@blamejs/exceptd-skills 0.14.5 → 0.14.7

package/CHANGELOG.md

@@ -1,5 +1,17 @@
 # Changelog
 
+## 0.14.7 — 2026-05-27
+
+The deprecated-alias help is now honest about behavior. `scan`, `dispatch`, `currency`, `validate-cves`, and `validate-rfcs` still run their original (legacy orchestrator) implementation and emit that older output shape — they are not transparent aliases of the canonical verbs listed as their replacements, and the help no longer implies otherwise.
+
+`attest diff --against <sid>` validates the comparison session-id with the same gate as the primary one, so a path-traversal or malformed value returns an explicit "invalid session-id" error instead of a misleading "no session dir found".
+
+## 0.14.6 — 2026-05-27
+
+`attest verify --require-signed` makes an unsigned or sidecar-stripped attestation a failure (exit 1) instead of accepting it as "unsigned, exit 0". An audit gate can now require a valid Ed25519 signature, closing the path where deleting the `.sig` downgraded a tampered attestation to a passing verify. Default `attest verify` stays lenient — an unsigned attestation is reported but not failed (the common keyless-CI case).
+
+New `attest prune --all-older-than <ISO> [--dry-run]` garbage-collects attestation sessions older than a cutoff. One attestation is written per `run` with no prior cleanup, so the store grew unboundedly; `--dry-run` previews the deletions, and removal is confined to the resolved attestation roots.
+
 ## 0.14.5 — 2026-05-27
 
 `reattest` no longer reports a false "drifted" on an unchanged session. It now replays the original recorded submission instead of a hardcoded empty one, so unchanged evidence reproduces its prior hash and only a genuine change in the evidence (or the way it canonicalizes) shows as drift. The `attest diff` path was already correct; this fixes the replay-based `reattest`/`attest diff <sid>` verb, which previously emitted "drifted" — and wrote that bogus verdict into the audit trail — on every unchanged session.

package/bin/exceptd.js

@@ -421,7 +421,10 @@ Canonical verbs
                              attest list          inventory all sessions
                              attest export        redacted bundle (--format csaf)
                              attest verify        Ed25519 signature check
+                                                  (--require-signed: unsigned → exit 1)
                              attest diff          drift vs prior or --against <other-sid>
+                             attest prune         GC: delete sessions older than
+                                                  --all-older-than <ISO> (--dry-run to preview)
 
   discover                   Scan cwd → recommend playbooks. Replaces scan + dispatch.
 
@@ -503,9 +506,12 @@ here so old scripts know where each moved:
 Deprecated aliases (still work — prefer the canonical verb)
 ───────────────────────────────────────────────────────────
 
-These still run. The [DEPRECATED] prefix keeps them out of the active-verbs
-list that \`exceptd help | grep '^  [a-z]'\` surfaces. Each maps to a canonical
-verb:
+These still run their original implementation — they are NOT transparent
+aliases, and several (scan, dispatch, currency, validate-cves, validate-rfcs)
+emit the older orchestrator output shape, not the canonical verb's. Migrate to
+the canonical replacement listed (whose output may differ); the [DEPRECATED]
+prefix keeps them out of the active-verbs list \`exceptd help | grep '^  [a-z]'\`
+surfaces.
 
   [DEPRECATED] scan              → discover --scan-only
   [DEPRECATED] dispatch          → discover
@@ -4933,6 +4939,92 @@ function verifyAttestationSidecar(attFile) {
   }
 }
 
