@blamejs/exceptd-skills 0.13.52 → 0.13.53

package/CHANGELOG.md

@@ -1,5 +1,21 @@
 # Changelog
 
+## 0.13.53 — 2026-05-21
+
+Polish round across CLI UX, container false-positives, collector skip-disclosure, and README narrative refresh.
+
+### Bugs
+
+- **`containers` collector demotes the `dockerfile-runs-as-root` indicator on metadata-only Dockerfiles.** A Dockerfile that contains only `FROM <image>` (no `RUN`/`COPY`/`ADD`/`CMD`/`ENTRYPOINT`/`EXPOSE`/`VOLUME`/`WORKDIR`/`USER`/`HEALTHCHECK`/`SHELL` directive) is not a runtime image — it's a base-image probe used by `docker build` to extract a version label or similar. The runs-as-root predicate is meaningless on those; demote.
+- **`scan` / `dispatch` / `currency` aliases relabelled in the README as legacy passthroughs.** These verbs dispatch to the v0.10.x orchestrator script and emit the legacy `{timestamp, host, findings}` shape — NOT the canonical verb's structured envelope. The previous README claim ("alias for `discover --scan-only`" / etc.) implied output-shape equivalence; corrected.
+
+### Features
+
+- **`exceptd ask` alternates list now tags collector-backed playbooks with `[collector]`** (matching the discover output convention). Operators see at a glance which routed-to suggestions have a `collect | run` pipe path vs. which require AI-driven evidence.
+- **`exceptd collect` emits a stderr skip-disclosure line when the collector's preconditions fail** (e.g. `[collect crypto] precondition not satisfied: linux-platform — empty submission emitted (collector skipped on this host)`). Previously the empty `signal_overrides` on a gated collector looked indistinguishable from "ran but found nothing".
+- **Errors render as human text when stderr is a TTY** (interactive operator), and continue to emit the structured JSON envelope when stderr is piped (CI parsers, smart-agent retry, tests). Operators with stderr=tty see `error: <msg>\n  hint: ...\n  suggested: ...` lines; the JSON-by-default contract on piped stderr is preserved. Explicit `--json` / `--pretty` / `--json-stdout-only` forces JSON even on a TTY.
+- **README narrative refresh** covering the v0.13.34+ evidence-collection layer: `exceptd collect <playbook>` verb, the discover-collect-run pipe pattern, `--attest-ownership` for cicd-pipeline-compromise, the 13/23 collector coverage, and the pointer to `exceptd doctor --collectors` for the live list.
+
 ## 0.13.52 — 2026-05-21
 
 README jurisdiction-count normalization; collect-verb + collector-pipe docs; new predeploy gate verifying AGENTS.md collector enumeration matches `lib/collectors/`.

package/README.md

@@ -162,6 +162,8 @@ GitHub repo-pattern monitoring: `exceptd watchlist --org-scan --org <login>` pro
 
 AI-assistant config-file audit: `exceptd doctor --ai-config` walks `~/.claude`, `~/.cursor`, `~/.codeium`, `~/.aider`, and `~/.continue`, flagging sensitive files (`settings.json`, `mcp.json`, `*.mcp_config.json`, `api_key*`, `*.token`, `*.credentials`) not at mode 0600 on POSIX. On Windows the mode bits aren't load-bearing; each finding is surfaced with an info-level "manual ACL review" note. Catches the AI-config-credential-exfil class that the Shai-Hulud framework targets. Opt-in — does not run as part of the default no-flag `doctor` pass.
 
+Evidence-collection layer: `exceptd collect <playbook>` invokes a companion script under `lib/collectors/<playbook>.js` that walks cwd, applies the catalogued regex set, stats permissions, and emits the submission JSON in the same shape `exceptd run --evidence -` accepts. 13 of 23 playbooks have collectors today (`ai-api`, `cicd-pipeline-compromise`, `containers`, `cred-stores`, `crypto`, `crypto-codebase`, `hardening`, `kernel`, `library-author`, `mcp`, `runtime`, `sbom`, `secrets`); the remaining 10 are policy-skipped per AGENTS.md (judgement-shaped incident / governance / pure-analyze playbooks where AI-driven evidence collection is the design). Canonical operator pipe: `exceptd collect <pb> | exceptd run <pb> --evidence -`. `exceptd doctor --collectors` enumerates the layer; `exceptd discover` tags applicable playbooks with `[collector]` when one ships. `cicd-pipeline-compromise` requires `--attest-ownership` on the collect call (the playbook's `operator-owns-ci-fleet` precondition is opt-in to prevent unauthorized CI assessments).
+
 Daily scheduled threat intake: a `routine: exceptd-threat-intake` (claude.ai remote agent) runs daily at 14:00 UTC. Sequence: `npm install` → `refresh --check-advisories` → `watchlist --alerts` → `refresh --apply` → `refresh --advisory <CVE-ID>` for up to 5 new CVE IDs from the primary-source feeds → re-sign + rebuild-indexes if the catalog mutated → commit on `intake/<YYYY-MM-DD>` branch with the full diff in the report. Closes the cadence gap that previously left fresh disclosures dependent on operator-triggered intake. Operator-managed at <https://claude.ai/code/routines>.
 
