@blamejs/exceptd-skills 0.16.25 → 0.16.28

package/manifest.json

@@ -1,13 +1,13 @@
 {
   "name": "exceptd-security",
-  "version": "0.16.25",
+  "version": "0.16.28",
   "description": "AI security skills grounded in mid-2026 threat reality, not stale framework documentation",
   "homepage": "https://exceptd.com",
   "license": "Apache-2.0",
-  "atlas_version": "5.6.0",
-  "atlas_version_date": "2026-05-08",
-  "attack_version": "19.0",
-  "attack_version_date": "2026-04-28",
+  "atlas_version": "2026.05",
+  "atlas_version_date": "2026-05-27",
+  "attack_version": "19.1",
+  "attack_version_date": "2026-05-12",
   "threat_review_date": "2026-05-15",
   "sources_dir": "sources/",
   "agents_dir": "agents/",
@@ -53,7 +53,7 @@
       ],
       "last_threat_review": "2026-05-15",
       "signature": "0H+JfyUVmo/pVFEi5rLENATHjlukPVUqnOWmNPEH77wm8svKGK0aNJ46k6QU5GdHb8c9X9pVJKiuhON6AxDjDw==",
-      "signed_at": "2026-06-06T00:30:06.267Z",
+      "signed_at": "2026-06-10T16:36:56.066Z",
       "cwe_refs": [
         "CWE-125",
         "CWE-362",
@@ -78,7 +78,7 @@
       "name": "ai-attack-surface",
       "version": "1.0.0",
       "path": "skills/ai-attack-surface/skill.md",
-      "description": "Comprehensive AI/ML attack surface assessment mapped to MITRE ATLAS v5.6.0 with gap flags",
+      "description": "Comprehensive AI/ML attack surface assessment mapped to MITRE ATLAS v2026.05 with gap flags",
       "triggers": [
         "ai attack surface",
         "prompt injection",
@@ -121,9 +121,9 @@
         "OWASP-LLM-Top-10-2025-LLM02",
         "SOC2-CC6-logical-access"
       ],
-      "last_threat_review": "2026-05-17",
-      "signature": "PHwHEsoy7ctBYOtlAfAdCDVfsq2Bpk9+qESSF+5dVkDcez2zp2v9Ihsv2vqMEs3QxMndyQ+t7NVezyt5VamSCg==",
-      "signed_at": "2026-06-06T00:30:06.268Z",
+      "last_threat_review": "2026-06-10",
+      "signature": "WfqxU2x/feWgatYrCeO9PD3dIY0FAfs4nkVdQRac4fg5BDQPG/vhzhvYVN6Mg11oITACghbPOtZXvS37sACsCA==",
+      "signed_at": "2026-06-10T16:36:56.068Z",
       "cwe_refs": [
         "CWE-1039",
         "CWE-1426",
@@ -194,9 +194,9 @@
         "RFC-9421",
         "RFC-9700"
       ],
-      "last_threat_review": "2026-05-17",
-      "signature": "dD4p7lcRtMyfITOncqLkpOeMy6x6gM0V7UlWHgLEdcxqODb1s75ar1cBtTqDWPbMv6ZAzVo2HJLDK1hVjjU2AQ==",
-      "signed_at": "2026-06-06T00:30:06.269Z",
+      "last_threat_review": "2026-06-10",
+      "signature": "9bNOW4MzmUlFgkXH5tIZkq8YpzhMM+r8YVcNEM39kdEZwfRNG4Bj+Dgr7v4Qgp9D4q7hGNFpK0ywX+dPd3VWAg==",
+      "signed_at": "2026-06-10T16:36:56.068Z",
       "cwe_refs": [
         "CWE-22",
         "CWE-345",
@@ -246,9 +246,9 @@
       "atlas_refs": [],
       "attack_refs": [],
       "framework_gaps": [],
-      "last_threat_review": "2026-05-22",
-      "signature": "wsw8Mlr/gyw6S7Iaao9BVHdU5LFPWl8WVymW17Lkq9J1Mui0+fCrTg6UbrsaeE3s7EW3TVgzBuK+8EFd1+H5AA==",
-      "signed_at": "2026-06-06T00:30:06.269Z"
+      "last_threat_review": "2026-06-10",
+      "signature": "5A08+nAu5jwNQ1+vGbFgFAJA/kYD3oiaevhCxT4/2FeW++F070Pm4MD1+oXdv8R2DbtYr+7yXnCGM7UbUPR2AA==",
+      "signed_at": "2026-06-10T16:36:56.069Z"
     },
     {
       "name": "compliance-theater",
@@ -277,9 +277,9 @@
         "FedRAMP-Rev5-Moderate",
         "CMMC-2.0-Level-2"
       ],
-      "last_threat_review": "2026-05-22",
-      "signature": "uVTc1QRKOKcIVDajBz+q2egjiEAyOQaDNsvVI2ghj5FD0VvquoUBBE5Naca2FkaZa790EHWCsVZ4hhdaSQs2DQ==",
-      "signed_at": "2026-06-06T00:30:06.270Z"
+      "last_threat_review": "2026-06-10",
+      "signature": "RCgbI0sMNTKAscXUtrVU25u7OuE64uQvO5JKsB8vIJFWguvT6nZyD7euKuIxIzYhLTyHBiD7Rhp70btlK+JkCg==",
+      "signed_at": "2026-06-10T16:36:56.070Z"
     },
     {
       "name": "exploit-scoring",
@@ -306,9 +306,9 @@
         "CWE-Top-25-2024-meta",
         "CIS-Controls-v8-Control7"
       ],
-      "last_threat_review": "2026-05-18",
-      "signature": "Vne6mNYAubRMzF8Fz6CrU/hbvV+UzkGbpmWQrRSGlqNTGPHgzKOhDcZ2cqgRAI9AGz4IBE79dMaQrXqsnni9AQ==",
-      "signed_at": "2026-06-06T00:30:06.270Z"
+      "last_threat_review": "2026-06-10",
+      "signature": "JJrs+B22/hYxvdYs+abmoire5PbQXPb2uVYyjInZ3UbT8gEjs/5SyfGKx7z86jbtvB3ItApQVAx1AuseIgdyAQ==",
+      "signed_at": "2026-06-10T16:36:56.070Z"
     },
     {
       "name": "rag-pipeline-security",
@@ -343,9 +343,9 @@
         "NIST-AI-RMF-MEASURE-2.5",
         "OWASP-LLM-Top-10-2025-LLM08"
       ],
-      "last_threat_review": "2026-05-22",
-      "signature": "5rw2i39SxY2WphBbDLEP28wufnbPPE9+PWt54hmaGdwHXr9RLiVt5liL/5xp14sehlVgFsfpR/bg9vy//xV0DA==",
-      "signed_at": "2026-06-06T00:30:06.271Z",
