@blamejs/exceptd-skills 0.18.11 → 0.18.13

package/sbom.cdx.json

@@ -1,22 +1,22 @@
 {
   "bomFormat": "CycloneDX",
   "specVersion": "1.6",
-  "serialNumber": "urn:uuid:ee3541bb-82de-4e92-a475-4ab086a91c79",
+  "serialNumber": "urn:uuid:c51f478e-938e-48ee-9a6c-69dd9501e511",
   "version": 1,
   "metadata": {
-    "timestamp": "2152-08-23T09:54:03.000Z",
+    "timestamp": "2130-10-20T07:58:06.000Z",
     "tools": [
       {
         "vendor": "blamejs",
         "name": "scripts/refresh-sbom.js",
-        "version": "0.18.11"
+        "version": "0.18.13"
       }
     ],
     "component": {
-      "bom-ref": "pkg:npm/@blamejs/exceptd-skills@0.18.11",
+      "bom-ref": "pkg:npm/@blamejs/exceptd-skills@0.18.13",
       "type": "application",
       "name": "@blamejs/exceptd-skills",
-      "version": "0.18.11",
+      "version": "0.18.13",
       "description": "AI security skills grounded in mid-2026 threat reality, not stale framework documentation. 51 skills, 11 catalogs (459 CVEs / 181 CWEs / 805 ATT&CK + ICS / 170 ATLAS / 468 D3FEND / 8888 RFCs), 35 jurisdictions, 10-class catalog gap detector + budget gate, real XML parser + canonical-form diff + content-pattern regression detection, Ed25519-signed.",
       "licenses": [
         {
@@ -25,17 +25,17 @@
           }
         }
       ],
-      "purl": "pkg:npm/%40blamejs/exceptd-skills@0.18.11",
+      "purl": "pkg:npm/%40blamejs/exceptd-skills@0.18.13",
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "a7b33bc8e119f9e5b4a1f38cbbfbf0a0449dbc57ede8ae66dedc1e73a758c280"
+          "content": "9b7fb1644d71c6022e2c91820776797afb98dd8e6dd05d9d60285ba0e0536df1"
         }
       ],
       "externalReferences": [
         {
           "type": "distribution",
-          "url": "https://www.npmjs.com/package/@blamejs/exceptd-skills/v/0.18.11"
+          "url": "https://www.npmjs.com/package/@blamejs/exceptd-skills/v/0.18.13"
         },
         {
           "type": "vcs",
@@ -116,11 +116,11 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "4dacab4a4fb7b2fb4564d3d2bff9bdfbf0a0e00619eee2c7a0ce5e54edc566d7"
+          "content": "f13b93e53a68866ea90ad820bb1f9791d4ead69bdf136c62200b5647e988acdb"
         },
         {
           "alg": "SHA3-512",
-          "content": "19e61fac72e079baa46589bbc181f7cc570fe38b34636c451564858b8e80333e31be9038947a2f428f61a22252e5021e15196cd48fcd57ab351f219058ebd00a"
+          "content": "39f6ff1f34882768f3e29f7d573add552bcd512cefb36d79f661e5f6e4f9d1b1c5fec1ed5c88ebbce3d933fe20f0da360ff3d8ac04cbf52e5f6b3dc0f339f743"
         }
       ]
     },
@@ -281,11 +281,11 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "82df5d8cd5e3367bc8f638838f597a33dd40a2abd796941ec0edf2a3c8ba22f8"
+          "content": "7c5e618e5bb2ca8544fba021c9dc278d0ed363a42e7285092ec9770056e7d84c"
         },
         {
           "alg": "SHA3-512",
-          "content": "e1f20c0e63721dfafd4e021ebf62e1b5a63a85ce548fdaadc34cccbbff4d6c83ab3993a8643a3c48572783fe2382749142c7f51c0a82363334a022d968f63592"
+          "content": "ffc4158197316118d9ffda5235090961ecce49503e39b940beb32ae66f3885657c73ac45943e2f46afefc00d1a050041e270402d736b2d7af61b5832583bed13"
         }
       ]
     },
@@ -986,11 +986,11 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "7b9df8547f3fb93ae1fe7db953da6ccb9e72438f2b72db56fbd24adc9f4c48ee"
+          "content": "9107c123be8a67456f724f35b5a93086c58abf7d4f5769c15dcba9fccca392d6"
         },
         {
           "alg": "SHA3-512",
-          "content": "4f04d08e54a88b2f32f6325955ac37923dff98fe946f259f968e70c81395c29e7ffcec1d8563f6ddda55e69858f7c1b219808fadf7b855e003ec833019281585"