 Optional env vars for higher rate budgets:
@@ -416,20 +418,27 @@ Five verbs removed in v0.13.0 after deprecation since v0.11.0. Invoking any of t
 | `look <pb>` | `brief <pb> --phase look` |
 | `ingest` | `run` |
 
-The remaining v0.10.x verbs are aliases — still functional, no banner, no removal scheduled:
+The remaining v0.10.x verbs are still functional, no banner, no removal scheduled. Two shapes:
+
+**Canonical-equivalent aliases** — same output shape as the canonical verb; safe to use interchangeably:
+
+| Alias | Canonical | Output shape |
+|---|---|---|
+| `verify` | `doctor --signatures` | matches canonical |
+| `validate-cves` | `doctor --cves` | matches canonical |
+| `validate-rfcs` | `doctor --rfcs` | matches canonical |
+| `list-attestations` | `attest list` | matches canonical |
+| `reattest <sid>` | `attest diff <sid>` | matches canonical |
+| `prefetch` | `refresh --no-network` | matches canonical |
+| `build-indexes` | `refresh --indexes-only` | matches canonical |
+
+**Legacy passthrough verbs** — dispatch to the v0.10.x orchestrator script. The output shape is **NOT** identical to the canonical verb — it's the legacy `{timestamp, host, findings}` envelope. Use the canonical verb when you want the v0.11+ structured envelope contract; the passthrough is kept only for scripts that depend on the legacy output:
 
-| Alias | Canonical |
+| Passthrough | Canonical (different output shape) |
 |---|---|
 | `scan` | `discover --scan-only` |
 | `dispatch` | `discover` |
 | `currency` | `doctor --currency` |
-| `verify` | `doctor --signatures` |
-| `validate-cves` | `doctor --cves` |
-| `validate-rfcs` | `doctor --rfcs` |
-| `reattest <sid>` | `attest diff <sid>` |
-| `list-attestations` | `attest list` |
-| `prefetch` | `refresh --no-network` |
-| `build-indexes` | `refresh --indexes-only` |
 
 ### Result envelope contract
 

package/bin/exceptd.js

@@ -796,20 +796,34 @@ function emit(obj, pretty, humanRenderer) {
 }
 
 function emitError(msg, extra, pretty) {
-  // v0.12.14: the v0.11.13 emit() fix used exitCode + return
-  // to defend stdout-buffered writes from truncation under piped consumers.
-  // emitError() (stderr) kept process.exit(1), which has the same truncation
-  // class — CLAUDE.md's "fix the class, not the instance." Now: write to
-  // stderr, set exitCode = 1, return. Every caller already uses
-  // `return emitError(...)` so the return-value propagation is clean.
+  // Stderr + exitCode + return (defends stdout drain under piped
+  // consumers — same class as emit()'s v0.11.13 fix).
   //
-  // Errors emit as JSON envelope on stderr regardless of mode — that
-  // contract has been load-bearing since v0.11.x for piped consumers
-  // (CI parsers, smart-agent retry logic). Operators wanting human
-  // text on stderr can pipe `2>&1 | jq -r .error || cat` as a
-  // workaround.
+  // Output shape branches on whether stderr is attached to a TTY:
+  //   - piped (CI parsers, smart-agent retry, tests using
+  //     `tryJson(r.stderr)`): JSON envelope — the load-bearing
+  //     contract for programmatic consumers.
+  //   - interactive (operator at a terminal): human-readable
+  //     "error: <msg>" + indented helper lines. Operators wanting
+  //     the structured envelope explicitly can pass --json.
+  // Explicit --json / --pretty / --json-stdout-only also force JSON
+  // regardless of TTY (e.g. an operator redirecting to a file).
   const body = Object.assign({ ok: false, error: msg }, extra || {});
-  const s = pretty ? JSON.stringify(body, null, 2) : JSON.stringify(body);
+  const wantJson = !!global.__exceptdWantJson || !!process.env.EXCEPTD_RAW_JSON;
+  const stderrIsTty = process.stderr.isTTY === true;
+  let s;
+  if (wantJson || !stderrIsTty) {
+    s = pretty ? JSON.stringify(body, null, 2) : JSON.stringify(body);
+  } else {
+    const lines = [`error: ${msg}`];
+    if (extra && typeof extra === "object") {
+      const helperFields = ["hint", "suggested", "did_you_mean", "remediation", "submission_hint"];
+      for (const key of helperFields) {
+        if (extra[key] != null) lines.push(`  ${key}: ${extra[key]}`);
+      }
+    }
+    s = lines.join("\n");
+  }
   process.stderr.write(s + "\n");
   process.exitCode = EXIT_CODES.GENERIC_FAILURE;
 }
@@ -2264,10 +2278,23 @@ function cmdCollect(runner, args, runOpts, pretty) {
     return emitError(
       `collect: collector for "${playbookId}" threw an unhandled exception: ${e.message}. File a bug — collectors must catch their own errors and surface them via collector_errors[].`,
       { verb: "collect", playbook_id: playbookId, stack: e.stack || null, exit_code: 2 },
-      pretty
+      pretty,
     );
   }
 
+  // Skip-disclosure on stderr when a precondition gate returned
+  // false (typically a platform gate — `linux-platform: false` on
+  // win32 / macOS). Without this, the empty signal_overrides on a
+  // gated collector looks indistinguishable from "the collector
+  // ran but found nothing". Operators get one stderr line per
+  // platform-skipped run.
+  const failedPre = Object.entries(submission.precondition_checks || {})
+    .filter(([, v]) => v === false)
+    .map(([k]) => k);
+  if (failedPre.length > 0 && (submission.signal_overrides && Object.keys(submission.signal_overrides).length === 0)) {
+    process.stderr.write(`[collect ${playbookId}] precondition not satisfied: ${failedPre.join(", ")} — empty submission emitted (collector skipped on this host)\n`);
+  }
+
   // Emit the submission JSON to stdout. The operator pipes this into
   // `exceptd run <playbook> --evidence -` to drive a real verdict.
   // Human-rendered version is concise so an interactive operator can
@@ -7143,6 +7170,16 @@ function cmdAsk(runner, args, runOpts, pretty) {
     return;
   }
 
