@blamejs/exceptd-skills 0.14.24 → 0.14.26

package/CHANGELOG.md

@@ -1,5 +1,15 @@
 # Changelog
 
+## 0.14.26 — 2026-05-28
+
+`citation-hygiene` `rfc-number-title-mismatch` now fires only on an explicitly quoted title that conflicts with the registry title (`RFC 9404 "Sieve Email Filtering Language"` when 9404 is the JMAP Blob extension). The previous whole-line token-overlap heuristic flagged the ordinary ways developers cite RFCs — a mechanism description (`CRLF line endings per RFC 5322 §2.3`), a section pointer, a well-known short name (`RFC 9051 (IMAP4rev2)`), and even an RFC-number-shaped token inside code (`envelope.rfc822` → "RFC 822") — because that surrounding prose or code never shares vocabulary with the formal registry title. Those forms state no title and are no longer flagged; a genuinely conflicting quoted title still fires. The deterministic catalog-backed checks (`fabricated-cve-id`, `rejected-or-disputed-cve`, RFC-not-in-index) are unchanged.
+
+## 0.14.25 — 2026-05-28
+
+`secrets` collector `ssh-private-key-block` accuracy:
+- The in-source content scan now requires a complete PEM block — header, base64 body, and closing marker — so a bare `BEGIN … PRIVATE KEY` header used as a detection pattern (a redaction or DLP library's regex literal) or a documentation placeholder no longer registers as an embedded key.
+- File classification is now content-aware for the ambiguous `.pem` / `.key` extensions. A certificate chain (`fullchain.pem`) or a public trust anchor (`bimi-trust-anchors.pem`) is conventionally `.pem` but carries no private key; it is treated as a private-key file only when its content actually contains a `PRIVATE KEY` block. Binary keystores (`.p12` / `.pfx`) and conventionally-named SSH keys (`id_rsa`, …) remain classified by name. A `.pem` or `.key` holding a real private key still fires.
+
 ## 0.14.24 — 2026-05-28
 
 `crypto-codebase` `hardcoded-key-material` now requires a complete PEM block — a `BEGIN … PRIVATE KEY` header, a base64 body, and a closing `END` marker — before it fires. A bare `BEGIN … PRIVATE KEY` marker carrying no key body is a *detection pattern*, not a leak: a redaction or DLP library's regex literal that matches the key header (to redact keys), or a documentation placeholder such as `privateKeyPem: "<elided>"`, no longer registers as embedded key material. An actual pasted private key still fires.

package/data/_indexes/_meta.json

@@ -1,10 +1,10 @@
 {
   "schema_version": "1.1.0",
-  "generated_at": "2026-05-28T07:08:40.029Z",
+  "generated_at": "2026-05-28T08:22:44.979Z",
   "generator": "scripts/build-indexes.js",
   "source_count": 54,
   "source_hashes": {
-    "manifest.json": "9e161d19bbce1ad9a15ca37bcb6e561bf51a6394ee3b02b458951ffd4e840ab6",
+    "manifest.json": "f555d900f5b76a676f1ecab9b8697831c1d9c67301f0a475b830e6c8d6b55d05",
     "data/atlas-ttps.json": "d24bc02859d40ccf1615db75cca68c077585904e41e0d8f6de448121e9b1abb0",
     "data/attack-techniques.json": "fa193f0d2d248176a8beddb641e9fe56ba4faa9e15dc253ff876dbf0c5d58a77",
     "data/cve-catalog.json": "03d8071c7ae244ccda7611c3bc66a5581c21e790d158c2948c3001f55aa5aac9",

package/lib/collectors/citation-hygiene.js

@@ -204,35 +204,47 @@ function titleAcronym(realTitle) {
 }
 
 /**
- * Decide whether an adjacent text fragment makes a TITLE CLAIM that
- * conflicts with the real index title. Conservative by design — the cost
- * of a false positive (telling an author their correct citation is wrong)
- * is high, so the bar to flag a mismatch is deliberately strict:
- *   - the cited RFC number must be in the index (checked by the caller),
- *   - the adjacent text must carry at least THREE meaningful tokens — a
- *     bare nickname / abbreviation ("TLS 1.3", "(HTTP)") reduces below
- *     this and is treated as no-title-claim, never a mismatch,
- *   - if the adjacent tokens contain the title's acronym, it is the same
- *     document (TLS for Transport Layer Security); not a mismatch,
- *   - only ZERO overlap between the meaningful adjacent tokens and the
- *     real-title tokens flags a mismatch. Any shared content word means
- *     the author is describing the right document (paraphrase) — demote.
+ * Decide whether an EXPLICITLY STATED title conflicts with the real index
+ * title. The stated title is extracted by the caller (see statedTitleAfter):
+ * only a title introduced immediately after the RFC number by a delimiter —
+ * `RFC N: The Title`, `RFC N "The Title"`, `RFC N (The Title)` — counts.
+ *
+ * This is deliberately strict because the dominant real-world pattern is a
+ * mechanism citation — "CRLF line endings per RFC 5322", "renders values per
+ * RFC 8785", "ETag repeated per RFC 7232 §4.1" — where the prose describes
+ * what the code does *per* the RFC using vocabulary that never overlaps the
+ * RFC's formal title. Comparing that prose against the title produced a
+ * false "mismatch" on correct citations. Such references state no title and
+ * are filtered out before this function is reached.
+ *
+ *   - at least TWO meaningful tokens in the stated title (a bare acronym /
+ *     nickname is not a title),
+ *   - the title's acronym appearing in the stated title is the same document
+ *     (TLS for Transport Layer Security); not a mismatch,
+ *   - only ZERO overlap between stated-title tokens and real-title tokens
+ *     flags a mismatch; any shared content word is a paraphrase — demote.
  * Returns "mismatch" | "match" | "no-title-claim".
  */
-function classifyRfcTitle(adjacentText, realTitle) {
-  const adjTokens = titleTokens(adjacentText);
-  // Require a substantive title claim. Fewer than three content tokens is
-  // a nickname / abbreviation, not a stated title — stay conservative.
-  if (adjTokens.size < 3) return "no-title-claim";
+function classifyRfcTitle(statedTitle, realTitle) {
+  const adjTokens = titleTokens(statedTitle);
+  if (adjTokens.size < 2) return "no-title-claim";
   const realTokens = titleTokens(realTitle);
   if (realTokens.size === 0) return "no-title-claim";
-  // Acronym recognition: "tls" in the adjacent text matches "Transport
+  // Acronym recognition: "tls" in the stated title matches "Transport
   // Layer Security". Same document, not a wrong title.
   const acronym = titleAcronym(realTitle);
   if (acronym.length >= 2 && adjTokens.has(acronym)) return "match";
   let overlap = 0;
   for (const t of adjTokens) {
-    if (realTokens.has(t)) overlap++;
+    if (realTokens.has(t)) { overlap++; continue; }
+    // Nickname / short-name recognition: a stated token that contains (or is
+    // contained by) a real-title token of length >= 4 is the same document
+    // under a common name — "IMAP4rev2" carries the real token "imap"
+    // ("...Access Protocol (IMAP)..."). Avoids false mismatches on the way
+    // developers actually cite RFCs by their well-known short names.
+    for (const rt of realTokens) {
+      if (rt.length >= 4 && (t.includes(rt) || rt.includes(t))) { overlap++; break; }
+    }
   }
   // Any shared content word -> the author is describing the right
   // document. Only a stated title with ZERO overlap is a conflicting
@@ -249,6 +261,29 @@ function lineAround(content, index) {
   return content.slice(start, end);
 }
 