+      "last_threat_review": "2026-06-10",
+      "signature": "Z6WbTqG98bQVRd6+kXDb6xIEe0ZryAeGxVSuKKxdK1PoZqew7NJcMsa6sJVSq+0r7KMsFwfTEdKorp6UDdhpCA==",
+      "signed_at": "2026-06-10T16:36:56.070Z",
       "cwe_refs": [
         "CWE-1395",
         "CWE-1426"
@@ -403,9 +403,9 @@
         "RFC-9114",
         "RFC-9000"
       ],
-      "last_threat_review": "2026-05-17",
-      "signature": "Vqu49nzntFWjn9A/QeJzm7q/2xk/cZJ6HFQKtiNi1zgcxzXKm+MlFdkaLgYHWj5/9HJohxyIDyBJQTvcJ20eDQ==",
-      "signed_at": "2026-06-06T00:30:06.271Z",
+      "last_threat_review": "2026-06-10",
+      "signature": "DLKcrgon+MZrqmivlFLBH4vlzZbJSW1531RsYDm9/KdW2CgcUUHwNMSzAfU1mAsFwFkAHjy/a8e1FbS9msTvDA==",
+      "signed_at": "2026-06-10T16:36:56.071Z",
       "cwe_refs": [
         "CWE-918"
       ],
@@ -441,9 +441,9 @@
       "atlas_refs": [],
       "attack_refs": [],
       "framework_gaps": [],
-      "last_threat_review": "2026-05-22",
-      "signature": "W87VdyVdAxAdcRI6P/8StaV+MS8ZSPKM9HOCK9n/bBO6BM3ZSE3uImVoyJVpAXQlUpUGN+A3lCJZXv64LuxwDg==",
-      "signed_at": "2026-06-06T00:30:06.271Z",
+      "last_threat_review": "2026-06-10",
+      "signature": "eWCOD+mR1c6B8vKDBot8y8UkQrKPCIEBHU3JRQET9xZnYGx8hrOyeRUElcKqCO5aG/2LISs9Atg1H+ehWDNbCw==",
+      "signed_at": "2026-06-10T16:36:56.071Z",
       "cwe_refs": [
         "CWE-1188"
       ],
@@ -475,9 +475,9 @@
       "atlas_refs": [],
       "attack_refs": [],
       "framework_gaps": [],
-      "last_threat_review": "2026-05-18",
-      "signature": "wdVX+edeNekpaIldqkhvtraV6DquLvIsKAjuZVwPQYn3l1vS99HXuFxmNsD7UeMlO3qgC6Dysfsto9EnuH0RBg==",
-      "signed_at": "2026-06-06T00:30:06.272Z",
+      "last_threat_review": "2026-06-10",
+      "signature": "kZca725/+BFr1mpxL29+cGzjqsiYhChWScf7VjU6vCTBZrmCps6W9gYYjf4lVORXaM4DAg3UVBOXyhpTst0rAw==",
+      "signed_at": "2026-06-10T16:36:56.071Z",
       "forward_watch": [
         "New AI attack classes as ATLAS v6 publishes",
         "Post-quantum adversary capability timeline",
@@ -516,7 +516,7 @@
       "framework_gaps": [],
       "last_threat_review": "2026-05-01",
       "signature": "b5miTiY0cnxETd2btxorfZBdJKt/fLnQx20sGYUb9zEqGqtm0LMLpghkW68j4/9k48KNyuGMtNWiKTSnodUGBw==",
-      "signed_at": "2026-06-06T00:30:06.272Z"
+      "signed_at": "2026-06-10T16:36:56.072Z"
     },
     {
       "name": "zeroday-gap-learn",
@@ -541,9 +541,9 @@
       "atlas_refs": [],
       "attack_refs": [],
       "framework_gaps": [],
-      "last_threat_review": "2026-05-18",
-      "signature": "xbkip0AQtWQKAu+O6r/gYECNjezS6O9k9xkkJsYbMlr+j8CdqH3p5/0l+GZmDidImRC/DL07GCnKrk9HRR/yDQ==",
-      "signed_at": "2026-06-06T00:30:06.273Z",
+      "last_threat_review": "2026-06-10",
+      "signature": "NVBY4I5a+v2/nUeCYcy3LLVKk3Tg9gmz+sCKyvnf8t2fXMNSIGtoy+P8K4Gfos1rGzRRMaU01V7L4kh/IQ8UBQ==",
+      "signed_at": "2026-06-10T16:36:56.072Z",
       "forward_watch": [
         "New CISA KEV entries",
         "New ATLAS TTP additions in each ATLAS release",
@@ -605,9 +605,9 @@
         "HSM/TPM vendor PQC firmware support timelines",
         "New CRQC timeline estimates from academic cryptanalysis"
       ],
-      "last_threat_review": "2026-05-22",
-      "signature": "li2NnC1oeVIr22ComP5QbcQoh5xpWITuaKpza1s2SsUkH6kGnnt4wFfFAzaC1ORmH9x2cr8hN8kaNANG/eIMBQ==",
-      "signed_at": "2026-06-06T00:30:06.273Z",
+      "last_threat_review": "2026-06-10",
+      "signature": "U54OxIjPT+W9yafjpeFgY7klXMltLYBuSCtu/AAlXxOIPehJrbf/vbGgnBn58nqOd7RjoKjmKz9WQs4DMqWcDw==",
+      "signed_at": "2026-06-10T16:36:56.072Z",
       "cwe_refs": [
         "CWE-327"
       ],
@@ -653,9 +653,9 @@
         "Framework publication updates (NIST SP updates, ISO amendments, NIS2 implementing acts)",
         "IETF RFC publications and draft status changes (datatracker.ietf.org, rfc-editor.org); run `npm run validate-rfcs` quarterly"
       ],
-      "last_threat_review": "2026-05-22",
-      "signature": "sZHlJ7ueHPdtzVbR+yXQ5+wKgNyjWsa1LKVg9aWTmg/Onl71DvEILMyJiLpPQjseT56Mnr1DMYJE8xOGlffBAw==",
-      "signed_at": "2026-06-06T00:30:06.273Z"
+      "last_threat_review": "2026-06-10",
+      "signature": "QsJMwvnUJXHwoBPJ4BiUx3FO9giXfos/sMbx5tyO83AJ2JxdVskeC6g/WDfO+rVkWNXRgWi4h1eSYz6T8/tpAg==",
+      "signed_at": "2026-06-10T16:36:56.073Z"
     },
     {
       "name": "security-maturity-tiers",
@@ -691,8 +691,8 @@
         "PQC tooling maturity shifting overkill to practical"
       ],
       "last_threat_review": "2026-05-01",
-      "signature": "3AwFnEJu6DukPPNep/3SnuPWEuV060fJEQIwThFm7ujmdbFk0/Ii0XwGv1dkvbbK7ymMdOQpp35l4aLONAucDA==",
-      "signed_at": "2026-06-06T00:30:06.274Z",
