@blamejs/exceptd-skills 0.14.3 → 0.14.5

package/CHANGELOG.md

@@ -1,5 +1,19 @@
 # Changelog
 
+## 0.14.5 — 2026-05-27
+
+`reattest` no longer reports a false "drifted" on an unchanged session. It now replays the original recorded submission instead of a hardcoded empty one, so unchanged evidence reproduces its prior hash and only a genuine change in the evidence (or the way it canonicalizes) shows as drift. The `attest diff` path was already correct; this fixes the replay-based `reattest`/`attest diff <sid>` verb, which previously emitted "drifted" — and wrote that bogus verdict into the audit trail — on every unchanged session.
+
+`exceptd discover --cwd <dir>` now scans the target directory instead of silently scanning the process working directory; a nonexistent or non-directory path errors cleanly rather than being ignored.
+
+`collect` warns on stderr when any precondition fails — not only when the collector emits an empty submission — so a collector that gathers artifacts but fails a consent/ownership gate (such as `cicd-pipeline-compromise`) tells you up front that `run` will block at preflight.
+
+`lint` distinguishes a required artifact that is present but intentionally uncaptured (e.g. a POSIX-mode probe a collector skips on Windows) from one that is absent, instead of advising you to add an artifact that is already there.
+
+## 0.14.4 — 2026-05-27
+
+Clearer errors. A case-only playbook typo — `run SECRETS` — now suggests the right id ("Did you mean: secrets?") instead of only printing the id-format rule. Input-validation errors (a bad `--scope`, malformed evidence) are reported plainly rather than dressed as an "internal error" with a file-a-bug pointer. `exceptd ask` now points a question that names a specific CVE or RFC at the direct resolver (`exceptd cve <id>` / `exceptd rfc <n>`). The malformed-CVE message reads accurately for a short year, not only a non-numeric tail, and the RFC resolver's documentation reflects that obsoleted/historic RFCs are now in the local index.
+
 ## 0.14.3 — 2026-05-27
 
 The resolved-citation cache is now integrity-checked. Each cached record carries a content digest (covering its `resolved_at` timestamp) that is verified on read, and freshness is gated on that timestamp rather than the file's modification time. A cache file edited in place — flipping a rejected CVE to "published" — is rejected as tampered instead of trusted, and a touched file can no longer resurrect a stale verdict. This closes a path where a writable cache could launder a rejected or fabricated citation into a passing verdict (which feeds `collect citation-hygiene --resolve` and, in turn, attestations).

package/bin/exceptd.js

@@ -1715,6 +1715,19 @@ function dispatchPlaybook(cmd, argv) {
         return emitError(`Playbook not found: "${wanted}". ${hint}`, { verb: cmd, wanted, type: "playbook_not_found" }, pretty);
       }
     }
+    // Distinguish an operator-input validation error from a genuine internal
+    // fault. A validation message ("--scope must be one of […]", "must match
+    // …") is the operator's to fix — emit it plainly instead of labeling it an
+    // "internal error" and inviting a bug report. The NPE/typeerror guards keep
+    // real internal faults (that happen to contain "invalid") on the bug path.
+    const msg = e && e.message ? String(e.message) : String(e);
+    if (
+      /\b(must be|must match|not in accepted set|is not a valid|unrecognized)\b|\binvalid /i.test(msg) &&
+      msg.length < 300 &&
+      !/cannot read prop|is not a function|is not defined|undefined \(reading|maximum call stack/i.test(msg)
+    ) {
+      return emitError(`${cmd}: ${msg}`, { verb: cmd, type: "validation_error" }, pretty);
+    }
     // Wrap bare e.message so operators see the verb that triggered the
     // failure + the next action they can take. Re-running with --pretty
     // expands the cause for log-scraping; the GitHub-issues pointer lets
@@ -2442,8 +2455,17 @@ async function cmdCollect(runner, args, runOpts, pretty) {
   const failedPre = Object.entries(submission.precondition_checks || {})
     .filter(([, v]) => v === false)
     .map(([k]) => k);
-  if (failedPre.length > 0 && (submission.signal_overrides && Object.keys(submission.signal_overrides).length === 0)) {
-    process.stderr.write(`[collect ${playbookId}] precondition not satisfied: ${failedPre.join(", ")} — empty submission emitted (collector skipped on this host)\n`);
+  if (failedPre.length > 0) {
+    // Warn on ANY failed precondition, not only when signal_overrides is empty.
+    // A collector that gathers artifacts but fails a consent/ownership gate
+    // (e.g. cicd-pipeline-compromise's operator-owns-ci-fleet) emits a populated
+    // submission yet `run` will block at preflight — surface that up front so
+    // the operator isn't surprised by the downstream "verdict: blocked".
+    const emptySignals = !submission.signal_overrides || Object.keys(submission.signal_overrides).length === 0;
+    const tail = emptySignals
+      ? "empty submission emitted (collector skipped on this host)"
+      : "submission emitted, but `run` will block at preflight until this precondition is satisfied";
+    process.stderr.write(`[collect ${playbookId}] precondition not satisfied: ${failedPre.join(", ")} — ${tail}\n`);
   }
 
   // Emit the submission JSON to stdout. The operator pipes this into
@@ -2587,10 +2609,16 @@ function cmdLint(runner, args, runOpts, pretty) {
   const normalized = runner.normalizeSubmission(submission, pb);
   const flat = submission.observations || null;
 