+// Extract a title EXPLICITLY QUOTED immediately after the RFC number on the
+// same line:
+//   RFC N "The Title"      RFC N: "The Title"      RFC N ("The Title")
+// A quoted string is the only unambiguous title claim. Everything else states
+// no title and returns null:
+//   - free prose ("RFC 6455 wire layer"), a section pointer ("RFC 5322 §2.3"),
+//     and "X per RFC N" mechanism attributions describe usage, not the title;
+//   - bare nicknames ("RFC 9051 (IMAP4rev2)") are common short names;
+//   - and crucially, an RFC-number-shaped token inside CODE (`envelope.rfc822`
+//     matches "RFC 822"; `RFC 3339:` ahead of an object literal) is followed
+//     by code punctuation, never a quoted title — so comparing a code fragment
+//     against a formal title can no longer produce a phantom mismatch.
+// The opening quote must be SEPARATED from the number by whitespace or a
+// `:` / `(` introducer. A quote touching the last digit (`"…RFC 3339"`) is the
+// CLOSING quote of a string that happens to end with the citation, not the
+// opening quote of a title — without this guard the following code was
+// captured as a phantom "title". The closing quote bounds the title; straight
+// and typographic quotes are accepted.
+function statedTitleAfter(after) {
+  const m = after.match(/^(?:\s*[:(]\s*|\s+)["“]([^"”\n]{3,100})["”]/);
+  return m ? m[1].trim() : null;
+}
+
 function collect({ cwd = process.cwd() } = {}) {
   const errors = [];
   const startTime = Date.now();
@@ -339,7 +374,10 @@ function collect({ cwd = process.cwd() } = {}) {
       const line = lineAround(content, m.index);
       const rfcLineNo = lineFromOffset(content, m.index);
       if (rfcTitles.has(num)) {
-        const verdict = classifyRfcTitle(line, rfcTitles.get(num));
+        const lineStart = content.lastIndexOf("\n", m.index) + 1;
+        const after = line.slice((m.index - lineStart) + m[0].length);
+        const stated = statedTitleAfter(after);
+        const verdict = stated ? classifyRfcTitle(stated, rfcTitles.get(num)) : "no-title-claim";
         if (verdict === "mismatch" && !illustrative) {
           hits["rfc-number-title-mismatch"].push({
             file: f.rel,

package/lib/collectors/secrets.js

@@ -73,6 +73,23 @@ const AUTH_CONFIG_FILES = new Set([
 
 const SSH_PRIVATE_KEY_FILES = new Set(["id_rsa", "id_ed25519", "id_ecdsa", "id_dsa"]);
 const SSH_PRIVATE_KEY_EXTS = new Set([".pem", ".key", ".p12", ".pfx"]);
+// `.pem` / `.key` are ambiguous: a certificate chain (`fullchain.pem`) or a
+// public trust anchor (`bimi-trust-anchors.pem`) is conventionally `.pem` and
+// carries no private key. A name-only classifier flags these as private keys.
+// `.p12` / `.pfx` are binary keystores (private material by nature) and the
+// id_* names are private SSH keys, so only the PEM extensions are content-gated.
+const PEM_PRIVATE_KEY_MARKER = /-----BEGIN (?:[A-Z0-9]+ )*PRIVATE KEY-----/;
+const CONTENT_GATED_KEY_EXTS = new Set([".pem", ".key"]);
+function carriesPrivateKey(file) {
+  const ext = path.extname(file.name).toLowerCase();
+  if (!CONTENT_GATED_KEY_EXTS.has(ext)) return true; // .p12/.pfx/id_* → private by nature
+  try {
+    if (fs.statSync(file.full).size > MAX_FILE_BYTES) return true; // too big to scan → conservative
+    return PEM_PRIVATE_KEY_MARKER.test(fs.readFileSync(file.full, "utf8"));
+  } catch {
+    return true; // unreadable → conservative (treat as a key)
+  }
+}
 