+      "signature": "8KbLVVPI1QgYa+HAnEYvKf1cXnxQ3zsncqTGrAOrBP4rwUeZsxJm8KyFCwI0XytnZG35PZ830BFlG/okPW3sBQ==",
+      "signed_at": "2026-06-10T16:36:56.073Z",
       "cwe_refs": [
         "CWE-1188"
       ]
@@ -727,7 +727,7 @@
       "framework_gaps": [],
       "last_threat_review": "2026-05-11",
       "signature": "iJWevUBurLvt2v8X+Ch2eHmZkPWpKeAtIpxTIP4MwbUHyco3igDeBywJCyaR2vURYRx8LkzzIMM8DxQM4LAXBQ==",
-      "signed_at": "2026-06-06T00:30:06.274Z"
+      "signed_at": "2026-06-10T16:36:56.073Z"
     },
     {
       "name": "attack-surface-pentest",
@@ -790,7 +790,7 @@
         "D3-EAL",
         "D3-NTA"
       ],
-      "last_threat_review": "2026-05-11",
+      "last_threat_review": "2026-06-10",
       "forward_watch": [
         "NIST SP 800-115 successor publication (the 2008 original is the active gap)",
         "TIBER-EU scenario library refresh under DORA Year-2 supervisory cycle",
@@ -798,8 +798,8 @@
         "PTES revision incorporating AI-surface enumeration",
         "Pwn2Own Berlin 2026 (disclosed 2026-05-14, embargo ends 2026-08-12) — Microsoft Edge 4-bug sandbox escape by Orange Tsai (DEVCORE); forward-watch only (browser sandbox, out of current playbook scope); track Microsoft Edge security advisory and KEV add"
       ],
-      "signature": "DDMzI+4En4aIkwBUCGW6nj1eEkCyLqHGn2LJ2rnwWfYatjPI1U5HrTZNAN/n9JqWtAzk8F3rmsKehaaz5iNWDA==",
-      "signed_at": "2026-06-06T00:30:06.274Z"
+      "signature": "ZnFi+Rk4CWrjFEVU4hC6Q66UbDmndNL/ICLWQNA1TQYFGSTnng+nboM4tfi6h0yMbbDj7dOXYqqeHNK+M5ZiBA==",
+      "signed_at": "2026-06-10T16:36:56.074Z"
     },
     {
       "name": "fuzz-testing-strategy",
@@ -851,15 +851,15 @@
         "D3-IOPR",
         "D3-PSEP"
       ],
-      "last_threat_review": "2026-05-11",
+      "last_threat_review": "2026-06-10",
       "forward_watch": [
         "NIST SP 800-218A (AI-specific SSDF practices) for any explicit fuzz requirement on model-serving stacks",
         "OpenSSF Scorecard \"fuzzing\" check threshold evolution",
         "syzkaller eBPF and io_uring surface expansion as new kernel attack surfaces ship",
         "OSS-Fuzz-Gen / AI-assisted harness generation becoming the default expectation for OSS maintainers"
       ],
-      "signature": "dJB0iAstIUbyny+udl3OIkaLScEmqS97LNP73yQ8mxt+0bcqxZjpfXaWLzLuIQblGYvUvz75/H6rO2EJuGd4AQ==",
-      "signed_at": "2026-06-06T00:30:06.275Z"
+      "signature": "45ICz7vcnmHYE1+RIDv8wQjScKj6p8hqJQ5m6I0tDdKVnGdMXCYIgZnYqFJgHBDXYAXlGx7D7UxhFz6WOCDqAQ==",
+      "signed_at": "2026-06-10T16:36:56.074Z"
     },
     {
       "name": "dlp-gap-analysis",
@@ -925,7 +925,7 @@
         "D3-NTA",
         "D3-NTPM"
       ],
-      "last_threat_review": "2026-05-15",
+      "last_threat_review": "2026-06-10",
       "forward_watch": [
         "EU AI Office secondary legislation under EU AI Act Art 10 / Art 15 that may operationalise inference-time data-flow controls",
         "ISO/IEC 42001 amendments expected 2026-2027 likely to add prescriptive data-flow guidance for AI systems",
@@ -933,8 +933,8 @@
         "MCP gateway / proxy standardisation (Anthropic enterprise MCP gateway, Portkey MCP) — tool-call argument inspection is the missing primary control",
         "Quebec Law 25, India DPDPA, KSA PDPL enforcement actions naming AI-tool prompt data as in-scope personal information"
       ],
-      "signature": "KEAoMji3VcPX/ZXXqVe6OStxSkTssfY9fIRPyPcDYqh50GzOFQ6koNOTBVAiWOvjDjQ38g12xun5srbqgmvRAw==",
-      "signed_at": "2026-06-06T00:30:06.275Z"
+      "signature": "k6A7QcFEzgGXYWftt/elhQe7kU4F67c0ol3a8DZfj1XW4UrH99SLhPHr6ih3R3EYCl/Ey/zXt/x3a9fDT3RmAw==",
+      "signed_at": "2026-06-10T16:36:56.074Z"
     },
     {
       "name": "supply-chain-integrity",
@@ -1001,7 +1001,7 @@
         "D3-EAL",
         "D3-EHB"
       ],
-      "last_threat_review": "2026-05-15",
+      "last_threat_review": "2026-06-10",
       "forward_watch": [
         "SLSA v1.1 (draft) — adds attestation chain requirements above L3 and a hardened-builder profile; track for re-baselining",
         "CSAF 2.1 finalization — VEX status vocabulary expansion and machine-readable advisory pivoting",
@@ -1012,8 +1012,8 @@
         "Pwn2Own Berlin 2026 (disclosed 2026-05-14, embargo ends 2026-08-12) — NVIDIA Megatron Bridge overly permissive allowed list by Satoki Tsuji; AI training-stack supply-chain exposure; track patch and SBOM-attestation impact",
         "Pwn2Own Berlin 2026 (disclosed 2026-05-14, embargo ends 2026-08-12) — NVIDIA Megatron Bridge path traversal by haehae; AI training-stack file-system trust boundary; track patch and SBOM-attestation impact"
       ],