+          "content": "72c7feffd270042739ae9484ab522955967f257820ddbb06434639cbc305ade9388774d56784b69a32352c733af6a6cd90a52bb3693d0dd05ebc542863abf5b5"
         }
       ]
     },
@@ -1106,11 +1106,11 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "f9a6371d47ee521ff6f8c22548ae4333a8935e817f9bd505f75eeb1d59467fc3"
+          "content": "b1272fd27e4a13a9d69297dd8fde145eef8a0852c93c1a3172c68c6169fbe5a7"
         },
         {
           "alg": "SHA3-512",
-          "content": "1bb5caf2894cc50ee0dbaa2e83d6a8503869737fdb5a9808c4e6a992760c83e5220319e7110a212a075a64d7b9543ac76df6226345442af700a0de6a3aae2476"
+          "content": "d0df4a18564a922064c4d8716c854abe04c8c8271208824b38b7624cf62c1e0c55642a8cbd99b4425cbb2e14cf853913597d509066a5622c66f11a5525273441"
         }
       ]
     },
@@ -1256,11 +1256,11 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "599d3811dc352b4d83ee99d74995bb4a3d1713e85d610c6063caeef994df6031"
+          "content": "8309fb4bac21f191e44453619b9ebe89e2a1aebe0f4db2d62110c4e85f2a2c8b"
         },
         {
           "alg": "SHA3-512",
-          "content": "50e8b4795b748d9498f8ff9b0a5026cac6d4baf52ef27113811c95164ff8e598c208039e290d164848613743c87c36c62b8be1d5d2664f213dc105a499d05bd9"
+          "content": "3c788378f09de422662149274074b336a307112b4240e3fa51f312defaa3d65b9d60c88d307de9d5993125cd12cd14e3c4d3ebca82461b2482495bfc6f6598bc"
         }
       ]
     },
@@ -1316,11 +1316,11 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "240c61d73f016225552b71340c75083415358d942f93403b8b6b982d09b963e0"
+          "content": "0b0087706dfb8c0811d5b14449f01ca69d016174c1960f105b88676f137034c5"
         },
         {
           "alg": "SHA3-512",
-          "content": "025a21d50f2647cb23475ec33d8d3d6bad3eebea962b4422d72348d09b7e13f3753c4831feae4a12024553e3745d5ee657d0ebedaf536fa8db5c417c7365827e"
+          "content": "6d2681258f50114dcc852a5c6b818416057b8fee2bfe4b2cfced8c81d37e38d63aa9b89fa94682584ad071e2488ab2364706aff413c11bd024f7994aecbbf629"
         }
       ]
     },
@@ -1391,11 +1391,11 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "b24f79ea67461c11ecc1c5bc1c7479da943834b3877f2a99b5c842c2d9cd3b1d"
+          "content": "37f52c31384de08cf405d38333ca3cbd78f82c1ec6f45573ef2593a2244dd0f6"
         },
         {
           "alg": "SHA3-512",
-          "content": "12a47e5823c3511d6b5d82fe6ac476872e0a21d7c5d8fd4840725fe372103825fc088e658327b59951bcd6ab411e0e867324b4e617b073579724b6251dfb50c1"
+          "content": "0b2be40b780436b801fbb702cb62d0272e69f219adfd27d9af39fbc5ef8dc4c4842d2ec63ffe39958c9fbe26c37fa7c8502ea0478261049c4699de227d31d73c"
         }
       ]
     },
@@ -1436,11 +1436,11 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "2b65ffe841ecabceeb0917b944f44658b406b6a04c2f6f6191e2bb8698682163"
+          "content": "91b24f4bdda46132fa23a617125f50bc4721d243b2f2ca647706774257eda59c"
         },
         {
           "alg": "SHA3-512",
-          "content": "6e80f5c015b8a5676dab4078bc9f9b4ff990b0d0fb68c8719c7c1d7b34eb1b922662c201eeccd9d19e56dc90d24039df259c7d24ea03617a5024346e08a2eebf"
+          "content": "dcf010d620752bff3dd15195b0752195dafe6e215e28afac3e9e763a5389d14f41de0949830d51152ed1e446dbc49970ec2b3027c1bfd3d93d852919b1a42741"
         }
       ]
     },
@@ -1451,11 +1451,11 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "326635d5edc097ef48dbf4be9d0df6b2d0464b5a276df247c86535f4d2ce122d"
+          "content": "46a4d509b2d5736fc438c65185c5d16a30e740e65b35f5d78a361b89b6c01dd0"
         },
         {
           "alg": "SHA3-512",