+  // Enrich each match with whether a companion collector exists for
+  // the playbook (same lookup discover uses). Operators see at a
+  // glance which alternates have a collect|run pipe path vs. which
+  // require AI-driven evidence.
+  const collectorsDir = path.join(PKG_ROOT, "lib", "collectors");
+  for (const t of top) {
+    const collectorPath = path.join(collectorsDir, t.id + ".js");
+    t.collector_available = fs.existsSync(collectorPath);
+  }
+
   const result = {
     verb: "ask",
     question,
@@ -7152,7 +7189,9 @@ function cmdAsk(runner, args, runOpts, pretty) {
     full_match_list: top,
   };
   if (args.json || args.pretty) return emit(result, pretty);
-  process.stdout.write(`ask: ${question}\n  top match: ${top[0].id} (score ${top[0].score})\n  next: ${result.next_step}\n  alternates: ${top.slice(1).map(t => t.id).join(", ") || "(none)"}\n`);
+  const topGlyph = top[0].collector_available ? " [collector]" : "";
+  const altLine = top.slice(1).map(t => t.id + (t.collector_available ? " [collector]" : "")).join(", ") || "(none)";
+  process.stdout.write(`ask: ${question}\n  top match: ${top[0].id}${topGlyph} (score ${top[0].score})\n  next: ${result.next_step}\n  alternates: ${altLine}\n`);
 }
 
 /**

package/data/_indexes/_meta.json

@@ -1,10 +1,10 @@
 {
   "schema_version": "1.1.0",
-  "generated_at": "2026-05-21T22:16:05.918Z",
+  "generated_at": "2026-05-21T23:13:39.676Z",
   "generator": "scripts/build-indexes.js",
   "source_count": 54,
   "source_hashes": {
-    "manifest.json": "5669cbc5596276b0e2679e97e59a6066db2d7492b6e4d0c97aa13715015f41e9",
+    "manifest.json": "9eb25cdba45631f79eaf5ee628532b284912a2318d85c7a97d2acbaf2db31e08",
     "data/atlas-ttps.json": "d296c1d3e71807c9279b731f047e57796e85137f186586743a8cdad214b408f9",
     "data/attack-techniques.json": "49b6010b317edd219def135171ea8f3b1bbf1e00e9c5a08bf7237215ff54e2c3",
     "data/cve-catalog.json": "a09c83af3f9679a7ea73935726a1ff9de2cab94b4ab6321fc017fc147747d7c3",

package/lib/collectors/containers.js

@@ -114,6 +114,31 @@ function scanDockerfile(content, rel) {
     "dockerfile-curl-pipe-bash": [],
   };
 
+  // Metadata-only Dockerfile heuristic — when the file has a FROM
+  // line but no RUN / COPY / ADD / CMD / ENTRYPOINT / EXPOSE / VOLUME
+  // / WORKDIR / USER directives, it's not a runtime image. Examples:
+  // the go-version-scraping Dockerfile (cosign style) or a base-image-
+  // probe used only by `docker build` to extract a version label.
+  // The runs-as-root predicate is meaningless on those — demote.
+  const isMetadataOnly = (() => {
+    let sawFrom = false;
+    let sawBuildOrRuntime = false;
+    for (const raw of lines) {
+      const t = raw.trim();
+      if (!t || t.startsWith("#")) continue;
+      if (/^FROM\b/i.test(t)) { sawFrom = true; continue; }
+      if (/^(RUN|COPY|ADD|CMD|ENTRYPOINT|EXPOSE|VOLUME|WORKDIR|USER|HEALTHCHECK|ONBUILD|STOPSIGNAL|SHELL|ARG|ENV|LABEL)\b/i.test(t)) {
+        // ARG / ENV / LABEL alone aren't enough to make this a runtime
+        // image — only the directives that define execution shape do.
+        if (/^(RUN|COPY|ADD|CMD|ENTRYPOINT|EXPOSE|VOLUME|WORKDIR|USER|HEALTHCHECK|ONBUILD|SHELL)\b/i.test(t)) {
+          sawBuildOrRuntime = true;
+          break;
+        }
+      }
+    }
+    return sawFrom && !sawBuildOrRuntime;
+  })();
+
   let sawNonRootUser = false;
   let sawAnyUser = false;
   for (let i = 0; i < lines.length; i++) {
@@ -167,8 +192,9 @@ function scanDockerfile(content, rel) {
 
   // runs-as-root indicator: file fires if NO non-root USER directive
   // was seen anywhere. (sawAnyUser=false also counts — image defaults
-  // to root.)
-  if (!sawNonRootUser) {
+  // to root.) Demoted on metadata-only Dockerfiles (FROM-only, no
+  // execution-shape directives) — those aren't runtime images.
+  if (!sawNonRootUser && !isMetadataOnly) {
     hits["dockerfile-runs-as-root"].push({ file: rel, line: 0, snippet: sawAnyUser ? "USER directive sets root/0" : "no USER directive (defaults to root)" });
   }
 

