@blamejs/exceptd-skills 0.14.28 → 0.15.0

package/ARCHITECTURE.md

@@ -176,7 +176,7 @@ Tracks PoC status, weaponization stage, and AI-assist factor per CVE. Updated wh
 
 ### `data/cwe-catalog.json`
 
-171 CWE entries pinned to **CWE v4.20**. Covers the Top 25 Most Dangerous Software Weaknesses (2024 release) plus AI- and supply-chain-relevant weakness classes (prompt-injection-as-trust-boundary failure, training data integrity, dependency confusion, untrusted artifact ingestion). Each entry records root-cause description, common consequences, mitigation patterns, and the CVEs in `cve-catalog.json` that instantiate the weakness. Skills cite CWE IDs in `cwe_refs` to anchor a finding to a stable weakness taxonomy rather than to a single CVE; the CWE provides the durable root-cause lens that survives across exploit generations.
+173 CWE entries pinned to **CWE v4.20**. Covers the Top 25 Most Dangerous Software Weaknesses (2024 release) plus AI- and supply-chain-relevant weakness classes (prompt-injection-as-trust-boundary failure, training data integrity, dependency confusion, untrusted artifact ingestion). Each entry records root-cause description, common consequences, mitigation patterns, and the CVEs in `cve-catalog.json` that instantiate the weakness. Skills cite CWE IDs in `cwe_refs` to anchor a finding to a stable weakness taxonomy rather than to a single CVE; the CWE provides the durable root-cause lens that survives across exploit generations.
 
 `_meta.cwe_version` pins the version; on a CWE release, audit IDs for renames or deprecations, bump `last_threat_review` on affected skills, and update `_meta`.
 
@@ -188,7 +188,7 @@ Tracks PoC status, weaponization stage, and AI-assist factor per CVE. Updated wh
 
 ### `data/rfc-references.json`
 
-31 IETF RFC / Internet-Draft references covering authentication and authorization (OAuth 2.0 Security BCP RFC 9700, JWT BCP, FIDO/WebAuthn-related drafts), cryptography (TLS 1.3 RFC 8446, hybrid PQC drafts), disclosure (security.txt RFC 9116), and adjacent IETF standards skills depend on. Each entry tracks: title, status (Proposed Standard / Best Current Practice / Internet-Draft / Historic), errata count, replaces / replaced-by chains, IESG / IRTF stream, and a `last_verified` date. Skills cite RFC IDs in `rfc_refs`. Per Hard Rule #12, RFC references are version-pinned: when an RFC is obsoleted or a draft is published as an RFC, the catalog entry's `replaced_by` field is updated, `last_verified` is refreshed, and affected skills bump `last_threat_review`. Frameworks lag RFCs; RFCs lag attacker innovation — this catalog makes that middle layer auditable.
+8888 IETF RFC / Internet-Draft references — the full RFC index, including obsoleted and Historic entries so that a superseded RFC still resolves offline. Coverage spans the security-relevant standards skills depend on — authentication and authorization (OAuth 2.0 Security BCP RFC 9700, JWT BCP, FIDO/WebAuthn-related drafts), cryptography (TLS 1.3 RFC 8446, hybrid PQC drafts), disclosure (security.txt RFC 9116) — alongside the rest of the published RFC series. Each entry tracks: title, status (Internet Standard / Proposed Standard / Best Current Practice / Internet-Draft / Historic), errata count, replaces / replaced-by chains, IESG / IRTF stream, and a `last_verified` date. Skills cite RFC IDs in `rfc_refs`. Per Hard Rule #12, RFC references are version-pinned: when an RFC is obsoleted or a draft is published as an RFC, the catalog entry's `replaced_by` field is updated, `last_verified` is refreshed, and affected skills bump `last_threat_review`. Frameworks lag RFCs; RFCs lag attacker innovation — this catalog makes that middle layer auditable.
 
 ### `data/dlp-controls.json`
 

package/CHANGELOG.md

@@ -1,5 +1,19 @@
 # Changelog
 
+## 0.15.0 — 2026-05-28
+
+Validation and gate hardening. Several catalog and skill integrity checks that had been deferred as non-blocking warnings now hard-fail the predeploy gate, and two latent gate weaknesses are closed.
+
+Catalog, skill, and playbook validation now runs in strict mode in the release gate: an unresolved cross-catalog reference (a CVE citing a CWE / ATT&CK / ATLAS / D3FEND id or framework control that doesn't exist), a CVSS vector that doesn't match a known `CVSS:(2.0|3.0|3.1|4.0)/` prefix, a `cisa_kev: true` entry missing its listing date, a public-PoC entry missing IOCs (Hard Rule #14), an incomplete skill body, or playbook enum/symmetry drift now block a release instead of scrolling past as warnings. Auto-imported drafts remain exempt.
+
+The `_meta.entry_count` drift guard now covers every catalog that declares the field, not only framework-control-gaps — closing the hole that had let the zero-day-lessons counter drift to 68 while the file held 422 (now corrected). The RWEP scoring invariants (Shape A/B/mixed factor detection and recomputed-vs-stored divergence) are now enforced against the shipped catalog by a test gate, where previously they ran only against synthetic fixtures.
+
+The `temporal-staleness` catalog-gap class now counts curated entries only. A CISA KEV due-date passing by calendar drift on the un-curated bulk-import backlog is expected and no longer accrues against the budget — which had crept to one slot of headroom and would have failed a future release with no code change. The budget is retightened to reflect the curated-only count.
+
+CLI surface cleanup. The dead handlers behind the verbs removed in 0.13.0 (`govern`, `direct`, `look`, `ingest`) are gone, and those verbs are no longer surfaced as "did you mean" suggestions. Unknown-flag rejection now covers `report`, `watch`, `framework-gap`, and `skill` (an unrecognized flag on these hard-fails with a structured envelope, matching the rest of the surface). The local-only `scan`, `dispatch`, and `currency` verbs now accept `--air-gap` / `--offline` / `--no-network` instead of rejecting the tool's own global flags. The `--format summary` evidence bundle no longer carries always-null `feeds_into` / `jurisdiction_clocks_active` keys (the populated values come from the close phase).
+
+Documentation: corrected catalog counts (427 CVEs, 173 CWEs, the full 8888-entry RFC index) and documented the `report` verb in the CLI reference.
+
 ## 0.14.28 — 2026-05-28
 
 Catalog expansion — 2025 actively-exploited perimeter and file-transfer RCE cluster. Four CISA KEV-listed, ransomware-associated entries are now fully curated with RWEP scoring, IOCs, zero-day lessons, and reverse-referenced CWE/ATT&CK/framework mappings:

package/README.md

@@ -30,7 +30,7 @@ This platform surfaces what is actually happening right now. Every skill explici
 
 ## Status
 
-Pre-1.0. Latest release lives on [GitHub Releases](https://github.com/blamejs/exceptd-skills/releases) and on npm as [`@blamejs/exceptd-skills`](https://www.npmjs.com/package/@blamejs/exceptd-skills) with signed npm provenance attestation and Ed25519-signed skill bodies. The package ships 42 skills across kernel LPE, MCP supply chain, AI-as-C2, prompt injection, post-quantum crypto, SBOM integrity, identity-incident response, and 35 other AI/security domains, plus 10 intelligence catalogs (CVE / ATLAS / ATT&CK / CWE / D3FEND / DLP / RFC / framework gaps / global frameworks / zero-day lessons) covering 35 jurisdictions — the CVE catalog has grown past 400 entries, its size anchored by a v0.13.17 CISA KEV bulk-intake of `dateAdded >= 2024-01-01` actively-exploited vulnerabilities that took it from 68 to 312 in a single pass. 24 investigation playbooks (kernel, MCP, AI-API, framework, SBOM, runtime, hardening, secrets, cred-stores, containers, crypto, plus `webhook-callback-abuse`, `cicd-pipeline-compromise`, `identity-sso-compromise`, `llm-tool-use-exfil`, `post-quantum-migration`, `ai-discovered-cve-triage`, `supply-chain-recovery`, `citation-hygiene`, and more), a CLI for discovery and seven-phase investigation runs (`govern → direct → look → detect → analyze → validate → close`), and a nightly auto-refresh job that pulls KEV / NVD / EPSS / GHSA / OSV / IETF deltas plus 15 primary-source advisory + research-blog + tech-press feeds (Qualys TRU, Red Hat RHSA, Ubuntu USN, ZDI, kernel.org, oss-security, JFrog, CISA, Microsoft Security Blog, Sysdig, Trail of Bits, Embrace the Red, BleepingComputer security, The Hacker News, and a GitLab activity-feed tracker for the Nightmare-Eclipse researcher handle that anchors NEW-CTRL-073) into auto-PRs for editorial review. v0.13.17 also ships `lib/cve-regression-watcher.js` (NEW-CTRL-074) — a complementary detection method that surfaces poller-diff historical-CVE references as candidate silent-regression cases, the class anchored by MiniPlasma (a 2026 PoC drop that re-broke CVE-2020-17103 without any new ID being assigned).
+Pre-1.0. Latest release lives on [GitHub Releases](https://github.com/blamejs/exceptd-skills/releases) and on npm as [`@blamejs/exceptd-skills`](https://www.npmjs.com/package/@blamejs/exceptd-skills) with signed npm provenance attestation and Ed25519-signed skill bodies. The package ships 42 skills across kernel LPE, MCP supply chain, AI-as-C2, prompt injection, post-quantum crypto, SBOM integrity, identity-incident response, and 35 other AI/security domains, plus 11 intelligence catalogs (CVE / ATLAS / ATT&CK / CWE / D3FEND / DLP / RFC / framework gaps / global frameworks / zero-day lessons / exploit availability) covering 35 jurisdictions — the CVE catalog has grown past 400 entries, its size anchored by a v0.13.17 CISA KEV bulk-intake of `dateAdded >= 2024-01-01` actively-exploited vulnerabilities that took it from 68 to 312 in a single pass. 24 investigation playbooks (kernel, MCP, AI-API, framework, SBOM, runtime, hardening, secrets, cred-stores, containers, crypto, plus `webhook-callback-abuse`, `cicd-pipeline-compromise`, `identity-sso-compromise`, `llm-tool-use-exfil`, `post-quantum-migration`, `ai-discovered-cve-triage`, `supply-chain-recovery`, `citation-hygiene`, and more), a CLI for discovery and seven-phase investigation runs (`govern → direct → look → detect → analyze → validate → close`), and a nightly auto-refresh job that pulls KEV / NVD / EPSS / GHSA / OSV / IETF deltas plus 15 primary-source advisory + research-blog + tech-press feeds (Qualys TRU, Red Hat RHSA, Ubuntu USN, ZDI, kernel.org, oss-security, JFrog, CISA, Microsoft Security Blog, Sysdig, Trail of Bits, Embrace the Red, BleepingComputer security, The Hacker News, and a GitLab activity-feed tracker for the Nightmare-Eclipse researcher handle that anchors NEW-CTRL-073) into auto-PRs for editorial review. v0.13.17 also ships `lib/cve-regression-watcher.js` (NEW-CTRL-074) — a complementary detection method that surfaces poller-diff historical-CVE references as candidate silent-regression cases, the class anchored by MiniPlasma (a 2026 PoC drop that re-broke CVE-2020-17103 without any new ID being assigned).
 