-  // After normalize, validation walks the canonical nested shape.
-  const missingRequired = requiredArtifacts.filter(id => {
+  // After normalize, validation walks the canonical nested shape. Distinguish
+  // a truly-absent required artifact (no entry — operator should add it) from
+  // one that is PRESENT but uncaptured (entry with captured:false + a reason,
+  // e.g. a collector's "skipped on win32 — POSIX mode bits not meaningful").
+  // Conflating them told the operator to "add" an artifact that is already
+  // there.
+  const missingRequired = requiredArtifacts.filter(id => !(normalized.artifacts && normalized.artifacts[id]));
+  const uncapturedRequired = requiredArtifacts.filter(id => {
     const a = normalized.artifacts && normalized.artifacts[id];
-    return !a || !a.captured;
+    return a && !a.captured;
   });
 
   const unknownArtifactKeys = Object.keys(normalized.artifacts || {})
@@ -2620,6 +2648,11 @@ function cmdLint(runner, args, runOpts, pretty) {
   for (const id of missingRequired) {
     issues.push({ severity: "warn", kind: "missing_required_artifact", artifact_id: id, hint: `Add to submission.artifacts.${id} = { value, captured: true } (or under observations in the flat shape). The run will still execute without this; the corresponding indicators will return 'inconclusive'.` });
   }
+  for (const id of uncapturedRequired) {
+    const a = normalized.artifacts[id];
+    const reason = a && typeof a.reason === "string" ? a.reason : null;
+    issues.push({ severity: "warn", kind: "uncaptured_required_artifact", artifact_id: id, captured: false, ...(reason ? { reason } : {}), hint: `Artifact "${id}" is present but captured:false${reason ? ` (${reason})` : ""} — it is NOT missing; nothing to add. Its indicators will return 'inconclusive'. Common when a collector intentionally skips a platform-specific probe (e.g. POSIX mode bits on Windows).` });
+  }
   for (const k of unknownArtifactKeys) {
     issues.push({ severity: "warn", kind: "unknown_artifact_key", key: k, hint: `Not in playbook ${playbookId} look.artifacts[]. Recognized: ${[...knownArtifacts].slice(0, 10).join(", ")}…` });
   }
@@ -2974,9 +3007,26 @@ function validateScopeOrThrow(scope) {
 function refuseInvalidPlaybookId(verb, playbookId, pretty) {
   const r = validateIdComponent(playbookId, "playbook");
   if (!r.ok) {
+    // A case-only typo (`run SECRETS`) fails the lowercase-only id regex
+    // before the fuzzy "did you mean" path ever runs. If lowercasing yields a
+    // real playbook, suggest it — the most common id typo shouldn't get the
+    // least helpful error.
+    let suggestion = null;
+    if (typeof playbookId === "string") {
+      const lowered = playbookId.toLowerCase();
+      if (lowered !== playbookId && validateIdComponent(lowered, "playbook").ok) {
+        try {
+          if (fs.existsSync(path.join(PKG_ROOT, "data", "playbooks", `${lowered}.json`))) suggestion = lowered;
+        } catch { /* fall back to no suggestion */ }
+      }
+    }
     emitError(
-      `${verb}: invalid <playbook> id — ${r.reason}.`,
-      { verb, provided: typeof playbookId === "string" ? playbookId.slice(0, 80) : typeof playbookId },
+      `${verb}: invalid <playbook> id — ${r.reason}.${suggestion ? ` Did you mean: ${suggestion}?` : ""}`,
+      {
+        verb,
+        provided: typeof playbookId === "string" ? playbookId.slice(0, 80) : typeof playbookId,
+        ...(suggestion ? { did_you_mean: [suggestion] } : {}),
+      },
       pretty
     );
     return true;
@@ -5024,7 +5074,16 @@ function cmdReattest(runner, args, runOpts, pretty) {
   // Preserve only precondition_checks from the prior submission so the runner
   // doesn't halt on host-environment guards (the reattest is about evidence
   // drift, not re-verifying that the host is still Linux etc.).
-  const emptySubmission = { artifacts: {}, signal_overrides: {}, signals: {} };
+  // Replay the ORIGINAL persisted submission, not a hardcoded empty one.
+  // Replaying empty made the replay's evidence_hash differ from the prior hash
+  // for every session whose original evidence wasn't byte-identical to that
+  // empty stub — i.e. essentially all of them — so reattest reported a false
+  // "drifted" on unchanged sessions. Replaying the prior submission reproduces
+  // the prior hash for unchanged evidence; a mismatch then genuinely means the
+  // hash/canonicalization (or the derived verdict) drifted.
+  const replaySubmission = (prior.submission && typeof prior.submission === "object")
+    ? prior.submission
+    : { artifacts: {}, signal_overrides: {}, signals: {} };
   const replayOpts = Object.assign({}, runOpts, {
     airGap: !!(prior.run_opts && prior.run_opts.airGap) || runOpts.airGap,
     forceStale: true, // bypass currency block on reattest — drift comparison is the point
@@ -5048,7 +5107,7 @@ function cmdReattest(runner, args, runOpts, pretty) {
       }
     } catch { /* ignore */ }
   }
-  const replay = runner.run(prior.playbook_id, prior.directive_id, emptySubmission, replayOpts);
+  const replay = runner.run(prior.playbook_id, prior.directive_id, replaySubmission, replayOpts);
 
   if (!replay || replay.ok === false) {
     // When replay.reason is falsy, dump the available keys so an operator
@@ -5879,7 +5938,18 @@ function previewValue(v) {
 // /etc/os-release on Linux, and outputs a list of recommended playbooks.
 // ---------------------------------------------------------------------------
 function cmdDiscover(runner, args, runOpts, pretty) {
-  const cwd = process.cwd();
+  // Honor --cwd so `discover --cwd <dir>` scans the target tree, not the
+  // process cwd. Pre-fix it was silently ignored — recommendations were
+  // computed for the wrong directory with no signal. Validated like collect.
+  let cwd = process.cwd();
+  if (args.cwd) {
+    const resolved = path.resolve(String(args.cwd));
+    let stat;
+    try { stat = fs.statSync(resolved); }
+    catch (e) { return emitError(`discover: --cwd "${args.cwd}" does not exist (${e.message})`, { verb: "discover", provided_cwd: args.cwd }, pretty); }
+    if (!stat.isDirectory()) return emitError(`discover: --cwd "${args.cwd}" is not a directory`, { verb: "discover", provided_cwd: args.cwd }, pretty);
+    cwd = resolved;
+  }
   const wantJson = !!args.json || !!args.pretty;
   const indent = !!args.pretty;
 
