@blamejs/exceptd-skills 0.13.8 → 0.13.10

package/AGENTS.md

@@ -156,7 +156,7 @@ Cross-cutting playbook `framework` is the natural correlation layer — many pla
 
 | Verb | What it does |
 |---|---|
-| `exceptd brief --all` | Grouped-by-scope summary of all 20 playbooks. `--scope <type>` filters. `--directives` expands directive IDs/titles per playbook. `--flat` for non-grouped. `exceptd plan` was removed in v0.13.0; invoking it returns a structured `ok:false` refusal pointing at this command. |
+| `exceptd brief --all` | Grouped-by-scope summary of all 23 playbooks. `--scope <type>` filters. `--directives` expands directive IDs/titles per playbook. `--flat` for non-grouped. `exceptd plan` was removed in v0.13.0; invoking it returns a structured `ok:false` refusal pointing at this command. |
 | `exceptd brief <pb>` | Phase 2 threat-context briefing — threat context, RWEP thresholds, skill chain, token budget, jurisdiction obligations. |
 | `exceptd run <pb> --evidence <file>` | Phases 5-7 (analyze + validate + close) from agent evidence. Auto-detect cwd when no playbook positional. `--vex <file>` drops CycloneDX/OpenVEX `not_affected` CVEs. `--diff-from-latest` for drift mode. `--force-stale` overrides currency hard-block. |
 | `exceptd ai-run <pb>` | Streaming variant of `run` for AI agents; emits phase-by-phase NDJSON. |

package/CHANGELOG.md

@@ -1,5 +1,29 @@
 # Changelog
 
+## 0.13.10 — 2026-05-18
+
+Documentation currency — `README.md` + `AGENTS.md` now reflect the 23-playbook catalog instead of the pre-v0.13.5 20-playbook claim, and a regression pin prevents the drift class from recurring.
+
+### Bugs
+
+**`README.md` + `AGENTS.md` no longer advertise 20 playbooks.** v0.13.5 added `post-quantum-migration`, `ai-discovered-cve-triage`, and `supply-chain-recovery`, bringing the canonical set to 23 — but two long-form prose lines still claimed "20 investigation playbooks" / "summary of all 20 playbooks". Both updated, and the new playbook names appear in the `README` synopsis list.
+
+### Internal
+
+- New regression test `tests/doc-playbook-count-currency.test.js` greps `README.md` + `AGENTS.md` for `<N>\s*(investigation\s+)?playbooks?` and asserts every claim (above the noise floor of N≥15) matches the live `data/playbooks/*.json` count. Adding a new playbook without bumping the doc claim now fires in CI.
+
+## 0.13.9 — 2026-05-18
+
+Predeploy gate now refuses SBOM hash drift before a release branch can reach CI.
+
+### Features
+
+**`scripts/check-sbom-currency.js` verifies per-file SHA-256 integrity.** The prior gate only checked counts (catalogs / skills) and per-skill versions, so a CycloneDX `components[]` entry whose `hashes[]` SHA-256 had drifted from the live file bytes passed silently — downstream consumers running per-file integrity verification would flag the package as tampered. The check now walks every `file:<path>` component in `sbom.cdx.json`, recomputes the live SHA-256, and refuses on mismatch with a remediation pointer naming the canonical re-sign-then-refresh-sbom sequence.
+
+The class of bug this catches: SBOM generated before the final `sign-all` pass. `manifest.json` gets re-signed at the end of the release sequence; if `sbom.cdx.json` was emitted earlier in the sequence, its recorded manifest.json hash drifts from the signed bytes. Predeploy now reports `... N file-hash entries verified` and refuses any drift before the commit lands.
+
+Three new tests in `tests/check-sbom-currency-file-hashes.test.js` pin the contract: baseline tree passes, staged drift on `manifest.json` triggers the exact error path including the canonical remediation phrasing, and every `file:` component must carry a SHA-256 hash (no MD5 / SHA-1 silently accepted).
+
 ## 0.13.8 — 2026-05-18
 
 Playbook schema extension to back the v0.13.5 CI-runner-context indicator.

package/README.md

@@ -30,7 +30,7 @@ This platform surfaces what is actually happening right now. Every skill explici
 