 ---
 
@@ -488,6 +488,10 @@ exceptd skill <name>                  Show context for one skill.
 exceptd framework-gap <FW> <ref>      One framework + one CVE/scenario, JSON
                                       or human. (Operates outside the seven-
                                       phase contract for ad-hoc gap analysis.)
+exceptd report [executive]            Structured posture report. Bare `report`
+                                      emits the full posture; the optional
+                                      `executive` argument emits the
+                                      executive-summary view.
 exceptd path                          Absolute path to the installed package.
 exceptd version                       Package version.
 exceptd help                          This help.

package/bin/exceptd.js

@@ -159,12 +159,7 @@ const COMMANDS = {
   cve:             () => path.join(PKG_ROOT, "lib", "cve-cli.js"),
   rfc:             () => path.join(PKG_ROOT, "lib", "rfc-cli.js"),
   // Seven-phase playbook verbs — handled in-process via lib/playbook-runner.js.
-  plan:     null,
-  govern:   null,
-  direct:   null,
-  look:     null,
   run:      null,
-  ingest:   null,
   reattest: null,
 };
 
@@ -1724,12 +1719,7 @@ function dispatchPlaybook(cmd, argv) {
 
   try {
     switch (cmd) {
-      case "plan":     return cmdPlan(runner, args, runOpts, pretty);
-      case "govern":   return cmdGovern(runner, args, runOpts, pretty);
-      case "direct":   return cmdDirect(runner, args, pretty);
-      case "look":     return cmdLook(runner, args, runOpts, pretty);
       case "run":      return cmdRun(runner, args, runOpts, pretty);
-      case "ingest":   return cmdIngest(runner, args, runOpts, pretty);
       case "reattest": return cmdReattest(runner, args, runOpts, pretty);
       case "list-attestations": return cmdListAttestations(runner, args, runOpts, pretty);
       case "attest": return cmdAttest(runner, args, runOpts, pretty);
@@ -3179,36 +3169,6 @@ function detectScopes() {
   return detected.length ? detected : ["cross-cutting"];
 }
 
-function cmdGovern(runner, args, runOpts, pretty) {
-  const playbookId = args._[0];
-  if (!playbookId) return emitError("govern: missing <playbookId> positional argument.", null, pretty);
-  if (refuseInvalidPlaybookId("govern", playbookId, pretty)) return;
-  const pb = runner.loadPlaybook(playbookId);
-  const directiveId = args.directive || (pb.directives[0] && pb.directives[0].id);
-  if (!directiveId) return refuseNoDirectives("govern", playbookId, pretty);
-  emit(runner.govern(playbookId, directiveId, runOpts), pretty);
-}
-
-function cmdDirect(runner, args, pretty) {
-  const playbookId = args._[0];
-  if (!playbookId) return emitError("direct: missing <playbookId> positional argument.", null, pretty);
-  if (refuseInvalidPlaybookId("direct", playbookId, pretty)) return;
-  const pb = runner.loadPlaybook(playbookId);
-  const directiveId = args.directive || (pb.directives[0] && pb.directives[0].id);
-  if (!directiveId) return refuseNoDirectives("direct", playbookId, pretty);
-  emit(runner.direct(playbookId, directiveId), pretty);
-}
-
-function cmdLook(runner, args, runOpts, pretty) {
-  const playbookId = args._[0];
-  if (!playbookId) return emitError("look: missing <playbookId> positional argument.", null, pretty);
-  if (refuseInvalidPlaybookId("look", playbookId, pretty)) return;
-  const pb = runner.loadPlaybook(playbookId);
-  const directiveId = args.directive || (pb.directives[0] && pb.directives[0].id);
-  if (!directiveId) return refuseNoDirectives("look", playbookId, pretty);
-  emit(runner.look(playbookId, directiveId, runOpts), pretty);
-}
-
 function cmdRun(runner, args, runOpts, pretty) {
   const positional = args._[0];
 
@@ -4351,113 +4311,6 @@ function cmdRunMulti(runner, ids, args, runOpts, pretty, meta) {
   if (anyBlocked) { process.exitCode = EXIT_CODES.GENERIC_FAILURE; return; }
 }
 
-function cmdIngest(runner, args, runOpts, pretty) {
-  // `ingest` matches the AGENTS.md ingest contract. The submission JSON may
-  // carry playbook_id + directive_id; --domain/--directive flags override.
-  let submission = {};
-  // Auto-detect piped stdin (parity with cmdRun) so
-  // `echo '{...}' | exceptd ingest` reads the routing JSON instead of
-  // failing with "no playbook resolved" because args.evidence stays
-  // undefined.
-  // Route stdin auto-detection through hasReadableStdin() (see cmdRun for
-  // rationale). Wrapped-stdin test harnesses (Mocha/Jest, Docker
-  // stdin-passthrough) would otherwise block here forever on the
-  // readFileSync(0) call when isTTY === undefined.
-  if (!args.evidence && hasReadableStdin()) {
-    args.evidence = "-";
-  }
-  if (args.evidence) {
-    try {
-      submission = readEvidence(args.evidence);
-    } catch (e) {
-      return emitError(`ingest: failed to read evidence: ${e.message}`, { evidence: args.evidence }, pretty);
-    }
-  }
-  const playbookId = args.domain || submission.playbook_id || submission.domain;
-  if (!playbookId) return emitError("ingest: no playbook resolved — pass --domain <id> or include playbook_id in evidence JSON.", null, pretty);
-  if (refuseInvalidPlaybookId("ingest", playbookId, pretty)) return;
-  const pb = runner.loadPlaybook(playbookId);
-  const directiveId = args.directive
-    || submission.directive_id
-    || (pb.directives[0] && pb.directives[0].id);
-  if (!directiveId) return refuseNoDirectives("ingest", playbookId, pretty);
-
-  // Strip the routing keys so the runner only sees the contract shape it
-  // expects. precondition_checks travel on the submission (not lifted into
-  // runOpts) so run()'s mergedPCs derives them with correct "submission"
-  // provenance — the same path cmdRun uses.
-  const cleanedSubmission = {
-    artifacts: submission.artifacts || {},
-    signal_overrides: submission.signal_overrides || {},
-    signals: submission.signals || {},
-    ...(submission.precondition_checks ? { precondition_checks: submission.precondition_checks } : {}),
-  };
-
-  const result = runner.run(playbookId, directiveId, cleanedSubmission, runOpts);
-
-  // v0.12.8: route ingest's attestation persistence through persistAttestation
-  // — the same path cmdRun + cmdRunMulti use — so the session-id collision
-  // refusal AND the Ed25519 sidecar signing both apply. Pre-v0.12.8 ingest
-  // had its own inline writeFileSync with neither check, meaning two ingest
-  // calls with the same session-id silently clobbered the audit trail and no
-  // .sig sidecar was written.
-  if (result && result.ok && result.session_id) {
-    // Mirror cmdRun / cmdRunMulti: gate operator_consent persistence on
-    // classification === 'detected'. --ack is meaningful only when a
-    // jurisdiction clock is at stake; persisting consent on a
-    // not-detected ingest forges audit-trail consent for a clock that
-    // never started.
-    const ingestClassification = result.phases && result.phases.detect ? result.phases.detect.classification : null;
-    const ingestConsentApplies = ingestClassification === "detected";
-    if (runOpts.operator_consent && !ingestConsentApplies) {
-      result.ack = true;
-      result.ack_applied = false;
-      result.ack_skipped_reason = `classification=${ingestClassification || "unknown"}; consent only persisted when classification=detected (jurisdiction clock at stake).`;
-    }
-    const persisted = persistAttestation({
-      sessionId: result.session_id,
-      playbookId: result.playbook_id,
-      directiveId: result.directive_id,
-      evidenceHash: result.evidence_hash,
-      operator: runOpts.operator,
-      operatorConsent: ingestConsentApplies ? runOpts.operator_consent : null,
-      submission: cleanedSubmission,
-      runOpts,
-      forceOverwrite: !!args["force-overwrite"],
-      filename: "attestation.json",
-    });
-    if (!persisted.ok) {
-      // Route every persist-failure shape through emitError so the
-      // emit() ok:false → exitCode contract applies uniformly. Three
-      // exit classes: LOCK_CONTENTION (transient), STORAGE_EXHAUSTED
-      // (infra), SESSION_ID_COLLISION (operator decision).
-      const ctx = { session_id: result.session_id, existing_path: persisted.existingPath };
-      if (persisted.lock_contention) {
-        ctx.lock_contention = true;
-        ctx.exit_code = EXIT_CODES.LOCK_CONTENTION;
-      }
-      if (persisted.storage_exhausted) {
-        ctx.storage_exhausted = true;
-        ctx.exit_code = EXIT_CODES.STORAGE_EXHAUSTED;
-      }
-      emitError(persisted.error, ctx, pretty);
-      if (persisted.lock_contention) process.exitCode = EXIT_CODES.LOCK_CONTENTION;
-      else if (persisted.storage_exhausted) process.exitCode = EXIT_CODES.STORAGE_EXHAUSTED;
-      else process.exitCode = EXIT_CODES.SESSION_ID_COLLISION;
-      return;
-    }
-    if (persisted.prior_session_id) {
-      result.attestation_persist = { ok: true, prior_session_id: persisted.prior_session_id, overwrote_at: persisted.overwrote_at };
-    }
-  }
-
-  if (result && result.ok === false) {
-    emit(result, pretty);
-    return;
-  }
-  emit(result, pretty);
-}
-
 /**
  * Resolve the attestation root for a given run. Resolution order (most-specific
  * first):