+/**
+ * `attest prune --all-older-than <ISO>` — GC for attestation growth.
+ *
+ * One attestation is written per `run`, with no cleanup, so the store grows
+ * monotonically (tests alone pile up thousands). This removes whole session
+ * directories whose attestation `captured_at` predates the cutoff. `--dry-run`
+ * previews without deleting. Deletion is confined to direct child dirs of the
+ * resolved attestation roots — never traverses outside them.
+ */
+function cmdPruneAttestations(runner, args, runOpts, pretty) {
+  const cutoffRaw = args["all-older-than"];
+  if (!cutoffRaw) {
+    return emitError(
+      "attest prune: --all-older-than <ISO-8601 date> is required (e.g. attest prune --all-older-than 2026-01-01). Add --dry-run to preview.",
+      { verb: "attest prune" },
+      pretty,
+    );
+  }
+  const isoErr = validateIsoSince(cutoffRaw);
+  if (isoErr) return emitError(`attest prune: ${isoErr}`, { verb: "attest prune" }, pretty);
+  const cutoffMs = Date.parse(cutoffRaw);
+  const dryRun = !!args["dry-run"];
+
+  const roots = [...new Set([resolveAttestationRoot(runOpts), path.join(process.cwd(), ".exceptd", "attestations")])];
+  const pruned = [];
+  let kept = 0;
+  let scanned = 0;
+  for (const root of roots) {
+    let sessions;
+    try { sessions = fs.readdirSync(root, { withFileTypes: true }).filter(d => d.isDirectory()).map(d => d.name); }
+    catch { continue; }
+    for (const sid of sessions) {
+      const sdir = path.join(root, sid);
+      scanned++;
+      // Determine the session's captured_at from its newest non-replay
+      // attestation. A session with no parseable captured_at is left alone
+      // (never delete something we can't date).
+      let captured = null;
+      try {
+        for (const f of fs.readdirSync(sdir)) {
+          if (!f.endsWith(".json") || f.endsWith(".sig")) continue;
+          let j; try { j = JSON.parse(fs.readFileSync(path.join(sdir, f), "utf8")); } catch { continue; }
+          if (!j || j.kind === "replay") continue;
+          if (typeof j.captured_at === "string" && (!captured || j.captured_at > captured)) captured = j.captured_at;
+        }
+      } catch { continue; }
+      const ts = captured ? Date.parse(captured) : NaN;
+      if (!Number.isFinite(ts)) { kept++; continue; }
+      if (ts < cutoffMs) {
+        pruned.push({ session_id: sid, captured_at: captured, dir: sdir });
+        if (!dryRun) {
+          // Confinement: resolve and confirm sdir is a direct child of root
+          // before removing, so a crafted session name can't escape the root.
+          try {
+            const realRoot = fs.realpathSync(root);
+            const realDir = fs.realpathSync(sdir);
+            if (path.dirname(realDir) === realRoot) fs.rmSync(realDir, { recursive: true, force: true });
+          } catch { /* skip undeletable */ }
+        }
+      } else {
+        kept++;
+      }
+    }
+  }
+
+  emit({
+    ok: true,
+    verb: "attest prune",
+    dry_run: dryRun,
+    cutoff: cutoffRaw,
+    scanned,
+    pruned_count: pruned.length,
+    kept,
+    pruned: pruned.map(p => ({ session_id: p.session_id, captured_at: p.captured_at })),
+    roots_searched: roots,
+  }, pretty, (obj) => {
+    const lines = [];
+    lines.push(`attest prune${obj.dry_run ? " (DRY-RUN)" : ""}: cutoff ${obj.cutoff}`);
+    lines.push(`  scanned ${obj.scanned} session(s)  |  ${obj.dry_run ? "would prune" : "pruned"} ${obj.pruned_count}  |  kept ${obj.kept}`);
+    for (const p of obj.pruned.slice(0, 20)) lines.push(`  ${obj.dry_run ? "[would-delete]" : "[deleted]"} ${p.session_id}  (${(p.captured_at || "").slice(0, 19)})`);
+    if (obj.pruned_count > 20) lines.push(`  … ${obj.pruned_count - 20} more`);
+    if (obj.dry_run && obj.pruned_count > 0) lines.push(`  → re-run without --dry-run to delete.`);
+    return lines.join("\n");
+  });
+}
+
 function cmdReattest(runner, args, runOpts, pretty) {
   const crypto = require("crypto");
   // Validate --since as ISO-8601, mirroring `attest list --since`. An
@@ -5324,14 +5416,14 @@ function cmdAttest(runner, args, runOpts, pretty) {
   const subverb = args._[0];
   const sessionId = args._[1];
   if (!subverb) {
-    return emitError("attest: missing subverb. Usage: attest list | show <sid> | export <sid> | verify <sid> | diff <sid>", null, pretty);
+    return emitError("attest: missing subverb. Usage: attest list | show <sid> | export <sid> | verify <sid> [--require-signed] | diff <sid> | prune --all-older-than <ISO> [--dry-run]", null, pretty);
   }
   // Validate subverb membership BEFORE the session-id branch so a typo
   // (`attest verfy sid`) gets the did-you-mean response, not the
   // misleading "no session dir for sid" downstream. Pre-fix the
   // session-id resolution ran first and a valid-but-unrecognized
   // subverb collapsed into a session-lookup failure.
-  const ATTEST_SUBVERBS = ["list", "show", "export", "verify", "diff"];
+  const ATTEST_SUBVERBS = ["list", "show", "export", "verify", "diff", "prune"];
   if (!ATTEST_SUBVERBS.includes(subverb)) {
     const dym = suggestVerb(subverb, ATTEST_SUBVERBS);
     const hint = dym.length > 0
@@ -5347,6 +5439,10 @@ function cmdAttest(runner, args, runOpts, pretty) {
   if (subverb === "list") {
     return cmdListAttestations(runner, args, runOpts, pretty);
   }
+  // `prune` is the GC for attestation growth — also no session-id positional.
+  if (subverb === "prune") {
+    return cmdPruneAttestations(runner, args, runOpts, pretty);
+  }
   if (!sessionId) {
     return emitError(
       `attest ${subverb}: missing <session-id> positional argument. Inventory prior sessions with \`exceptd attest list\`; or pass \`--latest\` to operate on the most recent.`,
@@ -5397,6 +5493,13 @@ function cmdAttest(runner, args, runOpts, pretty) {
     // session (= reattest). With --against, compares two sessions A vs B
     // by evidence_hash + artifact-level field diff.
     if (args.against) {
+      // Validate the --against id with the same gate as the primary sid, so a
+      // traversal/garbage value (`../../etc/passwd`) gets the explicit "invalid
+      // session-id" message rather than a misleading "no session dir found".
+      try { validateSessionIdForRead(args.against); }
+      catch (e) {
+        return emitError(`attest diff --against: ${e.message}`, { against_input: typeof args.against === "string" ? args.against.slice(0, 80) : typeof args.against }, pretty);
+      }
       const otherDir = findSessionDir(args.against, runOpts);
       if (!otherDir) {
         return emitError(`attest diff --against ${args.against}: no session dir found.`, null, pretty);
@@ -5668,6 +5771,23 @@ function cmdAttest(runner, args, runOpts, pretty) {
       body.replay_tamper = true;
       body.warnings = ["one or more replay records failed Ed25519 verification — audit-trail corruption suspected, regenerate via reattest"];
     }
+    // --require-signed: in an audit context an UNSIGNED or sidecar-stripped
+    // attestation is not acceptable, even though it isn't tamper per se.
+    // Without this, `attest verify` returns exit 0 for an unsigned attestation
+    // — so an attacker who tampers the body AND deletes the .sig evades the
+    // exit-6 tamper signal. Strict mode makes "not Ed25519-verified" a failure
+    // (exit 1 via the ok:false contract, distinct from tamper's exit 6).
+    if (!attTampered && args["require-signed"] && (attResults.length === 0 || !attResults.every(r => r.verified))) {
+      body.ok = false;
+      body.require_signed = true;
+      // attResults.length === 0 → the session dir has no attestation at all
+      // (only replay records, or the JSON was deleted); `[].every()` is
+      // vacuously true, so without the length check an empty session would
+      // pass strict mode. A strict audit gate must reject "nothing to verify".
+      body.error = attResults.length === 0
+        ? "attest verify --require-signed: no signed attestation present for this session — refusing under strict mode"
+        : "attest verify --require-signed: one or more attestations are not Ed25519-verified (unsigned or missing .sig sidecar) — refusing under strict mode";
+    }
     // Human renderer for `attest verify` — one-line answer to "did
     // anyone tamper with my evidence since I ran it?" so the operator
     // doesn't have to parse the JSON envelope.
@@ -5688,7 +5808,7 @@ function cmdAttest(runner, args, runOpts, pretty) {
       // failures (tamper_class present) so the next-step block still fires.
       const noTamper = att.every(r => !r.tamper_class) && rep.every(r => !r.tamper_class);
       const allVerified = att.every(r => r.verified) && rep.every(r => r.verified);
-      const icon = obj.ok === false ? "[!! TAMPERED]" : (obj.replay_tamper ? "[i  REPLAY_TAMPER]" : (allVerified ? "[ok]" : "[i  UNSIGNED]"));
+      const icon = obj.ok === false ? (obj.require_signed ? "[!! UNSIGNED-REJECTED]" : "[!! TAMPERED]") : (obj.replay_tamper ? "[i  REPLAY_TAMPER]" : (allVerified ? "[ok]" : "[i  UNSIGNED]"));
       lines.push(`\n${icon}  ${att.filter(r => r.verified).length}/${att.length} attestation(s) verified, ${rep.filter(r => r.verified).length}/${rep.length} replay record(s) verified`);
       // Status icon precedence: verified → [ok]. tamper_class set →
       // [!! <CLASS>] (real tamper signal). signed=false AND no