 ## Status
 
-Pre-1.0. Latest release lives on [GitHub Releases](https://github.com/blamejs/exceptd-skills/releases) and on npm as [`@blamejs/exceptd-skills`](https://www.npmjs.com/package/@blamejs/exceptd-skills) with signed npm provenance attestation and Ed25519-signed skill bodies. The package ships 42 skills across kernel LPE, MCP supply chain, AI-as-C2, prompt injection, post-quantum crypto, SBOM integrity, identity-incident response, and 35 other AI/security domains, plus 10 intelligence catalogs (CVE / ATLAS / ATT&CK / CWE / D3FEND / DLP / RFC / framework gaps / global frameworks / zero-day lessons) covering 35 jurisdictions, 20 investigation playbooks (kernel, MCP, AI-API, framework, SBOM, runtime, hardening, secrets, cred-stores, containers, crypto, plus `webhook-callback-abuse`, `cicd-pipeline-compromise`, `identity-sso-compromise`, `llm-tool-use-exfil`, and more), a CLI for discovery and seven-phase investigation runs (`govern → direct → look → detect → analyze → validate → close`), and a nightly auto-refresh job that pulls KEV / NVD / EPSS / GHSA / OSV / IETF deltas plus primary-source advisories (Qualys TRU, Red Hat RHSA, Ubuntu USN, ZDI, kernel.org, oss-security, JFrog, CISA) into auto-PRs for editorial review.
+Pre-1.0. Latest release lives on [GitHub Releases](https://github.com/blamejs/exceptd-skills/releases) and on npm as [`@blamejs/exceptd-skills`](https://www.npmjs.com/package/@blamejs/exceptd-skills) with signed npm provenance attestation and Ed25519-signed skill bodies. The package ships 42 skills across kernel LPE, MCP supply chain, AI-as-C2, prompt injection, post-quantum crypto, SBOM integrity, identity-incident response, and 35 other AI/security domains, plus 10 intelligence catalogs (CVE / ATLAS / ATT&CK / CWE / D3FEND / DLP / RFC / framework gaps / global frameworks / zero-day lessons) covering 35 jurisdictions, 23 investigation playbooks (kernel, MCP, AI-API, framework, SBOM, runtime, hardening, secrets, cred-stores, containers, crypto, plus `webhook-callback-abuse`, `cicd-pipeline-compromise`, `identity-sso-compromise`, `llm-tool-use-exfil`, `post-quantum-migration`, `ai-discovered-cve-triage`, `supply-chain-recovery`, and more), a CLI for discovery and seven-phase investigation runs (`govern → direct → look → detect → analyze → validate → close`), and a nightly auto-refresh job that pulls KEV / NVD / EPSS / GHSA / OSV / IETF deltas plus primary-source advisories (Qualys TRU, Red Hat RHSA, Ubuntu USN, ZDI, kernel.org, oss-security, JFrog, CISA) into auto-PRs for editorial review.
 
 ---
 

package/data/_indexes/_meta.json

@@ -1,10 +1,10 @@
 {
   "schema_version": "1.1.0",
-  "generated_at": "2026-05-18T14:45:09.675Z",
+  "generated_at": "2026-05-18T16:40:14.544Z",
   "generator": "scripts/build-indexes.js",
   "source_count": 54,
   "source_hashes": {
-    "manifest.json": "f3406102b6e066b6921d190e4898a97381b87816b14e4e777c0592e7f33a7207",
+    "manifest.json": "f98a153b182a39ce3f03b183222452d75f345fcf74e7c98547a35f79f19aee8c",
     "data/atlas-ttps.json": "c2aee9c70ec24cf48f1ea4daf170aa6e7b93292888239c46a8ec9e522ee32119",
     "data/attack-techniques.json": "29cd5690040c7153dbf293b7e3a99b72fc897b0495478e369f7ce7004b8d64f4",
     "data/cve-catalog.json": "b3731361d298483648264215fd8dbfca36d0f4e2ead4aebf7c49718e12038e1f",