 const IAC_EXTS = new Set([".tf", ".tfvars", ".bicep"]);
 const IAC_EXACT = new Set(["terraform.tfstate", "values.yaml", "secret.yaml"]);
@@ -104,7 +121,13 @@ const INDICATOR_PATTERNS = [
   { id: "slack-bot-or-user-token",    re: /\bxox[abposr]-[A-Za-z0-9-]{10,}\b/g },
   { id: "stripe-secret-key",          re: /\b(?:sk|rk)_(?:live|test)_[A-Za-z0-9]{24,}\b/g },
   { id: "jwt-token-with-secret-context", re: /\beyJ[A-Za-z0-9_-]{10,}\.eyJ[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}\b/g },
-  { id: "ssh-private-key-block",      re: /-----BEGIN (?:RSA |EC |OPENSSH |DSA |ENCRYPTED |)PRIVATE KEY-----/g },
+  // Require a complete PEM block — header, base64 body, closing marker —
+  // so a bare `BEGIN ... PRIVATE KEY` header used as a detection pattern (a
+  // redaction/DLP library's regex literal) or a doc placeholder does not
+  // register as an embedded key. `-` is excluded from the body class so the
+  // run halts at the first `-` of `-----END` (no backtracking, ReDoS-safe).
+  // Private-key *files* (.pem/.key) are detected separately by file presence.
+  { id: "ssh-private-key-block",      re: /-----BEGIN (?:RSA |EC |OPENSSH |DSA |ENCRYPTED |)PRIVATE KEY-----[A-Za-z0-9+/=\s]{20,4000}-----END/g },
   { id: "openai-api-key",             re: /\bsk-(?:proj-|svcacct-|admin-|)[A-Za-z0-9_-]{20,}\b/g },
   { id: "anthropic-api-key",          re: /\bsk-ant-[A-Za-z0-9_-]{20,}\b/g },
 ];
@@ -230,7 +253,7 @@ function collect({ cwd = process.cwd(), env = process.env, args = {} } = {}) {
     const c = classify(f);
     if (c.isEnv) envFiles.push(f);
     if (c.isAuthConfig) authConfigFiles.push(f);
-    if (c.isSshKey) sshPrivateKeys.push(f);
+    if (c.isSshKey && carriesPrivateKey(f)) sshPrivateKeys.push(f);
     if (c.isIac) iacFiles.push(f);
     if (c.isText) textFiles.push(f);
   }