package/data/_indexes/_meta.json

@@ -1,10 +1,10 @@
 {
   "schema_version": "1.1.0",
-  "generated_at": "2026-05-28T22:39:58.047Z",
+  "generated_at": "2026-05-29T00:05:09.817Z",
   "generator": "scripts/build-indexes.js",
   "source_count": 54,
   "source_hashes": {
-    "manifest.json": "1497a0bf6249faeabaa1e797ff2e7cec028351ddd4c27bda6721c95ff1e57d9c",
+    "manifest.json": "2075a9d45002fe52785b0aa326d3bf6531f6b9b611c4c8ae166b413ca5f06b8c",
     "data/atlas-ttps.json": "878b4a08bb73c8d20396d85cf433a88f2bc5e7a8cbf7f6ab773ce7ede0a11251",
     "data/attack-techniques.json": "57b8a1b4e1c3f524a76b4bded09b3082b36b783db3df116f863892072e0f65e9",
     "data/cve-catalog.json": "5849b48dd5489ba6d10cbd3b0b25c9d8412e3932e0ae2304364ec95cf254ec97",
@@ -15,7 +15,7 @@
     "data/framework-control-gaps.json": "29e7b6aa841ddf2530ca5971bdb60d7a715684b2f6264141ad49f0de9a039d78",
     "data/global-frameworks.json": "9ba563a85f7f8d6c3c957de64945e20925a89d0ed6ea6fc561cf093811acf558",
     "data/rfc-references.json": "b21d03b948c41bc8a854e2f057948ecf844bd8c105848aeb141d1eadf8192c31",
-    "data/zeroday-lessons.json": "f12a823e8546785833a06ae69089d87640480f6d28dcff1265ed43d38ebec0ed",
+    "data/zeroday-lessons.json": "e8202ffa99ed7c7d40b89ee5eedbea33839048cbff482e09329292e6700a5157",
     "skills/kernel-lpe-triage/skill.md": "08b3e9815ba481c57c80f5fc0ccbf5bb7cbb41f570c235ba6ff9596b8c07354d",
     "skills/ai-attack-surface/skill.md": "c4c1eb22a38ca7a959b5725222bab8fbd4f4044a548a93f3e288e6f698334b72",
     "skills/mcp-agent-trust/skill.md": "89ac89084391d2341b6513fefb1be2d36b93de1c130f057696219c1c59440f13",

package/data/zeroday-lessons.json

@@ -17,7 +17,7 @@
       "rebuild_after_days": 365,
       "note": "Per-entry last_verified governs decay. Skills depending on this catalog must check entry freshness before high-stakes use."
     },
-    "entry_count": 68
+    "entry_count": 422
   },
   "CVE-2026-31431": {
     "name": "Copy Fail",

package/lib/gap-detectors.js

@@ -158,8 +158,14 @@ function temporalStalenessFindings(loaded, opts = {}) {
     }
 
     // CISA KEV due-date passed without remediation status — surfaces
-    // operationally-stale entries the operator should re-verify.
-    if (e.cisa_kev === true && typeof e.cisa_kev_due_date === "string") {
+    // operationally-stale CURATED entries the operator should re-verify.
+    // Auto-imported drafts are excluded: a KEV due-date passing with wall-clock
+    // time on the un-curated bulk-import backlog is expected (and grows the
+    // count purely by calendar drift, which would mechanically breach the
+    // budget gate on a no-op release). The finding is actionable only once the
+    // entry is curated, so it is scoped to non-draft entries.
+    const isDraft = e._auto_imported === true || e._draft === true;
+    if (!isDraft && e.cisa_kev === true && typeof e.cisa_kev_due_date === "string") {
       const sinceDue = daysSince(e.cisa_kev_due_date, now);
       if (sinceDue !== null && sinceDue > 0) {
         out.push({ class: "temporal-staleness", catalog: "cve-catalog", id,

package/lib/lint-skills.js

@@ -119,7 +119,7 @@ const KEBAB_RE = /^[a-z0-9][a-z0-9-]*[a-z0-9]$/;
 const JSON_FILENAME_RE = /^[A-Za-z0-9._-]+\.json$/;
 
 function parseArgs(argv) {
-  const opts = { skill: null, quiet: false };
+  const opts = { skill: null, quiet: false, strict: false };
   for (let i = 2; i < argv.length; i++) {
     const a = argv[i];
     if (a === '--skill') {
@@ -128,6 +128,11 @@ function parseArgs(argv) {
       opts.skill = a.slice('--skill='.length);
     } else if (a === '--quiet' || a === '-q') {
       opts.quiet = true;
+    } else if (a === '--strict') {
+      // Promote warnings (header-only sections, unresolved draft refs,
+      // playbook air-gap gaps) to release-blocking failures. Used by the
+      // predeploy gate so a warned regression cannot scroll past.
+      opts.strict = true;
     } else if (a === '--help' || a === '-h') {
       printHelp();
       process.exit(0);
@@ -856,7 +861,13 @@ function main() {
   console.log(
     `\n${passed}/${total} skills passed${warnSummary}${failed ? `, ${failed} failed` : ''}${orphanSummary}${airGapSummary}.`,
   );
-  process.exit(failed === 0 && orphans.length === 0 ? 0 : 1);
+  // --strict treats any warning (per-skill or playbook air-gap) as a
+  // release-blocking failure so a warned regression cannot ship silently.
+  const strictFail = opts.strict && (warned > 0 || (airGapWarnings && airGapWarnings.length > 0));
+  if (strictFail) {
+    console.log(`[lint-skills] --strict: ${warned + (airGapWarnings ? airGapWarnings.length : 0)} warning(s) treated as failures.`);
+  }
+  process.exit(failed === 0 && orphans.length === 0 && !strictFail ? 0 : 1);
 }
 
 // Export the minimal frontmatter parser for downstream consumers

package/lib/playbook-runner.js

@@ -2912,8 +2912,6 @@ function buildEvidenceBundle(format, playbook, analyze, validate, agentSignals,
         rwep_adjusted: analyze.rwep?.adjusted || 0,
         rwep_threshold_escalate: analyze.rwep?.threshold?.escalate || null,
         blast_radius_score: analyze.blast_radius_score || 0,
-        feeds_into: null,  // populated by close()
-        jurisdiction_clocks_active: null,  // populated by close()
         remediation_recommended: validate.selected_remediation?.id || null,
       }
     };

package/lib/validate-cve-catalog.js

@@ -272,6 +272,21 @@ function additionalChecks(key, entry, ctx) {
     }
   }
 
+  // V5 — KEV status must carry its date (AGENTS.md Hard Rule #1: a KEV flag
+  // without a date is an incomplete threat-intel claim; RWEP scoring and the
+  // jurisdiction-clock SLAs key off the KEV listing date). cisa_kev=true with a
+  // null/missing/invalid cisa_kev_date is flagged; promoted to a hard error
+  // under --strict (predeploy). 0 violations in the shipped catalog today.
+  if (entry.cisa_kev === true) {
+    const d = entry.cisa_kev_date;
+    const dateOk = typeof d === 'string' && isUsableDate(d).ok;
+    if (!dateOk) {
+      warnings.push(
+        `${key}: cisa_kev=true but cisa_kev_date is ${JSON.stringify(d)} (KEV status must carry a valid listing date — Hard Rule #1)`,
+      );
+    }
+  }
+
   // V4 — Impossible-date guard.
   for (const f of DATE_FIELDS) {
     const v = entry[f];
@@ -352,18 +367,26 @@ function main() {
     }
   }
 
-  // Guard the hand-maintained framework-control-gaps _meta.entry_count against
-  // silent drift (it declared 184 while the file held 192 — 8 entries were
-  // added without bumping the counter, and nothing caught it). Assert the
-  // declared count equals the actual non-_meta entry count.
-  if (frameworks && frameworks._meta && typeof frameworks._meta.entry_count === 'number') {
-    const actualGapCount = Object.keys(frameworks).filter((k) => !k.startsWith('_')).length;
-    if (frameworks._meta.entry_count !== actualGapCount) {
-      process.stderr.write(
-        `[validate-cve-catalog] FAIL: framework-control-gaps _meta.entry_count (${frameworks._meta.entry_count}) ` +
-        `!= actual entry count (${actualGapCount}). Update _meta.entry_count to ${actualGapCount}.\n`,
-      );
-      process.exit(1);
+  // Guard hand-maintained _meta.entry_count fields against silent drift. The
+  // framework-control-gaps counter once declared 184 while the file held 192
+  // and nothing caught it; the zeroday-lessons counter drifted to 68 while the
+  // file held 422 because only framework-control-gaps was gated. This now
+  // checks EVERY loaded catalog that declares a numeric _meta.entry_count, so a
+  // new catalog with the field is covered automatically.
+  const ENTRY_COUNT_CATALOGS = [
+    { name: 'framework-control-gaps', catalog: frameworks },
+    { name: 'zeroday-lessons', catalog: lessons },
+  ];
+  for (const { name, catalog: cat } of ENTRY_COUNT_CATALOGS) {
+    if (cat && cat._meta && typeof cat._meta.entry_count === 'number') {
+      const actual = Object.keys(cat).filter((k) => !k.startsWith('_')).length;
+      if (cat._meta.entry_count !== actual) {
+        process.stderr.write(
+          `[validate-cve-catalog] FAIL: ${name} _meta.entry_count (${cat._meta.entry_count}) ` +
+          `!= actual entry count (${actual}). Update _meta.entry_count to ${actual}.\n`,
+        );
+        process.exit(1);
+      }
     }
   }
 

