ics-advisories) for vendor CVEs in Siemens, Rockwell, Schneider Electric, ABB, GE Vernova, Hitachi Energy, AVEVA / OSIsoft PI"
       ],
       "signature": "JjBfc0ovta560Clk0x3QGRM5osFJDwcvpy3rT7QEGdCIL827jzE8QCow1C8deXq+4JhY2sA/d7/8IsxikdlkCg==",
-      "signed_at": "2026-05-21T17:02:34.793Z"
+      "signed_at": "2026-05-21T17:36:00.103Z"
     },
     {
       "name": "sector-telecom",
@@ -1723,7 +1723,7 @@
         "O-RAN SFG / WG11 security specifications"
       ],
       "signature": "JWVxKFoKrbX4d+Tko1d4OBdwyg25MfFFKn4CT6E/CzH+YwnU3T6Y76uBQIKg3+gIGTvPduqyvQwQQ5FxKDuPBw==",
-      "signed_at": "2026-05-21T17:02:34.793Z"
+      "signed_at": "2026-05-21T17:36:00.103Z"
     },
     {
       "name": "api-security",
@@ -1792,7 +1792,7 @@
       "d3fend_refs": [],
       "last_threat_review": "2026-05-11",
       "signature": "BmCRCestWqr55+fCynEhtAl5NWLT+xLTkpwS0Icp3SaoZOw/ce3Y6TtqjHRSKn4CBJq7YDiLRWxmhO3MStvOAA==",
-      "signed_at": "2026-05-21T17:02:34.794Z"
+      "signed_at": "2026-05-21T17:36:00.104Z"
     },
     {
       "name": "cloud-security",
@@ -1873,7 +1873,7 @@
         "CISA KEV additions for cloud-control-plane CVEs (IMDSv1 abuses, federation token mishandling, cross-tenant boundary failures); CISA Cybersecurity Advisories for cross-cloud advisories"
       ],
       "signature": "/DV3pmZwrRySrk1OCbyI+0BQESacjupJfUX3eC2NGtXuYOBro0vndIP+z27heFxumnjU3a9sfla7/U9X+pqnDw==",
-      "signed_at": "2026-05-21T17:02:34.794Z"
+      "signed_at": "2026-05-21T17:36:00.104Z"
     },
     {
       "name": "container-runtime-security",
@@ -1935,7 +1935,7 @@
       "d3fend_refs": [],
       "last_threat_review": "2026-05-11",
       "signature": "E2UGSf9ATyYgzBr8uM/0ubOUmDqo1jVA7f9mVxv6LHfWGCNuQNXDyuNou9VAmUCeeXEeUYIi3AFjXkJqpOkxDA==",
-      "signed_at": "2026-05-21T17:02:34.794Z"
+      "signed_at": "2026-05-21T17:36:00.104Z"
     },
     {
       "name": "mlops-security",
@@ -2006,7 +2006,7 @@
         "MITRE ATLAS v5.6.0 (released February 2026) shipped the AML.T0010 sub-technique expansion this forecast tracked plus new techniques (\"Publish Poisoned AI Agent Tool\", \"Escape to Host\"); inventory now 16 tactics, 84 techniques, 56 sub-techniques. Forward watch: ATLAS v5.5 / v6.0 — track next-cadence updates to agentic-AI TTPs and MLOps-pipeline-specific techniques"
       ],
       "signature": "BGNE6ZQWBA1LmsUFe8tU0L67iGDSrFqiuqaZD2f1KqfcyqqzQfMs9PWNHFzxxaJmXeKlm87eU8lgELF0bX+RBA==",
-      "signed_at": "2026-05-21T17:02:34.795Z"
+      "signed_at": "2026-05-21T17:36:00.105Z"
     },
     {
       "name": "incident-response-playbook",
@@ -2068,7 +2068,7 @@
         "NYDFS 23 NYCRR 500.17 amendments tightening ransom-payment 24h disclosure operationalization"
       ],
       "signature": "FkZQerh3VHVJAwIcCktDyMRh5KE2+Em/i0ek8zEz7JG/PXtQx8ujHWTh3VjZbOLhPNtdB2qxgXOIAYIofaVOAQ==",
-      "signed_at": "2026-05-21T17:02:34.795Z"
+      "signed_at": "2026-05-21T17:36:00.105Z"
     },
     {
       "name": "ransomware-response",
@@ -2148,7 +2148,7 @@
       ],
       "last_threat_review": "2026-05-15",
       "signature": "n3UToNuN3A1HgLvcuqmIx8vrZY71+r/79waK92jG+rSX4uYOzkmxMUpROrE5K9bDwMezNBHdjWv8Uul6zugyDQ==",