package/manifest.json

@@ -1,6 +1,6 @@
 {
   "name": "exceptd-security",
-  "version": "0.13.8",
+  "version": "0.13.10",
   "description": "AI security skills grounded in mid-2026 threat reality, not stale framework documentation",
   "homepage": "https://exceptd.com",
   "license": "Apache-2.0",
@@ -53,7 +53,7 @@
       ],
       "last_threat_review": "2026-05-01",
       "signature": "lXhZgoIrrVloO3XaTvo/43AxZn4mwErstd7DR0O/oVhD3AOGODM4HqrageYEou9WKOdMEGP5mJNTjJsXdP5NDA==",
-      "signed_at": "2026-05-18T14:41:45.485Z",
+      "signed_at": "2026-05-18T16:39:30.573Z",
       "cwe_refs": [
         "CWE-125",
         "CWE-362",
@@ -117,7 +117,7 @@
       ],
       "last_threat_review": "2026-05-01",
       "signature": "OI+pADcTrRHZB8UTq9G89cNPvvYf1A+4rR+oJGTCVGXWoxPY9+bKW7FqCPQBb+rnxde/gwBX0+vxN/Nn7XwgDA==",
-      "signed_at": "2026-05-18T14:41:45.488Z",
+      "signed_at": "2026-05-18T16:39:30.575Z",
       "cwe_refs": [
         "CWE-1039",
         "CWE-1426",
@@ -180,7 +180,7 @@
       ],
       "last_threat_review": "2026-05-01",
       "signature": "fqnvFL75sJgJJV6LUt6qHld4PsMJiPB1r+M905mkr8mUkByE0pPZfK1voS/r/wh2O1+1j2zzo0OkAw0pCk37Aw==",
-      "signed_at": "2026-05-18T14:41:45.488Z",
+      "signed_at": "2026-05-18T16:39:30.576Z",
       "cwe_refs": [
         "CWE-22",
         "CWE-345",
@@ -226,7 +226,7 @@
       "framework_gaps": [],
       "last_threat_review": "2026-05-01",
       "signature": "g+vvEyHA4LllzMLuyY2Cc6h7hSWeQbfDqGx629Yb3/kQ8MsQW0moypnxUMA50KBetKMd0+WfnbC4H1DvxJtgAg==",
-      "signed_at": "2026-05-18T14:41:45.488Z"
+      "signed_at": "2026-05-18T16:39:30.576Z"
     },
     {
       "name": "compliance-theater",
@@ -257,7 +257,7 @@
       ],
       "last_threat_review": "2026-05-01",
       "signature": "N7vMeWMdMutAAZ49QoPW7lMA1WRjnTRezh9oLBUfAgetZBcHHd14Rg9uqWTkCjilXxhw/fyQrWPjraD2IRg4AQ==",
-      "signed_at": "2026-05-18T14:41:45.489Z"
+      "signed_at": "2026-05-18T16:39:30.576Z"
     },
     {
       "name": "exploit-scoring",
@@ -286,7 +286,7 @@
       ],
       "last_threat_review": "2026-05-01",
       "signature": "9DFiNgH4Nl21B90MjL5Z9eJ74Z8zR60n+EZ6RStCTe6YcLg7P5K8iiuQ4u6q0hxsVewKZmS60SqZL9UEpeGgCg==",
-      "signed_at": "2026-05-18T14:41:45.489Z"
+      "signed_at": "2026-05-18T16:39:30.577Z"
     },
     {
       "name": "rag-pipeline-security",
@@ -323,7 +323,7 @@
       ],
       "last_threat_review": "2026-05-01",
       "signature": "AijYcd8FuFEDdcx+mzIHVpQ0uh5LpYDZ0rIgbudM6WIvsSDRkBmE65gI8uKgHYdGTEAQGLkamkLaTtdwcx0YAQ==",
-      "signed_at": "2026-05-18T14:41:45.489Z",
+      "signed_at": "2026-05-18T16:39:30.577Z",
       "cwe_refs": [
         "CWE-1395",
         "CWE-1426"
@@ -380,7 +380,7 @@
       ],
       "last_threat_review": "2026-05-01",
       "signature": "ba7EtmQAML+H+wn7UyH7yGnK30gT79SlxwO+jKCaSBzctOZ/OVex3wFVz/Yi9kPPPJ6Z5EEhBl6rWJrCr4uOBg==",
-      "signed_at": "2026-05-18T14:41:45.490Z",
+      "signed_at": "2026-05-18T16:39:30.578Z",
       "d3fend_refs": [
         "D3-CA",
         "D3-CSPP",
@@ -415,7 +415,7 @@
       "framework_gaps": [],
       "last_threat_review": "2026-05-01",
       "signature": "V7v4r2RzeD7ICZUABLfSQTEmSQUlWegiXoo1iGvnrmQtw/nquZNRPTa3QsKQD1i7IxEg7NmJhCX6NLEz4eV0Dg==",
-      "signed_at": "2026-05-18T14:41:45.491Z",
+      "signed_at": "2026-05-18T16:39:30.578Z",
       "cwe_refs": [
         "CWE-1188"
       ]
@@ -443,7 +443,7 @@
       "framework_gaps": [],
       "last_threat_review": "2026-05-01",
       "signature": "xjtEOaQiBjq7XBD7nCpU59egkLNgBDwfvY7GMxEe+wOyUM4GBMHK2O3khanVEaCgWfu1NNoTMPsDCejJ+D64Ag==",
-      "signed_at": "2026-05-18T14:41:45.491Z"
+      "signed_at": "2026-05-18T16:39:30.578Z"
     },
     {
       "name": "global-grc",
@@ -475,7 +475,7 @@
       "framework_gaps": [],
       "last_threat_review": "2026-05-01",
       "signature": "oYsSk35N2Uzq7MRofACykylcVwkgPhI4luWZ14vmQT+gUKLyZiKVOUJbe1+7lGl6BYPRN0sUDQ0f7S5Eu5w2Ag==",
-      "signed_at": "2026-05-18T14:41:45.491Z"
+      "signed_at": "2026-05-18T16:39:30.579Z"
     },
     {
       "name": "zeroday-gap-learn",
@@ -502,7 +502,7 @@
       "framework_gaps": [],
       "last_threat_review": "2026-05-01",