package/data/_indexes/_meta.json

@@ -1,10 +1,10 @@
 {
   "schema_version": "1.1.0",
-  "generated_at": "2026-05-27T15:45:05.142Z",
+  "generated_at": "2026-05-27T17:12:16.726Z",
   "generator": "scripts/build-indexes.js",
   "source_count": 54,
   "source_hashes": {
-    "manifest.json": "e70361e642cc385fdfca26ee8ce213cd6e4f5c50e0db0f65b49c0f4caf8d5235",
+    "manifest.json": "fc1bd0402f7dde08b22ae283910749ddbeed4ce1b11b8dc6c37b96656ec23951",
     "data/atlas-ttps.json": "d24bc02859d40ccf1615db75cca68c077585904e41e0d8f6de448121e9b1abb0",
     "data/attack-techniques.json": "fa193f0d2d248176a8beddb641e9fe56ba4faa9e15dc253ff876dbf0c5d58a77",
     "data/cve-catalog.json": "3d451dda7ac0c7d57a4075ae4bafd3148c6184b35dc1bc59d8b81d1f2641e430",

package/lib/flag-suggest.js

@@ -107,7 +107,7 @@ const VERB_FLAG_ALLOWLIST = Object.freeze({
   ask: [],
   attest: [
     'against', 'playbook', 'since', 'latest', 'format', 'force', 'dry-run',
-    'all-older-than', 'limit',
+    'all-older-than', 'limit', 'require-signed',
   ],
   reattest: [
     'playbook', 'since', 'latest', 'force-replay', 'attestation-root',