package/manifest.json

@@ -1,6 +1,6 @@
 {
   "name": "exceptd-security",
-  "version": "0.14.28",
+  "version": "0.15.0",
   "description": "AI security skills grounded in mid-2026 threat reality, not stale framework documentation",
   "homepage": "https://exceptd.com",
   "license": "Apache-2.0",
@@ -53,7 +53,7 @@
       ],
       "last_threat_review": "2026-05-15",
       "signature": "lXhZgoIrrVloO3XaTvo/43AxZn4mwErstd7DR0O/oVhD3AOGODM4HqrageYEou9WKOdMEGP5mJNTjJsXdP5NDA==",
-      "signed_at": "2026-05-28T22:25:44.567Z",
+      "signed_at": "2026-05-28T23:31:33.979Z",
       "cwe_refs": [
         "CWE-125",
         "CWE-362",
@@ -123,7 +123,7 @@
       ],
       "last_threat_review": "2026-05-17",
       "signature": "ztSKk/zFMFbT12qRcEeBKpydBn7fTT86KxMmor0DTCoKQWk5fJ0fSInfP1XMSB6rFk4/SuSjKVxQRMKVJ5a+Cg==",
-      "signed_at": "2026-05-28T22:25:44.569Z",
+      "signed_at": "2026-05-28T23:31:33.981Z",
       "cwe_refs": [
         "CWE-1039",
         "CWE-1426",
@@ -196,7 +196,7 @@
       ],
       "last_threat_review": "2026-05-17",
       "signature": "K6QdPHNK5c4K5QFjrW0QsUhjp71D7SOisSoulwPNSvKRdi2rY+yg0kdckijBMkLMsVPyUvcC9giu93mKJ1OZDg==",
-      "signed_at": "2026-05-28T22:25:44.570Z",
+      "signed_at": "2026-05-28T23:31:33.981Z",
       "cwe_refs": [
         "CWE-22",
         "CWE-345",
@@ -248,7 +248,7 @@
       "framework_gaps": [],
       "last_threat_review": "2026-05-22",
       "signature": "zbr8CbOe2rIPuxj2bCl8mVc3YgLsRHnx3/UU7MmyMLNg4c13q6LEBglC1A7cjhfblfHsX/1rxNLaukDzc65lAw==",
-      "signed_at": "2026-05-28T22:25:44.570Z"
+      "signed_at": "2026-05-28T23:31:33.981Z"
     },
     {
       "name": "compliance-theater",
@@ -279,7 +279,7 @@
       ],
       "last_threat_review": "2026-05-22",
       "signature": "F2Shxae0ua0gPtvwzTRVzzHaIgJcFDRT3/akLUAZ4aaMQhkleKkcTaTpkjp+pTVEdPfLeLGNCeAOMs+whVYOBg==",
-      "signed_at": "2026-05-28T22:25:44.570Z"
+      "signed_at": "2026-05-28T23:31:33.982Z"
     },
     {
       "name": "exploit-scoring",
@@ -308,7 +308,7 @@
       ],
       "last_threat_review": "2026-05-18",
       "signature": "NA1hoQycvQhSUoG5rwlXX0mOVmGxoXRVezkELGEA2nZOdGis4gXkHT3O6Sfw7zxE4JuMrsCb65TEeOWk9WEPDg==",
-      "signed_at": "2026-05-28T22:25:44.571Z"
+      "signed_at": "2026-05-28T23:31:33.982Z"
     },
     {
       "name": "rag-pipeline-security",
@@ -345,7 +345,7 @@
       ],
       "last_threat_review": "2026-05-22",
       "signature": "W3pS8lnaCP96TQzsJpG5d5yv5IwgaQyS4Z2Ctcz5BOJf6LbajSIgeDgTZ4f4Bhr5m4E7KsgWGjZS4x7Fwd33BQ==",
-      "signed_at": "2026-05-28T22:25:44.571Z",
+      "signed_at": "2026-05-28T23:31:33.982Z",
       "cwe_refs": [
         "CWE-1395",
         "CWE-1426"
@@ -405,7 +405,7 @@
       ],
       "last_threat_review": "2026-05-17",
       "signature": "/WDGygh1Ck4yWlBWDGtEUVCqKB8d+UaJXoAoBXujtt+GAl8JbMNpaN1TvI0WkEltQ9dTxaAzSn20/eVDqv8iDQ==",
-      "signed_at": "2026-05-28T22:25:44.572Z",
+      "signed_at": "2026-05-28T23:31:33.983Z",
       "d3fend_refs": [
         "D3-CA",
         "D3-CSPP",
@@ -440,7 +440,7 @@
       "framework_gaps": [],
       "last_threat_review": "2026-05-22",
       "signature": "za1NKBpy9LC91F/ESO/qhUfmvVr8GNItQOjR5OJLeHm+2dQ9HHiFWQK2eo53V/n/0uhubuggURA3yS6kJuWwBg==",
-      "signed_at": "2026-05-28T22:25:44.572Z",
+      "signed_at": "2026-05-28T23:31:33.983Z",
       "cwe_refs": [
         "CWE-1188"
       ],
@@ -474,7 +474,7 @@
       "framework_gaps": [],
       "last_threat_review": "2026-05-18",
       "signature": "1853tUUOO35GCXP4vn4qYdBDCdGJu2/WXCNOShhEt69G6BUoq9C3gYGjKWwEPxRKjwjyMtb2nmsL2BZFHRIADw==",
-      "signed_at": "2026-05-28T22:25:44.572Z",
+      "signed_at": "2026-05-28T23:31:33.983Z",
       "forward_watch": [
         "New AI attack classes as ATLAS v6 publishes",
         "Post-quantum adversary capability timeline",
@@ -513,7 +513,7 @@
       "framework_gaps": [],
       "last_threat_review": "2026-05-01",
       "signature": "ZoFh0msOLToS9Xntp9e6zAcg8mE5TOsm7Tq9EYybKL7midjQ5z+aue1Uhp4+xjMRRqVtj8F2W0PvIBTYkYlyAg==",
-      "signed_at": "2026-05-28T22:25:44.573Z"
+      "signed_at": "2026-05-28T23:31:33.984Z"
     },
     {
       "name": "zeroday-gap-learn",
@@ -540,7 +540,7 @@
       "framework_gaps": [],
       "last_threat_review": "2026-05-18",
       "signature": "igRqYyU1unRFH40BsPyAR62SPrk8QZv8dPGb8S9O9EvLCNOZAzm3t+HdT/NKqzWHwrpomOzkkkyLfYI/0qTUDA==",
-      "signed_at": "2026-05-28T22:25:44.573Z",
+      "signed_at": "2026-05-28T23:31:33.984Z",
       "forward_watch": [
         "New CISA KEV entries",
         "New ATLAS TTP additions in each ATLAS release",
@@ -604,7 +604,7 @@
       ],
       "last_threat_review": "2026-05-22",
       "signature": "XJFnPtu9tG23qlHGUJulQ0/Vu/p41qFrQng0fE3+GpCPD35+oipdlDXvf9zFo6A6i4OVj601qNuXKh9/kfcHDw==",
-      "signed_at": "2026-05-28T22:25:44.573Z",
+      "signed_at": "2026-05-28T23:31:33.984Z",
       "cwe_refs": [
         "CWE-327"
       ],
@@ -652,7 +652,7 @@
       ],
       "last_threat_review": "2026-05-22",
       "signature": "QuOVaQ4E2Sl39TClbhZ7HA9XrYAyRrDL44HY3RTE7aWLue0hV2cxaBt40ALGmHS++631QGFDlZTLZI77Tr6nAA==",
-      "signed_at": "2026-05-28T22:25:44.574Z"
+      "signed_at": "2026-05-28T23:31:33.985Z"
     },
     {
       "name": "security-maturity-tiers",
@@ -689,7 +689,7 @@
       ],
       "last_threat_review": "2026-05-01",
       "signature": "8Px1s2lDj10/Q6erwEQlXgUHM1+OTruUR8qAHPX7Oo3k/l69N6P9sm0PsafS9wDFtj9l5C/OiLiFgzMlMt6vBw==",
-      "signed_at": "2026-05-28T22:25:44.574Z",
+      "signed_at": "2026-05-28T23:31:33.985Z",
       "cwe_refs": [
         "CWE-1188"
       ]
@@ -724,7 +724,7 @@
       "framework_gaps": [],
       "last_threat_review": "2026-05-11",
       "signature": "urRcataVWg6/utyEkSiOWoNxTL8sABRjPR7ShyDfZGnAozFph/yDktSoaPVxQDXwu9EfJE+qhUW5OYR/yJECBQ==",
-      "signed_at": "2026-05-28T22:25:44.574Z"
+      "signed_at": "2026-05-28T23:31:33.985Z"
     },
     {
       "name": "attack-surface-pentest",
@@ -796,7 +796,7 @@
         "Pwn2Own Berlin 2026 (disclosed 2026-05-14, embargo ends 2026-08-12) — Microsoft Edge 4-bug sandbox escape by Orange Tsai (DEVCORE); forward-watch only (browser sandbox, out of current playbook scope); track Microsoft Edge security advisory and KEV add"
       ],
       "signature": "C7lv65/Ecm8JJgSKxrX5lxx0YFzKWtrIQSKp+vy50I5e8945s1JmifGUUrnQwRQhq/Pkv7EmfiH5XSO8h75bDg==",
-      "signed_at": "2026-05-28T22:25:44.575Z"
+      "signed_at": "2026-05-28T23:31:33.986Z"
     },
     {
       "name": "fuzz-testing-strategy",
@@ -856,7 +856,7 @@
         "OSS-Fuzz-Gen / AI-assisted harness generation becoming the default expectation for OSS maintainers"
       ],
       "signature": "Z7ypCUnXx8JpLtgxxB6RHNi39w74AmrGY1N4ofAGCXhkuM2EaFVm1AU0dvl9UQ1bVLfHKEDGqMO/TwlIY7RABg==",
-      "signed_at": "2026-05-28T22:25:44.575Z"
+      "signed_at": "2026-05-28T23:31:33.986Z"
     },
     {
       "name": "dlp-gap-analysis",
@@ -931,7 +931,7 @@
         "Quebec Law 25, India DPDPA, KSA PDPL enforcement actions naming AI-tool prompt data as in-scope personal information"
       ],
       "signature": "IgEnpHOhCftAyfUNdKsjbrd169T9pJkk/rRM2ZEna+H18y7p5x48+1kME2sJMZjJuyAdQFBJi8PJXZFwLGI+DQ==",
-      "signed_at": "2026-05-28T22:25:44.575Z"
+      "signed_at": "2026-05-28T23:31:33.986Z"
     },
     {
       "name": "supply-chain-integrity",
@@ -1010,7 +1010,7 @@
         "Pwn2Own Berlin 2026 (disclosed 2026-05-14, embargo ends 2026-08-12) — NVIDIA Megatron Bridge path traversal by haehae; AI training-stack file-system trust boundary; track patch and SBOM-attestation impact"
       ],
       "signature": "pcLrM98A3vUSZRjwNAk0aZ9umvOwB41XCLLsCOy/IebB2F/06oIrGUKkMHtHwm4pTVPShMMcKdZQQ3jz30FnCg==",
-      "signed_at": "2026-05-28T22:25:44.575Z"
+      "signed_at": "2026-05-28T23:31:33.987Z"
     },
     {
       "name": "defensive-countermeasure-mapping",
@@ -1067,7 +1067,7 @@
       ],
       "last_threat_review": "2026-05-11",
       "signature": "G5q5elh7Q7eu2xcwTVQJGDTGfvZR0OGQaLSLJPb2wjzCHFF8PWuZfCHZdjjqisiRzRWPyLlzgfHeMJqOdy7cBw==",
-      "signed_at": "2026-05-28T22:25:44.576Z"
+      "signed_at": "2026-05-28T23:31:33.987Z"
     },
     {
       "name": "identity-assurance",
@@ -1134,7 +1134,7 @@
       "d3fend_refs": [],
       "last_threat_review": "2026-05-11",
       "signature": "Wv5hGMeHjlaQK1zwicVCA7AvdKgJBgvcjdpGM9Ywahh9tagAKhbkOjybowDQZzu7OZ3bDkbh6pBYc1Sdwr6NAA==",
-      "signed_at": "2026-05-28T22:25:44.576Z"
+      "signed_at": "2026-05-28T23:31:33.987Z"
     },
     {
       "name": "ot-ics-security",
@@ -1190,7 +1190,7 @@
       "d3fend_refs": [],
       "last_threat_review": "2026-05-11",
       "signature": "8t5qKHd3yWi57dvG36YQkLN/X9bQWqtEiYjay4IfSmqhJpM/xXPaQVKNGz3wscrO8OLKUZ0OaX7Mj5kzpgBKBQ==",
-      "signed_at": "2026-05-28T22:25:44.576Z"
+      "signed_at": "2026-05-28T23:31:33.987Z"
     },
     {
       "name": "coordinated-vuln-disclosure",
@@ -1242,7 +1242,7 @@
         "NYDFS 23 NYCRR 500 amendments potentially adding explicit CVD program requirements"
       ],
       "signature": "GDGt4UPqBa04PjlpSmpyihGzd3OgfBN7jaAK5tfwp+LRSs3ygKOdbeivUCCHNagTY1hE6hG2Ou40ADfBFuXeAg==",