       "signature": "01faIrHr8xeZU0USNoWiDQBUqu/yu7KHskZdi48q5eg811Tu6YwCopHezIoeuPabaH46M8Qve8ll/7qGpFGEBA==",
-      "signed_at": "2026-05-18T14:41:45.492Z"
+      "signed_at": "2026-05-18T16:39:30.579Z"
     },
     {
       "name": "pqc-first",
@@ -554,7 +554,7 @@
       ],
       "last_threat_review": "2026-05-01",
       "signature": "vhc3wuQEro/86s1ro2b/KakUXg8QVnySYTBqA7ebzv9oeR2HYO5bvGEJp3oOHWtL37JDqcCAHYadSN/qxIyCCA==",
-      "signed_at": "2026-05-18T14:41:45.492Z",
+      "signed_at": "2026-05-18T16:39:30.579Z",
       "cwe_refs": [
         "CWE-327"
       ],
@@ -601,7 +601,7 @@
       ],
       "last_threat_review": "2026-05-01",
       "signature": "8P1I6i7N0sFHloR/hY4NIWictk5Irrze4xPjVQEH5BtBrS2OCCq/YzCpUuS+XexhWiIpyLo2CA1ecbllnWlNBQ==",
-      "signed_at": "2026-05-18T14:41:45.492Z"
+      "signed_at": "2026-05-18T16:39:30.580Z"
     },
     {
       "name": "security-maturity-tiers",
@@ -638,7 +638,7 @@
       ],
       "last_threat_review": "2026-05-01",
       "signature": "SdTtvkaxdgcHkm8ph7YX+2VMihw2iBMy434JGf5TxCFQq1AfNsQcowK+7FPDquEM47a1KTvS3ytxaJxpHuOqDw==",
-      "signed_at": "2026-05-18T14:41:45.493Z",
+      "signed_at": "2026-05-18T16:39:30.580Z",
       "cwe_refs": [
         "CWE-1188"
       ]
@@ -673,7 +673,7 @@
       "framework_gaps": [],
       "last_threat_review": "2026-05-11",
       "signature": "WAu5fRirzSOcnnZsTx2d/JJZwa/LPpXCi+31qATTGLmoNuhyy81k3ooPe9kCM3E0CLMtvTePg9DagYqBninZDQ==",
-      "signed_at": "2026-05-18T14:41:45.493Z"
+      "signed_at": "2026-05-18T16:39:30.580Z"
     },
     {
       "name": "attack-surface-pentest",
@@ -744,7 +744,7 @@
         "PTES revision incorporating AI-surface enumeration"
       ],
       "signature": "pKVlOkHybXjj5Llpm4VQtz+b/qTxE2vWsoDx/aie5z0rA2qWMmNNiWZl+b8/oO4Ghu2TIOdy/+cX4YlTrIg7DA==",
-      "signed_at": "2026-05-18T14:41:45.493Z"
+      "signed_at": "2026-05-18T16:39:30.581Z"
     },
     {
       "name": "fuzz-testing-strategy",
@@ -804,7 +804,7 @@
         "OSS-Fuzz-Gen / AI-assisted harness generation becoming the default expectation for OSS maintainers"
       ],
       "signature": "uf8JFFve9Q7QXdyO8yc11SBFndVGEKQkMKTSZEJSCzj33HRvMGhV184JSpHUy5Vce284HUcVC1R73aOjbc0iBg==",
-      "signed_at": "2026-05-18T14:41:45.494Z"
+      "signed_at": "2026-05-18T16:39:30.581Z"
     },
     {
       "name": "dlp-gap-analysis",
@@ -879,7 +879,7 @@
         "Quebec Law 25, India DPDPA, KSA PDPL enforcement actions naming AI-tool prompt data as in-scope personal information"
       ],
       "signature": "y6N/9z4AwGPfhcNWVk1zEVSMBpn+3YTmIaIXAin4Q9yREAupKDey3ch9s+Y2LjFSS/SLLzh4H/Y8rDs2bKxFCg==",
-      "signed_at": "2026-05-18T14:41:45.494Z"
+      "signed_at": "2026-05-18T16:39:30.581Z"
     },
     {
       "name": "supply-chain-integrity",
@@ -956,7 +956,7 @@
         "OpenSSF model-signing — emerging Sigstore-based signing standard for ML model weights; track for production adoption"
       ],
       "signature": "c3OewLIMenKMWba5eKOwfa1OD8pp6tU9o+xFC/KbIcIPUhtZAO+R5/uoOhZXiwhjmg2GzHU2f8ROpBP3p0dxBA==",
-      "signed_at": "2026-05-18T14:41:45.494Z"
+      "signed_at": "2026-05-18T16:39:30.581Z"
     },
     {
       "name": "defensive-countermeasure-mapping",
@@ -1013,7 +1013,7 @@
       ],
       "last_threat_review": "2026-05-11",
       "signature": "gqF8eU3VBrZhO2WnlcqKa7wm1d2mmWtvpbmx0kNCgHojNV+qEt+Ij84RO6bZvaUqhfYPWizWL79Fa4DL0curAQ==",
-      "signed_at": "2026-05-18T14:41:45.495Z"
+      "signed_at": "2026-05-18T16:39:30.582Z"
     },
     {
       "name": "identity-assurance",
@@ -1080,7 +1080,7 @@
       "d3fend_refs": [],
       "last_threat_review": "2026-05-11",
       "signature": "Wv5hGMeHjlaQK1zwicVCA7AvdKgJBgvcjdpGM9Ywahh9tagAKhbkOjybowDQZzu7OZ3bDkbh6pBYc1Sdwr6NAA==",
-      "signed_at": "2026-05-18T14:41:45.495Z"
+      "signed_at": "2026-05-18T16:39:30.582Z"
     },
     {
       "name": "ot-ics-security",
@@ -1136,7 +1136,7 @@
       "d3fend_refs": [],
       "last_threat_review": "2026-05-11",
       "signature": "2Z8iAEf+dzdBpE6InLL6hHT7aGUNHJOlgyddDsdNb+xxjC2TJz+sXIRsHHhpaPuFMVf38VJSD5SqL1cwB+5lDw==",
-      "signed_at": "2026-05-18T14:41:45.495Z"