-          "content": "f397f9b891b47ce13437fb3211e10910f9d736bb5f29287da18c246c9a83ed4a5f950ff12f3c7fed5ccb66e8a8e45d4c1b67f267fc9b1d876f0207835ef54222"
+          "content": "9978c4753f2b7de3981eba6afc16175cca535f3819ec2f458f4e6de4f3b98408f627b472b3da6af5d32b07956736c85d114e68f7b1c31fe6def07364d6a8e063"
         }
       ]
     },
@@ -1466,11 +1466,11 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "0a424fbd9a67fa8625e22cdf5a6b32778d43b0d60d07a14f1329f5cc8a8e1531"
+          "content": "22ce7d7579a0789404896389c5d20b248e4cb35aa8a318954ec73c10ca95b95c"
         },
         {
           "alg": "SHA3-512",
-          "content": "42c37314e6f240c20852c8e7a8c37cab7d1dda5cf2478903fa3deee91621961bd646713e07cf5252c381b6a285a06d2ac9e758baf1f95b883815ec4f057cd50e"
+          "content": "2d316c8286fad5cf33cb99973f3a80057414c4ccd06a54262df49cc367e2e84bc69891557cea6ab34a478476c0a597329fcd2024044582a3a25c4b24619c748c"
         }
       ]
     },
@@ -1481,11 +1481,11 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "326fc776527f54bb46cc74bb29ddade5c453a6b94a8c6b19b51657f15e994261"
+          "content": "99abdca1451f2d7c1163dfb295721a90f3ae5dd19d9be3d8744e5c0fafe22feb"
         },
         {
           "alg": "SHA3-512",
-          "content": "386355bec846a1d55cd3543fd786d843be4b167c1bf37fe4b2094580a5f4ff52b5c68f5215f28a95cc5fb5714b09a4c7bc9d4bb028f864bd09cb1d4082954c16"
+          "content": "2f087e334b9bd8d8e27c551049a9fc200f6a5ff4938cc18695e673ec99b5fda147dec05431484f1ced4d916c78b9c5a9f7278fde1cff5550bad479f8948922bc"
         }
       ]
     },
@@ -1526,11 +1526,11 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "5e0d01cb485c1c0a59831fbb6b3ab9edf728d246e01fca15e318fd5c5a18edc6"
+          "content": "92799efe9d7c301960fc16540880bb239ff4c90eaa3015cfbc50219a16f3b9b0"
         },
         {
           "alg": "SHA3-512",
-          "content": "a7910a48e297da451cd1ebc8f74bc9abdb46edb5d96bab8eafd1df60729206175c7db1d5d0aea4b789045cda69e2bc243d19d4c5bd05b7bb431072a3e6fe2caa"
+          "content": "43394aaa7d0d1b86d57fe3853215e5d5bb1b7d61056cff6427ed8b30633aafc6e0537bedc55e04ccf11048faf8867e2f3251a37b1d54873e2f9956a5ccef2d5a"
         }
       ]
     },
@@ -1586,11 +1586,11 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "2410c805fb1b837444cae8fa240b1c3b6d1958512c4b2de6291d83d1ca049477"
+          "content": "896403a8760fef5f434ca17e601aeb03de3d2737b07842389ffd0cd064db6301"
         },
         {
           "alg": "SHA3-512",
-          "content": "5c54ed7a860825e503a2bca0e638a4e9cbf97bedac7b1e8b8445414a51bd90436cace5256374f98b591f84c5c2419da4d506a177694e744077c752b7f1f66593"
+          "content": "db918187e6165805b2332602187179e071f0a4445f0ba816201083dc6716ce62e235694bdf538b7f921465c6ffa34282d0258c2105c39f4d6c11b9541f5b372b"
         }
       ]
     },
@@ -1601,11 +1601,11 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "46319d7b3e28a527c9c8afea98c1c53e17e4655d763d717838514fa274fa00b5"
+          "content": "dd01792b8233450ddf903449667192ff0f92ae56aa3b2c6b50fe4f1b3b6aedaf"
         },
         {
           "alg": "SHA3-512",
-          "content": "898d66635fc871f2e84d1160a381b78b74b0f07899104cba70268b544961f60ea9ea6c287a60f477b112805e01717451764ec7ba7fcd61266e7914d2060ff994"
+          "content": "f22734817e47e96112b88fad776901a63a33fefe8c24a2be6cd90cf3e4ff4370882ab13d5ef484b54caf1ed1ab77ea0c07ce886c025fed0ba48ce475391191af"
         }
       ]
     },
@@ -1646,11 +1646,11 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "b456437ffd2c64f6368c32148d756b4c8b331a841f387af668dd4fe9fffa9f7d"
+          "content": "faf3a3e4c3cf55cf47e2d0a76d81b6a95c99050af1c5b2e9746f79b8517d2bc1"