-      "signature": "zuW8T0EMbVV83GsUP/W20Use2gBTicBW021T0sY7qsRY/U5qsPWkXYIWp3SdiKLTIKqTEd/0T7LQebjIs2QKCA==",
-      "signed_at": "2026-06-06T00:30:06.275Z"
+      "signature": "5shKqNcLC8Obt0EdvKnck8OwWIuRMgZuuZd12pvWqJIltsYMyTrw2M+lgbQfqg3x2KO6qsJljGAhTew5jM58DQ==",
+      "signed_at": "2026-06-10T16:36:56.075Z"
     },
     {
       "name": "defensive-countermeasure-mapping",
@@ -1068,9 +1068,9 @@
         "D3-RPA",
         "D3-SCP"
       ],
-      "last_threat_review": "2026-05-11",
-      "signature": "Qe0Hg9BrX3Zm5pj0n2z/oiHbAXWdA2Dq461zc4izkkUjEX2CZ02rODjCI2ELbrVOU3GC7edxqAxA+5U/ObnHDQ==",
-      "signed_at": "2026-06-06T00:30:06.276Z"
+      "last_threat_review": "2026-06-10",
+      "signature": "lfa5Wgep26mK3o2ZSe5qN2vVxg+xRRURRpmnqP4JdQvvecW3T2+PxHqjT48DegXJHRXJ6DPzyIElFc7no86TAg==",
+      "signed_at": "2026-06-10T16:36:56.075Z"
     },
     {
       "name": "identity-assurance",
@@ -1137,7 +1137,7 @@
       "d3fend_refs": [],
       "last_threat_review": "2026-05-11",
       "signature": "UV3458QXSkEpenzrOmdlTTfPHUD4hNyKMDHoeZDq/kiFb4mAG0ghQGTTgI9Ru8cJbSmYM1++m9N5TFIJ6JJPBg==",
-      "signed_at": "2026-06-06T00:30:06.276Z"
+      "signed_at": "2026-06-10T16:36:56.075Z"
     },
     {
       "name": "ot-ics-security",
@@ -1191,9 +1191,9 @@
         "CWE-1037"
       ],
       "d3fend_refs": [],
-      "last_threat_review": "2026-05-11",
-      "signature": "kIVzsPsJ72PzzWQwTuvjoHHoVEDCday5I52M9ohjB3/Ak+zlA8oyWLO/BKb/XuYY4fOApjfxTErSWv5uHQ2zDw==",
-      "signed_at": "2026-06-06T00:30:06.276Z"
+      "last_threat_review": "2026-06-10",
+      "signature": "afJ00EDXgARQJrbRqN6xe1+E/kbHF7O2fxQFVvrLLXdrKfK86RK/oJU1AwpxX6mclX9f+5ivy6FvFIuRMA4dBQ==",
+      "signed_at": "2026-06-10T16:36:56.076Z"
     },
     {
       "name": "coordinated-vuln-disclosure",
@@ -1235,7 +1235,7 @@
         "CWE-1357"
       ],
       "d3fend_refs": [],
-      "last_threat_review": "2026-05-11",
+      "last_threat_review": "2026-06-10",
       "forward_watch": [
         "EU CRA Art. 11 implementing regulations and ENISA single-reporting-platform rollout (target operational 2026-09; first manufacturer notifications due 2027-12 per CRA transition timeline)",
         "ISO/IEC 29147 and ISO/IEC 30111 revisions expected post-CRA to align \"method-neutral\" language with EU 24h-notification reality",
@@ -1244,8 +1244,8 @@
         "UK NCSC Vulnerability Disclosure Toolkit revisions and AU ISM CVD guidance updates",
         "NYDFS 23 NYCRR 500 amendments potentially adding explicit CVD program requirements"
       ],
-      "signature": "bWr27Q1uN9xCe1ib4QulszBa7YIDNkGqo72k5nm2cK98LyPblicD+sO9MnGckAyB22BTN/cIB+FwFMcI5IxvBw==",
-      "signed_at": "2026-06-06T00:30:06.277Z"
+      "signature": "VzivMW82mRrG9+07ZX8sj4j9O9YjE/m07m1UHgSwEgex+FLaVPvIj3y1Vk6qeFOvDURmtVaztWlpSlk7iSn0DA==",
+      "signed_at": "2026-06-10T16:36:56.076Z"
     },
     {
       "name": "threat-modeling-methodology",
@@ -1285,7 +1285,7 @@
       "rfc_refs": [],
       "cwe_refs": [],
       "d3fend_refs": [],
-      "last_threat_review": "2026-05-11",
+      "last_threat_review": "2026-06-10",
       "forward_watch": [
         "ISO/IEC 27005 revision integrating AI-system threats",
         "OWASP Threat Modeling Manifesto v2 (post-2020)",
@@ -1294,8 +1294,8 @@
         "LINDDUN-GO and LINDDUN-PRO updates incorporating LLM privacy threats",
         "PASTA v2 updates incorporating AI/ML application threats"
       ],
-      "signature": "Q854yzLqXdOazc6EyQbZzgAlivuq2vGFDVUCrxSldSvx/HX/ZM/uzmJyP7aBG7ZsMHxj6Lmj/H82YQoo1e+NCQ==",
-      "signed_at": "2026-06-06T00:30:06.277Z"
+      "signature": "Fk5LzzeS/bH5SQJNySgZqSdeQf1udwdRs3FVLwig5kuqyyKkuIJcF4HW+xHF/1e66HR+gjgRUoqWZGsv58lLAg==",
+      "signed_at": "2026-06-10T16:36:56.076Z"
     },
     {
       "name": "webapp-security",
@@ -1367,9 +1367,9 @@
         "CWE-1188"
       ],
       "d3fend_refs": [],
-      "last_threat_review": "2026-05-11",
-      "signature": "4ccahkJpGJZtwD7EBpnGcN0sEGPMEw8eqV+tvePVS04YAkLgYVWtlkasI/8n0be9xB+77x+Sjj3kIi2j2Lf9CA==",
-      "signed_at": "2026-06-06T00:30:06.277Z",
+      "last_threat_review": "2026-06-10",
+      "signature": "1skHJsPPOIXLQdU5MGHirP/Q07aCYTirtDmfWDO7ZNuto58NlCttW5ZjCpyh37vASlMljIZx0/R+PIl2PfwTBw==",
+      "signed_at": "2026-06-10T16:36:56.076Z",
       "forward_watch": [
         "NGINX Rift CVE-2026-42945 (disclosed 2026-05-13, source depthfirst) — KEV-watch predicted CISA KEV listing by 2026-05-29; AI-assisted discovery angle; track for active-exploitation confirmation and patch advisory affecting front-door web app deployments"
       ]
@@ -1422,7 +1422,7 @@