package/manifest.json

@@ -1,6 +1,6 @@
 {
   "name": "exceptd-security",
-  "version": "0.13.52",
+  "version": "0.13.53",
   "description": "AI security skills grounded in mid-2026 threat reality, not stale framework documentation",
   "homepage": "https://exceptd.com",
   "license": "Apache-2.0",
@@ -53,7 +53,7 @@
       ],
       "last_threat_review": "2026-05-01",
       "signature": "lXhZgoIrrVloO3XaTvo/43AxZn4mwErstd7DR0O/oVhD3AOGODM4HqrageYEou9WKOdMEGP5mJNTjJsXdP5NDA==",
-      "signed_at": "2026-05-21T22:13:20.523Z",
+      "signed_at": "2026-05-21T23:11:05.491Z",
       "cwe_refs": [
         "CWE-125",
         "CWE-362",
@@ -117,7 +117,7 @@
       ],
       "last_threat_review": "2026-05-01",
       "signature": "vSVqu4wBm+d68ujZmM6Rto/HzViCkE0gPUcv/MYE/bjFiqamf/s0On4kTOo1KIveV9cOwYNxiItaGEWlVkRFDg==",
-      "signed_at": "2026-05-21T22:13:20.524Z",
+      "signed_at": "2026-05-21T23:11:05.493Z",
       "cwe_refs": [
         "CWE-1039",
         "CWE-1426",
@@ -180,7 +180,7 @@
       ],
       "last_threat_review": "2026-05-01",
       "signature": "RIgXKvolQjgJdnlrDnVOd90IOY1B7VHHZD/YJQRzouL+wUeOLclPrdK/EgEuFyiu7lR4bi+Pl6aGB9G9tOxYCQ==",
-      "signed_at": "2026-05-21T22:13:20.525Z",
+      "signed_at": "2026-05-21T23:11:05.493Z",
       "cwe_refs": [
         "CWE-22",
         "CWE-345",
@@ -226,7 +226,7 @@
       "framework_gaps": [],
       "last_threat_review": "2026-05-01",
       "signature": "RYOxeq/o3uTwTWq4H7RcdH2Aclg9UyCERfUH9Frwkzncsowg7LgxpaEDc3swTCv73HMEGbU8wVbXguZ4JxHUCQ==",
-      "signed_at": "2026-05-21T22:13:20.525Z"
+      "signed_at": "2026-05-21T23:11:05.493Z"
     },
     {
       "name": "compliance-theater",
@@ -257,7 +257,7 @@
       ],
       "last_threat_review": "2026-05-01",
       "signature": "DneJCPKCPcoe6nQ82XptqSqNfSRdt1orKaO+o7K36YCciDrzwJb+1BuBLusPDtpcdDaGY0y0e+AqiTYJklhBAQ==",
-      "signed_at": "2026-05-21T22:13:20.525Z"
+      "signed_at": "2026-05-21T23:11:05.494Z"
     },
     {
       "name": "exploit-scoring",
@@ -286,7 +286,7 @@
       ],
       "last_threat_review": "2026-05-01",
       "signature": "NA1hoQycvQhSUoG5rwlXX0mOVmGxoXRVezkELGEA2nZOdGis4gXkHT3O6Sfw7zxE4JuMrsCb65TEeOWk9WEPDg==",
-      "signed_at": "2026-05-21T22:13:20.526Z"
+      "signed_at": "2026-05-21T23:11:05.494Z"
     },
     {
       "name": "rag-pipeline-security",
@@ -323,7 +323,7 @@
       ],
       "last_threat_review": "2026-05-01",
       "signature": "XgrzcA2brPhXrSTxrcLnJec0OpgGYJBoSTUlJ10UdePHffxqb9LTVGnfbmEk1ykQifXREZexui2bG7X/+eFfCQ==",
-      "signed_at": "2026-05-21T22:13:20.527Z",
+      "signed_at": "2026-05-21T23:11:05.495Z",
       "cwe_refs": [
         "CWE-1395",
         "CWE-1426"
@@ -380,7 +380,7 @@
       ],
       "last_threat_review": "2026-05-01",
       "signature": "9+hZlZOqZdeACUmamQk66L5levZhhwnFXuYRhdT6Mce99eQaKT7wNfWq12hXQztkRcVRKaFH+a01zwJQwsRQCA==",
-      "signed_at": "2026-05-21T22:13:20.527Z",
+      "signed_at": "2026-05-21T23:11:05.495Z",
       "d3fend_refs": [
         "D3-CA",
         "D3-CSPP",
@@ -415,7 +415,7 @@
       "framework_gaps": [],
       "last_threat_review": "2026-05-01",
       "signature": "ciqhVloMWWXEigPZvvwoV2c54tEqsDqsoc+sS/mNTFFJk2H+tz2+XUrgfEPRuYw0FeyNB6/+27pL2NpKHzUqAg==",
-      "signed_at": "2026-05-21T22:13:20.527Z",
+      "signed_at": "2026-05-21T23:11:05.496Z",
       "cwe_refs": [
         "CWE-1188"
       ]
@@ -443,7 +443,7 @@
       "framework_gaps": [],
       "last_threat_review": "2026-05-01",
       "signature": "xiHAhhdufm9hCKU8PLiPE0MX65ej2F4OZwtlWLGLCiie9/km+Kiqbt192LcMvr94v83C98pb9wIaqFsFWft6AQ==",
-      "signed_at": "2026-05-21T22:13:20.528Z"
+      "signed_at": "2026-05-21T23:11:05.496Z"
     },
     {
       "name": "global-grc",
@@ -475,7 +475,7 @@
       "framework_gaps": [],
       "last_threat_review": "2026-05-01",
       "signature": "oYsSk35N2Uzq7MRofACykylcVwkgPhI4luWZ14vmQT+gUKLyZiKVOUJbe1+7lGl6BYPRN0sUDQ0f7S5Eu5w2Ag==",
-      "signed_at": "2026-05-21T22:13:20.528Z"
+      "signed_at": "2026-05-21T23:11:05.496Z"
     },
     {
       "name": "zeroday-gap-learn",
@@ -502,7 +502,7 @@
       "framework_gaps": [],
       "last_threat_review": "2026-05-01",