         },
         {
           "alg": "SHA3-512",
-          "content": "5365c48d5e1c084c74fff391f04e37acef83478373163f3aa92b8221a3c5286793abdc934df309e7aee90808b149d8f32bdb5274731ed72f7378248fdf08aff3"
+          "content": "e99bfeefec359df939fb0cf574517b4acbad3320f760bd6e853a7d2aee8454e4d28b031b9300f4a6f07d6e73fd4fc2f694ba190a4618876f1b457a979a3b218f"
         }
       ]
     },
@@ -1661,11 +1661,11 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "82bb10b137ce9fe00cdee832a07d8dfe692014b8c1446c3d460bcbc968508be3"
+          "content": "8ffa194134aca2db0f7a12b137da71b75e180b58ce3659a1ba4e6912d440e1c9"
         },
         {
           "alg": "SHA3-512",
-          "content": "428351e33661d6150f9aaa982bed02ffa730f46bbc3d2215c4124b3738d04f4b055f62bf624fd267269bbd0f41de18e1bb42531139f7042559b10ff75997992d"
+          "content": "ab548924027f86fe1c6a8a382453978a7b0d3c723bd7a91fb24a9336ac59dd6ba1011b71d356edcfa6266ba60b1c86f2bb766b395054d59da938b9ab5cf09c7a"
         }
       ]
     },
@@ -1676,11 +1676,11 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "3bcdc06b12252b0b37acb42e9372936b264c8b78a8925fbbf01d53bcdd14bfe2"
+          "content": "7c3b6ee6e19289ed24ce575996ea6d2e89a900de1c4029d8a627de1d68fe8446"
         },
         {
           "alg": "SHA3-512",
-          "content": "d29736ad6b4d81199b64a9c40652e1ac668c1ddf942798d5a71833b446e25504f18cf0faa30480b3c89965c9c6ee9f023da4f2c9719ed0ba6d84e15df344f2ba"
+          "content": "50b818fe29a28d8344f292081db7841a809dfd157fd0dc1eb95626311424b1e9272ebc6bbab9ffea9989d64f8bb86e8fe9fb3c5364fa5744d3c9b4f5afe76e4b"
         }
       ]
     },
@@ -1706,11 +1706,11 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "ea874fc21b7757d83cb08dd468e305eaee18431e0224f3102944dcd194170f0e"
+          "content": "d1fdcd3db1c3c6284d5c4c2189b843aba851c6027ed6e97f473ef2badda969a3"
         },
         {
           "alg": "SHA3-512",
-          "content": "e864fd3538dfaa107414dd23499ed6f858a8a32a71c10f865537457d85c3b4709933ec4f48114b146f66bd78a7b55462c30e4355de730c94dc74a8362b9ddd1a"
+          "content": "591f78cab313ec978053e75b08901fab8011f293b39337cafb9eea62d67d73b8f2fa5b394ab130ca4fe8c4c21abc47c8e0a48230fea299318bcb74c0970b2090"
         }
       ]
     },
@@ -1736,11 +1736,11 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "257040e277977cd3bf701da7d2b604c06908fd279bb11e83c0ad841a6b7bac23"
+          "content": "14313387165baf81ef54719a3491347380c0eeec86dfc24cdcfcc666c1e68248"
         },
         {
           "alg": "SHA3-512",
-          "content": "69cdb4f00f92e5dff4007bbdc24289b07a24ef1b3ae4c88030dff97b8063f95d440335dcd6d1420fb6ad3f9ec91acb29dd144b0a214e2d8478012725ddc31140"
+          "content": "2261fde3839aa38d1c506792286908998068fb7449ce2269dd7f1db071184a9f4fdf607e35314aa7ac6b500f4ae6d7b00063805708dd7a60b83c7acdc695fbb7"
         }
       ]
     },
@@ -1766,11 +1766,11 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "51953bfa4da6f34f27d1739b0ad4f3f948090f3a43a823eaf19d1f340018a9d9"
+          "content": "578cc34601ab5139f3cc0458a67dcef3e560f0d8af7bd35bd189776b34166d74"
         },
         {
           "alg": "SHA3-512",
-          "content": "39d4d803a5a448010785efbf3df0a1c454ccdfce1150c35d4a31d50da0948b14223c2f34ef97f31d385cd02a83af58d296c866dfaca432e1598e5173cb650d8e"
+          "content": "2ff7fb40dbe9214d30214546d6d561c2d2d341abeaf7388f98ce6b8e67fa650034cea196d0a2c43a9e38dd59fc3560990c4c6eec9c2ca4ec26c74847d263b8ad"
         }
       ]
     },
@@ -1781,11 +1781,11 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "916aa74990ec67a9e1078b66dd464000a2ecebe2dd8ae01b33438ca814d7c2b3"