-      "signed_at": "2026-05-28T22:25:44.577Z"
+      "signed_at": "2026-05-28T23:31:33.988Z"
     },
     {
       "name": "threat-modeling-methodology",
@@ -1292,7 +1292,7 @@
         "PASTA v2 updates incorporating AI/ML application threats"
       ],
       "signature": "t6IgW+ciQMuY5uvLD0HDDB/U1TjZmgAy76bvH0526QcqPMCz27CWX3cdyJ6nxpg3rYrx93xAawu0opw/ZZckCw==",
-      "signed_at": "2026-05-28T22:25:44.577Z"
+      "signed_at": "2026-05-28T23:31:33.988Z"
     },
     {
       "name": "webapp-security",
@@ -1366,7 +1366,7 @@
       "d3fend_refs": [],
       "last_threat_review": "2026-05-11",
       "signature": "ux85YI4t2mVHOyt744Yin1HHy+z11JIFygjKfFfQOBBl5QVV3A267jeIy7utix85irMcpZm/T3yx/ooqiK2tBA==",
-      "signed_at": "2026-05-28T22:25:44.577Z",
+      "signed_at": "2026-05-28T23:31:33.988Z",
       "forward_watch": [
         "NGINX Rift CVE-2026-42945 (disclosed 2026-05-13, source depthfirst) — KEV-watch predicted CISA KEV listing by 2026-05-29; AI-assisted discovery angle; track for active-exploitation confirmation and patch advisory affecting front-door web app deployments"
       ]
@@ -1419,7 +1419,7 @@
       "d3fend_refs": [],
       "last_threat_review": "2026-05-15",
       "signature": "IIXnkZ5ZNqFwOto5KfytADTLLZLoyXNZACD1ORZ40P1HUAQxe6u2uyXFzzsfuob4Uy06jNkRGr2FFgCphUH1Cw==",
-      "signed_at": "2026-05-28T22:25:44.578Z"
+      "signed_at": "2026-05-28T23:31:33.989Z"
     },
     {
       "name": "sector-healthcare",
@@ -1479,7 +1479,7 @@
       "d3fend_refs": [],
       "last_threat_review": "2026-05-11",
       "signature": "AhF9KF8ZBlDteciV+F8IBSmFVYCvQOn44GmD4rZjgLoPxfIv/QE1/vSkK32zyqDKtHWkLSXExbkkPkxA/V6dDw==",
-      "signed_at": "2026-05-28T22:25:44.578Z"
+      "signed_at": "2026-05-28T23:31:33.989Z"
     },
     {
       "name": "sector-financial",
@@ -1560,7 +1560,7 @@
         "TIBER-EU framework v2.0 alignment with DORA TLPT RTS (JC 2024/40); cross-recognition with CBEST and iCAST"
       ],
       "signature": "HQgZvb4ReziEz5rNFr8i/O8/rJEZR+iHRROT7m/D2QUqhrcNISPkYXENsUZlG8xapzy/Ik92ehkseyj4hdmhCQ==",
-      "signed_at": "2026-05-28T22:25:44.579Z"
+      "signed_at": "2026-05-28T23:31:33.990Z"
     },
     {
       "name": "sector-federal-government",
@@ -1629,7 +1629,7 @@
         "Australia PSPF 2024 revision and ISM quarterly updates — track for Essential Eight Maturity Level requirements for federal entities"
       ],
       "signature": "linxmsXZiOYtcs71sSWgGCrvb8xQfmxmtTY5PRvZJ0/8FgJulo0tQtejzexYG775s7XhjAmGsDP238BQTQ8ADA==",
-      "signed_at": "2026-05-28T22:25:44.579Z"
+      "signed_at": "2026-05-28T23:31:33.990Z"
     },
     {
       "name": "sector-energy",
@@ -1694,7 +1694,7 @@
         "ICS-CERT advisory feed (https://www.cisa.gov/news-events/cybersecurity-advisories/ics-advisories) for vendor CVEs in Siemens, Rockwell, Schneider Electric, ABB, GE Vernova, Hitachi Energy, AVEVA / OSIsoft PI"
       ],
       "signature": "JjBfc0ovta560Clk0x3QGRM5osFJDwcvpy3rT7QEGdCIL827jzE8QCow1C8deXq+4JhY2sA/d7/8IsxikdlkCg==",
-      "signed_at": "2026-05-28T22:25:44.579Z"
+      "signed_at": "2026-05-28T23:31:33.990Z"
     },
     {
       "name": "sector-telecom",
@@ -1780,7 +1780,7 @@
         "O-RAN SFG / WG11 security specifications"
       ],
       "signature": "QpfWU8d2FFbo/Kt0Be2jcyDM9JPhKOiwKSi+RWmtPa2SrBVzFNYdC3T23fQXxHDEC2iyApEbXnwk8KN4d6PuBQ==",
-      "signed_at": "2026-05-28T22:25:44.580Z"
+      "signed_at": "2026-05-28T23:31:33.991Z"
     },
     {
       "name": "api-security",
@@ -1849,7 +1849,7 @@
       "d3fend_refs": [],
       "last_threat_review": "2026-05-18",
       "signature": "BmCRCestWqr55+fCynEhtAl5NWLT+xLTkpwS0Icp3SaoZOw/ce3Y6TtqjHRSKn4CBJq7YDiLRWxmhO3MStvOAA==",
-      "signed_at": "2026-05-28T22:25:44.580Z",
+      "signed_at": "2026-05-28T23:31:33.991Z",
       "forward_watch": [
         "NGINX Rift CVE-2026-42945 (disclosed 2026-05-13, source depthfirst) — KEV-watch predicted CISA KEV listing by 2026-05-29; track for active-exploitation confirmation and patch advisory affecting API gateway / reverse-proxy deployments",
         "Pwn2Own Berlin 2026 (disclosed 2026-05-14, embargo ends 2026-08-12) — LiteLLM 3-bug SSRF + Code Injection chain by k3vg3n; LLM-proxy API surface; track upstream patch and CVE assignments",
@@ -1935,7 +1935,7 @@
         "CISA KEV additions for cloud-control-plane CVEs (IMDSv1 abuses, federation token mishandling, cross-tenant boundary failures); CISA Cybersecurity Advisories for cross-cloud advisories"
       ],
       "signature": "/DV3pmZwrRySrk1OCbyI+0BQESacjupJfUX3eC2NGtXuYOBro0vndIP+z27heFxumnjU3a9sfla7/U9X+pqnDw==",
-      "signed_at": "2026-05-28T22:25:44.580Z"
+      "signed_at": "2026-05-28T23:31:33.991Z"
     },
     {
       "name": "container-runtime-security",
@@ -1997,7 +1997,7 @@
       "d3fend_refs": [],
       "last_threat_review": "2026-05-15",
       "signature": "E2UGSf9ATyYgzBr8uM/0ubOUmDqo1jVA7f9mVxv6LHfWGCNuQNXDyuNou9VAmUCeeXEeUYIi3AFjXkJqpOkxDA==",
-      "signed_at": "2026-05-28T22:25:44.581Z",
+      "signed_at": "2026-05-28T23:31:33.992Z",
       "forward_watch": [
         "Pwn2Own Berlin 2026 (disclosed 2026-05-14, embargo ends 2026-08-12) — NVIDIA Container Toolkit container escape ($50K award) by chompie / IBM X-Force XOR; high-severity container/hypervisor boundary break; track patch and KEV add post-embargo"
       ]
@@ -2071,7 +2071,7 @@
         "MITRE ATLAS v5.6.0 (released May 2026) shipped the AML.T0010 sub-technique expansion this forecast tracked plus new techniques (\"Publish Poisoned AI Agent Tool\", \"Escape to Host\"); inventory now 16 tactics, 84 techniques, 56 sub-techniques. Forward watch: subsequent ATLAS minor and major releases — track next-cadence updates to agentic-AI TTPs and MLOps-pipeline-specific techniques"
       ],
       "signature": "IL+DlRCDJN/p08iiJCFkasKcoyjcB0uWrJ6ORLjQcS1HrUa5Xt62QxVjYPHzaevlm5y36ZdmfESqsZJmzK3lCg==",
-      "signed_at": "2026-05-28T22:25:44.581Z"
+      "signed_at": "2026-05-28T23:31:33.992Z"
     },
     {
       "name": "incident-response-playbook",
@@ -2133,7 +2133,7 @@
         "NYDFS 23 NYCRR 500.17 amendments tightening ransom-payment 24h disclosure operationalization"
       ],
       "signature": "MmjLjlmOMLjhJJ4ZfR8MYlHam+ZB+eSqfh6Nv+DecaG4O5zeo9DBP/iL3cbyDVZxmhnhivgJild2ccYeWTeZAg==",
-      "signed_at": "2026-05-28T22:25:44.581Z"
+      "signed_at": "2026-05-28T23:31:33.992Z"
     },
     {
       "name": "ransomware-response",
@@ -2213,7 +2213,7 @@
       ],
       "last_threat_review": "2026-05-22",
       "signature": "ssueL03g9fWlhXpTe+IiY5l7RqQkunN4DTN5QETKE+VOX+qggdjAR8PONxk77ol4xWYmHrM/VcH8CNtXUEvgBA==",
-      "signed_at": "2026-05-28T22:25:44.582Z"
+      "signed_at": "2026-05-28T23:31:33.993Z"
     },
     {
       "name": "email-security-anti-phishing",
@@ -2266,7 +2266,7 @@
       "d3fend_refs": [],
       "last_threat_review": "2026-05-18",
       "signature": "oAFeZmci6BN7Xlu0oOThrazZNBQBIWeCQnoZDqjXo9cs1hIe/6ZijSEr3R3hFQSXH3c1KAbhPw+InR9Gc0HIBQ==",
-      "signed_at": "2026-05-28T22:25:44.582Z"
+      "signed_at": "2026-05-28T23:31:33.993Z"
     },
     {
       "name": "age-gates-child-safety",
@@ -2334,7 +2334,7 @@
         "US state adult-site age-verification laws — 19+ states by mid-2026 (TX HB 18 upheld by SCOTUS June 2025 in Free Speech Coalition v. Paxton); track ongoing challenges in remaining states"
       ],
       "signature": "Rgho5TOFUL1txOzcVR0kASCNdovSU4yt99JlGilJlJRyg0A+BdeeQYrZrhPF6Vx2reUAVG0BeHfcZtSbi+cwCg==",
-      "signed_at": "2026-05-28T22:25:44.582Z"
+      "signed_at": "2026-05-28T23:31:33.994Z"
     },
     {
       "name": "cloud-iam-incident",
@@ -2414,7 +2414,7 @@
       ],
       "last_threat_review": "2026-05-15",
       "signature": "e/kij7GtKaytROyIj7V5RH+FC9WtmVFzrmG2kIlNDNn29ep/CRNlIQKwXLpzo/81AIf634pmdr1qy/+vwIuUDA==",
-      "signed_at": "2026-05-28T22:25:44.583Z",
+      "signed_at": "2026-05-28T23:31:33.994Z",
       "forward_watch": [
         "AWS IAM Identity Center session-policy refresh and step-up-on-admin enforcement (anticipated 2026-H2 release)",
         "GCP Workload Identity Federation principal-set attribute mapping tightening (post-2026 Q3 Federation hardening guide)",
@@ -2508,7 +2508,7 @@
       ],
       "last_threat_review": "2026-05-15",
       "signature": "ew9Kglc9fAZzbn0ZIfGP7WSK/j4eV2VhSvpy+s5bEfNEVYIMa2kZjnGBapgUsyGDLes9H9K2ovjQyX17+GKiBw==",
-      "signed_at": "2026-05-28T22:25:44.583Z",
+      "signed_at": "2026-05-28T23:31:33.994Z",
       "forward_watch": [
         "Entra ID conditional access evolution post-Midnight Blizzard — Microsoft's 2025-2026 commitments on legacy-tenant MFA enforcement and OAuth-app consent gating",
         "Okta IPSIE (Interoperability Profile for Secure Identity in the Enterprise) OpenID Foundation working-group output and adoption timeline",
@@ -2526,6 +2526,6 @@
   ],
   "manifest_signature": {
     "algorithm": "Ed25519",
-    "signature_base64": "T4f7z18u/a4Qo3kozxtntEY/lZop3Ta1cW0pCe06Z+5PE1hoiwNlxP6xNZNMcd5Q1FxoQgNtRuonoqrlpZYHBQ=="
+    "signature_base64": "NsU29V6sBT+3b6VzUTJTkEOAad5kJac5OU+eXj+Dh6jX7FNYjLaeaWSS2HXNffMetsy4uMfXYooKp+0ZHBWiDQ=="
   }
 }