       "d3fend_refs": [],
       "last_threat_review": "2026-05-15",
       "signature": "SBB7c3wNYfIdkyOp4g4nW0WP7xS+YokMzg32aaeJdbf14LTGQRzQUvSqb2TCj2HFUSHESOyKT1JpkAfyHLSQBQ==",
-      "signed_at": "2026-06-06T00:30:06.278Z"
+      "signed_at": "2026-06-10T16:36:56.077Z"
     },
     {
       "name": "sector-healthcare",
@@ -1480,9 +1480,9 @@
         "CWE-1426"
       ],
       "d3fend_refs": [],
-      "last_threat_review": "2026-05-11",
-      "signature": "U04GNLyRas1VmfEsB8khH4iqFZPwx96sPY0Kw9iVsSPU+KTeEFqwgtWK1X1pzgb+T16Pc7HSrCaXDOpTFvQEDw==",
-      "signed_at": "2026-06-06T00:30:06.278Z"
+      "last_threat_review": "2026-06-10",
+      "signature": "yyAGG3nUC6/XWQGRF2ufzILfiJitMFczqWNY83lZShCgYSxfFCul0UsICClOc7Xjw76052uydm8kLH9gIzhsAg==",
+      "signed_at": "2026-06-10T16:36:56.077Z"
     },
     {
       "name": "sector-financial",
@@ -1547,7 +1547,7 @@
         "CWE-352"
       ],
       "d3fend_refs": [],
-      "last_threat_review": "2026-05-15",
+      "last_threat_review": "2026-06-10",
       "forward_watch": [
         "PSD3 + PSR (Payment Services Regulation) trilogue and final adoption (expected 2026-2027); track agent-initiated payment treatment in final text",
         "DORA Art. 26 TLPT first full cycle completion mid-2027; ESAs publishing aggregate findings under JC 2024/40 RTS",
@@ -1562,8 +1562,8 @@
         "OSFI B-13 (Technology and Cyber Risk Management) post-2024 examination findings",
         "TIBER-EU framework v2.0 alignment with DORA TLPT RTS (JC 2024/40); cross-recognition with CBEST and iCAST"
       ],
-      "signature": "xbylLqNPBuEsFE/MNVeGy/01K6yiJXMxQbzC1F4RWU5aseDGbNy5HrAv2JWI2+Aft05ozreNPjccvu66yJ5EBw==",
-      "signed_at": "2026-06-06T00:30:06.279Z"
+      "signature": "/+df91Qhl1TIxEAqzgqB7+YJ6mneX6Dif+h6RaCbxOLGE6KRTFst1Q/Fu5SStt8Zx5JI62bkQ2BBrNOKfUlPBg==",
+      "signed_at": "2026-06-10T16:36:56.078Z"
     },
     {
       "name": "sector-federal-government",
@@ -1618,7 +1618,7 @@
         "CWE-829"
       ],
       "d3fend_refs": [],
-      "last_threat_review": "2026-05-11",
+      "last_threat_review": "2026-06-10",
       "forward_watch": [
         "CMMC 2.0 phased rollout milestones through 2028 — Phase 1 (self-assessment) effective Dec 2024, Phase 2 (C3PAO assessments) ramping in 2025-2026, Phase 3 (DIBCAC-level assessments) and Phase 4 (full enforcement in all contracts) push into 2028",
         "NIST SP 800-171 Rev 3 (May 2024) replacing Rev 2 in contracts — three-year transition; track which DoD / civilian agency contracts have crossed the Rev 3 boundary",
@@ -1631,8 +1631,8 @@
         "EU Cybersecurity Certification Scheme on Common Criteria (EUCC) operational — first certificates issued 2024; high-assurance level for government use cases ramping",
         "Australia PSPF 2024 revision and ISM quarterly updates — track for Essential Eight Maturity Level requirements for federal entities"
       ],
-      "signature": "C9c3JuBhUbwcb7uZpDdy+PNT8sYmYIxzD4uRHu421ePW1aSFJ8fkMvuTzSO8vD/F/jOOg5opM4kov/xSAn+qCg==",
-      "signed_at": "2026-06-06T00:30:06.279Z"
+      "signature": "k6MAPS8HJivu0DNwC1azPvyKeig2xLGz/hcqYd8T+s5GvIypPGfkeYRRKmdqMgHUe24f7bQeRZ7AxcQ9Bi6SCg==",
+      "signed_at": "2026-06-10T16:36:56.078Z"
     },
     {
       "name": "sector-energy",
@@ -1685,7 +1685,7 @@
         "CWE-1037"
       ],
       "d3fend_refs": [],
-      "last_threat_review": "2026-05-11",
+      "last_threat_review": "2026-06-10",
       "forward_watch": [
         "NERC CIP v7 final FERC order (anticipated 2026–2027) — additions for low-impact BES Cyber Systems, supply chain, and INSM (internal network security monitoring)",
         "CISA + EPA joint guidance evolution for water/wastewater following the 2023 Unitronics campaign and the 2024 EPA enforcement memorandum",
@@ -1696,8 +1696,8 @@
         "MadIoT-class research on consumer-IoT-driven grid frequency manipulation moving from proof-of-concept to attributed campaigns",
         "ICS-CERT advisory feed (https://www.cisa.gov/news-events/cybersecurity-advisories/ics-advisories) for vendor CVEs in Siemens, Rockwell, Schneider Electric, ABB, GE Vernova, Hitachi Energy, AVEVA / OSIsoft PI"
       ],
-      "signature": "oz8Q5WVaY8au4IjbaZahx/DSaC00Q44ylSL3mDkTerCEpW/EyPUeiLeGxSrWxBCwVFEKSSJvnhJjhvX5lDPcCg==",
-      "signed_at": "2026-06-06T00:30:06.280Z"
+      "signature": "IYKXn009jfhpKdQKiGB4xb7VgxsJXa6PZawoguP42khU6S/TTemp/YsK1YQCUyabE+2biElL/PP1Hi8zCkSSBw==",
+      "signed_at": "2026-06-10T16:36:56.078Z"
     },
     {
       "name": "sector-telecom",
@@ -1783,7 +1783,7 @@
         "O-RAN SFG / WG11 security specifications"