+          "content": "be3b19a1e45b063b4440563dd2fbb9a88cf4b4f02298cbc46d110476f7032558"
         },
         {
           "alg": "SHA3-512",
-          "content": "87f20fc372e33f5c53716a0bbe49e6465e9dbbc952bd74962ecfa3eeb34274b74efce97a3cbd48f823e05ff5adc91bf10dc52db392738e8ae19d53dd068285d7"
+          "content": "558b2e27a8ff0c4acb11c06754dc8d56041d06ca777a6562c74a28fc005ec5a4aa72f2e232efdb0870fd481ab422e0f78d9a28ec77db9e967a7dcf29d4ac2c5d"
         }
       ]
     },
@@ -1796,11 +1796,11 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "16269eeb77666b069305901e1617e7cda37036ff6ba556933adc7958ebe317cf"
+          "content": "9b61c968eff0a1c1f350c79b971b47e18f78507f6d604c28807b01306595a3c9"
         },
         {
           "alg": "SHA3-512",
-          "content": "14fbfb2dcb800cedcc40484d390cd8ee27631ed63f5023322777800e8dd86ba7dbec75dbe99db7161750679719d1e83a4be273ca5efecc96fd27ab93eb001bde"
+          "content": "171cb236a2c14a6208b9fc163e899bc219f798f0450e7027f0fffeb3ea2790b371230eb07d30b837ac3911ed8b1e98dd14005fd039dd49f2fc0cbf666b49cfac"
         }
       ]
     },
@@ -1811,11 +1811,11 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "206abe5fa863fa8d032ba256e8a8b5808f44e1b31dc6ceef48f08a783bcc6815"
+          "content": "4288523bb4e258c6cbb6ac72b5e4f55436bc048421b2ca6c6d5cea8538e7aa35"
         },
         {
           "alg": "SHA3-512",
-          "content": "61836d3d62c94d91a8ca62c6d5ee413b187377ba1926b1222e578dae866e9d798f97d893c91588371d1bb7504972b8632c5153b36a72ac1e81b58dffebc4e3be"
+          "content": "930c044d3ca02e2322008610d1d409725d72b71e8389408ef6fe31f87e9139bf3aae4d4b456a8ed592ca512e2c663fa753a97fca71bed2e349cab15f29123c25"
         }
       ]
     },
@@ -1856,11 +1856,11 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "7afca8163fa30246b9b4c5afd0ee6fc324f66aca17ebe43657e57f792d3f91e8"
+          "content": "4b4f7f89c2a7bbbcdd3a59225708bacc65629f28a05a41d63f2b15c897daf160"
         },
         {
           "alg": "SHA3-512",
-          "content": "9b1fcaf43fe65d2b343c65313c35dd493c41e6a01c6bcbed2d686bdba1b5f63c1f8593b1a90522672601006fdfd03205f75cdeda28c0e9db6831971dbcfd092e"
+          "content": "37278e433782fb0af5e1150f9f2f79fadc909973672d18c60a715a56d52f357c95e4af704acb3de3833885d4112951933228d86fe485c3149c38efbf59dc1fd6"
         }
       ]
     },
@@ -1901,11 +1901,11 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "c1c37465664024760c34e6c236592ee071e5347d3fb736dba3a495fee6768126"
+          "content": "04dc4d4026147da386256d462aec657b1746e9539f8d8dc3ed0ad522f437d765"
         },
         {
           "alg": "SHA3-512",
-          "content": "6e3fd76d2644e148080a889f6b59702c55f55cbdf2be4c223e3b9fc0e705df0753f7fa3fd6cdbae36e41bcca0191d90da8ee0577dc6b26a5687254abd0122dfe"
+          "content": "64b3f4fbe9db144453f9f8e040d093f835c95901c2e823a5f34b3657efbbc756b838936f87b0b9509e88a81ad5b1d7fd459e5a4cba865f10949c1951c7deb8f2"
         }
       ]
     },
@@ -1931,11 +1931,11 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "856217d2d89c7cd6f43414c3f4f8f0dc889842a394f145f90860bc05f2d8d7d9"
+          "content": "f4d69adf7d3c4585b54345e646679dffd23ec2c1004a32f8434ee29039c6154e"
         },
         {
           "alg": "SHA3-512",
-          "content": "6458e83e9631d092e4bc729a8495aa0bcb1ba8f4662b7eedff47a16b79863ec2d159a613955b01230f372172dee3528abdb762ddf5f05190037bab1f7436228c"
+          "content": "a7074f26bdb5a67350c73669c61621cbef6ad7e090414db275276477cb01b37ca78457129e33f8de657997abfcbee66f4f26eba43f489fbe6bfd92aa860c369f"
         }