       "signature": "igRqYyU1unRFH40BsPyAR62SPrk8QZv8dPGb8S9O9EvLCNOZAzm3t+HdT/NKqzWHwrpomOzkkkyLfYI/0qTUDA==",
-      "signed_at": "2026-05-21T22:13:20.528Z"
+      "signed_at": "2026-05-21T23:11:05.497Z"
     },
     {
       "name": "pqc-first",
@@ -554,7 +554,7 @@
       ],
       "last_threat_review": "2026-05-01",
       "signature": "vhc3wuQEro/86s1ro2b/KakUXg8QVnySYTBqA7ebzv9oeR2HYO5bvGEJp3oOHWtL37JDqcCAHYadSN/qxIyCCA==",
-      "signed_at": "2026-05-21T22:13:20.529Z",
+      "signed_at": "2026-05-21T23:11:05.497Z",
       "cwe_refs": [
         "CWE-327"
       ],
@@ -601,7 +601,7 @@
       ],
       "last_threat_review": "2026-05-01",
       "signature": "MS35nWm8djfJGn4OOoT0JKJ2aO+Dkbb6wOOWJYvNZlRKT3UGA59o2gxg1JOnD20hb/RwxtkmCujhl2tuYSR+AQ==",
-      "signed_at": "2026-05-21T22:13:20.529Z"
+      "signed_at": "2026-05-21T23:11:05.497Z"
     },
     {
       "name": "security-maturity-tiers",
@@ -638,7 +638,7 @@
       ],
       "last_threat_review": "2026-05-01",
       "signature": "8Px1s2lDj10/Q6erwEQlXgUHM1+OTruUR8qAHPX7Oo3k/l69N6P9sm0PsafS9wDFtj9l5C/OiLiFgzMlMt6vBw==",
-      "signed_at": "2026-05-21T22:13:20.529Z",
+      "signed_at": "2026-05-21T23:11:05.497Z",
       "cwe_refs": [
         "CWE-1188"
       ]
@@ -673,7 +673,7 @@
       "framework_gaps": [],
       "last_threat_review": "2026-05-11",
       "signature": "WAu5fRirzSOcnnZsTx2d/JJZwa/LPpXCi+31qATTGLmoNuhyy81k3ooPe9kCM3E0CLMtvTePg9DagYqBninZDQ==",
-      "signed_at": "2026-05-21T22:13:20.530Z"
+      "signed_at": "2026-05-21T23:11:05.498Z"
     },
     {
       "name": "attack-surface-pentest",
@@ -744,7 +744,7 @@
         "PTES revision incorporating AI-surface enumeration"
       ],
       "signature": "7eEwCXFd9pDKUw7yCUbRJSjfzozE44dwwwemCQUPm8JBPztLltibD9bL/RszSbYyCrYJmVb5Drncz2cGe62gCw==",
-      "signed_at": "2026-05-21T22:13:20.530Z"
+      "signed_at": "2026-05-21T23:11:05.498Z"
     },
     {
       "name": "fuzz-testing-strategy",
@@ -804,7 +804,7 @@
         "OSS-Fuzz-Gen / AI-assisted harness generation becoming the default expectation for OSS maintainers"
       ],
       "signature": "Z7ypCUnXx8JpLtgxxB6RHNi39w74AmrGY1N4ofAGCXhkuM2EaFVm1AU0dvl9UQ1bVLfHKEDGqMO/TwlIY7RABg==",
-      "signed_at": "2026-05-21T22:13:20.530Z"
+      "signed_at": "2026-05-21T23:11:05.498Z"
     },
     {
       "name": "dlp-gap-analysis",
@@ -879,7 +879,7 @@
         "Quebec Law 25, India DPDPA, KSA PDPL enforcement actions naming AI-tool prompt data as in-scope personal information"
       ],
       "signature": "fgxG344JGYBWWWwFXZ1IzGipWKP7EyBhrsvsbsb0CCGXfv/MvNHVNI6G0zQddCsWX1JeQbhZT3Vk8v1uJKDTDA==",
-      "signed_at": "2026-05-21T22:13:20.531Z"
+      "signed_at": "2026-05-21T23:11:05.499Z"
     },
     {
       "name": "supply-chain-integrity",
@@ -956,7 +956,7 @@
         "OpenSSF model-signing — emerging Sigstore-based signing standard for ML model weights; track for production adoption"
       ],
       "signature": "pcLrM98A3vUSZRjwNAk0aZ9umvOwB41XCLLsCOy/IebB2F/06oIrGUKkMHtHwm4pTVPShMMcKdZQQ3jz30FnCg==",
-      "signed_at": "2026-05-21T22:13:20.531Z"
+      "signed_at": "2026-05-21T23:11:05.499Z"
     },
     {
       "name": "defensive-countermeasure-mapping",
@@ -1013,7 +1013,7 @@
       ],
       "last_threat_review": "2026-05-11",
       "signature": "gqF8eU3VBrZhO2WnlcqKa7wm1d2mmWtvpbmx0kNCgHojNV+qEt+Ij84RO6bZvaUqhfYPWizWL79Fa4DL0curAQ==",
-      "signed_at": "2026-05-21T22:13:20.531Z"
+      "signed_at": "2026-05-21T23:11:05.499Z"
     },
     {
       "name": "identity-assurance",
@@ -1080,7 +1080,7 @@
       "d3fend_refs": [],
       "last_threat_review": "2026-05-11",
       "signature": "Wv5hGMeHjlaQK1zwicVCA7AvdKgJBgvcjdpGM9Ywahh9tagAKhbkOjybowDQZzu7OZ3bDkbh6pBYc1Sdwr6NAA==",
-      "signed_at": "2026-05-21T22:13:20.532Z"
+      "signed_at": "2026-05-21T23:11:05.500Z"
     },
     {
       "name": "ot-ics-security",
@@ -1136,7 +1136,7 @@
       "d3fend_refs": [],
       "last_threat_review": "2026-05-11",
       "signature": "8t5qKHd3yWi57dvG36YQkLN/X9bQWqtEiYjay4IfSmqhJpM/xXPaQVKNGz3wscrO8OLKUZ0OaX7Mj5kzpgBKBQ==",
-      "signed_at": "2026-05-21T22:13:20.532Z"
+      "signed_at": "2026-05-21T23:11:05.500Z"
     },
     {
       "name": "coordinated-vuln-disclosure",