package/manifest.json

@@ -1,6 +1,6 @@
 {
   "name": "exceptd-security",
-  "version": "0.14.24",
+  "version": "0.14.26",
   "description": "AI security skills grounded in mid-2026 threat reality, not stale framework documentation",
   "homepage": "https://exceptd.com",
   "license": "Apache-2.0",
@@ -53,7 +53,7 @@
       ],
       "last_threat_review": "2026-05-15",
       "signature": "lXhZgoIrrVloO3XaTvo/43AxZn4mwErstd7DR0O/oVhD3AOGODM4HqrageYEou9WKOdMEGP5mJNTjJsXdP5NDA==",
-      "signed_at": "2026-05-28T07:04:55.410Z",
+      "signed_at": "2026-05-28T08:19:15.366Z",
       "cwe_refs": [
         "CWE-125",
         "CWE-362",
@@ -123,7 +123,7 @@
       ],
       "last_threat_review": "2026-05-17",
       "signature": "ztSKk/zFMFbT12qRcEeBKpydBn7fTT86KxMmor0DTCoKQWk5fJ0fSInfP1XMSB6rFk4/SuSjKVxQRMKVJ5a+Cg==",
-      "signed_at": "2026-05-28T07:04:55.412Z",
+      "signed_at": "2026-05-28T08:19:15.368Z",
       "cwe_refs": [
         "CWE-1039",
         "CWE-1426",
@@ -196,7 +196,7 @@
       ],
       "last_threat_review": "2026-05-17",
       "signature": "K6QdPHNK5c4K5QFjrW0QsUhjp71D7SOisSoulwPNSvKRdi2rY+yg0kdckijBMkLMsVPyUvcC9giu93mKJ1OZDg==",
-      "signed_at": "2026-05-28T07:04:55.413Z",
+      "signed_at": "2026-05-28T08:19:15.368Z",
       "cwe_refs": [
         "CWE-22",
         "CWE-345",
@@ -248,7 +248,7 @@
       "framework_gaps": [],
       "last_threat_review": "2026-05-22",
       "signature": "zbr8CbOe2rIPuxj2bCl8mVc3YgLsRHnx3/UU7MmyMLNg4c13q6LEBglC1A7cjhfblfHsX/1rxNLaukDzc65lAw==",
-      "signed_at": "2026-05-28T07:04:55.413Z"
+      "signed_at": "2026-05-28T08:19:15.369Z"
     },
     {
       "name": "compliance-theater",
@@ -279,7 +279,7 @@
       ],
       "last_threat_review": "2026-05-22",
       "signature": "F2Shxae0ua0gPtvwzTRVzzHaIgJcFDRT3/akLUAZ4aaMQhkleKkcTaTpkjp+pTVEdPfLeLGNCeAOMs+whVYOBg==",
-      "signed_at": "2026-05-28T07:04:55.413Z"
+      "signed_at": "2026-05-28T08:19:15.369Z"
     },
     {
       "name": "exploit-scoring",
@@ -308,7 +308,7 @@
       ],
       "last_threat_review": "2026-05-18",
       "signature": "NA1hoQycvQhSUoG5rwlXX0mOVmGxoXRVezkELGEA2nZOdGis4gXkHT3O6Sfw7zxE4JuMrsCb65TEeOWk9WEPDg==",
-      "signed_at": "2026-05-28T07:04:55.414Z"
+      "signed_at": "2026-05-28T08:19:15.370Z"
     },
     {
       "name": "rag-pipeline-security",
@@ -345,7 +345,7 @@
       ],
       "last_threat_review": "2026-05-22",
       "signature": "W3pS8lnaCP96TQzsJpG5d5yv5IwgaQyS4Z2Ctcz5BOJf6LbajSIgeDgTZ4f4Bhr5m4E7KsgWGjZS4x7Fwd33BQ==",
-      "signed_at": "2026-05-28T07:04:55.415Z",
+      "signed_at": "2026-05-28T08:19:15.370Z",
       "cwe_refs": [
         "CWE-1395",
         "CWE-1426"
@@ -405,7 +405,7 @@
       ],
       "last_threat_review": "2026-05-17",
       "signature": "/WDGygh1Ck4yWlBWDGtEUVCqKB8d+UaJXoAoBXujtt+GAl8JbMNpaN1TvI0WkEltQ9dTxaAzSn20/eVDqv8iDQ==",
-      "signed_at": "2026-05-28T07:04:55.415Z",
+      "signed_at": "2026-05-28T08:19:15.370Z",
       "d3fend_refs": [
         "D3-CA",
         "D3-CSPP",
@@ -440,7 +440,7 @@
       "framework_gaps": [],
       "last_threat_review": "2026-05-22",
       "signature": "za1NKBpy9LC91F/ESO/qhUfmvVr8GNItQOjR5OJLeHm+2dQ9HHiFWQK2eo53V/n/0uhubuggURA3yS6kJuWwBg==",
-      "signed_at": "2026-05-28T07:04:55.415Z",
+      "signed_at": "2026-05-28T08:19:15.371Z",
       "cwe_refs": [
         "CWE-1188"
       ],
@@ -474,7 +474,7 @@
       "framework_gaps": [],
       "last_threat_review": "2026-05-18",
       "signature": "1853tUUOO35GCXP4vn4qYdBDCdGJu2/WXCNOShhEt69G6BUoq9C3gYGjKWwEPxRKjwjyMtb2nmsL2BZFHRIADw==",
-      "signed_at": "2026-05-28T07:04:55.416Z",
+      "signed_at": "2026-05-28T08:19:15.371Z",
       "forward_watch": [
         "New AI attack classes as ATLAS v6 publishes",
         "Post-quantum adversary capability timeline",
@@ -513,7 +513,7 @@
       "framework_gaps": [],
       "last_threat_review": "2026-05-01",
       "signature": "ZoFh0msOLToS9Xntp9e6zAcg8mE5TOsm7Tq9EYybKL7midjQ5z+aue1Uhp4+xjMRRqVtj8F2W0PvIBTYkYlyAg==",
-      "signed_at": "2026-05-28T07:04:55.416Z"
+      "signed_at": "2026-05-28T08:19:15.371Z"
     },
     {
       "name": "zeroday-gap-learn",
@@ -540,7 +540,7 @@
       "framework_gaps": [],
       "last_threat_review": "2026-05-18",
       "signature": "igRqYyU1unRFH40BsPyAR62SPrk8QZv8dPGb8S9O9EvLCNOZAzm3t+HdT/NKqzWHwrpomOzkkkyLfYI/0qTUDA==",
-      "signed_at": "2026-05-28T07:04:55.416Z",
+      "signed_at": "2026-05-28T08:19:15.372Z",
       "forward_watch": [
         "New CISA KEV entries",
         "New ATLAS TTP additions in each ATLAS release",
@@ -604,7 +604,7 @@
       ],
       "last_threat_review": "2026-05-22",