package/manifest.json

@@ -1,6 +1,6 @@
 {
   "name": "exceptd-security",
-  "version": "0.14.5",
+  "version": "0.14.7",
   "description": "AI security skills grounded in mid-2026 threat reality, not stale framework documentation",
   "homepage": "https://exceptd.com",
   "license": "Apache-2.0",
@@ -53,7 +53,7 @@
       ],
       "last_threat_review": "2026-05-15",
       "signature": "lXhZgoIrrVloO3XaTvo/43AxZn4mwErstd7DR0O/oVhD3AOGODM4HqrageYEou9WKOdMEGP5mJNTjJsXdP5NDA==",
-      "signed_at": "2026-05-27T15:44:01.778Z",
+      "signed_at": "2026-05-27T17:11:12.192Z",
       "cwe_refs": [
         "CWE-125",
         "CWE-362",
@@ -123,7 +123,7 @@
       ],
       "last_threat_review": "2026-05-17",
       "signature": "ztSKk/zFMFbT12qRcEeBKpydBn7fTT86KxMmor0DTCoKQWk5fJ0fSInfP1XMSB6rFk4/SuSjKVxQRMKVJ5a+Cg==",
-      "signed_at": "2026-05-27T15:44:01.780Z",
+      "signed_at": "2026-05-27T17:11:12.194Z",
       "cwe_refs": [
         "CWE-1039",
         "CWE-1426",
@@ -196,7 +196,7 @@
       ],
       "last_threat_review": "2026-05-17",
       "signature": "K6QdPHNK5c4K5QFjrW0QsUhjp71D7SOisSoulwPNSvKRdi2rY+yg0kdckijBMkLMsVPyUvcC9giu93mKJ1OZDg==",
-      "signed_at": "2026-05-27T15:44:01.780Z",
+      "signed_at": "2026-05-27T17:11:12.194Z",
       "cwe_refs": [
         "CWE-22",
         "CWE-345",
@@ -248,7 +248,7 @@
       "framework_gaps": [],
       "last_threat_review": "2026-05-22",
       "signature": "Qd3SBWmUAaaT++e1Ry2wBIz/dCBmNBMl0+4Rb0etvJLES0fIBEAkU1mTbgNZnT5XOg9J5twdUpymWtmKnDDQCQ==",
-      "signed_at": "2026-05-27T15:44:01.780Z"
+      "signed_at": "2026-05-27T17:11:12.194Z"
     },
     {
       "name": "compliance-theater",
@@ -279,7 +279,7 @@
       ],
       "last_threat_review": "2026-05-22",
       "signature": "F2Shxae0ua0gPtvwzTRVzzHaIgJcFDRT3/akLUAZ4aaMQhkleKkcTaTpkjp+pTVEdPfLeLGNCeAOMs+whVYOBg==",
-      "signed_at": "2026-05-27T15:44:01.781Z"
+      "signed_at": "2026-05-27T17:11:12.195Z"
     },
     {
       "name": "exploit-scoring",
@@ -308,7 +308,7 @@
       ],
       "last_threat_review": "2026-05-18",
       "signature": "NA1hoQycvQhSUoG5rwlXX0mOVmGxoXRVezkELGEA2nZOdGis4gXkHT3O6Sfw7zxE4JuMrsCb65TEeOWk9WEPDg==",
-      "signed_at": "2026-05-27T15:44:01.781Z"
+      "signed_at": "2026-05-27T17:11:12.196Z"
     },
     {
       "name": "rag-pipeline-security",
@@ -345,7 +345,7 @@
       ],
       "last_threat_review": "2026-05-22",
       "signature": "W3pS8lnaCP96TQzsJpG5d5yv5IwgaQyS4Z2Ctcz5BOJf6LbajSIgeDgTZ4f4Bhr5m4E7KsgWGjZS4x7Fwd33BQ==",
-      "signed_at": "2026-05-27T15:44:01.782Z",
+      "signed_at": "2026-05-27T17:11:12.196Z",
       "cwe_refs": [
         "CWE-1395",
         "CWE-1426"
@@ -405,7 +405,7 @@
       ],
       "last_threat_review": "2026-05-17",
       "signature": "/WDGygh1Ck4yWlBWDGtEUVCqKB8d+UaJXoAoBXujtt+GAl8JbMNpaN1TvI0WkEltQ9dTxaAzSn20/eVDqv8iDQ==",
-      "signed_at": "2026-05-27T15:44:01.782Z",
+      "signed_at": "2026-05-27T17:11:12.196Z",
       "d3fend_refs": [
         "D3-CA",
         "D3-CSPP",
@@ -440,7 +440,7 @@
       "framework_gaps": [],
       "last_threat_review": "2026-05-22",
       "signature": "za1NKBpy9LC91F/ESO/qhUfmvVr8GNItQOjR5OJLeHm+2dQ9HHiFWQK2eo53V/n/0uhubuggURA3yS6kJuWwBg==",
-      "signed_at": "2026-05-27T15:44:01.782Z",
+      "signed_at": "2026-05-27T17:11:12.197Z",
       "cwe_refs": [
         "CWE-1188"
       ],
@@ -474,7 +474,7 @@
       "framework_gaps": [],
       "last_threat_review": "2026-05-18",
       "signature": "xiHAhhdufm9hCKU8PLiPE0MX65ej2F4OZwtlWLGLCiie9/km+Kiqbt192LcMvr94v83C98pb9wIaqFsFWft6AQ==",
-      "signed_at": "2026-05-27T15:44:01.783Z",
+      "signed_at": "2026-05-27T17:11:12.197Z",
       "forward_watch": [
         "New AI attack classes as ATLAS v6 publishes",
         "Post-quantum adversary capability timeline",
@@ -513,7 +513,7 @@
       "framework_gaps": [],
       "last_threat_review": "2026-05-01",
       "signature": "oYsSk35N2Uzq7MRofACykylcVwkgPhI4luWZ14vmQT+gUKLyZiKVOUJbe1+7lGl6BYPRN0sUDQ0f7S5Eu5w2Ag==",
-      "signed_at": "2026-05-27T15:44:01.783Z"
+      "signed_at": "2026-05-27T17:11:12.197Z"
     },
     {
       "name": "zeroday-gap-learn",
@@ -540,7 +540,7 @@
       "framework_gaps": [],
       "last_threat_review": "2026-05-18",
       "signature": "igRqYyU1unRFH40BsPyAR62SPrk8QZv8dPGb8S9O9EvLCNOZAzm3t+HdT/NKqzWHwrpomOzkkkyLfYI/0qTUDA==",
-      "signed_at": "2026-05-27T15:44:01.783Z",
+      "signed_at": "2026-05-27T17:11:12.198Z",
       "forward_watch": [
         "New CISA KEV entries",
         "New ATLAS TTP additions in each ATLAS release",
@@ -604,7 +604,7 @@
       ],
       "last_threat_review": "2026-05-22",