@@ -7664,6 +7734,13 @@ function cmdAsk(runner, args, runOpts, pretty) {
   if (!question) {
     return emitError("ask: usage: exceptd ask \"<plain-English question>\"", null, pretty);
   }
+  // ask routes to playbooks, but a question naming a specific CVE / RFC ("is
+  // CVE-… real", "what is RFC 9404") is answered directly by the resolver
+  // verbs — point at them on stderr so the operator gets the right tool.
+  const cveTok = question.match(/\bCVE-\d{4}-\d{3,}\b/i);
+  const rfcTok = question.match(/\bRFC[-\s]?(\d{1,6})\b/i);
+  if (cveTok) process.stderr.write(`[exceptd] tip: to validate that identifier directly, run \`exceptd cve ${cveTok[0].toUpperCase()}\`.\n`);
+  if (rfcTok) process.stderr.write(`[exceptd] tip: to resolve that RFC directly, run \`exceptd rfc ${rfcTok[1]}\`.\n`);
   const ids = runner.listPlaybooks();
   const q = question.toLowerCase();
 

package/data/_indexes/_meta.json

@@ -1,10 +1,10 @@
 {
   "schema_version": "1.1.0",
-  "generated_at": "2026-05-27T14:56:20.154Z",
+  "generated_at": "2026-05-27T15:45:05.142Z",
   "generator": "scripts/build-indexes.js",
   "source_count": 54,
   "source_hashes": {
-    "manifest.json": "cfe6dbf90ca102b12a5d538e2744df007f7c8df306dc2ccdeac76f408c328d91",
+    "manifest.json": "e70361e642cc385fdfca26ee8ce213cd6e4f5c50e0db0f65b49c0f4caf8d5235",
     "data/atlas-ttps.json": "d24bc02859d40ccf1615db75cca68c077585904e41e0d8f6de448121e9b1abb0",
     "data/attack-techniques.json": "fa193f0d2d248176a8beddb641e9fe56ba4faa9e15dc253ff876dbf0c5d58a77",
     "data/cve-catalog.json": "3d451dda7ac0c7d57a4075ae4bafd3148c6184b35dc1bc59d8b81d1f2641e430",

package/lib/citation-resolve.js

@@ -121,7 +121,7 @@ async function resolveCve(id, opts = {}) {
 
   if (!CVE_RE.test(cveId)) {
     return { ...base, status: "fabricated", from: "format",
-      reason: "not the canonical CVE-YYYY-NNNN form — a non-numeric tail is a fabricated identifier" };
+      reason: "not the canonical CVE-YYYY-NNNN form (4-digit year + 4-or-more-digit sequence) — a malformed identifier" };
   }
 
   // 1. curated catalog (offline, authoritative for the ids it covers)
@@ -202,10 +202,11 @@ async function resolveCve(id, opts = {}) {
 
 /**
  * Resolve an RFC citation. Returns { id, kind:"rfc", number, title, rfc_status,
- * found, from, ... }. The local index covers the whole current RFC series, so
- * number->title resolution is fully offline. Obsoleted/historic RFCs are
- * excluded from the index, so a not-found number is either obsoleted or
- * nonexistent; the optional network step disambiguates.
+ * found, from, ... }. The local index covers the whole RFC series — current
+ * AND obsoleted/historic (the latter carry `_obsoleted` + `obsoleted_by`) — so
+ * number->title resolution, including "is this RFC superseded?", is fully
+ * offline. A number absent from the index is almost certainly nonexistent (or
+ * an UNKNOWN-status placeholder); the optional network step confirms.
  */
 async function resolveRfc(id, opts = {}) {
   const raw = String(id || "").trim();
@@ -238,7 +239,7 @@ async function resolveRfc(id, opts = {}) {
   // 3. offline: report the ambiguity rather than guessing
   if (isAirGap(opts) || opts.noNetwork) {
     return { ...base, number: num, found: false, status: "unknown", from: "offline",
-      reason: "not in the local RFC index — likely obsoleted/historic (excluded from the index) or nonexistent; verify at datatracker.ietf.org when online" };
+      reason: "not in the local RFC index (which includes obsoleted/historic RFCs) — most likely a nonexistent number; confirm at datatracker.ietf.org when online" };
   }
 
   // 4. disambiguate obsoleted vs nonexistent via the datatracker, once + cached

package/lib/flag-suggest.js

@@ -103,7 +103,7 @@ const VERB_FLAG_ALLOWLIST = Object.freeze({
     'bundle-deterministic', 'bundle-epoch',
   ],
   brief: ['all', 'scope', 'directives', 'flat', 'phase'],
-  discover: ['scan-only', 'scope'],
+  discover: ['scan-only', 'scope', 'cwd'],
   ask: [],
   attest: [
     'against', 'playbook', 'since', 'latest', 'format', 'force', 'dry-run',