+      "signed_at": "2026-05-18T16:39:30.582Z"
     },
     {
       "name": "coordinated-vuln-disclosure",
@@ -1188,7 +1188,7 @@
         "NYDFS 23 NYCRR 500 amendments potentially adding explicit CVD program requirements"
       ],
       "signature": "TITt0dI7T6nifFEdiOaGSDzIdrpjBCtuwyNcQdZm4P/nm1yLPI2+7T3SXWNeCTfZuMGiBBhuGETuawH21lBBBA==",
-      "signed_at": "2026-05-18T14:41:45.496Z"
+      "signed_at": "2026-05-18T16:39:30.583Z"
     },
     {
       "name": "threat-modeling-methodology",
@@ -1238,7 +1238,7 @@
         "PASTA v2 updates incorporating AI/ML application threats"
       ],
       "signature": "0c5JzFhjzSU+Em8pWkez62TtAs2ePLnY0Na/dz9CxkU5A7U0s4B7bynpXuz8DxsQZd75/o4BkaYQegp7d/ktBw==",
-      "signed_at": "2026-05-18T14:41:45.496Z"
+      "signed_at": "2026-05-18T16:39:30.583Z"
     },
     {
       "name": "webapp-security",
@@ -1312,7 +1312,7 @@
       "d3fend_refs": [],
       "last_threat_review": "2026-05-11",
       "signature": "vIm/lDjC/bx7tHXWWEK2foOmiqdr7UuUuWPo75h6yV9ZteEF6kzNpWPbQ1KRThUm+2/XOBT+iwJ5Ecf2WDpDAQ==",
-      "signed_at": "2026-05-18T14:41:45.496Z"
+      "signed_at": "2026-05-18T16:39:30.583Z"
     },
     {
       "name": "ai-risk-management",
@@ -1362,7 +1362,7 @@
       "d3fend_refs": [],
       "last_threat_review": "2026-05-11",
       "signature": "IIXnkZ5ZNqFwOto5KfytADTLLZLoyXNZACD1ORZ40P1HUAQxe6u2uyXFzzsfuob4Uy06jNkRGr2FFgCphUH1Cw==",
-      "signed_at": "2026-05-18T14:41:45.497Z"
+      "signed_at": "2026-05-18T16:39:30.584Z"
     },
     {
       "name": "sector-healthcare",
@@ -1422,7 +1422,7 @@
       "d3fend_refs": [],
       "last_threat_review": "2026-05-11",
       "signature": "2JPsumXuTOrUhEGcfb03Q69zcW1hw+MTlNoycZ7RSNCHDw7jKaDlEfYmg0Px/aJp2hIt9qDGFq+cpYdfL+tfAQ==",
-      "signed_at": "2026-05-18T14:41:45.497Z"
+      "signed_at": "2026-05-18T16:39:30.584Z"
     },
     {
       "name": "sector-financial",
@@ -1503,7 +1503,7 @@
         "TIBER-EU framework v2.0 alignment with DORA TLPT RTS (JC 2024/40); cross-recognition with CBEST and iCAST"
       ],
       "signature": "xz0p47mECulSsdRdioeqi6K7KEnyXd+SWNtFra8JQh7g88CV9ycQeSPTTjiNpWaPreDAmYhRM83jupC7EEdUAg==",
-      "signed_at": "2026-05-18T14:41:45.497Z"
+      "signed_at": "2026-05-18T16:39:30.584Z"
     },
     {
       "name": "sector-federal-government",
@@ -1572,7 +1572,7 @@
         "Australia PSPF 2024 revision and ISM quarterly updates — track for Essential Eight Maturity Level requirements for federal entities"
       ],
       "signature": "PebiIg9j8Lm8yF8wIH2w7Pj75B5NaqQYcRZJ16RtKHC37tEG6THbo714JOaek45ifTMBhzNPwZ6Cy32ae4VdAQ==",
-      "signed_at": "2026-05-18T14:41:45.498Z"
+      "signed_at": "2026-05-18T16:39:30.585Z"
     },
     {
       "name": "sector-energy",
@@ -1637,7 +1637,7 @@
         "ICS-CERT advisory feed (https://www.cisa.gov/news-events/cybersecurity-advisories/ics-advisories) for vendor CVEs in Siemens, Rockwell, Schneider Electric, ABB, GE Vernova, Hitachi Energy, AVEVA / OSIsoft PI"
       ],
       "signature": "4KOVUlWWuhOWIV8ilCEOOuKV/s9CbIvNo4crB1oSf+G5KQ8KkUHxEn6KzEJX/NAwk5bOA1k58XykXvUun2YJDQ==",
-      "signed_at": "2026-05-18T14:41:45.498Z"
+      "signed_at": "2026-05-18T16:39:30.585Z"
     },
     {
       "name": "sector-telecom",
@@ -1723,7 +1723,7 @@
         "O-RAN SFG / WG11 security specifications"
       ],
       "signature": "JWVxKFoKrbX4d+Tko1d4OBdwyg25MfFFKn4CT6E/CzH+YwnU3T6Y76uBQIKg3+gIGTvPduqyvQwQQ5FxKDuPBw==",
-      "signed_at": "2026-05-18T14:41:45.499Z"
+      "signed_at": "2026-05-18T16:39:30.586Z"
     },
     {
       "name": "api-security",
@@ -1792,7 +1792,7 @@
       "d3fend_refs": [],
       "last_threat_review": "2026-05-11",
       "signature": "LgEIz6dmHxnlV3ay8BxqH7nXt+lWB8AsWcf5fPI40uuljs8+/dWNb4dCuB5s4SWRPX/64LoAXMOyzBvlt7QNCw==",
-      "signed_at": "2026-05-18T14:41:45.499Z"
+      "signed_at": "2026-05-18T16:39:30.586Z"
     },
     {
       "name": "cloud-security",
@@ -1873,7 +1873,7 @@
         "CISA KEV additions for cloud-control-plane CVEs (IMDSv1 abuses, federation token mishandling, cross-tenant boundary failures); CISA Cybersecurity Advisories for cross-cloud advisories"
       ],