       "signature": "i/17u4kJiSpcZAz7LnTyRePFugQOstQ1P4kVoe0oGf4E2/j8oIN9U9DccjUn/YHZhKWIJ2AILG/DMhvMrr3bBg==",
-      "signed_at": "2026-05-27T15:44:01.784Z",
+      "signed_at": "2026-05-27T17:11:12.198Z",
       "cwe_refs": [
         "CWE-327"
       ],
@@ -652,7 +652,7 @@
       ],
       "last_threat_review": "2026-05-22",
       "signature": "QuOVaQ4E2Sl39TClbhZ7HA9XrYAyRrDL44HY3RTE7aWLue0hV2cxaBt40ALGmHS++631QGFDlZTLZI77Tr6nAA==",
-      "signed_at": "2026-05-27T15:44:01.784Z"
+      "signed_at": "2026-05-27T17:11:12.199Z"
     },
     {
       "name": "security-maturity-tiers",
@@ -689,7 +689,7 @@
       ],
       "last_threat_review": "2026-05-01",
       "signature": "8Px1s2lDj10/Q6erwEQlXgUHM1+OTruUR8qAHPX7Oo3k/l69N6P9sm0PsafS9wDFtj9l5C/OiLiFgzMlMt6vBw==",
-      "signed_at": "2026-05-27T15:44:01.784Z",
+      "signed_at": "2026-05-27T17:11:12.199Z",
       "cwe_refs": [
         "CWE-1188"
       ]
@@ -724,7 +724,7 @@
       "framework_gaps": [],
       "last_threat_review": "2026-05-11",
       "signature": "urRcataVWg6/utyEkSiOWoNxTL8sABRjPR7ShyDfZGnAozFph/yDktSoaPVxQDXwu9EfJE+qhUW5OYR/yJECBQ==",
-      "signed_at": "2026-05-27T15:44:01.785Z"
+      "signed_at": "2026-05-27T17:11:12.199Z"
     },
     {
       "name": "attack-surface-pentest",
@@ -796,7 +796,7 @@
         "Pwn2Own Berlin 2026 (disclosed 2026-05-14, embargo ends 2026-08-12) — Microsoft Edge 4-bug sandbox escape by Orange Tsai (DEVCORE); forward-watch only (browser sandbox, out of current playbook scope); track Microsoft Edge security advisory and KEV add"
       ],
       "signature": "C7lv65/Ecm8JJgSKxrX5lxx0YFzKWtrIQSKp+vy50I5e8945s1JmifGUUrnQwRQhq/Pkv7EmfiH5XSO8h75bDg==",
-      "signed_at": "2026-05-27T15:44:01.785Z"
+      "signed_at": "2026-05-27T17:11:12.200Z"
     },
     {
       "name": "fuzz-testing-strategy",
@@ -856,7 +856,7 @@
         "OSS-Fuzz-Gen / AI-assisted harness generation becoming the default expectation for OSS maintainers"
       ],
       "signature": "Z7ypCUnXx8JpLtgxxB6RHNi39w74AmrGY1N4ofAGCXhkuM2EaFVm1AU0dvl9UQ1bVLfHKEDGqMO/TwlIY7RABg==",
-      "signed_at": "2026-05-27T15:44:01.785Z"
+      "signed_at": "2026-05-27T17:11:12.200Z"
     },
     {
       "name": "dlp-gap-analysis",
@@ -931,7 +931,7 @@
         "Quebec Law 25, India DPDPA, KSA PDPL enforcement actions naming AI-tool prompt data as in-scope personal information"
       ],
       "signature": "IgEnpHOhCftAyfUNdKsjbrd169T9pJkk/rRM2ZEna+H18y7p5x48+1kME2sJMZjJuyAdQFBJi8PJXZFwLGI+DQ==",
-      "signed_at": "2026-05-27T15:44:01.785Z"
+      "signed_at": "2026-05-27T17:11:12.200Z"
     },
     {
       "name": "supply-chain-integrity",
@@ -1010,7 +1010,7 @@
         "Pwn2Own Berlin 2026 (disclosed 2026-05-14, embargo ends 2026-08-12) — NVIDIA Megatron Bridge path traversal by haehae; AI training-stack file-system trust boundary; track patch and SBOM-attestation impact"
       ],
       "signature": "pcLrM98A3vUSZRjwNAk0aZ9umvOwB41XCLLsCOy/IebB2F/06oIrGUKkMHtHwm4pTVPShMMcKdZQQ3jz30FnCg==",
-      "signed_at": "2026-05-27T15:44:01.786Z"
+      "signed_at": "2026-05-27T17:11:12.201Z"
     },
     {
       "name": "defensive-countermeasure-mapping",
@@ -1067,7 +1067,7 @@
       ],
       "last_threat_review": "2026-05-11",
       "signature": "G5q5elh7Q7eu2xcwTVQJGDTGfvZR0OGQaLSLJPb2wjzCHFF8PWuZfCHZdjjqisiRzRWPyLlzgfHeMJqOdy7cBw==",
-      "signed_at": "2026-05-27T15:44:01.786Z"
+      "signed_at": "2026-05-27T17:11:12.201Z"
     },
     {
       "name": "identity-assurance",
@@ -1134,7 +1134,7 @@
       "d3fend_refs": [],
       "last_threat_review": "2026-05-11",
       "signature": "Wv5hGMeHjlaQK1zwicVCA7AvdKgJBgvcjdpGM9Ywahh9tagAKhbkOjybowDQZzu7OZ3bDkbh6pBYc1Sdwr6NAA==",
-      "signed_at": "2026-05-27T15:44:01.786Z"
+      "signed_at": "2026-05-27T17:11:12.201Z"
     },
     {
       "name": "ot-ics-security",
@@ -1190,7 +1190,7 @@
       "d3fend_refs": [],
       "last_threat_review": "2026-05-11",
       "signature": "8t5qKHd3yWi57dvG36YQkLN/X9bQWqtEiYjay4IfSmqhJpM/xXPaQVKNGz3wscrO8OLKUZ0OaX7Mj5kzpgBKBQ==",
-      "signed_at": "2026-05-27T15:44:01.787Z"
+      "signed_at": "2026-05-27T17:11:12.202Z"
     },
     {
       "name": "coordinated-vuln-disclosure",
@@ -1242,7 +1242,7 @@
         "NYDFS 23 NYCRR 500 amendments potentially adding explicit CVD program requirements"
       ],
       "signature": "GDGt4UPqBa04PjlpSmpyihGzd3OgfBN7jaAK5tfwp+LRSs3ygKOdbeivUCCHNagTY1hE6hG2Ou40ADfBFuXeAg==",
-      "signed_at": "2026-05-27T15:44:01.787Z"
+      "signed_at": "2026-05-27T17:11:12.202Z"
     },
     {
       "name": "threat-modeling-methodology",
@@ -1292,7 +1292,7 @@
         "PASTA v2 updates incorporating AI/ML application threats"
       ],