package/manifest.json

@@ -1,6 +1,6 @@
 {
   "name": "exceptd-security",
-  "version": "0.14.3",
+  "version": "0.14.5",
   "description": "AI security skills grounded in mid-2026 threat reality, not stale framework documentation",
   "homepage": "https://exceptd.com",
   "license": "Apache-2.0",
@@ -53,7 +53,7 @@
       ],
       "last_threat_review": "2026-05-15",
       "signature": "lXhZgoIrrVloO3XaTvo/43AxZn4mwErstd7DR0O/oVhD3AOGODM4HqrageYEou9WKOdMEGP5mJNTjJsXdP5NDA==",
-      "signed_at": "2026-05-27T14:45:52.445Z",
+      "signed_at": "2026-05-27T15:44:01.778Z",
       "cwe_refs": [
         "CWE-125",
         "CWE-362",
@@ -123,7 +123,7 @@
       ],
       "last_threat_review": "2026-05-17",
       "signature": "ztSKk/zFMFbT12qRcEeBKpydBn7fTT86KxMmor0DTCoKQWk5fJ0fSInfP1XMSB6rFk4/SuSjKVxQRMKVJ5a+Cg==",
-      "signed_at": "2026-05-27T14:45:52.447Z",
+      "signed_at": "2026-05-27T15:44:01.780Z",
       "cwe_refs": [
         "CWE-1039",
         "CWE-1426",
@@ -196,7 +196,7 @@
       ],
       "last_threat_review": "2026-05-17",
       "signature": "K6QdPHNK5c4K5QFjrW0QsUhjp71D7SOisSoulwPNSvKRdi2rY+yg0kdckijBMkLMsVPyUvcC9giu93mKJ1OZDg==",
-      "signed_at": "2026-05-27T14:45:52.447Z",
+      "signed_at": "2026-05-27T15:44:01.780Z",
       "cwe_refs": [
         "CWE-22",
         "CWE-345",
@@ -248,7 +248,7 @@
       "framework_gaps": [],
       "last_threat_review": "2026-05-22",
       "signature": "Qd3SBWmUAaaT++e1Ry2wBIz/dCBmNBMl0+4Rb0etvJLES0fIBEAkU1mTbgNZnT5XOg9J5twdUpymWtmKnDDQCQ==",
-      "signed_at": "2026-05-27T14:45:52.448Z"
+      "signed_at": "2026-05-27T15:44:01.780Z"
     },
     {
       "name": "compliance-theater",
@@ -279,7 +279,7 @@
       ],
       "last_threat_review": "2026-05-22",
       "signature": "F2Shxae0ua0gPtvwzTRVzzHaIgJcFDRT3/akLUAZ4aaMQhkleKkcTaTpkjp+pTVEdPfLeLGNCeAOMs+whVYOBg==",
-      "signed_at": "2026-05-27T14:45:52.448Z"
+      "signed_at": "2026-05-27T15:44:01.781Z"
     },
     {
       "name": "exploit-scoring",
@@ -308,7 +308,7 @@
       ],
       "last_threat_review": "2026-05-18",
       "signature": "NA1hoQycvQhSUoG5rwlXX0mOVmGxoXRVezkELGEA2nZOdGis4gXkHT3O6Sfw7zxE4JuMrsCb65TEeOWk9WEPDg==",
-      "signed_at": "2026-05-27T14:45:52.449Z"
+      "signed_at": "2026-05-27T15:44:01.781Z"
     },
     {
       "name": "rag-pipeline-security",
@@ -345,7 +345,7 @@
       ],
       "last_threat_review": "2026-05-22",
       "signature": "W3pS8lnaCP96TQzsJpG5d5yv5IwgaQyS4Z2Ctcz5BOJf6LbajSIgeDgTZ4f4Bhr5m4E7KsgWGjZS4x7Fwd33BQ==",
-      "signed_at": "2026-05-27T14:45:52.449Z",
+      "signed_at": "2026-05-27T15:44:01.782Z",
       "cwe_refs": [
         "CWE-1395",
         "CWE-1426"
@@ -405,7 +405,7 @@
       ],
       "last_threat_review": "2026-05-17",
       "signature": "/WDGygh1Ck4yWlBWDGtEUVCqKB8d+UaJXoAoBXujtt+GAl8JbMNpaN1TvI0WkEltQ9dTxaAzSn20/eVDqv8iDQ==",
-      "signed_at": "2026-05-27T14:45:52.449Z",
+      "signed_at": "2026-05-27T15:44:01.782Z",
       "d3fend_refs": [
         "D3-CA",
         "D3-CSPP",
@@ -440,7 +440,7 @@
       "framework_gaps": [],
       "last_threat_review": "2026-05-22",
       "signature": "za1NKBpy9LC91F/ESO/qhUfmvVr8GNItQOjR5OJLeHm+2dQ9HHiFWQK2eo53V/n/0uhubuggURA3yS6kJuWwBg==",
-      "signed_at": "2026-05-27T14:45:52.450Z",
+      "signed_at": "2026-05-27T15:44:01.782Z",
       "cwe_refs": [
         "CWE-1188"
       ],
@@ -474,7 +474,7 @@
       "framework_gaps": [],
       "last_threat_review": "2026-05-18",
       "signature": "xiHAhhdufm9hCKU8PLiPE0MX65ej2F4OZwtlWLGLCiie9/km+Kiqbt192LcMvr94v83C98pb9wIaqFsFWft6AQ==",
-      "signed_at": "2026-05-27T14:45:52.450Z",
+      "signed_at": "2026-05-27T15:44:01.783Z",
       "forward_watch": [
         "New AI attack classes as ATLAS v6 publishes",
         "Post-quantum adversary capability timeline",
@@ -513,7 +513,7 @@
       "framework_gaps": [],
       "last_threat_review": "2026-05-01",
       "signature": "oYsSk35N2Uzq7MRofACykylcVwkgPhI4luWZ14vmQT+gUKLyZiKVOUJbe1+7lGl6BYPRN0sUDQ0f7S5Eu5w2Ag==",
-      "signed_at": "2026-05-27T14:45:52.450Z"
+      "signed_at": "2026-05-27T15:44:01.783Z"
     },
     {
       "name": "zeroday-gap-learn",
@@ -540,7 +540,7 @@
       "framework_gaps": [],
       "last_threat_review": "2026-05-18",
       "signature": "igRqYyU1unRFH40BsPyAR62SPrk8QZv8dPGb8S9O9EvLCNOZAzm3t+HdT/NKqzWHwrpomOzkkkyLfYI/0qTUDA==",
-      "signed_at": "2026-05-27T14:45:52.451Z",
+      "signed_at": "2026-05-27T15:44:01.783Z",
       "forward_watch": [
         "New CISA KEV entries",
         "New ATLAS TTP additions in each ATLAS release",
@@ -604,7 +604,7 @@
       ],
       "last_threat_review": "2026-05-22",