package/orchestrator/index.js

@@ -88,9 +88,28 @@ async function main() {
     case 'skill':
       runSkillContext(args);
       break;
-    case 'pipeline':
-      runPipeline(args[0] || 'manual', args[1] ? JSON.parse(args[1]) : {});
+    case 'pipeline': {
+      // pipeline is not dispatched by the bin/ CLI; it's reachable only via a
+      // direct orchestrator invocation. Guard the findings JSON.parse so
+      // malformed input emits a structured ok:false envelope instead of an
+      // uncaught SyntaxError stack trace.
+      let findings = {};
+      if (args[1]) {
+        try {
+          findings = JSON.parse(args[1]);
+        } catch (err) {
+          process.stdout.write(JSON.stringify({
+            ok: false,
+            verb: 'pipeline',
+            error: `pipeline: findings argument is not valid JSON: ${err.message}`,
+          }) + '\n');
+          safeExit(EXIT_CODES.GENERIC_FAILURE);
+          break;
+        }
+      }
+      runPipeline(args[0] || 'manual', findings);
       break;
+    }
     case 'currency':
       runCurrency();
       break;
@@ -136,6 +155,10 @@ function runFrameworkGap(rawArgs) {
   const path = require('path');
   const { gapReport, theaterCheck } = require('../lib/framework-gap');
 
+  // Reject unknown flags with the shared structured envelope. framework-gap
+  // consumes only --json; the global air-gap flags are accepted-and-ignored
+  // (the analytical path reads local catalogs, no egress).
+  if (rejectUnknownFlags('framework-gap', rawArgs, ['--json', '--air-gap', '--offline', '--no-network'])) return;
   const args = rawArgs.filter(a => !a.startsWith('--'));
   const flags = new Set(rawArgs.filter(a => a.startsWith('--')));
   const jsonOut = flags.has('--json');
@@ -270,7 +293,10 @@ async function runScan() {
   // other verbs (validate-cves, watchlist, etc.). Previously this was a
   // bare `process.argv.includes('--json')`, which differed in style from
   // the verbs below and could miss `--json=true` or similar future forms.
-  if (rejectUnknownFlags('scan', args, ['--json'])) return;
+  // --air-gap / --offline / --no-network are global flags; scan does only
+  // local filesystem probing, so they're accepted-and-ignored rather than
+  // rejected (no network I/O to suppress).
+  if (rejectUnknownFlags('scan', args, ['--json', '--air-gap', '--offline', '--no-network'])) return;
   const { flags } = parseFlags(process.argv.slice(2), []);
   const jsonOut = flags.has('--json');
   if (!jsonOut) console.log('[orchestrator] Scanning environment...\n');
@@ -308,7 +334,9 @@ async function runScan() {
 }
 
 async function runDispatch() {
-  if (rejectUnknownFlags('dispatch', args, ['--json'])) return;
+  // --air-gap / --offline / --no-network: local-only verb, accepted-and-ignored
+  // (see runScan).
+  if (rejectUnknownFlags('dispatch', args, ['--json', '--air-gap', '--offline', '--no-network'])) return;
   const jsonOut = process.argv.includes('--json');
   if (!jsonOut) console.log('[orchestrator] Scanning then dispatching...\n');
   const scanResult = await scan();
@@ -356,6 +384,10 @@ function runSkillContext(rawArgs) {
   // `skill --json` passed "--json" through as args[0] and reported
   // "Skill not found: --json".
   const argList = Array.isArray(rawArgs) ? rawArgs : (rawArgs == null ? [] : [rawArgs]);
+  // Reject unknown flags with the shared structured envelope. skill consumes
+  // only --json; the global air-gap flags are accepted-and-ignored (skill
+  // context is read from local skill files, no egress).
+  if (rejectUnknownFlags('skill', argList, ['--json', '--air-gap', '--offline', '--no-network'])) return;
   const jsonOut = argList.includes('--json');
   const positionals = argList.filter(a => typeof a === 'string' && !a.startsWith('--'));
   const skillName = positionals[0];
@@ -415,7 +447,9 @@ function runPipeline(triggerType, payload) {
 }
 