@@ -1188,7 +1188,7 @@
         "NYDFS 23 NYCRR 500 amendments potentially adding explicit CVD program requirements"
       ],
       "signature": "GDGt4UPqBa04PjlpSmpyihGzd3OgfBN7jaAK5tfwp+LRSs3ygKOdbeivUCCHNagTY1hE6hG2Ou40ADfBFuXeAg==",
-      "signed_at": "2026-05-21T22:13:20.532Z"
+      "signed_at": "2026-05-21T23:11:05.500Z"
     },
     {
       "name": "threat-modeling-methodology",
@@ -1238,7 +1238,7 @@
         "PASTA v2 updates incorporating AI/ML application threats"
       ],
       "signature": "rFBpOQEJUPpl+v88Lw/WqVJRhTl80vy0VbPAbzQj3Q0suJRRrJg368I9uKu5LXIBKFDvKxnGIcIzbGg9NUtaCA==",
-      "signed_at": "2026-05-21T22:13:20.533Z"
+      "signed_at": "2026-05-21T23:11:05.501Z"
     },
     {
       "name": "webapp-security",
@@ -1312,7 +1312,7 @@
       "d3fend_refs": [],
       "last_threat_review": "2026-05-11",
       "signature": "ux85YI4t2mVHOyt744Yin1HHy+z11JIFygjKfFfQOBBl5QVV3A267jeIy7utix85irMcpZm/T3yx/ooqiK2tBA==",
-      "signed_at": "2026-05-21T22:13:20.533Z"
+      "signed_at": "2026-05-21T23:11:05.501Z"
     },
     {
       "name": "ai-risk-management",
@@ -1362,7 +1362,7 @@
       "d3fend_refs": [],
       "last_threat_review": "2026-05-11",
       "signature": "IIXnkZ5ZNqFwOto5KfytADTLLZLoyXNZACD1ORZ40P1HUAQxe6u2uyXFzzsfuob4Uy06jNkRGr2FFgCphUH1Cw==",
-      "signed_at": "2026-05-21T22:13:20.533Z"
+      "signed_at": "2026-05-21T23:11:05.501Z"
     },
     {
       "name": "sector-healthcare",
@@ -1422,7 +1422,7 @@
       "d3fend_refs": [],
       "last_threat_review": "2026-05-11",
       "signature": "AhF9KF8ZBlDteciV+F8IBSmFVYCvQOn44GmD4rZjgLoPxfIv/QE1/vSkK32zyqDKtHWkLSXExbkkPkxA/V6dDw==",
-      "signed_at": "2026-05-21T22:13:20.534Z"
+      "signed_at": "2026-05-21T23:11:05.502Z"
     },
     {
       "name": "sector-financial",
@@ -1503,7 +1503,7 @@
         "TIBER-EU framework v2.0 alignment with DORA TLPT RTS (JC 2024/40); cross-recognition with CBEST and iCAST"
       ],
       "signature": "HQgZvb4ReziEz5rNFr8i/O8/rJEZR+iHRROT7m/D2QUqhrcNISPkYXENsUZlG8xapzy/Ik92ehkseyj4hdmhCQ==",
-      "signed_at": "2026-05-21T22:13:20.534Z"
+      "signed_at": "2026-05-21T23:11:05.502Z"
     },
     {
       "name": "sector-federal-government",
@@ -1572,7 +1572,7 @@
         "Australia PSPF 2024 revision and ISM quarterly updates — track for Essential Eight Maturity Level requirements for federal entities"
       ],
       "signature": "linxmsXZiOYtcs71sSWgGCrvb8xQfmxmtTY5PRvZJ0/8FgJulo0tQtejzexYG775s7XhjAmGsDP238BQTQ8ADA==",
-      "signed_at": "2026-05-21T22:13:20.535Z"
+      "signed_at": "2026-05-21T23:11:05.503Z"
     },
     {
       "name": "sector-energy",
@@ -1637,7 +1637,7 @@
         "ICS-CERT advisory feed (https://www.cisa.gov/news-events/cybersecurity-advisories/ics-advisories) for vendor CVEs in Siemens, Rockwell, Schneider Electric, ABB, GE Vernova, Hitachi Energy, AVEVA / OSIsoft PI"
       ],
       "signature": "JjBfc0ovta560Clk0x3QGRM5osFJDwcvpy3rT7QEGdCIL827jzE8QCow1C8deXq+4JhY2sA/d7/8IsxikdlkCg==",
-      "signed_at": "2026-05-21T22:13:20.535Z"
+      "signed_at": "2026-05-21T23:11:05.503Z"
     },
     {
       "name": "sector-telecom",
@@ -1723,7 +1723,7 @@
         "O-RAN SFG / WG11 security specifications"
       ],
       "signature": "JWVxKFoKrbX4d+Tko1d4OBdwyg25MfFFKn4CT6E/CzH+YwnU3T6Y76uBQIKg3+gIGTvPduqyvQwQQ5FxKDuPBw==",
-      "signed_at": "2026-05-21T22:13:20.535Z"
+      "signed_at": "2026-05-21T23:11:05.503Z"
     },
     {
       "name": "api-security",
@@ -1792,7 +1792,7 @@
       "d3fend_refs": [],
       "last_threat_review": "2026-05-11",
       "signature": "BmCRCestWqr55+fCynEhtAl5NWLT+xLTkpwS0Icp3SaoZOw/ce3Y6TtqjHRSKn4CBJq7YDiLRWxmhO3MStvOAA==",
-      "signed_at": "2026-05-21T22:13:20.536Z"
+      "signed_at": "2026-05-21T23:11:05.503Z"
     },
     {
       "name": "cloud-security",
@@ -1873,7 +1873,7 @@
         "CISA KEV additions for cloud-control-plane CVEs (IMDSv1 abuses, federation token mishandling, cross-tenant boundary failures); CISA Cybersecurity Advisories for cross-cloud advisories"
       ],
       "signature": "/DV3pmZwrRySrk1OCbyI+0BQESacjupJfUX3eC2NGtXuYOBro0vndIP+z27heFxumnjU3a9sfla7/U9X+pqnDw==",
-      "signed_at": "2026-05-21T22:13:20.536Z"