       "signature": "i/17u4kJiSpcZAz7LnTyRePFugQOstQ1P4kVoe0oGf4E2/j8oIN9U9DccjUn/YHZhKWIJ2AILG/DMhvMrr3bBg==",
-      "signed_at": "2026-05-27T14:45:52.451Z",
+      "signed_at": "2026-05-27T15:44:01.784Z",
       "cwe_refs": [
         "CWE-327"
       ],
@@ -652,7 +652,7 @@
       ],
       "last_threat_review": "2026-05-22",
       "signature": "QuOVaQ4E2Sl39TClbhZ7HA9XrYAyRrDL44HY3RTE7aWLue0hV2cxaBt40ALGmHS++631QGFDlZTLZI77Tr6nAA==",
-      "signed_at": "2026-05-27T14:45:52.451Z"
+      "signed_at": "2026-05-27T15:44:01.784Z"
     },
     {
       "name": "security-maturity-tiers",
@@ -689,7 +689,7 @@
       ],
       "last_threat_review": "2026-05-01",
       "signature": "8Px1s2lDj10/Q6erwEQlXgUHM1+OTruUR8qAHPX7Oo3k/l69N6P9sm0PsafS9wDFtj9l5C/OiLiFgzMlMt6vBw==",
-      "signed_at": "2026-05-27T14:45:52.452Z",
+      "signed_at": "2026-05-27T15:44:01.784Z",
       "cwe_refs": [
         "CWE-1188"
       ]
@@ -724,7 +724,7 @@
       "framework_gaps": [],
       "last_threat_review": "2026-05-11",
       "signature": "urRcataVWg6/utyEkSiOWoNxTL8sABRjPR7ShyDfZGnAozFph/yDktSoaPVxQDXwu9EfJE+qhUW5OYR/yJECBQ==",
-      "signed_at": "2026-05-27T14:45:52.452Z"
+      "signed_at": "2026-05-27T15:44:01.785Z"
     },
     {
       "name": "attack-surface-pentest",
@@ -796,7 +796,7 @@
         "Pwn2Own Berlin 2026 (disclosed 2026-05-14, embargo ends 2026-08-12) — Microsoft Edge 4-bug sandbox escape by Orange Tsai (DEVCORE); forward-watch only (browser sandbox, out of current playbook scope); track Microsoft Edge security advisory and KEV add"
       ],
       "signature": "C7lv65/Ecm8JJgSKxrX5lxx0YFzKWtrIQSKp+vy50I5e8945s1JmifGUUrnQwRQhq/Pkv7EmfiH5XSO8h75bDg==",
-      "signed_at": "2026-05-27T14:45:52.452Z"
+      "signed_at": "2026-05-27T15:44:01.785Z"
     },
     {
       "name": "fuzz-testing-strategy",
@@ -856,7 +856,7 @@
         "OSS-Fuzz-Gen / AI-assisted harness generation becoming the default expectation for OSS maintainers"
       ],
       "signature": "Z7ypCUnXx8JpLtgxxB6RHNi39w74AmrGY1N4ofAGCXhkuM2EaFVm1AU0dvl9UQ1bVLfHKEDGqMO/TwlIY7RABg==",
-      "signed_at": "2026-05-27T14:45:52.453Z"
+      "signed_at": "2026-05-27T15:44:01.785Z"
     },
     {
       "name": "dlp-gap-analysis",
@@ -931,7 +931,7 @@
         "Quebec Law 25, India DPDPA, KSA PDPL enforcement actions naming AI-tool prompt data as in-scope personal information"
       ],
       "signature": "IgEnpHOhCftAyfUNdKsjbrd169T9pJkk/rRM2ZEna+H18y7p5x48+1kME2sJMZjJuyAdQFBJi8PJXZFwLGI+DQ==",
-      "signed_at": "2026-05-27T14:45:52.453Z"
+      "signed_at": "2026-05-27T15:44:01.785Z"
     },
     {
       "name": "supply-chain-integrity",
@@ -1010,7 +1010,7 @@
         "Pwn2Own Berlin 2026 (disclosed 2026-05-14, embargo ends 2026-08-12) — NVIDIA Megatron Bridge path traversal by haehae; AI training-stack file-system trust boundary; track patch and SBOM-attestation impact"
       ],
       "signature": "pcLrM98A3vUSZRjwNAk0aZ9umvOwB41XCLLsCOy/IebB2F/06oIrGUKkMHtHwm4pTVPShMMcKdZQQ3jz30FnCg==",
-      "signed_at": "2026-05-27T14:45:52.453Z"
+      "signed_at": "2026-05-27T15:44:01.786Z"
     },
     {
       "name": "defensive-countermeasure-mapping",
@@ -1067,7 +1067,7 @@
       ],
       "last_threat_review": "2026-05-11",
       "signature": "G5q5elh7Q7eu2xcwTVQJGDTGfvZR0OGQaLSLJPb2wjzCHFF8PWuZfCHZdjjqisiRzRWPyLlzgfHeMJqOdy7cBw==",
-      "signed_at": "2026-05-27T14:45:52.454Z"
+      "signed_at": "2026-05-27T15:44:01.786Z"
     },
     {
       "name": "identity-assurance",
@@ -1134,7 +1134,7 @@
       "d3fend_refs": [],
       "last_threat_review": "2026-05-11",
       "signature": "Wv5hGMeHjlaQK1zwicVCA7AvdKgJBgvcjdpGM9Ywahh9tagAKhbkOjybowDQZzu7OZ3bDkbh6pBYc1Sdwr6NAA==",
-      "signed_at": "2026-05-27T14:45:52.454Z"
+      "signed_at": "2026-05-27T15:44:01.786Z"
     },
     {
       "name": "ot-ics-security",
@@ -1190,7 +1190,7 @@
       "d3fend_refs": [],
       "last_threat_review": "2026-05-11",
       "signature": "8t5qKHd3yWi57dvG36YQkLN/X9bQWqtEiYjay4IfSmqhJpM/xXPaQVKNGz3wscrO8OLKUZ0OaX7Mj5kzpgBKBQ==",
-      "signed_at": "2026-05-27T14:45:52.454Z"
+      "signed_at": "2026-05-27T15:44:01.787Z"
     },
     {
       "name": "coordinated-vuln-disclosure",
@@ -1242,7 +1242,7 @@
         "NYDFS 23 NYCRR 500 amendments potentially adding explicit CVD program requirements"
       ],
       "signature": "GDGt4UPqBa04PjlpSmpyihGzd3OgfBN7jaAK5tfwp+LRSs3ygKOdbeivUCCHNagTY1hE6hG2Ou40ADfBFuXeAg==",
-      "signed_at": "2026-05-27T14:45:52.455Z"
+      "signed_at": "2026-05-27T15:44:01.787Z"
     },
     {
       "name": "threat-modeling-methodology",
@@ -1292,7 +1292,7 @@
         "PASTA v2 updates incorporating AI/ML application threats"
       ],