 function runCurrency() {
-  if (rejectUnknownFlags('currency', args, ['--json'])) return;
+  // --air-gap / --offline / --no-network: local-only verb, accepted-and-ignored
+  // (see runScan).
+  if (rejectUnknownFlags('currency', args, ['--json', '--air-gap', '--offline', '--no-network'])) return;
   const jsonOut = process.argv.includes('--json');
   const result = runCurrencyNow();
   const { currency_report, action_required, critical_count } = currencyCheck();
@@ -442,6 +476,11 @@ function runCurrency() {
 }
 
 async function runReport(format) {
+  // Reject unknown flags with the same structured envelope the other verbs
+  // emit. report takes only a format positional; --json is accepted for
+  // parity, and the global air-gap flags are accepted-and-ignored (the
+  // report path's scan() is local-only).
+  if (rejectUnknownFlags('report', args, ['--json', '--air-gap', '--offline', '--no-network'])) return;
   // v0.11.6 (#98): validate format positional. Pre-0.11.6 unknown formats
   // emitted a generic "# exceptd Report" header — silently accepted any
   // string. Now: reject with structured JSON error matching other verbs.
@@ -655,6 +694,11 @@ function _acquireWatchLock() {
 }
 
 async function runWatch() {
+  // Reject unknown flags before acquiring the watch lock / starting the
+  // scheduler. --log-file is the value-taking option this verb consumes;
+  // --json is accepted for parity; the global air-gap flags are
+  // accepted-and-ignored (watch does no egress of its own).
+  if (rejectUnknownFlags('watch', args, ['--log-file', '--json', '--air-gap', '--offline', '--no-network'])) return;
   const { flags, options } = parseFlags(args, ['--log-file']);
   const logFilePath = options.get('--log-file');
   let logStream = null;

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@blamejs/exceptd-skills",
-  "version": "0.14.28",
-  "description": "AI security skills grounded in mid-2026 threat reality, not stale framework documentation. 42 skills, 11 catalogs (406 CVEs / 171 CWEs / 805 ATT&CK + ICS / 170 ATLAS / 468 D3FEND / 8888 RFCs), 35 jurisdictions, 10-class catalog gap detector + budget gate, real XML parser + canonical-form diff + content-pattern regression detection, Ed25519-signed.",
+  "version": "0.15.0",
+  "description": "AI security skills grounded in mid-2026 threat reality, not stale framework documentation. 42 skills, 11 catalogs (427 CVEs / 173 CWEs / 805 ATT&CK + ICS / 170 ATLAS / 468 D3FEND / 8888 RFCs), 35 jurisdictions, 10-class catalog gap detector + budget gate, real XML parser + canonical-form diff + content-pattern regression detection, Ed25519-signed.",
   "keywords": [
     "ai-security",
     "ai-skills",

package/sbom.cdx.json

@@ -1,23 +1,23 @@
 {
   "bomFormat": "CycloneDX",
   "specVersion": "1.6",
-  "serialNumber": "urn:uuid:adc342aa-0dfc-4fb4-9c38-374fd158f430",
+  "serialNumber": "urn:uuid:779a30c1-027c-4fca-b5e9-b9ddbfd4f383",
   "version": 1,
   "metadata": {
-    "timestamp": "2118-05-20T09:02:34.000Z",
+    "timestamp": "2089-08-02T11:08:49.000Z",
     "tools": [
       {
         "vendor": "blamejs",
         "name": "scripts/refresh-sbom.js",
-        "version": "0.14.28"
+        "version": "0.15.0"
       }
     ],
     "component": {
-      "bom-ref": "pkg:npm/@blamejs/exceptd-skills@0.14.28",
+      "bom-ref": "pkg:npm/@blamejs/exceptd-skills@0.15.0",
       "type": "application",
       "name": "@blamejs/exceptd-skills",
-      "version": "0.14.28",
-      "description": "AI security skills grounded in mid-2026 threat reality, not stale framework documentation. 42 skills, 11 catalogs (406 CVEs / 171 CWEs / 805 ATT&CK + ICS / 170 ATLAS / 468 D3FEND / 8888 RFCs), 35 jurisdictions, 10-class catalog gap detector + budget gate, real XML parser + canonical-form diff + content-pattern regression detection, Ed25519-signed.",
+      "version": "0.15.0",
+      "description": "AI security skills grounded in mid-2026 threat reality, not stale framework documentation. 42 skills, 11 catalogs (427 CVEs / 173 CWEs / 805 ATT&CK + ICS / 170 ATLAS / 468 D3FEND / 8888 RFCs), 35 jurisdictions, 10-class catalog gap detector + budget gate, real XML parser + canonical-form diff + content-pattern regression detection, Ed25519-signed.",
       "licenses": [
         {
           "license": {
@@ -25,17 +25,17 @@
           }
         }
       ],
-      "purl": "pkg:npm/%40blamejs/exceptd-skills@0.14.28",
+      "purl": "pkg:npm/%40blamejs/exceptd-skills@0.15.0",
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "706dd84696e6d51b0b24bc8c89c1e25dd3c22919c874f6d8831e8206f4465ca6"
+          "content": "958178dbd6a92b6863edbb5d1e77004b11bbf65850e70d1d1a010ada78d2ca61"
         }
       ],
       "externalReferences": [
         {
           "type": "distribution",
-          "url": "https://www.npmjs.com/package/@blamejs/exceptd-skills/v/0.14.28"
+          "url": "https://www.npmjs.com/package/@blamejs/exceptd-skills/v/0.15.0"
         },
         {
           "type": "vcs",
@@ -101,11 +101,11 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "c53e00aca85205cfae25eba8f333e64f43e48823013cdc1e4f4dcdd8260ddfe7"
+          "content": "0ec6914dd27c3c015bbd1a6c6e534853f5aaef25ac7299b6e40f309553e7546c"
         },
         {
           "alg": "SHA3-512",
-          "content": "d7a884c53b790f39f8d487d07dfc4b75f56d433639e8cc7c592e1d6fa830b02a7fa82c32164264132b08342a082245d2396edf90884813cdeca1d79591ed0b75"
+          "content": "2b00b049ab8261131963e476fcc40486d684b4e95a0dcbdc20affd978dc073e8b151af6b75c9cfe2d292b9b8cda65aed1b27b36588ca40f7299538f09b093a40"
         }
       ]
     },
@@ -116,11 +116,11 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "ee8b4a99ebd34881c58910675d5323667f48e8d3681f0f4e3817b7c0b05547b7"
+          "content": "5f6f30b13d184ad89b9ec37b646a415efe9c3b321950ead58173d96151561fe8"
         },
         {
           "alg": "SHA3-512",
-          "content": "f34a6527ce8daf3615dfcabb60a23e9fe9f75f54fd84a59f991c7fc8f943fcd755c6fdc1b9bcc0b9d6ed30f3c06cd615345571c2a398afffc1b531402c0849ed"
+          "content": "9e279065a57a02b74c37e8f0c9c239ef05976769493d49b172a0f6a77ae49023b23de61f0215e608dcb14e80b2ebfae9a492d8b3afecde0bf4de5dacbeb48e49"
         }
       ]
     },
@@ -176,11 +176,11 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "ec4903c106417648c6ba1077f7a00ac381b1f946f9c71abdc550e6555af4ca8d"
+          "content": "45236da64a3811cc1301477352b6c8aa29b91907f5b9c988176002648284bc52"
         },
         {
           "alg": "SHA3-512",
-          "content": "7a43733a284a3e1769df521f62a3a021b23935ea3e6ab19f1a1702c59f47474f58b953898ceb8309f8b747a0aa970270ee7c593ecca9ab52948e1e269ccae502"
+          "content": "9f1f6812a30abc0c973f7b67a428029bb97726dfac7da51c4cf984e01ee5373c2422f2b3d3512427d182fb0b14ec248ef5bba07e21ff72f5fb6893180d9a7498"
         }
       ]
     },
@@ -281,11 +281,11 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "b96501c14bcb65b8cd627010ec92192e1fb0682723d5515b0f4d1f03f7f19c92"
+          "content": "95b02d8293463cbf429a6ec57285c73ab83e9c93172391d019187ae68fe3a924"
         },
         {
           "alg": "SHA3-512",
-          "content": "e52228baae7e25225230785cbb64c288fc23dc903043d3436759f03a3fc5d794c12bfa77c2edfded4537e0d0c8bf4127169cb221eb85a112cf548d9c864d2acb"
+          "content": "8a3367e81fe6e0ac89cc430aa7b55da3fd52e30ccdc2b790f0e36a2db699ab0f60cd1027afe7d48aba4f38101a419495e1f03edd25f87eee64d67a8b68f53aa0"
         }
       ]
     },
@@ -806,11 +806,11 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "f12a823e8546785833a06ae69089d87640480f6d28dcff1265ed43d38ebec0ed"
+          "content": "e8202ffa99ed7c7d40b89ee5eedbea33839048cbff482e09329292e6700a5157"
         },
         {
           "alg": "SHA3-512",
-          "content": "84ec8ace7395ef137a4bf2592028a60a735515855792aef32e822a1b9c1e6945515868bbde068212480e16a9648b5bf3fdba2a1a288c496862fd74e7d52883b9"
+          "content": "6a606c36b778ec60e04d59aa02fe08fa6c845c2131f264b7c739f881a89a738bdddd32274b1a0c9d2d27ef829529f5392db2fd803bb9075455d4214f3d3b01ff"
         }
       ]
     },
@@ -1256,11 +1256,11 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "e81dd33acfffe2ff28da4b278bcdc11b7e4616dbc6ff4cd1c92f0f99baf97c8a"
+          "content": "ec24ab0571195a679fda6d7fd23c9c577e9616ba655fd04e4231817ca725f7e4"
         },
         {
           "alg": "SHA3-512",
-          "content": "a0f8c147fefd6c91640d2fbe0c606c371c4f83c8a2f3b380c8d212ec92d8616ee1da220269b42638d60d75fcc730e822cb29e1e87f408e9dd553eed76b7aee02"
+          "content": "7f083e86fa43a70e514d2b62d7337ccfcc644ba5a225936ec972cd11540e6d262321c092acb271897881d2803c9e0b40896aa8af5b272ac0f101c9ef24491bf2"
         }
       ]
     },
@@ -1301,11 +1301,11 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "48aa70089fe9fc3bee80e19042d28d91ceb996ed018b6131db970dba7cadb90e"
+          "content": "2b956a7a8d528e93e6cce8c2b09e7b228495c4d688c1403f7de5f60bc62d71b1"
         },
         {
           "alg": "SHA3-512",
-          "content": "25eebb05dae2722fb94fccdc580334d82efdcbe4a7b4e099b9b5adc55b5ffb94cebc9f645f0e6effdb46db6a8ad1aa0358ac6014c525ceb32dbef655d082cbfe"
+          "content": "ea8d4ff719262d817b2892dbec6e14f687afde27b7ab31ca621c6e9b0a4ccf98eb3aa5a4753281efd06f188b6d0e34bf98aaf995758cf9c3a9379bae5bb17313"
         }
       ]
     },
@@ -1316,11 +1316,11 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "074ab23671792535ace6dc60b46350cda272bb8a19a28e104586aadbc879d486"
+          "content": "60bd6a680557bc848a723a20fc50049941b658f08c72205b4afb0ae19584d837"
         },
         {
           "alg": "SHA3-512",
-          "content": "940022bc025bf54514d10dc87c48fa645679953087f6f19659a06d16ea8337d9108785bd18a7ecbc2d1b395b621bf323baf9a898de1896159421e0fa4abf462b"
+          "content": "8648247dd05f0dcb9da52f2795da8ebda8e95e2652ddf3b1aff5c8cb4d530b7d8bbe4949e061641ace658445baa4f1f5ad1ff8444a0bbb6b964e8adf0e4cd30e"
         }
       ]
     },
@@ -1586,11 +1586,11 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "ba92f12ed265afe414fa79b88aaa677c5bf9b44e4c3837e4d1571e927f28803d"
+          "content": "d3e8dbc27d2a48759a4f40d7e075801065814bc3d971775c2272bc1f26dc1a89"
         },
         {
           "alg": "SHA3-512",
-          "content": "c437e1c817718659544eb1bb1f3181f783619b77f76675494301d329ab0af011e8b03051634ec9039afaefaeba8eb7eaae511bfff63b163dbed51234e70c8b44"
+          "content": "73ef5fd057c8257b4187cd429499e7494d290e0c9792f8e779d8909a9f77e13f8d1d282489ed79c855fa83a45464eb5acbccc603d4baf86325d2bc136ae60a11"
         }
       ]
     },
@@ -1751,11 +1751,11 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "1497a0bf6249faeabaa1e797ff2e7cec028351ddd4c27bda6721c95ff1e57d9c"
+          "content": "2075a9d45002fe52785b0aa326d3bf6531f6b9b611c4c8ae166b413ca5f06b8c"
         },
         {
           "alg": "SHA3-512",
-          "content": "0b61c987e04d7b02c4fbef2d12354615ff9a1982f74e95010ca06ec82836dfbf9444a6d7a583b0c04e42cce604b8fb4537b6bc170cb560d2a93c72d2404f91bb"
+          "content": "f6d432a3b181644811b9e5a8ba646cfa750996451ab408ad34c3bc6fc2d47f3dc3d85e88dda762fe69f63024bfc700d4a58fd19765052eeb77364544eb790988"
         }
       ]
     },
@@ -1811,11 +1811,11 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "4c9ec7d070014f0e1fac5958c1c995ca708df52b7f19c2a36c60573e7629d5b4"
+          "content": "e16aa7a99b3ea873c3977e8649665f4704aa890595654b8f851ba0f5565d0518"
         },
         {
           "alg": "SHA3-512",
-          "content": "f61247ab992bfa2c7ea073a1cf550b94b0a381363b88a23d3c716b154d840d3e28f1e58358ab87b7f264c81e6cd6357fe7d5d02e9f913f9748d62d5fa3b64116"
+          "content": "168c82da32d91b2a9b012948939dea72523b1c6ebe4da06cb49ca27dbefc8ead66c834f1be68a684f049114ebd106903cac6ef5b98e0a7830b8b3e1170f4e865"
         }
       ]
     },
@@ -2171,11 +2171,11 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "ef47f63889341675c90bc07d835f5cfab137b83ab44820799de715e4762c1c74"
+          "content": "79b3d1d5795a64f30ef65a9ec383a212d2eda581cdec4b6b261671b8ef8ad82b"
         },
         {
           "alg": "SHA3-512",
-          "content": "ba197b6fce1c871d80ac2becadb0fff9161b790d78ed5a9409d7100da55e73a6a50ea644771b550bfd9654a69953c8b905fc609d3078d8fe9542d629dde5e9d4"
+          "content": "175a1243ad5d375a4d75467073214620021498f5439763581563ee4ded3a03344d1ea824735eb38c200bf5d0dd59c79c6fa0ba0d082d6966f92fb8387769bced"
         }
       ]
     },
@@ -2246,11 +2246,11 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "d126c48bee7da18f03cefba681dcae5b931a0472658e4d7e0227ce3e29461026"
+          "content": "1d3b7bd15af17a88afb82dada50494433299455e76206b23a895f1ff9ca8a696"
         },
         {
           "alg": "SHA3-512",
-          "content": "1ba4ffa94b0bf0bdb7e0bd0b537d016424da070d7c6991b90446dc8991dc005d13d5d306cc69d10ad73f765154eb09716b68cad38ab609069f105974006f4d3e"
+          "content": "d4c3a7dc1af799ed3d8f28ba47b87a3ef4781cb28f688e76322d15404772e5199cc292bcee979eaefb19d0bb519635353a328412c59fd5baa412548282637ec8"
         }
       ]
     },
@@ -2291,11 +2291,11 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "81967862730d2fcfd6b42442031d584cf9718939305d40f7b5ae2ab590f7c85c"
+          "content": "5a7fa5b528b49ca506043e5e3a0ce4a240059a9ff57a187f36750529a8dc64fc"
         },
         {
           "alg": "SHA3-512",
-          "content": "f8d0179cf645f05b3838ebf8ac024689a21bdd7b5a22a824ac47db866ce1246d3fb256dcf71eaa2c8e177dccd9447478dc655edc01f043f7532ac403c6b181fa"
+          "content": "c122f45cc73ffd2a9cd3e72d0a398cd2297bd73b80b2ca540c4d9a8457c199cf7607bd34b60c9535557cf19f5b6d619014a6b14577909c69d11101785bc3fc56"
         }
       ]
     },