       ]
     },
@@ -1991,11 +1991,11 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "d6257d10d981772942cfc33603ae92ccfc3413f8ba370db0c23ed61f9abc7e26"
+          "content": "ab8b918db00dfa5a913270dd2ece56cce6f14033952aaa00a7597c0e914eba79"
         },
         {
           "alg": "SHA3-512",
-          "content": "1b079ffd96fe58dd3fa1e5ecd2ed203d478b1892c12a3980cc6b882f3aa11c9c742fda746a35aef5c6a515b5d0d225b9ad51dc7520b7b1f3969e71e05534a20b"
+          "content": "344075411acc757b4cd96d35b47daed95976d5e697476a87cea57631977c7e767164c7274165da6f12ab585c29566b7bf65eaa78918e7726433fe8af489e7229"
         }
       ]
     },
@@ -2156,11 +2156,11 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "6305a2e2e2f414f53ed6095075c2410b8e59c6c22d014179682c12d5231415e2"
+          "content": "f5fe53a465f45ee96d50993df753e5a89fd0320326ba136f7330f0009e1c7505"
         },
         {
           "alg": "SHA3-512",
-          "content": "fc82f0ba8ce4f1ca8098928ca15dae678c3a5ef44b6c99652bf45b017c7601b38974060a1809a00a2a72cea5ca49aad75be4afe43141b5ffa83de83e92c3b03e"
+          "content": "6507475deb0094e4b02f4584d3bf769027a3b14eb036490fd6e2441b41710c3040b43e7c1a4aaebab3e89d22c8a3874a03a5fdaf9dcb875347efc1429128c468"
         }
       ]
     },
@@ -2261,11 +2261,11 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "4980206044777812f2aec8bc141e87204420ed898ddcc8f0cfffc63df9b4a694"
+          "content": "78022f325cce2a4941ea69bd0e2fc3080d6cc9fdb64d970ef97ac97e9938eae8"
         },
         {
           "alg": "SHA3-512",
-          "content": "b99cc93be85738aa542b7b8ebdb5a3543b8f30f3a9dad1991f3a4bba7b69c113c472456834c547ae25b36122bea12c9055ab13ba2dc80ad068b6b67d9557b493"
+          "content": "2b09f565125e6466a9974ccc7472b2e927ed3e36bc1d0e3968292d7293bb27bc14e5fbef3af750b1fdf02353989217f710809221313e8e7d151daf54a9dff59c"
         }
       ]
     },
@@ -2351,11 +2351,11 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "7ef5ed5d9a6dd68b2d43419d7fa2d0408eb8b57b69588e51db136aa0f29e82a6"
+          "content": "c44c30392d352cae0c4ad8c7580671ed1a866a9646141934a260482068d4b53f"
         },
         {
           "alg": "SHA3-512",
-          "content": "b96dad01e1385bc17bb1fa54d2f0d86558063856c12401fca1d96a01869de984b87cf5c54ded025a5f93762c109385ef6aed5552abff36070e281810ae063db8"
+          "content": "dfb113f3fffa19e51471a1d1ac494565aa38c95285cff82c46646666271cdcc174a0986c1a2d2f5e8c8d2acbd88027f709c3dccfa64d0ec07bcd0343d8c73bf1"
         }
       ]
     },
@@ -2366,11 +2366,11 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "d44909884c4cf6dd112d740c1e0694c5be20daabbaa19ae5b49a3fbf477742ac"
+          "content": "b6464c13d976e0bdfb9dff5214c0a8813e1cb0eb433ea12a5039f24e402e56be"
         },
         {
           "alg": "SHA3-512",
-          "content": "881ffec3e25bebe51be493d7a98e40ca875192acf78415f07d7e359d18dd029911629cae9baea6bdb1e43c49d33b4d368c47b752e93dceb7f6d31e1be2740036"
+          "content": "19fff44e232d44dd7a81c6fe4ab50183407490676ac9eb708765dfce6488aa4270e24475161ae4d170a10b3959d8866196f2a335f9d7e052052ae950718a5c66"
         }
       ]
     },
@@ -2456,11 +2456,11 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "0106f392e198441bea77d0c21bc8658cc86cd60b62efa8311c5d2a312b3d30c0"
+          "content": "3669807579f07112810f80378e424ae0192d96814f66e8234644147465a0117d"
         },
         {
           "alg": "SHA3-512",
-          "content": "99055df006b6b6c8ddb3971ef956575f7f1e6c1102fe6a53e3c9da742c7ac0cad6732f34e38044df7befc4325b57c035e7db9882ca690cfb174afce041aa9866"