       "signature": "XJFnPtu9tG23qlHGUJulQ0/Vu/p41qFrQng0fE3+GpCPD35+oipdlDXvf9zFo6A6i4OVj601qNuXKh9/kfcHDw==",
-      "signed_at": "2026-05-28T07:04:55.417Z",
+      "signed_at": "2026-05-28T08:19:15.372Z",
       "cwe_refs": [
         "CWE-327"
       ],
@@ -652,7 +652,7 @@
       ],
       "last_threat_review": "2026-05-22",
       "signature": "QuOVaQ4E2Sl39TClbhZ7HA9XrYAyRrDL44HY3RTE7aWLue0hV2cxaBt40ALGmHS++631QGFDlZTLZI77Tr6nAA==",
-      "signed_at": "2026-05-28T07:04:55.417Z"
+      "signed_at": "2026-05-28T08:19:15.372Z"
     },
     {
       "name": "security-maturity-tiers",
@@ -689,7 +689,7 @@
       ],
       "last_threat_review": "2026-05-01",
       "signature": "8Px1s2lDj10/Q6erwEQlXgUHM1+OTruUR8qAHPX7Oo3k/l69N6P9sm0PsafS9wDFtj9l5C/OiLiFgzMlMt6vBw==",
-      "signed_at": "2026-05-28T07:04:55.417Z",
+      "signed_at": "2026-05-28T08:19:15.373Z",
       "cwe_refs": [
         "CWE-1188"
       ]
@@ -724,7 +724,7 @@
       "framework_gaps": [],
       "last_threat_review": "2026-05-11",
       "signature": "urRcataVWg6/utyEkSiOWoNxTL8sABRjPR7ShyDfZGnAozFph/yDktSoaPVxQDXwu9EfJE+qhUW5OYR/yJECBQ==",
-      "signed_at": "2026-05-28T07:04:55.418Z"
+      "signed_at": "2026-05-28T08:19:15.373Z"
     },
     {
       "name": "attack-surface-pentest",
@@ -796,7 +796,7 @@
         "Pwn2Own Berlin 2026 (disclosed 2026-05-14, embargo ends 2026-08-12) — Microsoft Edge 4-bug sandbox escape by Orange Tsai (DEVCORE); forward-watch only (browser sandbox, out of current playbook scope); track Microsoft Edge security advisory and KEV add"
       ],
       "signature": "C7lv65/Ecm8JJgSKxrX5lxx0YFzKWtrIQSKp+vy50I5e8945s1JmifGUUrnQwRQhq/Pkv7EmfiH5XSO8h75bDg==",
-      "signed_at": "2026-05-28T07:04:55.418Z"
+      "signed_at": "2026-05-28T08:19:15.373Z"
     },
     {
       "name": "fuzz-testing-strategy",
@@ -856,7 +856,7 @@
         "OSS-Fuzz-Gen / AI-assisted harness generation becoming the default expectation for OSS maintainers"
       ],
       "signature": "Z7ypCUnXx8JpLtgxxB6RHNi39w74AmrGY1N4ofAGCXhkuM2EaFVm1AU0dvl9UQ1bVLfHKEDGqMO/TwlIY7RABg==",
-      "signed_at": "2026-05-28T07:04:55.418Z"
+      "signed_at": "2026-05-28T08:19:15.374Z"
     },
     {
       "name": "dlp-gap-analysis",
@@ -931,7 +931,7 @@
         "Quebec Law 25, India DPDPA, KSA PDPL enforcement actions naming AI-tool prompt data as in-scope personal information"
       ],
       "signature": "IgEnpHOhCftAyfUNdKsjbrd169T9pJkk/rRM2ZEna+H18y7p5x48+1kME2sJMZjJuyAdQFBJi8PJXZFwLGI+DQ==",
-      "signed_at": "2026-05-28T07:04:55.419Z"
+      "signed_at": "2026-05-28T08:19:15.374Z"
     },
     {
       "name": "supply-chain-integrity",
@@ -1010,7 +1010,7 @@
         "Pwn2Own Berlin 2026 (disclosed 2026-05-14, embargo ends 2026-08-12) — NVIDIA Megatron Bridge path traversal by haehae; AI training-stack file-system trust boundary; track patch and SBOM-attestation impact"
       ],
       "signature": "pcLrM98A3vUSZRjwNAk0aZ9umvOwB41XCLLsCOy/IebB2F/06oIrGUKkMHtHwm4pTVPShMMcKdZQQ3jz30FnCg==",
-      "signed_at": "2026-05-28T07:04:55.419Z"
+      "signed_at": "2026-05-28T08:19:15.374Z"
     },
     {
       "name": "defensive-countermeasure-mapping",
@@ -1067,7 +1067,7 @@
       ],
       "last_threat_review": "2026-05-11",
       "signature": "G5q5elh7Q7eu2xcwTVQJGDTGfvZR0OGQaLSLJPb2wjzCHFF8PWuZfCHZdjjqisiRzRWPyLlzgfHeMJqOdy7cBw==",
-      "signed_at": "2026-05-28T07:04:55.419Z"
+      "signed_at": "2026-05-28T08:19:15.375Z"
     },
     {
       "name": "identity-assurance",
@@ -1134,7 +1134,7 @@
       "d3fend_refs": [],
       "last_threat_review": "2026-05-11",
       "signature": "Wv5hGMeHjlaQK1zwicVCA7AvdKgJBgvcjdpGM9Ywahh9tagAKhbkOjybowDQZzu7OZ3bDkbh6pBYc1Sdwr6NAA==",
-      "signed_at": "2026-05-28T07:04:55.420Z"
+      "signed_at": "2026-05-28T08:19:15.375Z"
     },
     {
       "name": "ot-ics-security",
@@ -1190,7 +1190,7 @@
       "d3fend_refs": [],
       "last_threat_review": "2026-05-11",
       "signature": "8t5qKHd3yWi57dvG36YQkLN/X9bQWqtEiYjay4IfSmqhJpM/xXPaQVKNGz3wscrO8OLKUZ0OaX7Mj5kzpgBKBQ==",
-      "signed_at": "2026-05-28T07:04:55.420Z"
+      "signed_at": "2026-05-28T08:19:15.375Z"
     },
     {
       "name": "coordinated-vuln-disclosure",
@@ -1242,7 +1242,7 @@
         "NYDFS 23 NYCRR 500 amendments potentially adding explicit CVD program requirements"
       ],
       "signature": "GDGt4UPqBa04PjlpSmpyihGzd3OgfBN7jaAK5tfwp+LRSs3ygKOdbeivUCCHNagTY1hE6hG2Ou40ADfBFuXeAg==",
-      "signed_at": "2026-05-28T07:04:55.420Z"
+      "signed_at": "2026-05-28T08:19:15.376Z"
     },
     {
       "name": "threat-modeling-methodology",
@@ -1292,7 +1292,7 @@
         "PASTA v2 updates incorporating AI/ML application threats"
       ],