       "signature": "rFBpOQEJUPpl+v88Lw/WqVJRhTl80vy0VbPAbzQj3Q0suJRRrJg368I9uKu5LXIBKFDvKxnGIcIzbGg9NUtaCA==",
-      "signed_at": "2026-05-27T15:44:01.787Z"
+      "signed_at": "2026-05-27T17:11:12.202Z"
     },
     {
       "name": "webapp-security",
@@ -1366,7 +1366,7 @@
       "d3fend_refs": [],
       "last_threat_review": "2026-05-11",
       "signature": "ux85YI4t2mVHOyt744Yin1HHy+z11JIFygjKfFfQOBBl5QVV3A267jeIy7utix85irMcpZm/T3yx/ooqiK2tBA==",
-      "signed_at": "2026-05-27T15:44:01.788Z",
+      "signed_at": "2026-05-27T17:11:12.203Z",
       "forward_watch": [
         "NGINX Rift CVE-2026-42945 (disclosed 2026-05-13, source depthfirst) — KEV-watch predicted CISA KEV listing by 2026-05-29; AI-assisted discovery angle; track for active-exploitation confirmation and patch advisory affecting front-door web app deployments"
       ]
@@ -1419,7 +1419,7 @@
       "d3fend_refs": [],
       "last_threat_review": "2026-05-15",
       "signature": "IIXnkZ5ZNqFwOto5KfytADTLLZLoyXNZACD1ORZ40P1HUAQxe6u2uyXFzzsfuob4Uy06jNkRGr2FFgCphUH1Cw==",
-      "signed_at": "2026-05-27T15:44:01.788Z"
+      "signed_at": "2026-05-27T17:11:12.203Z"
     },
     {
       "name": "sector-healthcare",
@@ -1479,7 +1479,7 @@
       "d3fend_refs": [],
       "last_threat_review": "2026-05-11",
       "signature": "AhF9KF8ZBlDteciV+F8IBSmFVYCvQOn44GmD4rZjgLoPxfIv/QE1/vSkK32zyqDKtHWkLSXExbkkPkxA/V6dDw==",
-      "signed_at": "2026-05-27T15:44:01.789Z"
+      "signed_at": "2026-05-27T17:11:12.204Z"
     },
     {
       "name": "sector-financial",
@@ -1560,7 +1560,7 @@
         "TIBER-EU framework v2.0 alignment with DORA TLPT RTS (JC 2024/40); cross-recognition with CBEST and iCAST"
       ],
       "signature": "HQgZvb4ReziEz5rNFr8i/O8/rJEZR+iHRROT7m/D2QUqhrcNISPkYXENsUZlG8xapzy/Ik92ehkseyj4hdmhCQ==",
-      "signed_at": "2026-05-27T15:44:01.789Z"
+      "signed_at": "2026-05-27T17:11:12.204Z"
     },
     {
       "name": "sector-federal-government",
@@ -1629,7 +1629,7 @@
         "Australia PSPF 2024 revision and ISM quarterly updates — track for Essential Eight Maturity Level requirements for federal entities"
       ],
       "signature": "linxmsXZiOYtcs71sSWgGCrvb8xQfmxmtTY5PRvZJ0/8FgJulo0tQtejzexYG775s7XhjAmGsDP238BQTQ8ADA==",
-      "signed_at": "2026-05-27T15:44:01.789Z"
+      "signed_at": "2026-05-27T17:11:12.204Z"
     },
     {
       "name": "sector-energy",
@@ -1694,7 +1694,7 @@
         "ICS-CERT advisory feed (https://www.cisa.gov/news-events/cybersecurity-advisories/ics-advisories) for vendor CVEs in Siemens, Rockwell, Schneider Electric, ABB, GE Vernova, Hitachi Energy, AVEVA / OSIsoft PI"
       ],
       "signature": "JjBfc0ovta560Clk0x3QGRM5osFJDwcvpy3rT7QEGdCIL827jzE8QCow1C8deXq+4JhY2sA/d7/8IsxikdlkCg==",
-      "signed_at": "2026-05-27T15:44:01.790Z"
+      "signed_at": "2026-05-27T17:11:12.205Z"
     },
     {
       "name": "sector-telecom",
@@ -1780,7 +1780,7 @@
         "O-RAN SFG / WG11 security specifications"
       ],
       "signature": "JWVxKFoKrbX4d+Tko1d4OBdwyg25MfFFKn4CT6E/CzH+YwnU3T6Y76uBQIKg3+gIGTvPduqyvQwQQ5FxKDuPBw==",
-      "signed_at": "2026-05-27T15:44:01.790Z"
+      "signed_at": "2026-05-27T17:11:12.205Z"
     },
     {
       "name": "api-security",
@@ -1849,7 +1849,7 @@
       "d3fend_refs": [],
       "last_threat_review": "2026-05-18",
       "signature": "BmCRCestWqr55+fCynEhtAl5NWLT+xLTkpwS0Icp3SaoZOw/ce3Y6TtqjHRSKn4CBJq7YDiLRWxmhO3MStvOAA==",
-      "signed_at": "2026-05-27T15:44:01.790Z",
+      "signed_at": "2026-05-27T17:11:12.205Z",
       "forward_watch": [
         "NGINX Rift CVE-2026-42945 (disclosed 2026-05-13, source depthfirst) — KEV-watch predicted CISA KEV listing by 2026-05-29; track for active-exploitation confirmation and patch advisory affecting API gateway / reverse-proxy deployments",
         "Pwn2Own Berlin 2026 (disclosed 2026-05-14, embargo ends 2026-08-12) — LiteLLM 3-bug SSRF + Code Injection chain by k3vg3n; LLM-proxy API surface; track upstream patch and CVE assignments",
@@ -1935,7 +1935,7 @@
         "CISA KEV additions for cloud-control-plane CVEs (IMDSv1 abuses, federation token mishandling, cross-tenant boundary failures); CISA Cybersecurity Advisories for cross-cloud advisories"
       ],
       "signature": "/DV3pmZwrRySrk1OCbyI+0BQESacjupJfUX3eC2NGtXuYOBro0vndIP+z27heFxumnjU3a9sfla7/U9X+pqnDw==",
-      "signed_at": "2026-05-27T15:44:01.791Z"
+      "signed_at": "2026-05-27T17:11:12.206Z"
     },
     {
       "name": "container-runtime-security",
@@ -1997,7 +1997,7 @@
       "d3fend_refs": [],
       "last_threat_review": "2026-05-15",
       "signature": "E2UGSf9ATyYgzBr8uM/0ubOUmDqo1jVA7f9mVxv6LHfWGCNuQNXDyuNou9VAmUCeeXEeUYIi3AFjXkJqpOkxDA==",