       "signature": "fu8QqobbuyqDqmuo3iAigJmH2wUzS5AbMNNB7BrY8qAQ2KGHmrVIn4p53vUjF58bEzo6W2qAIldHla5p1sQCDw==",
-      "signed_at": "2026-05-18T14:41:45.499Z"
+      "signed_at": "2026-05-18T16:39:30.586Z"
     },
     {
       "name": "container-runtime-security",
@@ -1935,7 +1935,7 @@
       "d3fend_refs": [],
       "last_threat_review": "2026-05-11",
       "signature": "Z9KNlVRL9UWtObXDr3FmfdG+bBQGaUKEAv8WbZPRhwQUafx1mNp/h7CLsASeOQmGime00XN7fbO25oA18vYVAA==",
-      "signed_at": "2026-05-18T14:41:45.500Z"
+      "signed_at": "2026-05-18T16:39:30.587Z"
     },
     {
       "name": "mlops-security",
@@ -2006,7 +2006,7 @@
         "MITRE ATLAS v5.4.0 (released February 2026) shipped the AML.T0010 sub-technique expansion this forecast tracked plus new techniques (\"Publish Poisoned AI Agent Tool\", \"Escape to Host\"); inventory now 16 tactics, 84 techniques, 56 sub-techniques. Forward watch: ATLAS v5.5 / v6.0 — track next-cadence updates to agentic-AI TTPs and MLOps-pipeline-specific techniques"
       ],
       "signature": "2xuFDRLVjmzsbuipOc0HlUCjQ9B5lbB3L2fh5sPD9l0KqHmV1w1MuU9293ODxdTtqhSEJKkA5ghlbr8esFnlBw==",
-      "signed_at": "2026-05-18T14:41:45.500Z"
+      "signed_at": "2026-05-18T16:39:30.587Z"
     },
     {
       "name": "incident-response-playbook",
@@ -2068,7 +2068,7 @@
         "NYDFS 23 NYCRR 500.17 amendments tightening ransom-payment 24h disclosure operationalization"
       ],
       "signature": "6/9Ehyx49Rr/o5Tp9oQ3cfHa2WhKYtLXJp0akoDbRC1RSCxZVbkKaW7/5/IkdgCQMiJivI/Q0g0Bq/5q/UUZAA==",
-      "signed_at": "2026-05-18T14:41:45.501Z"
+      "signed_at": "2026-05-18T16:39:30.587Z"
     },
     {
       "name": "ransomware-response",
@@ -2148,7 +2148,7 @@
       ],
       "last_threat_review": "2026-05-15",
       "signature": "+5FiwJFRq08x2oXejTO1Nw6Cd+EzOcrwAG2xNrngJ8vHPDXqFgGAjTAJuXrNl7QblTfSLQ+xvoAziBly56/eDg==",
-      "signed_at": "2026-05-18T14:41:45.501Z"
+      "signed_at": "2026-05-18T16:39:30.588Z"
     },
     {
       "name": "email-security-anti-phishing",
@@ -2201,7 +2201,7 @@
       "d3fend_refs": [],
       "last_threat_review": "2026-05-11",
       "signature": "rK+WnuS+9tqEABmwc0jO/PEmxcLjG1/tmUb897HsClQeKzf+TQOlwBE+OsbtuKxpjYNwur62Xxs3TxObkwm8Cw==",
-      "signed_at": "2026-05-18T14:41:45.501Z"
+      "signed_at": "2026-05-18T16:39:30.588Z"
     },
     {
       "name": "age-gates-child-safety",
@@ -2269,7 +2269,7 @@
         "US state adult-site age-verification laws — 19+ states by mid-2026 (TX HB 18 upheld by SCOTUS June 2025 in Free Speech Coalition v. Paxton); track ongoing challenges in remaining states"
       ],
       "signature": "5BXLeR3lzvdRs2nSzN/rOE17ur2sMa44gQvY8+OWvazm5Vh6lNAaDDDoExB2/hlg6k7v1KIKwA1MPAKj6qB/CQ==",
-      "signed_at": "2026-05-18T14:41:45.502Z"
+      "signed_at": "2026-05-18T16:39:30.588Z"
     },
     {
       "name": "cloud-iam-incident",
@@ -2349,7 +2349,7 @@
       ],
       "last_threat_review": "2026-05-15",
       "signature": "e/kij7GtKaytROyIj7V5RH+FC9WtmVFzrmG2kIlNDNn29ep/CRNlIQKwXLpzo/81AIf634pmdr1qy/+vwIuUDA==",
-      "signed_at": "2026-05-18T14:41:45.502Z"
+      "signed_at": "2026-05-18T16:39:30.589Z"
     },
     {
       "name": "idp-incident-response",
@@ -2430,11 +2430,11 @@
       ],
       "last_threat_review": "2026-05-15",
       "signature": "ew9Kglc9fAZzbn0ZIfGP7WSK/j4eV2VhSvpy+s5bEfNEVYIMa2kZjnGBapgUsyGDLes9H9K2ovjQyX17+GKiBw==",
-      "signed_at": "2026-05-18T14:41:45.502Z"
+      "signed_at": "2026-05-18T16:39:30.589Z"
     }
   ],
   "manifest_signature": {
     "algorithm": "Ed25519",
-    "signature_base64": "6CXeyi24KGIxfF9mFLMtss1uEXeCfsksFkxNLxLY9UwFjxwzYvZacNkjdMsc6hEpOYjM+yFerQXZJteutCwiAQ=="
+    "signature_base64": "V1RpSt57J0ttetibMhbXYqPpPlMQ453GAn81TZr5kNgna61avYMI6pG8Q/bs0lPJoCGjnHGD2gZIFvAlMozTBQ=="
   }
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@blamejs/exceptd-skills",
-  "version": "0.13.8",
+  "version": "0.13.10",
   "description": "AI security skills grounded in mid-2026 threat reality, not stale framework documentation. 42 skills, 10 catalogs, 34 jurisdictions, pre-computed indexes, Ed25519-signed.",
   "keywords": [
     "ai-security",