+          "content": "c880ec5a6ca8bc733321eaa9b23d04409dd381b2f9681becb0862fd99a1f4dbc17407b0d28fc29b90a4ef95d9238b89ec3dcfb3f15ffed92049385de7d3a58a0"
         }
       ]
     },
@@ -2516,11 +2516,11 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "ab7f0a6de25bedf91d74ef56db43fd901a31af3de837dcea4a0509b3308a4add"
+          "content": "9a78740b83a08ed8e45be5fc2c0116e2d961f7b6e487b6432fabdad7935b3295"
         },
         {
           "alg": "SHA3-512",
-          "content": "59917cf7a44b8388a40738db4a4b07099512fa5642860b96f1d0797642639e84bbfb94fedbdb89a20a9f6e362380ac5471453a4226c098dd372472bbcd59faa3"
+          "content": "c432b0c2a4040b47566b32f8315674af371bb6b187576ee8c820c80714e3d00a2493cd6c7566cdbb3755a974531e5ae1323220efcf777fee5fc3058c9bb67b85"
         }
       ]
     },
@@ -2651,11 +2651,11 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "7a13c90f36da49436fbbae8162a1a408006964c2a6dba201aa1255296d3971fb"
+          "content": "cadc1689a63b92fb24dd770f3f13d59343d2bac3b7e876a916742b353b6830e0"
         },
         {
           "alg": "SHA3-512",
-          "content": "a08907ec81b09cf2bd2c088dbba91f93809db18ff80fdede94e86c757cf50286fc3220777e973763ddca141b4d1bd545b3e01813ee8b28a6709b18182bc207f3"
+          "content": "d29a4290f0cbd415806f74835cd43f24af5a4baeb8c69af2484b99d32a8abe9b3c00d5f22ba583e727af0b6791acba6f3f46b36a7741d1b2f2b8ac2b00ffee3a"
         }
       ]
     },
@@ -3536,11 +3536,11 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "cb42b07724b561ffa5f11500d1d26e73b0abee7b1cb6571daa084a638ad27d7a"
+          "content": "2042a18a9d0b7c04b4a1a824f7d830be7571616369670c27d04d6c06066f3ece"
         },
         {
           "alg": "SHA3-512",
-          "content": "1a80cf9ba6db3b8c681e3a706e3968556554d9a37c3dac6ebf724701950ed1650d9f2cc2674ffef7b676bff4a187e334078a5f083ed050ea0e74531118a512f8"
+          "content": "f5546d6ec52123412cc0497913bcf297ff2c606cee8de5cf29ae4c9e9ffede399158923dfe70e284e7c8a7ee6477be5463fbd0ca0dff74fc9b445d4e448e297a"
         }
       ]
     },
@@ -3566,11 +3566,11 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "63b0b9ef7bf91b2199b6b421edfb68e31727488428a315322a382b684898c75f"
+          "content": "bc84f2b20018a478ff38bc5577f8dbb07c585afdd5c9cab3258a58db673c695b"
         },
         {
           "alg": "SHA3-512",
-          "content": "dbe987b5009a3bad865ecfd4d14ce4bd84365c826cf2303ef5ff30bd3e1cb4c9c04e55d09216d81ac2e84ea139c0da751614f2ad2302130fb454ec077689ae35"
+          "content": "bf993ed8965d99c47da87383d0d2ae71b92b413d9d486382bc53b7335b2f48c5ec359dd34a06a7ea594558316631f5a453067cf0ad5ce6f500ae9179e9fc5d4d"
         }
       ]
     },
@@ -3581,11 +3581,11 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "a0a2b9595f1e7589578649107e0414074d25b07a06112a62ae88fcceb558ed0b"
+          "content": "58120edd7ad9f871dcddb9ce4c14ea505907aa32863d46e4fd45ae2cb400f094"
         },
         {
           "alg": "SHA3-512",
-          "content": "8c1bd0ec41750feeeb6246d958dae42139e8937d2b2ca2d9dd5f6e67db282b5453d51e410add4c80ce027857622d01dc4c1537211700883c5fe610bedd98ec77"
+          "content": "99fe3bfae69f1edb2512cc0e40101175dee1d052ad578bfcbb14820ff110bd69c3972563b2f0fdde42e3de797c271ccafa19a2d4b48691c3f82a894c728bf520"
         }
       ]
     },
@@ -3626,11 +3626,11 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "9dcc5e7642376672dc498339b201d0b1282f3e0f63104ba033e0386acb4436b1"
+          "content": "e4c0c09a7ebb4870ef54e7b48206a5f64c07fef664ddf76994788b597e3130a5"
         },
         {
           "alg": "SHA3-512",
-          "content": "c99cc01c40c75ae09269460d77d256992067663cde16c7497c6b0fe7b5be1fe94d2dc08b47d8f9cba894d0100fac1991248fb57f3bb07cc155a4d330913c3752"