       "signature": "rFBpOQEJUPpl+v88Lw/WqVJRhTl80vy0VbPAbzQj3Q0suJRRrJg368I9uKu5LXIBKFDvKxnGIcIzbGg9NUtaCA==",
-      "signed_at": "2026-05-27T14:45:52.455Z"
+      "signed_at": "2026-05-27T15:44:01.787Z"
     },
     {
       "name": "webapp-security",
@@ -1366,7 +1366,7 @@
       "d3fend_refs": [],
       "last_threat_review": "2026-05-11",
       "signature": "ux85YI4t2mVHOyt744Yin1HHy+z11JIFygjKfFfQOBBl5QVV3A267jeIy7utix85irMcpZm/T3yx/ooqiK2tBA==",
-      "signed_at": "2026-05-27T14:45:52.455Z",
+      "signed_at": "2026-05-27T15:44:01.788Z",
       "forward_watch": [
         "NGINX Rift CVE-2026-42945 (disclosed 2026-05-13, source depthfirst) — KEV-watch predicted CISA KEV listing by 2026-05-29; AI-assisted discovery angle; track for active-exploitation confirmation and patch advisory affecting front-door web app deployments"
       ]
@@ -1419,7 +1419,7 @@
       "d3fend_refs": [],
       "last_threat_review": "2026-05-15",
       "signature": "IIXnkZ5ZNqFwOto5KfytADTLLZLoyXNZACD1ORZ40P1HUAQxe6u2uyXFzzsfuob4Uy06jNkRGr2FFgCphUH1Cw==",
-      "signed_at": "2026-05-27T14:45:52.456Z"
+      "signed_at": "2026-05-27T15:44:01.788Z"
     },
     {
       "name": "sector-healthcare",
@@ -1479,7 +1479,7 @@
       "d3fend_refs": [],
       "last_threat_review": "2026-05-11",
       "signature": "AhF9KF8ZBlDteciV+F8IBSmFVYCvQOn44GmD4rZjgLoPxfIv/QE1/vSkK32zyqDKtHWkLSXExbkkPkxA/V6dDw==",
-      "signed_at": "2026-05-27T14:45:52.456Z"
+      "signed_at": "2026-05-27T15:44:01.789Z"
     },
     {
       "name": "sector-financial",
@@ -1560,7 +1560,7 @@
         "TIBER-EU framework v2.0 alignment with DORA TLPT RTS (JC 2024/40); cross-recognition with CBEST and iCAST"
       ],
       "signature": "HQgZvb4ReziEz5rNFr8i/O8/rJEZR+iHRROT7m/D2QUqhrcNISPkYXENsUZlG8xapzy/Ik92ehkseyj4hdmhCQ==",
-      "signed_at": "2026-05-27T14:45:52.457Z"
+      "signed_at": "2026-05-27T15:44:01.789Z"
     },
     {
       "name": "sector-federal-government",
@@ -1629,7 +1629,7 @@
         "Australia PSPF 2024 revision and ISM quarterly updates — track for Essential Eight Maturity Level requirements for federal entities"
       ],
       "signature": "linxmsXZiOYtcs71sSWgGCrvb8xQfmxmtTY5PRvZJ0/8FgJulo0tQtejzexYG775s7XhjAmGsDP238BQTQ8ADA==",
-      "signed_at": "2026-05-27T14:45:52.457Z"
+      "signed_at": "2026-05-27T15:44:01.789Z"
     },
     {
       "name": "sector-energy",
@@ -1694,7 +1694,7 @@
         "ICS-CERT advisory feed (https://www.cisa.gov/news-events/cybersecurity-advisories/ics-advisories) for vendor CVEs in Siemens, Rockwell, Schneider Electric, ABB, GE Vernova, Hitachi Energy, AVEVA / OSIsoft PI"
       ],
       "signature": "JjBfc0ovta560Clk0x3QGRM5osFJDwcvpy3rT7QEGdCIL827jzE8QCow1C8deXq+4JhY2sA/d7/8IsxikdlkCg==",
-      "signed_at": "2026-05-27T14:45:52.457Z"
+      "signed_at": "2026-05-27T15:44:01.790Z"
     },
     {
       "name": "sector-telecom",
@@ -1780,7 +1780,7 @@
         "O-RAN SFG / WG11 security specifications"
       ],
       "signature": "JWVxKFoKrbX4d+Tko1d4OBdwyg25MfFFKn4CT6E/CzH+YwnU3T6Y76uBQIKg3+gIGTvPduqyvQwQQ5FxKDuPBw==",
-      "signed_at": "2026-05-27T14:45:52.458Z"
+      "signed_at": "2026-05-27T15:44:01.790Z"
     },
     {
       "name": "api-security",
@@ -1849,7 +1849,7 @@
       "d3fend_refs": [],
       "last_threat_review": "2026-05-18",
       "signature": "BmCRCestWqr55+fCynEhtAl5NWLT+xLTkpwS0Icp3SaoZOw/ce3Y6TtqjHRSKn4CBJq7YDiLRWxmhO3MStvOAA==",
-      "signed_at": "2026-05-27T14:45:52.458Z",
+      "signed_at": "2026-05-27T15:44:01.790Z",
       "forward_watch": [
         "NGINX Rift CVE-2026-42945 (disclosed 2026-05-13, source depthfirst) — KEV-watch predicted CISA KEV listing by 2026-05-29; track for active-exploitation confirmation and patch advisory affecting API gateway / reverse-proxy deployments",
         "Pwn2Own Berlin 2026 (disclosed 2026-05-14, embargo ends 2026-08-12) — LiteLLM 3-bug SSRF + Code Injection chain by k3vg3n; LLM-proxy API surface; track upstream patch and CVE assignments",
@@ -1935,7 +1935,7 @@
         "CISA KEV additions for cloud-control-plane CVEs (IMDSv1 abuses, federation token mishandling, cross-tenant boundary failures); CISA Cybersecurity Advisories for cross-cloud advisories"
       ],
       "signature": "/DV3pmZwrRySrk1OCbyI+0BQESacjupJfUX3eC2NGtXuYOBro0vndIP+z27heFxumnjU3a9sfla7/U9X+pqnDw==",
-      "signed_at": "2026-05-27T14:45:52.458Z"
+      "signed_at": "2026-05-27T15:44:01.791Z"
     },
     {
       "name": "container-runtime-security",
@@ -1997,7 +1997,7 @@
       "d3fend_refs": [],
       "last_threat_review": "2026-05-15",
       "signature": "E2UGSf9ATyYgzBr8uM/0ubOUmDqo1jVA7f9mVxv6LHfWGCNuQNXDyuNou9VAmUCeeXEeUYIi3AFjXkJqpOkxDA==",