       "signature": "t6IgW+ciQMuY5uvLD0HDDB/U1TjZmgAy76bvH0526QcqPMCz27CWX3cdyJ6nxpg3rYrx93xAawu0opw/ZZckCw==",
-      "signed_at": "2026-05-28T07:04:55.421Z"
+      "signed_at": "2026-05-28T08:19:15.376Z"
     },
     {
       "name": "webapp-security",
@@ -1366,7 +1366,7 @@
       "d3fend_refs": [],
       "last_threat_review": "2026-05-11",
       "signature": "ux85YI4t2mVHOyt744Yin1HHy+z11JIFygjKfFfQOBBl5QVV3A267jeIy7utix85irMcpZm/T3yx/ooqiK2tBA==",
-      "signed_at": "2026-05-28T07:04:55.421Z",
+      "signed_at": "2026-05-28T08:19:15.376Z",
       "forward_watch": [
         "NGINX Rift CVE-2026-42945 (disclosed 2026-05-13, source depthfirst) — KEV-watch predicted CISA KEV listing by 2026-05-29; AI-assisted discovery angle; track for active-exploitation confirmation and patch advisory affecting front-door web app deployments"
       ]
@@ -1419,7 +1419,7 @@
       "d3fend_refs": [],
       "last_threat_review": "2026-05-15",
       "signature": "IIXnkZ5ZNqFwOto5KfytADTLLZLoyXNZACD1ORZ40P1HUAQxe6u2uyXFzzsfuob4Uy06jNkRGr2FFgCphUH1Cw==",
-      "signed_at": "2026-05-28T07:04:55.422Z"
+      "signed_at": "2026-05-28T08:19:15.377Z"
     },
     {
       "name": "sector-healthcare",
@@ -1479,7 +1479,7 @@
       "d3fend_refs": [],
       "last_threat_review": "2026-05-11",
       "signature": "AhF9KF8ZBlDteciV+F8IBSmFVYCvQOn44GmD4rZjgLoPxfIv/QE1/vSkK32zyqDKtHWkLSXExbkkPkxA/V6dDw==",
-      "signed_at": "2026-05-28T07:04:55.422Z"
+      "signed_at": "2026-05-28T08:19:15.377Z"
     },
     {
       "name": "sector-financial",
@@ -1560,7 +1560,7 @@
         "TIBER-EU framework v2.0 alignment with DORA TLPT RTS (JC 2024/40); cross-recognition with CBEST and iCAST"
       ],
       "signature": "HQgZvb4ReziEz5rNFr8i/O8/rJEZR+iHRROT7m/D2QUqhrcNISPkYXENsUZlG8xapzy/Ik92ehkseyj4hdmhCQ==",
-      "signed_at": "2026-05-28T07:04:55.423Z"
+      "signed_at": "2026-05-28T08:19:15.378Z"
     },
     {
       "name": "sector-federal-government",
@@ -1629,7 +1629,7 @@
         "Australia PSPF 2024 revision and ISM quarterly updates — track for Essential Eight Maturity Level requirements for federal entities"
       ],
       "signature": "linxmsXZiOYtcs71sSWgGCrvb8xQfmxmtTY5PRvZJ0/8FgJulo0tQtejzexYG775s7XhjAmGsDP238BQTQ8ADA==",
-      "signed_at": "2026-05-28T07:04:55.423Z"
+      "signed_at": "2026-05-28T08:19:15.378Z"
     },
     {
       "name": "sector-energy",
@@ -1694,7 +1694,7 @@
         "ICS-CERT advisory feed (https://www.cisa.gov/news-events/cybersecurity-advisories/ics-advisories) for vendor CVEs in Siemens, Rockwell, Schneider Electric, ABB, GE Vernova, Hitachi Energy, AVEVA / OSIsoft PI"
       ],
       "signature": "JjBfc0ovta560Clk0x3QGRM5osFJDwcvpy3rT7QEGdCIL827jzE8QCow1C8deXq+4JhY2sA/d7/8IsxikdlkCg==",
-      "signed_at": "2026-05-28T07:04:55.424Z"
+      "signed_at": "2026-05-28T08:19:15.379Z"
     },
     {
       "name": "sector-telecom",
@@ -1780,7 +1780,7 @@
         "O-RAN SFG / WG11 security specifications"
       ],
       "signature": "QpfWU8d2FFbo/Kt0Be2jcyDM9JPhKOiwKSi+RWmtPa2SrBVzFNYdC3T23fQXxHDEC2iyApEbXnwk8KN4d6PuBQ==",
-      "signed_at": "2026-05-28T07:04:55.424Z"
+      "signed_at": "2026-05-28T08:19:15.379Z"
     },
     {
       "name": "api-security",
@@ -1849,7 +1849,7 @@
       "d3fend_refs": [],
       "last_threat_review": "2026-05-18",
       "signature": "BmCRCestWqr55+fCynEhtAl5NWLT+xLTkpwS0Icp3SaoZOw/ce3Y6TtqjHRSKn4CBJq7YDiLRWxmhO3MStvOAA==",
-      "signed_at": "2026-05-28T07:04:55.424Z",
+      "signed_at": "2026-05-28T08:19:15.379Z",
       "forward_watch": [
         "NGINX Rift CVE-2026-42945 (disclosed 2026-05-13, source depthfirst) — KEV-watch predicted CISA KEV listing by 2026-05-29; track for active-exploitation confirmation and patch advisory affecting API gateway / reverse-proxy deployments",
         "Pwn2Own Berlin 2026 (disclosed 2026-05-14, embargo ends 2026-08-12) — LiteLLM 3-bug SSRF + Code Injection chain by k3vg3n; LLM-proxy API surface; track upstream patch and CVE assignments",
@@ -1935,7 +1935,7 @@
         "CISA KEV additions for cloud-control-plane CVEs (IMDSv1 abuses, federation token mishandling, cross-tenant boundary failures); CISA Cybersecurity Advisories for cross-cloud advisories"
       ],
       "signature": "/DV3pmZwrRySrk1OCbyI+0BQESacjupJfUX3eC2NGtXuYOBro0vndIP+z27heFxumnjU3a9sfla7/U9X+pqnDw==",
-      "signed_at": "2026-05-28T07:04:55.424Z"
+      "signed_at": "2026-05-28T08:19:15.380Z"
     },
     {
       "name": "container-runtime-security",
@@ -1997,7 +1997,7 @@
       "d3fend_refs": [],
       "last_threat_review": "2026-05-15",
       "signature": "E2UGSf9ATyYgzBr8uM/0ubOUmDqo1jVA7f9mVxv6LHfWGCNuQNXDyuNou9VAmUCeeXEeUYIi3AFjXkJqpOkxDA==",