package/scripts/check-catalog-gap-budget.js

@@ -51,7 +51,11 @@ function loadAll() {
 // in tests/shipped-catalog-integrity.test.js.
 const BUDGET = {
   "content-quality": 12,
-  "temporal-staleness": 260,
+  // temporal-staleness counts CURATED entries only — auto-imported draft
+  // KEV-due-passed findings are calendar-drift noise (they once saturated a
+  // 260 budget). Curated actual ~20; 35 leaves headroom without the count
+  // breaching the budget purely as the calendar advances.
+  "temporal-staleness": 35,
   "logical-consistency": 5,
   "cross-ref-completeness": 5,
   "schema-evolution": 0,

package/scripts/check-test-coverage.js

@@ -272,6 +272,15 @@ function extractCliSurface(content) {
     let m;
     while ((m = re.exec(playbookBlock[1])) !== null) verbs.add(m[1]);
   }
+  // REMOVED_VERBS keys are still part of the CLI surface: invoking one returns
+  // a structured refusal envelope (a real, test-covered contract). Counting
+  // them keeps a verb in the surface set when its vestigial COMMANDS entry is
+  // dropped — otherwise removing dead COMMANDS table rows for already-retired
+  // verbs reads as a fresh "removed-but-test-remains" against the refusal test.
+  const removedBlock = content.match(/const REMOVED_VERBS = \{([\s\S]*?)\n\};/);
+  if (removedBlock) {
+    for (const m of removedBlock[1].matchAll(/^\s*"?([a-zA-Z][\w-]+)"?\s*:/gm)) verbs.add(m[1]);
+  }
   const flagRe = /(--[a-zA-Z][\w-]+)/g;
   let m;
   while ((m = flagRe.exec(content)) !== null) flags.add(m[1]);

package/scripts/predeploy.js

@@ -68,7 +68,11 @@ const GATES = [
   {
     name: "Validate CVE catalog schema + zero-day learning coverage",
     command: process.execPath,
-    args: [path.join(ROOT, "lib", "validate-cve-catalog.js")],
+    // --strict promotes the deferred warning checks (cross-catalog ref
+    // resolution, strict CVSS-vector prefix, KEV-date-required, Hard-Rule-#14
+    // IoCs) to hard failures so they block a release rather than scrolling
+    // past. Auto-imported drafts stay exempt.
+    args: [path.join(ROOT, "lib", "validate-cve-catalog.js"), "--strict"],
     ciJobName: "Data integrity (catalog + manifest snapshot)",
   },
   // the "validate-cves --offline --no-fail" and
@@ -89,7 +93,7 @@ const GATES = [
   {
     name: "Lint skill files",
     command: process.execPath,
-    args: [path.join(ROOT, "lib", "lint-skills.js")],
+    args: [path.join(ROOT, "lib", "lint-skills.js"), "--strict"],
     ciJobName: "Lint skill files",
   },
   {
@@ -113,7 +117,7 @@ const GATES = [
   {
     name: "Validate catalog _meta (tlp + source_confidence + freshness_policy)",
     command: process.execPath,
-    args: [path.join(ROOT, "lib", "validate-catalog-meta.js")],
+    args: [path.join(ROOT, "lib", "validate-catalog-meta.js"), "--strict"],
     ciJobName: "Data integrity (catalog + manifest snapshot)",
   },
   {
@@ -174,7 +178,7 @@ const GATES = [
     // v0.13.0 additions) all validate cleanly.
     name: "Validate playbooks (schema + cross-refs)",
     command: process.execPath,
-    args: [path.join(ROOT, "lib", "validate-playbooks.js")],
+    args: [path.join(ROOT, "lib", "validate-playbooks.js"), "--strict"],
     ciJobName: "Validate playbooks",
   },
   {