-      "signed_at": "2026-05-27T14:45:52.459Z",
+      "signed_at": "2026-05-27T15:44:01.791Z",
       "forward_watch": [
         "Pwn2Own Berlin 2026 (disclosed 2026-05-14, embargo ends 2026-08-12) — NVIDIA Container Toolkit container escape ($50K award) by chompie / IBM X-Force XOR; high-severity container/hypervisor boundary break; track patch and KEV add post-embargo"
       ]
@@ -2071,7 +2071,7 @@
         "MITRE ATLAS v5.6.0 (released May 2026) shipped the AML.T0010 sub-technique expansion this forecast tracked plus new techniques (\"Publish Poisoned AI Agent Tool\", \"Escape to Host\"); inventory now 16 tactics, 84 techniques, 56 sub-techniques. Forward watch: subsequent ATLAS minor and major releases — track next-cadence updates to agentic-AI TTPs and MLOps-pipeline-specific techniques"
       ],
       "signature": "IL+DlRCDJN/p08iiJCFkasKcoyjcB0uWrJ6ORLjQcS1HrUa5Xt62QxVjYPHzaevlm5y36ZdmfESqsZJmzK3lCg==",
-      "signed_at": "2026-05-27T14:45:52.459Z"
+      "signed_at": "2026-05-27T15:44:01.791Z"
     },
     {
       "name": "incident-response-playbook",
@@ -2133,7 +2133,7 @@
         "NYDFS 23 NYCRR 500.17 amendments tightening ransom-payment 24h disclosure operationalization"
       ],
       "signature": "MmjLjlmOMLjhJJ4ZfR8MYlHam+ZB+eSqfh6Nv+DecaG4O5zeo9DBP/iL3cbyDVZxmhnhivgJild2ccYeWTeZAg==",
-      "signed_at": "2026-05-27T14:45:52.460Z"
+      "signed_at": "2026-05-27T15:44:01.792Z"
     },
     {
       "name": "ransomware-response",
@@ -2213,7 +2213,7 @@
       ],
       "last_threat_review": "2026-05-22",
       "signature": "ssueL03g9fWlhXpTe+IiY5l7RqQkunN4DTN5QETKE+VOX+qggdjAR8PONxk77ol4xWYmHrM/VcH8CNtXUEvgBA==",
-      "signed_at": "2026-05-27T14:45:52.460Z"
+      "signed_at": "2026-05-27T15:44:01.792Z"
     },
     {
       "name": "email-security-anti-phishing",
@@ -2266,7 +2266,7 @@
       "d3fend_refs": [],
       "last_threat_review": "2026-05-18",
       "signature": "rK+WnuS+9tqEABmwc0jO/PEmxcLjG1/tmUb897HsClQeKzf+TQOlwBE+OsbtuKxpjYNwur62Xxs3TxObkwm8Cw==",
-      "signed_at": "2026-05-27T14:45:52.460Z"
+      "signed_at": "2026-05-27T15:44:01.793Z"
     },
     {
       "name": "age-gates-child-safety",
@@ -2334,7 +2334,7 @@
         "US state adult-site age-verification laws — 19+ states by mid-2026 (TX HB 18 upheld by SCOTUS June 2025 in Free Speech Coalition v. Paxton); track ongoing challenges in remaining states"
       ],
       "signature": "Rgho5TOFUL1txOzcVR0kASCNdovSU4yt99JlGilJlJRyg0A+BdeeQYrZrhPF6Vx2reUAVG0BeHfcZtSbi+cwCg==",
-      "signed_at": "2026-05-27T14:45:52.461Z"
+      "signed_at": "2026-05-27T15:44:01.793Z"
     },
     {
       "name": "cloud-iam-incident",
@@ -2414,7 +2414,7 @@
       ],
       "last_threat_review": "2026-05-15",
       "signature": "e/kij7GtKaytROyIj7V5RH+FC9WtmVFzrmG2kIlNDNn29ep/CRNlIQKwXLpzo/81AIf634pmdr1qy/+vwIuUDA==",
-      "signed_at": "2026-05-27T14:45:52.461Z",
+      "signed_at": "2026-05-27T15:44:01.793Z",
       "forward_watch": [
         "AWS IAM Identity Center session-policy refresh and step-up-on-admin enforcement (anticipated 2026-H2 release)",
         "GCP Workload Identity Federation principal-set attribute mapping tightening (post-2026 Q3 Federation hardening guide)",
@@ -2508,7 +2508,7 @@
       ],
       "last_threat_review": "2026-05-15",
       "signature": "ew9Kglc9fAZzbn0ZIfGP7WSK/j4eV2VhSvpy+s5bEfNEVYIMa2kZjnGBapgUsyGDLes9H9K2ovjQyX17+GKiBw==",
-      "signed_at": "2026-05-27T14:45:52.461Z",
+      "signed_at": "2026-05-27T15:44:01.794Z",
       "forward_watch": [
         "Entra ID conditional access evolution post-Midnight Blizzard — Microsoft's 2025-2026 commitments on legacy-tenant MFA enforcement and OAuth-app consent gating",
         "Okta IPSIE (Interoperability Profile for Secure Identity in the Enterprise) OpenID Foundation working-group output and adoption timeline",
@@ -2526,6 +2526,6 @@
   ],
   "manifest_signature": {
     "algorithm": "Ed25519",
-    "signature_base64": "4g9yg+sIPpBW8choM56/9IdwYCKGh5fW1/25UcJPxFyxPT/pADsjcclI1UBpzO5Ro9jH9Ex254W6WGVqWZJ5DA=="
+    "signature_base64": "YUt7+G0zRckqKY5EelzM4hfFQ7cvBxcw/ZXDwWBuDi0pSltHJbnZSPWBXyDcH8FQF5wKo8s3jmzQcEVWuLWTCg=="
   }
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@blamejs/exceptd-skills",
-  "version": "0.14.3",
+  "version": "0.14.5",
   "description": "AI security skills grounded in mid-2026 threat reality, not stale framework documentation. 42 skills, 11 catalogs (406 CVEs / 171 CWEs / 805 ATT&CK + ICS / 170 ATLAS / 468 D3FEND / 8888 RFCs), 35 jurisdictions, 10-class catalog gap detector + budget gate, real XML parser + canonical-form diff + content-pattern regression detection, Ed25519-signed.",
   "keywords": [
     "ai-security",