+          "content": "4a917e957e2f6a4ec183b7fe26b13a5a14a720fe1f4fb56ce93455a3b217d438acbe68b7772fbea2c57e17b104907661297b0b016da689121ac39b85deee1496"
         }
       ]
     },
@@ -3671,11 +3671,11 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "fa9814c2d18db221a2dc552cf2a5047467d87a2590cbc9d64b8a0a340e545b55"
+          "content": "948549d82e481f241e5babb6bdddd27bf7148fb8ed1c389b9f2f7ad035e4e56b"
         },
         {
           "alg": "SHA3-512",
-          "content": "5bc1627c34b14d8b70dec83d8d00a339f2c848f6e1f0d1a1dc155d3c5738816b79c8b23c66f2c1d99f315ead0d525ca07f72f89ffc77e8f7c1bc8f4c1138fae5"
+          "content": "60812e78249f005792ec0fd84d488d150fd2e4e6e4afa572d4db1a879b38ea7368360d2a94f258f6669ae302587100071b065e42a52b671d9d8a7b6f25f69036"
         }
       ]
     },
@@ -3775,7 +3775,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "fa9814c2d18db221a2dc552cf2a5047467d87a2590cbc9d64b8a0a340e545b55"
+          "content": "948549d82e481f241e5babb6bdddd27bf7148fb8ed1c389b9f2f7ad035e4e56b"
         }
       ],
       "externalReferences": [

package/scripts/builders/cwe-chains.js

@@ -81,11 +81,14 @@ function buildCweChains({ skills, cweCatalog, atlasTtps, cveCatalog, frameworkGa
     };
 
     // Related CVEs: walk evidence_cves on the framework_gaps that the
-    // referencing skills cite. Inner join via the skill graph.
+    // referencing skills cite. Inner join via the skill graph. Skip draft
+    // (_draft) CVEs so this CWE half agrees with the CVE half (build-indexes.js)
+    // and the reverse-ref index — all three must reflect the same curated,
+    // operator-queryable truth.
     const relatedCves = new Set();
     for (const gap of accum.framework_gaps) {
       for (const ev of (frameworkGaps[gap]?.evidence_cves || [])) {
-        if (cveCatalog[ev]) relatedCves.add(ev);
+        if (cveCatalog[ev] && cveCatalog[ev]._draft !== true) relatedCves.add(ev);
       }
     }
 

package/scripts/builders/summary-cards.js

@@ -106,10 +106,18 @@ function firstChunkAfterHeader(body, headerRegex, maxChars = 600) {
 }
 
 function handoffTargets(body, allSkillNames, selfName) {
-  // Look in the Hand-Off section; backtick-quoted skill names count as a target.
-  const handoffStart = body.search(/^## Hand-?Off/m);
-  if (handoffStart < 0) return [];
-  const slice = body.slice(handoffStart);
+  // Look ONLY in the Hand-Off section; backtick-quoted skill names count as a
+  // target. Bound the scan to [Hand-Off header, next real H2) so unrelated
+  // later sections are not mis-attributed as hand-off targets. Header
+  // detection and the section boundary are both fence-aware (a `## ` line
+  // inside a ```...``` block is not a real H2).
+  const lines = body.split(/\r?\n/);
+  const h2 = findRealH2Indices(lines);
+  const handoffIdx = h2.find((i) => /^## Hand-?Off/.test(lines[i]));
+  if (handoffIdx == null) return [];
+  const nextH2 = h2.find((i) => i > handoffIdx);
+  const sectionEnd = nextH2 != null ? nextH2 : lines.length;
+  const slice = lines.slice(handoffIdx, sectionEnd).join("\n");
   const targets = new Set();
   for (const name of allSkillNames) {
     if (name === selfName) continue;

package/scripts/check-codebase-patterns-currency.js

@@ -47,6 +47,7 @@ const UPSTREAM_TRIAGED = Object.freeze([ // keep-sorted
   "from-base64url-untrapped",
   "fs-path-from-operator-identifier-without-traversal-refusal",
   "gitleaks-entropy",
+  "hand-rolled-sql",
   "handrolled-buffer-collect",
   "handrolled-debounce",
   "hostname-compare-trailing-dot",