-      "signed_at": "2026-05-21T17:02:34.796Z"
+      "signed_at": "2026-05-21T17:36:00.105Z"
     },
     {
       "name": "email-security-anti-phishing",
@@ -2201,7 +2201,7 @@
       "d3fend_refs": [],
       "last_threat_review": "2026-05-11",
       "signature": "rK+WnuS+9tqEABmwc0jO/PEmxcLjG1/tmUb897HsClQeKzf+TQOlwBE+OsbtuKxpjYNwur62Xxs3TxObkwm8Cw==",
-      "signed_at": "2026-05-21T17:02:34.796Z"
+      "signed_at": "2026-05-21T17:36:00.106Z"
     },
     {
       "name": "age-gates-child-safety",
@@ -2269,7 +2269,7 @@
         "US state adult-site age-verification laws — 19+ states by mid-2026 (TX HB 18 upheld by SCOTUS June 2025 in Free Speech Coalition v. Paxton); track ongoing challenges in remaining states"
       ],
       "signature": "+OO0RhQ303RJV7kaH38IuZpLeQbapep6Ds4Re/WEZu0FHBwKSlwvF7jbtP7KQ57xldJYn/xZm2jaszyOacMfDg==",
-      "signed_at": "2026-05-21T17:02:34.796Z"
+      "signed_at": "2026-05-21T17:36:00.106Z"
     },
     {
       "name": "cloud-iam-incident",
@@ -2349,7 +2349,7 @@
       ],
       "last_threat_review": "2026-05-15",
       "signature": "e/kij7GtKaytROyIj7V5RH+FC9WtmVFzrmG2kIlNDNn29ep/CRNlIQKwXLpzo/81AIf634pmdr1qy/+vwIuUDA==",
-      "signed_at": "2026-05-21T17:02:34.797Z"
+      "signed_at": "2026-05-21T17:36:00.107Z"
     },
     {
       "name": "idp-incident-response",
@@ -2430,11 +2430,11 @@
       ],
       "last_threat_review": "2026-05-15",
       "signature": "ew9Kglc9fAZzbn0ZIfGP7WSK/j4eV2VhSvpy+s5bEfNEVYIMa2kZjnGBapgUsyGDLes9H9K2ovjQyX17+GKiBw==",
-      "signed_at": "2026-05-21T17:02:34.797Z"
+      "signed_at": "2026-05-21T17:36:00.107Z"
     }
   ],
   "manifest_signature": {
     "algorithm": "Ed25519",
-    "signature_base64": "nw33cErie1hRrgMQTFi2dn+VfjEXgeOiPlP6NM7YM72ZmCGuwTaNAx8WNqvRRaaS+gQPAZkkoqV3dunmPtR/Cw=="
+    "signature_base64": "fh1K2ANMsPzZTwxkm31oVK6WRuY7P0h/LpomKgFhakAA4qDAfTVAy6lk1PcaqIMgX6okxOwMgcdKQFHC0XQuBw=="
   }
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@blamejs/exceptd-skills",
-  "version": "0.13.48",
+  "version": "0.13.49",
   "description": "AI security skills grounded in mid-2026 threat reality, not stale framework documentation. 42 skills, 10 catalogs (312 CVEs / 171 CWEs / 805 ATT&CK + ICS / 170 ATLAS / 468 D3FEND / 7476 RFCs), 34 jurisdictions, 10-class catalog gap detector + budget gate, real XML parser + canonical-form diff + content-pattern regression detection, Ed25519-signed.",
   "keywords": [
     "ai-security",

package/sbom.cdx.json

@@ -1,22 +1,22 @@
 {
   "bomFormat": "CycloneDX",
   "specVersion": "1.6",
-  "serialNumber": "urn:uuid:6a15616c-041c-4304-b686-e2087467ba07",
+  "serialNumber": "urn:uuid:3d203982-8322-49a5-9822-36f3e578614d",
   "version": 1,
   "metadata": {
-    "timestamp": "2082-05-26T09:01:32.000Z",
+    "timestamp": "2058-07-01T11:14:10.000Z",
     "tools": [
       {
         "vendor": "blamejs",
         "name": "scripts/refresh-sbom.js",
-        "version": "0.13.48"
+        "version": "0.13.49"
       }
     ],
     "component": {
-      "bom-ref": "pkg:npm/@blamejs/exceptd-skills@0.13.48",