-      "signed_at": "2026-05-28T07:04:55.425Z",
+      "signed_at": "2026-05-28T08:19:15.380Z",
       "forward_watch": [
         "Pwn2Own Berlin 2026 (disclosed 2026-05-14, embargo ends 2026-08-12) — NVIDIA Container Toolkit container escape ($50K award) by chompie / IBM X-Force XOR; high-severity container/hypervisor boundary break; track patch and KEV add post-embargo"
       ]
@@ -2071,7 +2071,7 @@
         "MITRE ATLAS v5.6.0 (released May 2026) shipped the AML.T0010 sub-technique expansion this forecast tracked plus new techniques (\"Publish Poisoned AI Agent Tool\", \"Escape to Host\"); inventory now 16 tactics, 84 techniques, 56 sub-techniques. Forward watch: subsequent ATLAS minor and major releases — track next-cadence updates to agentic-AI TTPs and MLOps-pipeline-specific techniques"
       ],
       "signature": "IL+DlRCDJN/p08iiJCFkasKcoyjcB0uWrJ6ORLjQcS1HrUa5Xt62QxVjYPHzaevlm5y36ZdmfESqsZJmzK3lCg==",
-      "signed_at": "2026-05-28T07:04:55.425Z"
+      "signed_at": "2026-05-28T08:19:15.380Z"
     },
     {
       "name": "incident-response-playbook",
@@ -2133,7 +2133,7 @@
         "NYDFS 23 NYCRR 500.17 amendments tightening ransom-payment 24h disclosure operationalization"
       ],
       "signature": "MmjLjlmOMLjhJJ4ZfR8MYlHam+ZB+eSqfh6Nv+DecaG4O5zeo9DBP/iL3cbyDVZxmhnhivgJild2ccYeWTeZAg==",
-      "signed_at": "2026-05-28T07:04:55.426Z"
+      "signed_at": "2026-05-28T08:19:15.381Z"
     },
     {
       "name": "ransomware-response",
@@ -2213,7 +2213,7 @@
       ],
       "last_threat_review": "2026-05-22",
       "signature": "ssueL03g9fWlhXpTe+IiY5l7RqQkunN4DTN5QETKE+VOX+qggdjAR8PONxk77ol4xWYmHrM/VcH8CNtXUEvgBA==",
-      "signed_at": "2026-05-28T07:04:55.426Z"
+      "signed_at": "2026-05-28T08:19:15.381Z"
     },
     {
       "name": "email-security-anti-phishing",
@@ -2266,7 +2266,7 @@
       "d3fend_refs": [],
       "last_threat_review": "2026-05-18",
       "signature": "oAFeZmci6BN7Xlu0oOThrazZNBQBIWeCQnoZDqjXo9cs1hIe/6ZijSEr3R3hFQSXH3c1KAbhPw+InR9Gc0HIBQ==",
-      "signed_at": "2026-05-28T07:04:55.427Z"
+      "signed_at": "2026-05-28T08:19:15.381Z"
     },
     {
       "name": "age-gates-child-safety",
@@ -2334,7 +2334,7 @@
         "US state adult-site age-verification laws — 19+ states by mid-2026 (TX HB 18 upheld by SCOTUS June 2025 in Free Speech Coalition v. Paxton); track ongoing challenges in remaining states"
       ],
       "signature": "Rgho5TOFUL1txOzcVR0kASCNdovSU4yt99JlGilJlJRyg0A+BdeeQYrZrhPF6Vx2reUAVG0BeHfcZtSbi+cwCg==",
-      "signed_at": "2026-05-28T07:04:55.427Z"
+      "signed_at": "2026-05-28T08:19:15.382Z"
     },
     {
       "name": "cloud-iam-incident",
@@ -2414,7 +2414,7 @@
       ],
       "last_threat_review": "2026-05-15",
       "signature": "e/kij7GtKaytROyIj7V5RH+FC9WtmVFzrmG2kIlNDNn29ep/CRNlIQKwXLpzo/81AIf634pmdr1qy/+vwIuUDA==",
-      "signed_at": "2026-05-28T07:04:55.428Z",
+      "signed_at": "2026-05-28T08:19:15.382Z",
       "forward_watch": [
         "AWS IAM Identity Center session-policy refresh and step-up-on-admin enforcement (anticipated 2026-H2 release)",
         "GCP Workload Identity Federation principal-set attribute mapping tightening (post-2026 Q3 Federation hardening guide)",
@@ -2508,7 +2508,7 @@
       ],
       "last_threat_review": "2026-05-15",
       "signature": "ew9Kglc9fAZzbn0ZIfGP7WSK/j4eV2VhSvpy+s5bEfNEVYIMa2kZjnGBapgUsyGDLes9H9K2ovjQyX17+GKiBw==",
-      "signed_at": "2026-05-28T07:04:55.428Z",
+      "signed_at": "2026-05-28T08:19:15.383Z",
       "forward_watch": [
         "Entra ID conditional access evolution post-Midnight Blizzard — Microsoft's 2025-2026 commitments on legacy-tenant MFA enforcement and OAuth-app consent gating",
         "Okta IPSIE (Interoperability Profile for Secure Identity in the Enterprise) OpenID Foundation working-group output and adoption timeline",
@@ -2526,6 +2526,6 @@
   ],
   "manifest_signature": {
     "algorithm": "Ed25519",
-    "signature_base64": "38HHa8K5JN9lQ00Kixq0jyhwDA7kVGCkR+IUp+0klY03KqT2hayYiYkx7um4HTM2b7AI07fYviICvOSVsEOrAw=="
+    "signature_base64": "hdHy5abd3+PYvjLw8fytTazfY/PVb1FEMyZE+9HhftqTCEOu7+7ZXpeitXw+iXl4QF+sMM48lvoFehCl6DREAg=="
   }
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@blamejs/exceptd-skills",
-  "version": "0.14.24",
+  "version": "0.14.26",
   "description": "AI security skills grounded in mid-2026 threat reality, not stale framework documentation. 42 skills, 11 catalogs (406 CVEs / 171 CWEs / 805 ATT&CK + ICS / 170 ATLAS / 468 D3FEND / 8888 RFCs), 35 jurisdictions, 10-class catalog gap detector + budget gate, real XML parser + canonical-form diff + content-pattern regression detection, Ed25519-signed.",
   "keywords": [
     "ai-security",