       ],
       "signature": "NAtyzfLPXlUuB78Snb9nWmbZalC1CNlIYN9rYhdEmtB/xQGC6vVnThgrEAHlm7v/jMCFuknvEpUHKdscUnUADw==",
-      "signed_at": "2026-06-06T00:30:06.280Z"
+      "signed_at": "2026-06-10T16:36:56.079Z"
     },
     {
       "name": "api-security",
@@ -1850,9 +1850,9 @@
         "CWE-1188"
       ],
       "d3fend_refs": [],
-      "last_threat_review": "2026-05-18",
-      "signature": "1UTjZNC5Lyrgw93LAizdXVeSmv3jS8YQNT1db5OKsldub50+o1FXmAH4+3MxZozaOGDCX3yXbdDJSJaaSmfuAA==",
-      "signed_at": "2026-06-06T00:30:06.280Z",
+      "last_threat_review": "2026-06-10",
+      "signature": "HUjhPGpZeZeVi1nzBIsEAYh18x5ltlIXnt1yQ5YKz+jC2Dvxw7vV/Clx1/1gDBLAuBvRW9wcNtDr4c0RxhfGDQ==",
+      "signed_at": "2026-06-10T16:36:56.079Z",
       "forward_watch": [
         "NGINX Rift CVE-2026-42945 (disclosed 2026-05-13, source depthfirst) — KEV-watch predicted CISA KEV listing by 2026-05-29; track for active-exploitation confirmation and patch advisory affecting API gateway / reverse-proxy deployments",
         "Pwn2Own Berlin 2026 (disclosed 2026-05-14, embargo ends 2026-08-12) — LiteLLM 3-bug SSRF + Code Injection chain by k3vg3n; LLM-proxy API surface; track upstream patch and CVE assignments",
@@ -1920,7 +1920,7 @@
         "CWE-798"
       ],
       "d3fend_refs": [],
-      "last_threat_review": "2026-05-11",
+      "last_threat_review": "2026-06-10",
       "forward_watch": [
         "CSA CCM v5 (in development) for AI-workload-aware control objectives and shared-responsibility refinement on managed AI services (Bedrock, Azure OpenAI, Vertex)",
         "FedRAMP 20x continuous authorization transition through 2026 — machine-readable OSCAL controls, automated significant-change review, impact on commercial CSP authorizations",
@@ -1937,8 +1937,8 @@
         "eBPF-based runtime detection coverage of confidential-computing enclaves (AWS Nitro Enclaves, Azure Confidential VMs, GCP Confidential Space) — partial visibility is a tracked detection gap",
         "CISA KEV additions for cloud-control-plane CVEs (IMDSv1 abuses, federation token mishandling, cross-tenant boundary failures); CISA Cybersecurity Advisories for cross-cloud advisories"
       ],
-      "signature": "EdsY4xe7YA8X8m+KZUbq49JwoCXgRKEz2eg3m86O37rvBmpm8ppvl9hrsekygvpBh2VmCHL2dEYiOD8OM2n7CA==",
-      "signed_at": "2026-06-06T00:30:06.281Z"
+      "signature": "xa1kr/92/0fBds7LVtRy9aCM2tQRWAfNSFoC6ygbOU7QjamUo8Wt2h2n9W+nZT34STN3woYhXqtfmm8NSjXdBQ==",
+      "signed_at": "2026-06-10T16:36:56.079Z"
     },
     {
       "name": "container-runtime-security",
@@ -1998,9 +1998,9 @@
         "CWE-1395"
       ],
       "d3fend_refs": [],
-      "last_threat_review": "2026-05-15",
-      "signature": "fnLKPLkjjRCJ/F9wdmZ1w1lXmqEJvTYkv6Uu+9OTd5vZTWKz3QMuxKOsas+ctCdOvTaeloqPUUprXx+ZZdDpCg==",
-      "signed_at": "2026-06-06T00:30:06.281Z",
+      "last_threat_review": "2026-06-10",
+      "signature": "60hyXAiYfY9lI+EpHG3iFFxa+oF5n71c0tTMa6iXFLNjBJKPevTsdNgQlQsBEnmRJ+dWtOjb/GNBW1KiBx4XAQ==",
+      "signed_at": "2026-06-10T16:36:56.080Z",
       "forward_watch": [
         "Pwn2Own Berlin 2026 (disclosed 2026-05-14, embargo ends 2026-08-12) — NVIDIA Container Toolkit container escape ($50K award) by chompie / IBM X-Force XOR; high-severity container/hypervisor boundary break; track patch and KEV add post-embargo"
       ]
@@ -2064,17 +2064,17 @@
         "CWE-502"
       ],
       "d3fend_refs": [],
-      "last_threat_review": "2026-05-22",
+      "last_threat_review": "2026-06-10",
       "forward_watch": [
         "CycloneDX 1.7 ML-BOM enrichment — training-data lineage fields and model-card embedding stabilize; re-baseline ML-BOM coverage when published",
         "SPDX 3.1 AI / Dataset profile maturation — dataset provenance schema firms up; re-audit training-data lineage attestations",
         "OpenSSF model-signing emergence to v1.0 — Sigstore-based model-weight signing; track for production adoption and admission-control integration",
         "SLSA v1.1 ML profile (draft) — model-provenance extension for training-run attestation chains; track ID and section changes",
         "EU AI Act high-risk technical-file implementing acts (2026-2027) — operational requirements for Article 10 / 13 / 15 documentation may pin ML-BOM or model-signing",
-        "MITRE ATLAS v5.6.0 (released May 2026) shipped the AML.T0010 sub-technique expansion this forecast tracked plus new techniques (\"Publish Poisoned AI Agent Tool\", \"Escape to Host\"); inventory now 16 tactics, 84 techniques, 56 sub-techniques. Forward watch: subsequent ATLAS minor and major releases — track next-cadence updates to agentic-AI TTPs and MLOps-pipeline-specific techniques"