+      "bom-ref": "pkg:npm/@blamejs/exceptd-skills@0.13.49",
       "type": "application",
       "name": "@blamejs/exceptd-skills",
-      "version": "0.13.48",
+      "version": "0.13.49",
       "description": "AI security skills grounded in mid-2026 threat reality, not stale framework documentation. 42 skills, 10 catalogs (312 CVEs / 171 CWEs / 805 ATT&CK + ICS / 170 ATLAS / 468 D3FEND / 7476 RFCs), 34 jurisdictions, 10-class catalog gap detector + budget gate, real XML parser + canonical-form diff + content-pattern regression detection, Ed25519-signed.",
       "licenses": [
         {
@@ -25,17 +25,17 @@
           }
         }
       ],
-      "purl": "pkg:npm/%40blamejs/exceptd-skills@0.13.48",
+      "purl": "pkg:npm/%40blamejs/exceptd-skills@0.13.49",
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "37cb415548abd88f9732781eaebea63c5674a980599b89563862de57c96501e5"
+          "content": "0cc0239379aa675d66a79fd4927e165df684aa8b16274779c1ade7cea6ef988f"
         }
       ],
       "externalReferences": [
         {
           "type": "distribution",
-          "url": "https://www.npmjs.com/package/@blamejs/exceptd-skills/v/0.13.48"
+          "url": "https://www.npmjs.com/package/@blamejs/exceptd-skills/v/0.13.49"
         },
         {
           "type": "vcs",
@@ -116,11 +116,11 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "af6fb0211611b3121dcac81c324d118607ba75437c662935587aa05cd5557f23"
+          "content": "d93a2bbbafc6fe57f582c4ef06504eb172d09ed556281bcdb429d0b4d386eb00"
         },
         {
           "alg": "SHA3-512",
-          "content": "ef952c6a67ed91d54375f571e74254ba0f9bff773da8330652808e5a2da2d39730b37cbc97380b3b56caf34cf3bb24b46f411b30fd24665bd4c88adecbe7bddf"
+          "content": "9339c6c17243ad1b2f9821f3f31c722cabc896377eaa254606207a4438ddaaf9a4342745fdddfc512721b78a3e4ee21b20cf814f7d6602656e1ae3a0ad526ba6"
         }
       ]
     },
@@ -281,11 +281,11 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "0f798de4d3727d4cb33993a35c370557f9068e1cf2a32a2e850b54c606028751"
+          "content": "605b1d6cbaf1e8fea9937c0f41f9cc17a630300bd3dd8a3c425fe1885775d380"
         },
         {
           "alg": "SHA3-512",
-          "content": "d592cb61c7cf31c447657b35010d7d2c54b04e56da63b4beba7307324e68ccd6e97bbd88b72dd2c88fb83041f0ac93c58da7000bbc59ecf0d3f3a2c4436cf1f5"
+          "content": "6dd90b9c957cfeb05c626e3ed175a5700f534dd4422b812f66cb72856f23d371d0d8eb2801a76f5a445ba17e4750259791ccd3bd7a8648e92f8e31a962245ff6"
         }
       ]
     },
@@ -1661,11 +1661,11 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "d609674fbe018083de83b4219c280889b616756dfdbf11d026cccf6594c80684"
+          "content": "188c660ebfd03913aafe0a2d8fc7975081b6a1c786eb0201338e62985b2f51c7"
         },
         {
           "alg": "SHA3-512",
-          "content": "8deb8d28d05acf57f48c0e635d4858ee4325d749e60abd23476e4e1591ca61ae01815a4f5ca22b2c17444fcfbb3f11b47b49e60cf37e0e7ed01b4cb6d2d0b563"
+          "content": "7e656d60bdf6fa0eb35ca9925fb04c04b5e1658f860ee1c8ab561e03c889c85d55a6aabefb8639207f24b6d8f170230e353b2eb5efbbe9f00927f146197c0692"
         }
       ]
     },