package/sbom.cdx.json

@@ -1,22 +1,22 @@
 {
   "bomFormat": "CycloneDX",
   "specVersion": "1.6",
-  "serialNumber": "urn:uuid:7fe49d81-d720-4402-a328-7813530feea1",
+  "serialNumber": "urn:uuid:5961c60c-cda7-4811-a1a9-c8e34779f276",
   "version": 1,
   "metadata": {
-    "timestamp": "2093-12-29T08:42:41.000Z",
+    "timestamp": "2073-07-09T05:58:36.000Z",
     "tools": [
       {
         "vendor": "blamejs",
         "name": "scripts/refresh-sbom.js",
-        "version": "0.14.24"
+        "version": "0.14.26"
       }
     ],
     "component": {
-      "bom-ref": "pkg:npm/@blamejs/exceptd-skills@0.14.24",
+      "bom-ref": "pkg:npm/@blamejs/exceptd-skills@0.14.26",
       "type": "application",
       "name": "@blamejs/exceptd-skills",
-      "version": "0.14.24",
+      "version": "0.14.26",
       "description": "AI security skills grounded in mid-2026 threat reality, not stale framework documentation. 42 skills, 11 catalogs (406 CVEs / 171 CWEs / 805 ATT&CK + ICS / 170 ATLAS / 468 D3FEND / 8888 RFCs), 35 jurisdictions, 10-class catalog gap detector + budget gate, real XML parser + canonical-form diff + content-pattern regression detection, Ed25519-signed.",
       "licenses": [
         {
@@ -25,17 +25,17 @@
           }
         }
       ],
-      "purl": "pkg:npm/%40blamejs/exceptd-skills@0.14.24",
+      "purl": "pkg:npm/%40blamejs/exceptd-skills@0.14.26",
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "59feff90946b680d632c733662b9afa53fe813ec89eb96a12efee794544466df"
+          "content": "6a561a1ced89ca5c27d3d75fa264e8d783526153845340cc228aeac53f43e7f6"
         }
       ],
       "externalReferences": [
         {
           "type": "distribution",
-          "url": "https://www.npmjs.com/package/@blamejs/exceptd-skills/v/0.14.24"
+          "url": "https://www.npmjs.com/package/@blamejs/exceptd-skills/v/0.14.26"
         },
         {
           "type": "vcs",
@@ -116,11 +116,11 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "76928b5893158897abb5a115b1108a7edf1128571edd0e2fcad90ea275b2eb4d"
+          "content": "b45a8eacd5c13c3e8334683e17ea499a2b1efb490ea0738d15f1529be7220a50"
         },
         {
           "alg": "SHA3-512",
-          "content": "c90557b3b58f4b5c4e13abead01971c71af6e81ec6739b59a9e81ec89bf64df9a854600b665276f2a16794c097656b8cb179caafc3837ff265479ffdf4be9be8"
+          "content": "de1a9a90f30c8b1e6ab205cca7e167ab11a0e2b73e9a98920cf6950b2a2c1742a0559f37c45dfc1053e6994c449ae8843edeedcff9d4f61b691e1c3836331ecb"
         }
       ]
     },
@@ -941,11 +941,11 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "bdb569b022a878bce913771058c93982dfb928eb12a8ecb5ef7b91eff5745f79"
+          "content": "ae6ef41b1dccf1acfba10f0e94ea4ed682009b2576a5647b1ee3b759c1271650"
         },
         {
           "alg": "SHA3-512",
-          "content": "1a3c169c1e8306034f67c73561d3ffc141bf5320bd15515ea34d2a5edd40f93e78733c6c7be48a3f2c2d69d7af046ba0767a237a4b397812b1e763f457637a7e"
+          "content": "63bd9b061d637793dffc3cb786f505e2f1ac92bfe2ae8776045d8d9158fda1604b5a6142aef2754a968f9257b39145e5faa2bfe58e8936ffca756cea66581aa0"
         }
       ]
     },
@@ -1121,11 +1121,11 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "3fb88752e34869fec0d16bafcff3cff0f8b6391303b708b2a49269243292bd30"
+          "content": "1a9efca30ac6136044868fe427552e4b861ec61a6d3f95c2831b8ca4dbf73e05"
         },
         {
           "alg": "SHA3-512",
-          "content": "ee158088d12cb2f4dc8de6509dbfb113602b18e191ca31350787795b373bce346985649c10ff2a6d7c61b828bca5a2ffa2555403ac682ebeeb946ef3164382ca"
+          "content": "02fd06bcc00b5de4cb08c5a55392a4936c793db466595911c9de38717f18fa11af9cdceb01983dd6e56f287f5ccd8cbffc52ba40b99ff7b6ac81f9a7a8fca81d"
         }
       ]
     },
@@ -1751,11 +1751,11 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "9e161d19bbce1ad9a15ca37bcb6e561bf51a6394ee3b02b458951ffd4e840ab6"
+          "content": "f555d900f5b76a676f1ecab9b8697831c1d9c67301f0a475b830e6c8d6b55d05"
         },
         {
           "alg": "SHA3-512",
-          "content": "a7f36263781e09eb65dd25af650c3ebfc2d86e27c031a701bb5cf279137496f9af63ab77c2fe5a60a6d14ce24d3dce3f418728d20a1f4e33e07675e1a4437369"
+          "content": "1024639e6bab17b5e680d3cf56afd8e12f6a7ff24c3440dbafcacc14b0169ecac8cbef17b983ed98bab57c3646963426835daa62ac2ccef3ed3dfbcc56eabdf0"
         }
       ]
     },