+      "signed_at": "2026-05-21T23:11:05.504Z"
     },
     {
       "name": "container-runtime-security",
@@ -1935,7 +1935,7 @@
       "d3fend_refs": [],
       "last_threat_review": "2026-05-11",
       "signature": "E2UGSf9ATyYgzBr8uM/0ubOUmDqo1jVA7f9mVxv6LHfWGCNuQNXDyuNou9VAmUCeeXEeUYIi3AFjXkJqpOkxDA==",
-      "signed_at": "2026-05-21T22:13:20.536Z"
+      "signed_at": "2026-05-21T23:11:05.504Z"
     },
     {
       "name": "mlops-security",
@@ -2006,7 +2006,7 @@
         "MITRE ATLAS v5.6.0 (released February 2026) shipped the AML.T0010 sub-technique expansion this forecast tracked plus new techniques (\"Publish Poisoned AI Agent Tool\", \"Escape to Host\"); inventory now 16 tactics, 84 techniques, 56 sub-techniques. Forward watch: ATLAS v5.5 / v6.0 — track next-cadence updates to agentic-AI TTPs and MLOps-pipeline-specific techniques"
       ],
       "signature": "BGNE6ZQWBA1LmsUFe8tU0L67iGDSrFqiuqaZD2f1KqfcyqqzQfMs9PWNHFzxxaJmXeKlm87eU8lgELF0bX+RBA==",
-      "signed_at": "2026-05-21T22:13:20.537Z"
+      "signed_at": "2026-05-21T23:11:05.504Z"
     },
     {
       "name": "incident-response-playbook",
@@ -2068,7 +2068,7 @@
         "NYDFS 23 NYCRR 500.17 amendments tightening ransom-payment 24h disclosure operationalization"
       ],
       "signature": "FkZQerh3VHVJAwIcCktDyMRh5KE2+Em/i0ek8zEz7JG/PXtQx8ujHWTh3VjZbOLhPNtdB2qxgXOIAYIofaVOAQ==",
-      "signed_at": "2026-05-21T22:13:20.537Z"
+      "signed_at": "2026-05-21T23:11:05.505Z"
     },
     {
       "name": "ransomware-response",
@@ -2148,7 +2148,7 @@
       ],
       "last_threat_review": "2026-05-15",
       "signature": "n3UToNuN3A1HgLvcuqmIx8vrZY71+r/79waK92jG+rSX4uYOzkmxMUpROrE5K9bDwMezNBHdjWv8Uul6zugyDQ==",
-      "signed_at": "2026-05-21T22:13:20.538Z"
+      "signed_at": "2026-05-21T23:11:05.505Z"
     },
     {
       "name": "email-security-anti-phishing",
@@ -2201,7 +2201,7 @@
       "d3fend_refs": [],
       "last_threat_review": "2026-05-11",
       "signature": "rK+WnuS+9tqEABmwc0jO/PEmxcLjG1/tmUb897HsClQeKzf+TQOlwBE+OsbtuKxpjYNwur62Xxs3TxObkwm8Cw==",
-      "signed_at": "2026-05-21T22:13:20.538Z"
+      "signed_at": "2026-05-21T23:11:05.505Z"
     },
     {
       "name": "age-gates-child-safety",
@@ -2269,7 +2269,7 @@
         "US state adult-site age-verification laws — 19+ states by mid-2026 (TX HB 18 upheld by SCOTUS June 2025 in Free Speech Coalition v. Paxton); track ongoing challenges in remaining states"
       ],
       "signature": "+OO0RhQ303RJV7kaH38IuZpLeQbapep6Ds4Re/WEZu0FHBwKSlwvF7jbtP7KQ57xldJYn/xZm2jaszyOacMfDg==",
-      "signed_at": "2026-05-21T22:13:20.538Z"
+      "signed_at": "2026-05-21T23:11:05.506Z"
     },
     {
       "name": "cloud-iam-incident",
@@ -2349,7 +2349,7 @@
       ],
       "last_threat_review": "2026-05-15",
       "signature": "e/kij7GtKaytROyIj7V5RH+FC9WtmVFzrmG2kIlNDNn29ep/CRNlIQKwXLpzo/81AIf634pmdr1qy/+vwIuUDA==",
-      "signed_at": "2026-05-21T22:13:20.539Z"
+      "signed_at": "2026-05-21T23:11:05.506Z"
     },
     {
       "name": "idp-incident-response",
@@ -2430,11 +2430,11 @@
       ],
       "last_threat_review": "2026-05-15",
       "signature": "ew9Kglc9fAZzbn0ZIfGP7WSK/j4eV2VhSvpy+s5bEfNEVYIMa2kZjnGBapgUsyGDLes9H9K2ovjQyX17+GKiBw==",
-      "signed_at": "2026-05-21T22:13:20.539Z"
+      "signed_at": "2026-05-21T23:11:05.507Z"
     }
   ],
   "manifest_signature": {
     "algorithm": "Ed25519",
-    "signature_base64": "XPyZYuvZ6ZadQHOUo2H104at1NSCz08u3NQM3ku7dyUQb4RVBoV5o0P0yGBZTTJz3MNBru7LoT1hieQDsaozCg=="
+    "signature_base64": "AdXaVihJbe3X7lti1RIiG9eN9JsaM91s2Roe1ReUvJDuaNC30GvX9jdtMTT2rsR+KLHd5Jb3uWsRgB23ykYEAA=="
   }
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@blamejs/exceptd-skills",
-  "version": "0.13.52",
+  "version": "0.13.53",
   "description": "AI security skills grounded in mid-2026 threat reality, not stale framework documentation. 42 skills, 10 catalogs (312 CVEs / 171 CWEs / 805 ATT&CK + ICS / 170 ATLAS / 468 D3FEND / 7476 RFCs), 34 jurisdictions, 10-class catalog gap detector + budget gate, real XML parser + canonical-form diff + content-pattern regression detection, Ed25519-signed.",
   "keywords": [
     "ai-security",