+        "MITRE ATLAS v2026.05 (released May 2026) shipped the AML.T0010 sub-technique expansion this forecast tracked plus new techniques (\"Publish Poisoned AI Agent Tool\", \"Escape to Host\"); inventory now 16 tactics, 84 techniques, 56 sub-techniques. Forward watch: subsequent ATLAS minor and major releases — track next-cadence updates to agentic-AI TTPs and MLOps-pipeline-specific techniques"
       ],
-      "signature": "t3dkdpTX04zvjitEeOJThpgjurLd1UO9GOut4LXSZgY3ULhfknI4zT7G5+m2RSZZTo7yyeZrwpg+7vEg9K6mAw==",
-      "signed_at": "2026-06-06T00:30:06.281Z"
+      "signature": "IEECw5lO6ZdpkE/j7Hv6/3Jg2vj9fpXlozY+h85Hrn9QYOJuI0gfBjHoBEchJ2GUTmPwUKoiBoI72PBAQw9RCQ==",
+      "signed_at": "2026-06-10T16:36:56.080Z"
     },
     {
       "name": "incident-response-playbook",
@@ -2124,7 +2124,7 @@
       "rfc_refs": [],
       "cwe_refs": [],
       "d3fend_refs": [],
-      "last_threat_review": "2026-05-22",
+      "last_threat_review": "2026-06-10",
       "forward_watch": [
         "NIST 800-61r3 minor revisions (expected 2026-2027) aligning incident-handling language with the in-force EU CRA Art. 11 24h clock and EU AI Act Art. 73 serious-incident reporting",
         "ISO/IEC 27035-3:2026 (technical incident response operations) — final publication expected Q3 2026, expected to formalize AI-class incident sub-types currently absent from 27035-1/-2",
@@ -2135,8 +2135,8 @@
         "IL INCD Incident Response Process v4 (slated for 2026-2027) consolidating AI-incident sub-class",
         "NYDFS 23 NYCRR 500.17 amendments tightening ransom-payment 24h disclosure operationalization"
       ],
-      "signature": "+1kmtA6rAvIyDjjy+cJHK6BcfylyVsa5cUjRFijlFR9GsQfB93JnmkEJOqML50pdlcxtJI3yUodHpL3/YJGtCA==",
-      "signed_at": "2026-06-06T00:30:06.282Z"
+      "signature": "pN1Qa5NRyNJ6h0pmbbqpy3xWdkMANDMUbBst5SKR5fmmqMFopmyrzwIGagiiNgqxjjCunj9J9Wbzs1sL48sMCQ==",
+      "signed_at": "2026-06-10T16:36:56.080Z"
     },
     {
       "name": "ransomware-response",
@@ -2214,9 +2214,9 @@
         "No More Ransom Project decryptor releases — affiliate-takedown decryptor drops (Operation Cronos LockBit decryptor, BlackCat post-exit-scam decryptors)",
         "SCOTUS or circuit-court rulings on ransomware payment, sanctions liability, and insurance-policy enforcement"
       ],
-      "last_threat_review": "2026-05-22",
-      "signature": "h48ASCz63aBfHzLKxMVDADMuT4atriK0iE6bJeVzZTsx/e8+hyv4fLP7+zYxT9Oe0Gss3v/Xy+t+Wd9uwzV+Aw==",
-      "signed_at": "2026-06-06T00:30:06.282Z"
+      "last_threat_review": "2026-06-10",
+      "signature": "sXPA1lvWvZpf5sHxZXRkO0Kcs6gnXiYq0mWA53y1HeBwQGJ+viSPMt5IMobkjd5qLFYchg0CpW/nBUIvUE6/DA==",
+      "signed_at": "2026-06-10T16:36:56.081Z"
     },
     {
       "name": "email-security-anti-phishing",
@@ -2269,7 +2269,7 @@
       "d3fend_refs": [],
       "last_threat_review": "2026-05-18",
       "signature": "FVBn4ex2qPIo9SHMVJ6tntoz4tVwjbIq3m6wDjjZyv2JODlS+90GBYCOkNamxxkmw/6de6SMs0YHQiF/xjo/DQ==",
-      "signed_at": "2026-06-06T00:30:06.283Z"
+      "signed_at": "2026-06-10T16:36:56.081Z"
     },
     {
       "name": "age-gates-child-safety",
@@ -2323,7 +2323,7 @@
         "CWE-862"
       ],
       "d3fend_refs": [],
-      "last_threat_review": "2026-05-11",
+      "last_threat_review": "2026-06-10",
       "forward_watch": [
         "KOSA (Kids Online Safety Act) federal enactment status — reintroduced 2024-2025 with bipartisan support; if enacted, duty-of-care + safest-defaults + age-appropriate-design obligations become US federal floor",
         "Ofcom UK Online Safety Act child-safety codes — illegal-content codes live July 2025; child-safety codes phasing through 2026 with iterative enforcement guidance",
@@ -2336,8 +2336,8 @@
         "France SREN (Securing and Regulating the Digital Space) Act 2024 — ARCOM age-verification referential for adult content services; double-anonymity model under deployment",
         "US state adult-site age-verification laws — 19+ states by mid-2026 (TX HB 18 upheld by SCOTUS June 2025 in Free Speech Coalition v. Paxton); track ongoing challenges in remaining states"
       ],
-      "signature": "ZHVdGWCcfG98tSVB0b9mwrsYwv71V3uUEl+6ss7omSQhmNvqV5s6MAZM5YladBt9MK/8T/zBrTYN4gAonOP+BQ==",
-      "signed_at": "2026-06-06T00:30:06.283Z"
+      "signature": "7Wdii9uwYmDrzQohoWRWDa5A4aDRKOmdLPq5Jsql86O0Gm7pQANnj9tX+cHpQcQ/Ui8VLuNVP8UFdKxxHeDnBg==",
+      "signed_at": "2026-06-10T16:36:56.081Z"
     },
     {
       "name": "cloud-iam-incident",