package/sbom.cdx.json

@@ -1,22 +1,22 @@
 {
   "bomFormat": "CycloneDX",
   "specVersion": "1.6",
-  "serialNumber": "urn:uuid:57d6007b-8b72-41ef-806c-f9d2210f3f78",
+  "serialNumber": "urn:uuid:ab5bdf43-05b4-4789-88b5-16b9e69ff079",
   "version": 1,
   "metadata": {
-    "timestamp": "2072-09-12T01:10:19.000Z",
+    "timestamp": "2117-02-07T14:14:27.000Z",
     "tools": [
       {
         "vendor": "blamejs",
         "name": "scripts/refresh-sbom.js",
-        "version": "0.13.8"
+        "version": "0.13.10"
       }
     ],
     "component": {
-      "bom-ref": "pkg:npm/@blamejs/exceptd-skills@0.13.8",
+      "bom-ref": "pkg:npm/@blamejs/exceptd-skills@0.13.10",
       "type": "application",
       "name": "@blamejs/exceptd-skills",
-      "version": "0.13.8",
+      "version": "0.13.10",
       "description": "AI security skills grounded in mid-2026 threat reality, not stale framework documentation. 42 skills, 10 catalogs, 34 jurisdictions, pre-computed indexes, Ed25519-signed.",
       "licenses": [
         {
@@ -25,17 +25,17 @@
           }
         }
       ],
-      "purl": "pkg:npm/%40blamejs/exceptd-skills@0.13.8",
+      "purl": "pkg:npm/%40blamejs/exceptd-skills@0.13.10",
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "baf93f2e59512adc500a08c55b6e163d4046cf27646cabbbb11a1aa0af910a2f"
+          "content": "8d910bf9187db8b6704a75645b1b0a12719759724fe1e757b02ed4558dfdb177"
         }
       ],
       "externalReferences": [
         {
           "type": "distribution",
-          "url": "https://www.npmjs.com/package/@blamejs/exceptd-skills/v/0.13.8"
+          "url": "https://www.npmjs.com/package/@blamejs/exceptd-skills/v/0.13.10"
         },
         {
           "type": "vcs",
@@ -86,7 +86,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "5568bcb1a15cf38025e676f3c76fe7f0ed1b8c0e0aaf5006ffcb0428a02bbb23"
+          "content": "cf29f5fb3c8dff3d6ede57f305f28ce5d0dbbdc3ae6f44acc539a00e9812faac"
         }
       ]
     },
@@ -108,7 +108,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "d3ac626af36d2b88acb3a89bdb60abdc28b4e478ffe61e39925c7b17e91f14dd"
+          "content": "b082962f2a0b5f3668921b1ab6840cabd1c99c5a9730116a25d101c86164e89e"
         }
       ]
     },
@@ -152,7 +152,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "499743f3bd6784d495ab4ba9a18d7749e918c0b8c5ca8def9e46b334f70f4a14"
+          "content": "3e8ce799c960f20427afc363037253f9cb2bf30815540520b5ecddc394c1576a"
         }
       ]
     },
@@ -1021,7 +1021,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "f3406102b6e066b6921d190e4898a97381b87816b14e4e777c0592e7f33a7207"
+          "content": "f98a153b182a39ce3f03b183222452d75f345fcf74e7c98547a35f79f19aee8c"
         }
       ]
     },
@@ -1318,7 +1318,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "36b5ee7bd4543fcf90ee900709c41ef2f1aaeba6fc6adb41b72289d3b8c35712"
+          "content": "baa0786a1a7611ba729dbb3e0394423c1ca6611109e697913c3f165ae25a33e4"
         }
       ]
     },