-      "signed_at": "2026-05-27T15:44:01.791Z",
+      "signed_at": "2026-05-27T17:11:12.206Z",
       "forward_watch": [
         "Pwn2Own Berlin 2026 (disclosed 2026-05-14, embargo ends 2026-08-12) — NVIDIA Container Toolkit container escape ($50K award) by chompie / IBM X-Force XOR; high-severity container/hypervisor boundary break; track patch and KEV add post-embargo"
       ]
@@ -2071,7 +2071,7 @@
         "MITRE ATLAS v5.6.0 (released May 2026) shipped the AML.T0010 sub-technique expansion this forecast tracked plus new techniques (\"Publish Poisoned AI Agent Tool\", \"Escape to Host\"); inventory now 16 tactics, 84 techniques, 56 sub-techniques. Forward watch: subsequent ATLAS minor and major releases — track next-cadence updates to agentic-AI TTPs and MLOps-pipeline-specific techniques"
       ],
       "signature": "IL+DlRCDJN/p08iiJCFkasKcoyjcB0uWrJ6ORLjQcS1HrUa5Xt62QxVjYPHzaevlm5y36ZdmfESqsZJmzK3lCg==",
-      "signed_at": "2026-05-27T15:44:01.791Z"
+      "signed_at": "2026-05-27T17:11:12.206Z"
     },
     {
       "name": "incident-response-playbook",
@@ -2133,7 +2133,7 @@
         "NYDFS 23 NYCRR 500.17 amendments tightening ransom-payment 24h disclosure operationalization"
       ],
       "signature": "MmjLjlmOMLjhJJ4ZfR8MYlHam+ZB+eSqfh6Nv+DecaG4O5zeo9DBP/iL3cbyDVZxmhnhivgJild2ccYeWTeZAg==",
-      "signed_at": "2026-05-27T15:44:01.792Z"
+      "signed_at": "2026-05-27T17:11:12.207Z"
     },
     {
       "name": "ransomware-response",
@@ -2213,7 +2213,7 @@
       ],
       "last_threat_review": "2026-05-22",
       "signature": "ssueL03g9fWlhXpTe+IiY5l7RqQkunN4DTN5QETKE+VOX+qggdjAR8PONxk77ol4xWYmHrM/VcH8CNtXUEvgBA==",
-      "signed_at": "2026-05-27T15:44:01.792Z"
+      "signed_at": "2026-05-27T17:11:12.207Z"
     },
     {
       "name": "email-security-anti-phishing",
@@ -2266,7 +2266,7 @@
       "d3fend_refs": [],
       "last_threat_review": "2026-05-18",
       "signature": "rK+WnuS+9tqEABmwc0jO/PEmxcLjG1/tmUb897HsClQeKzf+TQOlwBE+OsbtuKxpjYNwur62Xxs3TxObkwm8Cw==",
-      "signed_at": "2026-05-27T15:44:01.793Z"
+      "signed_at": "2026-05-27T17:11:12.207Z"
     },
     {
       "name": "age-gates-child-safety",
@@ -2334,7 +2334,7 @@
         "US state adult-site age-verification laws — 19+ states by mid-2026 (TX HB 18 upheld by SCOTUS June 2025 in Free Speech Coalition v. Paxton); track ongoing challenges in remaining states"
       ],
       "signature": "Rgho5TOFUL1txOzcVR0kASCNdovSU4yt99JlGilJlJRyg0A+BdeeQYrZrhPF6Vx2reUAVG0BeHfcZtSbi+cwCg==",
-      "signed_at": "2026-05-27T15:44:01.793Z"
+      "signed_at": "2026-05-27T17:11:12.208Z"
     },
     {
       "name": "cloud-iam-incident",
@@ -2414,7 +2414,7 @@
       ],
       "last_threat_review": "2026-05-15",
       "signature": "e/kij7GtKaytROyIj7V5RH+FC9WtmVFzrmG2kIlNDNn29ep/CRNlIQKwXLpzo/81AIf634pmdr1qy/+vwIuUDA==",
-      "signed_at": "2026-05-27T15:44:01.793Z",
+      "signed_at": "2026-05-27T17:11:12.208Z",
       "forward_watch": [
         "AWS IAM Identity Center session-policy refresh and step-up-on-admin enforcement (anticipated 2026-H2 release)",
         "GCP Workload Identity Federation principal-set attribute mapping tightening (post-2026 Q3 Federation hardening guide)",
@@ -2508,7 +2508,7 @@
       ],
       "last_threat_review": "2026-05-15",
       "signature": "ew9Kglc9fAZzbn0ZIfGP7WSK/j4eV2VhSvpy+s5bEfNEVYIMa2kZjnGBapgUsyGDLes9H9K2ovjQyX17+GKiBw==",
-      "signed_at": "2026-05-27T15:44:01.794Z",
+      "signed_at": "2026-05-27T17:11:12.209Z",
       "forward_watch": [
         "Entra ID conditional access evolution post-Midnight Blizzard — Microsoft's 2025-2026 commitments on legacy-tenant MFA enforcement and OAuth-app consent gating",
         "Okta IPSIE (Interoperability Profile for Secure Identity in the Enterprise) OpenID Foundation working-group output and adoption timeline",
@@ -2526,6 +2526,6 @@
   ],
   "manifest_signature": {
     "algorithm": "Ed25519",
-    "signature_base64": "YUt7+G0zRckqKY5EelzM4hfFQ7cvBxcw/ZXDwWBuDi0pSltHJbnZSPWBXyDcH8FQF5wKo8s3jmzQcEVWuLWTCg=="
+    "signature_base64": "5bgCpmkd8C9UHuNxZlDtJmE+8NfPX0b5Myr2eWcPVqOBcoGLZE8i+CS8r4v2BUz6y8pp+uHJHBjMUBco0VdQAg=="
   }
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@blamejs/exceptd-skills",
-  "version": "0.14.5",
+  "version": "0.14.7",
   "description": "AI security skills grounded in mid-2026 threat reality, not stale framework documentation. 42 skills, 11 catalogs (406 CVEs / 171 CWEs / 805 ATT&CK + ICS / 170 ATLAS / 468 D3FEND / 8888 RFCs), 35 jurisdictions, 10-class catalog gap detector + budget gate, real XML parser + canonical-form diff + content-pattern regression detection, Ed25519-signed.",
   "keywords": [
     "ai-security",