@@ -2417,7 +2417,7 @@
       ],
       "last_threat_review": "2026-05-15",
       "signature": "r9ii4nb3HJELdtKCGF5qy9PHOiot3GC24yfxfGAKlLENHkdRvRkvvL99eV/6RXyfUaMyrnc2Te8tPQcNu5bsDg==",
-      "signed_at": "2026-06-06T00:30:06.284Z",
+      "signed_at": "2026-06-10T16:36:56.082Z",
       "forward_watch": [
         "AWS IAM Identity Center session-policy refresh and step-up-on-admin enforcement (anticipated 2026-H2 release)",
         "GCP Workload Identity Federation principal-set attribute mapping tightening (post-2026 Q3 Federation hardening guide)",
@@ -2511,7 +2511,7 @@
       ],
       "last_threat_review": "2026-05-15",
       "signature": "9mfDtMApMAg9V/lmwpniNxo/6gNZoOEoYDfyFvyWvKrPMtc7H9F8uz06FVoARe/J49saAKTVXOurNE1D/KtpCQ==",
-      "signed_at": "2026-06-06T00:30:06.284Z",
+      "signed_at": "2026-06-10T16:36:56.082Z",
       "forward_watch": [
         "Entra ID conditional access evolution post-Midnight Blizzard — Microsoft's 2025-2026 commitments on legacy-tenant MFA enforcement and OAuth-app consent gating",
         "Okta IPSIE (Interoperability Profile for Secure Identity in the Enterprise) OpenID Foundation working-group output and adoption timeline",
@@ -2583,7 +2583,7 @@
       "d3fend_refs": [],
       "last_threat_review": "2026-06-02",
       "signature": "dOFgANMtHm64uSFRjMfeA0fWZS9ISwMTt59I2CbjaF1PgTtbtb8yg/f+3pC4eXcXIET0KPGxRRmENycfIz3rAw==",
-      "signed_at": "2026-06-06T00:30:06.284Z"
+      "signed_at": "2026-06-10T16:36:56.082Z"
     },
     {
       "name": "mail-server-hardening",
@@ -2642,7 +2642,7 @@
       "d3fend_refs": [],
       "last_threat_review": "2026-06-02",
       "signature": "5x8RGzKo/T2IbYnFkYMZs16ThD9a5FEdrKHsnwvtMuGxdyyfZsKNIJVWw2I8O0um0UOXwwkl17Z3zhch26ymCQ==",
-      "signed_at": "2026-06-06T00:30:06.284Z"
+      "signed_at": "2026-06-10T16:36:56.082Z"
     },
     {
       "name": "network-trust",
@@ -2698,7 +2698,7 @@
       "d3fend_refs": [],
       "last_threat_review": "2026-06-02",
       "signature": "C/RdmnGjXKreKiGkwJfUESIxUwQzisGJ9A7KBdE9cBRBHBYHkAcScV89L+Z3kOG032Qax6LeIQai7Lr3nrQBCA==",
-      "signed_at": "2026-06-06T00:30:06.285Z"
+      "signed_at": "2026-06-10T16:36:56.082Z"
     },
     {
       "name": "audit-log-integrity",
@@ -2753,7 +2753,7 @@
       "d3fend_refs": [],
       "last_threat_review": "2026-06-02",
       "signature": "LvUAq+rXCA8PgNy9lTKOmFqa8T9EJg4JEH0axXvEAf9MIHqbR51ergUkFMLaTuvFuApwsPu0r1C30QgScZbiAw==",
-      "signed_at": "2026-06-06T00:30:06.285Z"
+      "signed_at": "2026-06-10T16:36:56.083Z"
     },
     {
       "name": "self-update-integrity",
@@ -2807,7 +2807,7 @@
       "d3fend_refs": [],
       "last_threat_review": "2026-06-02",
       "signature": "BOQZ8G9LdyG/tfpz6rCU4THz5Dq2HGJkUV7uCqSTCMrqnXH6seNXKM41FWawYo0s2VUlXtRgaO7ETp5qgxw+CQ==",
-      "signed_at": "2026-06-06T00:30:06.285Z"
+      "signed_at": "2026-06-10T16:36:56.083Z"
     },
     {
       "name": "multitenancy-isolation",
@@ -2865,7 +2865,7 @@
       "d3fend_refs": [],
       "last_threat_review": "2026-06-02",
       "signature": "bncN0VE4ns0lxtPe48xDR33lerw54BPVkSwX7XlrLQcMHTrV94lmjO8z4ZP4Ko61n+KpuP2SNU8v9JT0bGMmAA==",
-      "signed_at": "2026-06-06T00:30:06.285Z"
+      "signed_at": "2026-06-10T16:36:56.083Z"
     },
     {
       "name": "decompression-dos",
@@ -2923,7 +2923,7 @@
       "d3fend_refs": [],
       "last_threat_review": "2026-06-02",
       "signature": "03i0ZO5ScHIOjGvDKUEsws6m+20fnlJrEhSBtMU7PJzQutrPpmW9gULE0wbayTD5H9URh5nSKZuuVjvjVhZNCg==",
-      "signed_at": "2026-06-06T00:30:06.285Z"
+      "signed_at": "2026-06-10T16:36:56.083Z"
     },
     {
       "name": "log-injection-telemetry",
@@ -2978,7 +2978,7 @@
       "d3fend_refs": [],
       "last_threat_review": "2026-06-02",
       "signature": "twTmA2l+Am2k2PCzB2DNxDQwoYlGopJp/3QgQwBsP7h2LF+uNudisqfuOVV/bYnWfrUhuYZUWbsR3mhzbJCUBw==",
-      "signed_at": "2026-06-06T00:30:06.286Z"
+      "signed_at": "2026-06-10T16:36:56.083Z"
     },
     {
       "name": "privacy-consent-ops",
@@ -3033,11 +3033,11 @@
       "d3fend_refs": [],
       "last_threat_review": "2026-06-02",
       "signature": "0sfKSVrIf555c9bDGkXB96fUClN52fMAMYoQsNQ9eUUSzDiWUwdou+q0gYt43nObtj3m9Yb9X6q3oCXDVMgUDg==",
-      "signed_at": "2026-06-06T00:30:06.286Z"
+      "signed_at": "2026-06-10T16:36:56.084Z"
     }
   ],
   "manifest_signature": {
     "algorithm": "Ed25519",
-    "signature_base64": "yjbWNMCX7Be5GfNF5WciEnzDeuUyJ6NldTbYRA6nx5C2QXPJYyVJVCI1bZtH3EsxmgmM7Ap/Wjzb0kZ+UtiLAg=="
+    "signature_base64": "8ZjY3333vUH3KfbwmhOTRvQsLNuzYsocgtJ5RkrrnZwBH60nr8PYT4yj818HSc3sO3iOfUqh6FjWyzLzQCoiBg=="
   }
 }