package/scripts/check-sbom-currency.js

@@ -20,6 +20,7 @@
 
 const fs = require("fs");
 const path = require("path");
+const crypto = require("crypto");
 
 function resolveRoot(argv) {
   for (let i = 2; i < argv.length; i++) {
@@ -117,12 +118,75 @@ function checkSbomCurrency(root) {
     }
   }
 
+  // v0.13.9: per-file SHA-256 integrity check. For every CycloneDX
+  // component whose bom-ref begins with "file:", confirm the recorded
+  // SHA-256 hash matches the live bytes on disk. Catches the class of
+  // release-ordering bug where sbom.cdx.json was regenerated BEFORE the
+  // final sign-all pass — the recorded manifest.json hash drifted from
+  // the signed-and-committed bytes, but the count-based check above
+  // could not see it. Codex P2 flag on PR #48 surfaced one instance;
+  // this gate makes it unreachable.
+  let fileComponentsChecked = 0;
+  const rootResolved = path.resolve(root);
+  for (const comp of components) {
+    const bomRef = typeof comp["bom-ref"] === "string" ? comp["bom-ref"] : "";
+    if (!bomRef.startsWith("file:")) continue;
+    const relPath = bomRef.slice("file:".length);
+    // Codex P2 on PR #49: refuse bom-ref entries that escape the repo
+    // root. The earlier implementation trusted `relPath` verbatim, so a
+    // tampered or carelessly-edited sbom.cdx.json with `file:../outside`
+    // would read + hash a path OUTSIDE the checkout — the gate would
+    // either report "exists, hash matches" (silently weakening the
+    // integrity guarantee) or "does not exist" without ever flagging the
+    // attempted escape. Refuse early.
+    if (relPath.includes("..") || path.isAbsolute(relPath)) {
+      errors.push(
+        `SBOM file component "${relPath}" rejected: path must be repo-relative without ".." segments (path-traversal guard)`
+      );
+      continue;
+    }
+    const absPath = path.resolve(rootResolved, relPath);
+    // Defense-in-depth: even if the textual check above passed, the
+    // resolved path must still live under the root. Symlinks or future
+    // changes to the textual filter would surface here.
+    const rel = path.relative(rootResolved, absPath);
+    if (rel.startsWith("..") || path.isAbsolute(rel)) {
+      errors.push(
+        `SBOM file component "${relPath}" resolved outside repo root (${absPath}) — refused (path-traversal guard)`
+      );
+      continue;
+    }
+    if (!fs.existsSync(absPath)) {
+      errors.push(
+        `SBOM file component "${relPath}" recorded but file does not exist on disk`
+      );
+      continue;
+    }
+    const sha256Entry = (comp.hashes || []).find(
+      (h) => h && h.alg === "SHA-256",
+    );
+    if (!sha256Entry || typeof sha256Entry.content !== "string") {
+      errors.push(
+        `SBOM file component "${relPath}" lacks a SHA-256 hash entry`
+      );
+      continue;
+    }
+    const live = crypto.createHash("sha256").update(fs.readFileSync(absPath)).digest("hex");
+    if (live !== sha256Entry.content) {
+      errors.push(
+        `SBOM file component "${relPath}" hash drift: recorded ${sha256Entry.content.slice(0, 12)}…, live ${live.slice(0, 12)}… — re-sign skills (\`node $(exceptd path)/lib/sign.js sign-all\` from a contributor checkout) and then \`npm run refresh-sbom\`, in that order (sbom must regenerate AFTER the final sign).`,
+      );
+    }
+    fileComponentsChecked++;
+  }
+
   return {
     ok: errors.length === 0,
     errors,
     skills: sbomSkills,
     catalogs: sbomCatalogs,
     components_validated: components.length,
+    file_components_hash_checked: fileComponentsChecked,
   };
 }
 
@@ -140,7 +204,8 @@ function main() {
   }
   process.stdout.write(
     `SBOM current — ${result.skills} skills, ${result.catalogs} catalogs, ` +
-    `${result.components_validated} components validated.\n`
+    `${result.components_validated} components validated, ` +
+    `${result.file_components_hash_checked} file-hash entries verified.\n`
   );
 }