package/sbom.cdx.json

@@ -1,22 +1,22 @@
 {
   "bomFormat": "CycloneDX",
   "specVersion": "1.6",
-  "serialNumber": "urn:uuid:099316cd-41d8-4bbe-8859-2b7c228db3ac",
+  "serialNumber": "urn:uuid:40958687-a502-48c7-89b6-7bb8faaa7910",
   "version": 1,
   "metadata": {
-    "timestamp": "2031-02-03T04:42:53.000Z",
+    "timestamp": "2060-05-02T23:38:47.000Z",
     "tools": [
       {
         "vendor": "blamejs",
         "name": "scripts/refresh-sbom.js",
-        "version": "0.14.3"
+        "version": "0.14.5"
       }
     ],
     "component": {
-      "bom-ref": "pkg:npm/@blamejs/exceptd-skills@0.14.3",
+      "bom-ref": "pkg:npm/@blamejs/exceptd-skills@0.14.5",
       "type": "application",
       "name": "@blamejs/exceptd-skills",
-      "version": "0.14.3",
+      "version": "0.14.5",
       "description": "AI security skills grounded in mid-2026 threat reality, not stale framework documentation. 42 skills, 11 catalogs (406 CVEs / 171 CWEs / 805 ATT&CK + ICS / 170 ATLAS / 468 D3FEND / 8888 RFCs), 35 jurisdictions, 10-class catalog gap detector + budget gate, real XML parser + canonical-form diff + content-pattern regression detection, Ed25519-signed.",
       "licenses": [
         {
@@ -25,17 +25,17 @@
           }
         }
       ],
-      "purl": "pkg:npm/%40blamejs/exceptd-skills@0.14.3",
+      "purl": "pkg:npm/%40blamejs/exceptd-skills@0.14.5",
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "d91bb87b521c678a73cd89966388bd05e9218f847164d0554bebe47370ed245c"
+          "content": "1daea3b739aba84d01a5995f4a7759e21176ed473843595209831f1683a36672"
         }
       ],
       "externalReferences": [
         {
           "type": "distribution",
-          "url": "https://www.npmjs.com/package/@blamejs/exceptd-skills/v/0.14.3"
+          "url": "https://www.npmjs.com/package/@blamejs/exceptd-skills/v/0.14.5"
         },
         {
           "type": "vcs",
@@ -116,11 +116,11 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "247f5a4c21fbbca7cebf0763466756abeef8f3663066a255db6b9f4d24c919a6"
+          "content": "0a84a86948cc670a139e9cd5b22d41060d5a8f7a17d4b3f569fa6a38f0f8695e"
         },
         {
           "alg": "SHA3-512",
-          "content": "02a50115f887fb45f02d8591e8320c3b0a938f23b22e04bc0acbad162384139dbd5f81d9d907dac231efbeff9eae3bf85418a70f7a1f113dd5103a648954be2c"
+          "content": "8b22f97270831e2e793b46e09533852c94e6245b0e477f3d15187f24d786f570fd18fdf0b26f4e909a54218427312e17af0833bef3cc788f1606b6aad8370b93"
         }
       ]
     },
@@ -281,11 +281,11 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "961e1d91c2d0e4cea7e9b91e2106337a65173fec7ceaedaf8873c0c80d6c8812"
+          "content": "285bd4a081382d45dbc207af0728ea2f7aab11a335a22c00cc37caed227e64cb"
         },
         {
           "alg": "SHA3-512",
-          "content": "756c641e00019e4bf63c52ae946831446664764ce90e81b506d27c096facac0b8a2fdff3a7bc13cc946b803c3362931714e4f6a3843437518b1ede250a56ffd4"
+          "content": "9842ea05c52c8134c4ceafa73b4b2450b685f6308a7c01e8d6b13186e396ac901615944075fd74b43f50e3888c555b9c92835134abdeeaaf286a255dd0713166"
         }
       ]
     },
@@ -881,11 +881,11 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "5ebcc854e28fbdc9b93192f93694790193eec74c66f3ffb830cbb337869cd4ad"
+          "content": "7fc089baec25ccb5a228db85572ccd3dc5029832792edfc624c6ed2c24d8289b"
         },
         {
           "alg": "SHA3-512",
-          "content": "85642a02213e52a4eb9f8dd47c6ec18defde10c9b911db726ca3840edd8401e4f1ad091f1853edb88335f91aba496b05d312106c9e0050eb29c8864ac2f4172e"
+          "content": "2c1f27474cded1a4b063c9e261fc0c0e633d4f4478da43d5ad74f1308c1a28366cd87a0b05e096cd485f00037cc5abcb1250160622363d28c74aea3e3777b449"
         }
       ]
     },
@@ -1226,11 +1226,11 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "65257992ec15d25efa25667bd605166159b363719be86ddf4e99f53ce41c54e6"
+          "content": "5a7dcffd308df05272ca9125cc9a41348efde9568aab4a1c9a870e5815214944"
         },
         {
           "alg": "SHA3-512",
-          "content": "31ad733cf5ed8177131f4a73235dd0991946b7eacfe7de3ddcb8717065804f076e66e3a7103c4304c52d33ff1799037893599a4924ef6f56e7c27a30ea615e8d"
+          "content": "f72ef674f175a04c0c15fa9214f75586465970eb091871df3dbe339b8fcd8ef5d6a5bc77013f453c1ffd3031e22b267de89ae9f0135fba1d09e32a840d8ee367"
         }
       ]
     },
@@ -1751,11 +1751,11 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "cfe6dbf90ca102b12a5d538e2744df007f7c8df306dc2ccdeac76f408c328d91"
+          "content": "e70361e642cc385fdfca26ee8ce213cd6e4f5c50e0db0f65b49c0f4caf8d5235"
         },
         {
           "alg": "SHA3-512",
-          "content": "120634030ec92f4a700205a7508ef646bc56f84346213ba9828cea6041c248774ca21c099c68b4681cb6a90ff02a77a0fb2f20d5b631178ca131e7ccf19ffef9"
+          "content": "c3c4936b98fa9e810b744fbba6a417fe398b8a572bb08d1d3a7b82ed350409a119e9c42fe7bdbd1007dbe74becd0534102e25a9d88de8c48c0f05f9ca002b3c8"
         }
       ]
     },