package/sbom.cdx.json

@@ -1,22 +1,22 @@
 {
   "bomFormat": "CycloneDX",
   "specVersion": "1.6",
-  "serialNumber": "urn:uuid:d604c466-a7a8-4410-b40c-65d2cfd134cc",
+  "serialNumber": "urn:uuid:65dee8f3-fd04-4d6b-8d77-673f2df0c55f",
   "version": 1,
   "metadata": {
-    "timestamp": "2139-10-14T07:04:06.000Z",
+    "timestamp": "2080-02-28T08:04:03.000Z",
     "tools": [
       {
         "vendor": "blamejs",
         "name": "scripts/refresh-sbom.js",
-        "version": "0.13.52"
+        "version": "0.13.53"
       }
     ],
     "component": {
-      "bom-ref": "pkg:npm/@blamejs/exceptd-skills@0.13.52",
+      "bom-ref": "pkg:npm/@blamejs/exceptd-skills@0.13.53",
       "type": "application",
       "name": "@blamejs/exceptd-skills",
-      "version": "0.13.52",
+      "version": "0.13.53",
       "description": "AI security skills grounded in mid-2026 threat reality, not stale framework documentation. 42 skills, 10 catalogs (312 CVEs / 171 CWEs / 805 ATT&CK + ICS / 170 ATLAS / 468 D3FEND / 7476 RFCs), 34 jurisdictions, 10-class catalog gap detector + budget gate, real XML parser + canonical-form diff + content-pattern regression detection, Ed25519-signed.",
       "licenses": [
         {
@@ -25,17 +25,17 @@
           }
         }
       ],
-      "purl": "pkg:npm/%40blamejs/exceptd-skills@0.13.52",
+      "purl": "pkg:npm/%40blamejs/exceptd-skills@0.13.53",
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "ed0fc0c7c5216c0c146e8b75810099742acb0f1401b76ba84f7210b4ee284d45"
+          "content": "cf2301346da5c3f7a089b5cb53e2f333865382ad9f00f5d09cff65e01d9d19a1"
         }
       ],
       "externalReferences": [
         {
           "type": "distribution",
-          "url": "https://www.npmjs.com/package/@blamejs/exceptd-skills/v/0.13.52"
+          "url": "https://www.npmjs.com/package/@blamejs/exceptd-skills/v/0.13.53"
         },
         {
           "type": "vcs",
@@ -116,11 +116,11 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "3418688a9ac77cd6c23ccde3ded29a9486815b43040c16128fb6259706fdd937"
+          "content": "ca93a16f6fd19f0f6112334b9df390d0e1b20052e4b224faf52ac795b92d419a"
         },
         {
           "alg": "SHA3-512",
-          "content": "d611f2d5177e607482fd5cc9c07a5d4bb52c12457bd3a978730de58922bce4150fb0c37d10422ff2f99a355a99c37e4f764745d8ffd5b09e7720d98d428e904c"
+          "content": "8a3de54a276b1a69337ffbd26f9a83be0fa8d57fe34cf4636902c358f71303b9cc196194c73144756dabb381380df2c3d15c6066d11bc6d3ed54e8015e0f23a8"
         }
       ]
     },
@@ -176,11 +176,11 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "388583ac16dd05926491495aec3f95348894eda7910642563356780d6f46ccb4"
+          "content": "dec21940a1c2ceb4f43ce70a0a150b9b9e00581d43c9fa23d2a03f5f4d018f7d"
         },
         {
           "alg": "SHA3-512",
-          "content": "b3172f5647002df6d9924a28b03355f3d028f74a93646cc118a9b3d6133e64c2b0c79bd5cd86269011c872f9774ca008cbd35eb073de187fde9382dcd07cd668"
+          "content": "0bd13c9424ededac057a1ee4bc2606e80d46eeeffea3ca3c1971dbac555b03dcf70bc0d44df914028a4abbd3a5ffafc0a3939d7a6cd6950cee40a56a5c99695b"
         }
       ]
     },
@@ -281,11 +281,11 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "ad2a1e3dc6b41ecf201be7c560773b6566850a2f7a122a460cce60ea8da8f8eb"
+          "content": "c92c84e424929844ec9adbead08eb5e247cb6138a89860dc36b66380587e378e"
         },
         {
           "alg": "SHA3-512",
-          "content": "62df00811005e77315cd850ce8486bff63b57964279d4fa11696f354abb45c668d8258e0073278ef439dc05f5930558002f283f79137c52323b7837d9fdd2715"
+          "content": "030e671e1e8663bc1e64e0f0d350039bec4ec0f0322b80ee38b17c5f354c493442d2a10ea1874dcf773987a917f9ecf2020d1422399f466800d3d15244713521"
         }
       ]
     },
@@ -911,11 +911,11 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "2a7cea0a16f1b6b3c6594d4b6f4ed4fafdb1dcbd1c9a24f66030fe066b7c2515"
+          "content": "a274c03349d64dd08d9e8b5451cbe03e28ca6ab83f52b1bab7ab131f889dd4d2"
         },
         {
           "alg": "SHA3-512",
-          "content": "e61f1d2a6b25c7997ab2fd9a20b8b32a1840e27ae42e5e0b1a5ac3aa51c2ac06fa3c643b610911958c165bfea7e5d8d30d95930167ddc3c8305f2904f8b69041"
+          "content": "b92163edbb677305ed8f870deb4e69b8ec9a7f51caff692355ec612ba497e0bb3a739b5cd1d0663f02302fd9625306750dd8fe22fd999c44775571989c496af8"
         }
       ]
     },
@@ -1661,11 +1661,11 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "5669cbc5596276b0e2679e97e59a6066db2d7492b6e4d0c97aa13715015f41e9"
+          "content": "9eb25cdba45631f79eaf5ee628532b284912a2318d85c7a97d2acbaf2db31e08"
         },
         {
           "alg": "SHA3-512",
-          "content": "706418ddb58d05f436663742e84871113435a1d3f776489c7477189d7294279723eeab2b308582369419e7f110960a0636ecaf9cf73ead1bbea7f8ec66746a42"
+          "content": "4cf5527f79a6d936b5edc31e3abfa40d53840fe2aa8aa14142d76d2cee5326d95fd2eab8a7dfd1206eb9a12a1ad1a17a886430182b40467617956ab52c38ad49"
         }
       ]
     },