package/sbom.cdx.json

@@ -1,22 +1,22 @@
 {
   "bomFormat": "CycloneDX",
   "specVersion": "1.6",
-  "serialNumber": "urn:uuid:40958687-a502-48c7-89b6-7bb8faaa7910",
+  "serialNumber": "urn:uuid:02febec9-154a-4044-b88c-de2f287fa855",
   "version": 1,
   "metadata": {
-    "timestamp": "2060-05-02T23:38:47.000Z",
+    "timestamp": "2027-08-05T14:10:17.000Z",
     "tools": [
       {
         "vendor": "blamejs",
         "name": "scripts/refresh-sbom.js",
-        "version": "0.14.5"
+        "version": "0.14.7"
       }
     ],
     "component": {
-      "bom-ref": "pkg:npm/@blamejs/exceptd-skills@0.14.5",
+      "bom-ref": "pkg:npm/@blamejs/exceptd-skills@0.14.7",
       "type": "application",
       "name": "@blamejs/exceptd-skills",
-      "version": "0.14.5",
+      "version": "0.14.7",
       "description": "AI security skills grounded in mid-2026 threat reality, not stale framework documentation. 42 skills, 11 catalogs (406 CVEs / 171 CWEs / 805 ATT&CK + ICS / 170 ATLAS / 468 D3FEND / 8888 RFCs), 35 jurisdictions, 10-class catalog gap detector + budget gate, real XML parser + canonical-form diff + content-pattern regression detection, Ed25519-signed.",
       "licenses": [
         {
@@ -25,17 +25,17 @@
           }
         }
       ],
-      "purl": "pkg:npm/%40blamejs/exceptd-skills@0.14.5",
+      "purl": "pkg:npm/%40blamejs/exceptd-skills@0.14.7",
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "1daea3b739aba84d01a5995f4a7759e21176ed473843595209831f1683a36672"
+          "content": "9393859a939fea499b00aee2cee91e1779da3fd89a0e8535dff37f747632d68f"
         }
       ],
       "externalReferences": [
         {
           "type": "distribution",
-          "url": "https://www.npmjs.com/package/@blamejs/exceptd-skills/v/0.14.5"
+          "url": "https://www.npmjs.com/package/@blamejs/exceptd-skills/v/0.14.7"
         },
         {
           "type": "vcs",
@@ -116,11 +116,11 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "0a84a86948cc670a139e9cd5b22d41060d5a8f7a17d4b3f569fa6a38f0f8695e"
+          "content": "9631107ccce0ba2e91c49cc461ac8b08027e9846c44fcc554d9285757a40d997"
         },
         {
           "alg": "SHA3-512",
-          "content": "8b22f97270831e2e793b46e09533852c94e6245b0e477f3d15187f24d786f570fd18fdf0b26f4e909a54218427312e17af0833bef3cc788f1606b6aad8370b93"
+          "content": "afcabfcacb539d823e20b9a3d52e3c8758465b8b2e7a3c3c0d5d21bfc8e485a79f5eda2c56a1b3e1aff66889b71c8c527a7e19d78e76502d33c85cbe20a075a7"
         }
       ]
     },
@@ -281,11 +281,11 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "285bd4a081382d45dbc207af0728ea2f7aab11a335a22c00cc37caed227e64cb"
+          "content": "86fafb59d29675231590513d2058e29728a8afd8e687022e657bd03cb023a44e"
         },
         {
           "alg": "SHA3-512",
-          "content": "9842ea05c52c8134c4ceafa73b4b2450b685f6308a7c01e8d6b13186e396ac901615944075fd74b43f50e3888c555b9c92835134abdeeaaf286a255dd0713166"
+          "content": "a22d43d83ac7cfbb66e68e4739efea6819e145b80d856571d8e444358e3d7507a9097d4cb8f20800295b5da3a799cde05dba6c1b5f3c3ca1ac873ef492d6038b"
         }
       ]
     },
@@ -1226,11 +1226,11 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "5a7dcffd308df05272ca9125cc9a41348efde9568aab4a1c9a870e5815214944"
+          "content": "b10a9554dcc262a85ecd46745e310860afe530afbbcfaa62c9ddb8fa0c497cc2"
         },
         {
           "alg": "SHA3-512",
-          "content": "f72ef674f175a04c0c15fa9214f75586465970eb091871df3dbe339b8fcd8ef5d6a5bc77013f453c1ffd3031e22b267de89ae9f0135fba1d09e32a840d8ee367"
+          "content": "39ef1bf1ce48119193c306be741cc6706b0c13661ac9154c37bacd1e552811e3900caeaf41edc40698787a8cf1b8164ef49c534fe05c7415f2500a8c5e73eef5"
         }
       ]
     },
@@ -1751,11 +1751,11 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "e70361e642cc385fdfca26ee8ce213cd6e4f5c50e0db0f65b49c0f4caf8d5235"
+          "content": "fc1bd0402f7dde08b22ae283910749ddbeed4ce1b11b8dc6c37b96656ec23951"
         },
         {
           "alg": "SHA3-512",
-          "content": "c3c4936b98fa9e810b744fbba6a417fe398b8a572bb08d1d3a7b82ed350409a119e9c42fe7bdbd1007dbe74becd0534102e25a9d88de8c48c0f05f9ca002b3c8"
+          "content": "41fd2baf27759a7513e77b85137171a94d29961d58cff87433b26830cabf686f7c8f12f032816378be16da90fb9a1301918775bea11c85ce59724fb8a36c9ae7"
         }
       ]
     },