@blamejs/exceptd-skills 0.18.14 → 0.18.15

package/CHANGELOG.md

@@ -1,5 +1,13 @@
 # Changelog
 
+## 0.18.15 — 2026-06-22
+
+Indicator-gated escalations and playbook chains now fire when their indicators are detected. An escalation or `feeds_into` written as `<indicator-id> == true` (the catalog's standard form) resolved only when that id was also passed as a raw signal; the normal scan path delivers detections separately, so on a real `exceptd collect <playbook>` these escalations and downstream chains stayed silent even when the indicator was found. Fired indicators are now bound into the escalation, chain, and remediation-precondition contexts, so a detection drives the condition that gates on it. An operator can still override a specific indicator, and engine-computed values still take precedence.
+
+Six more compound escalations now fire. Each combined a working clause (`rwep >= 90`, `blast_radius_score >= 4`, a theater verdict) with a second clause written in prose or shorthand the engine cannot evaluate; because the working clause came first and evaluation stopped at the first clause that resolved, the dead second clause went unnoticed. The compound conditions are now fully expressed in the condition language and gate on the playbook's real indicators.
+
+The validator's condition gate now checks every sub-clause of an AND/OR condition independently, so a dead clause hidden behind a clause that happens to resolve first can no longer ship.
+
 ## 0.18.14 — 2026-06-22
 
 Severity escalations, downstream-playbook chaining, and remediation-path preconditions now fire as authored across the playbook catalog. A number of these conditions had been written as free-text English or in a shorthand the engine does not evaluate, so they returned false for every input and silently never triggered — a raise-severity rule, a `feeds_into` chain into a deeper playbook, or a remediation precondition that looked active but never fired. Every such condition is now expressed in the engine's condition language and verified to evaluate against the indicators it gates on.

package/data/_indexes/_meta.json

@@ -1,10 +1,10 @@
 {
   "schema_version": "1.1.0",
-  "generated_at": "2026-06-22T14:16:42.035Z",
+  "generated_at": "2026-06-22T15:58:38.839Z",
   "generator": "scripts/build-indexes.js",
   "source_count": 64,
   "source_hashes": {
-    "manifest.json": "be5406117ede866ec4dc653cf15f9555f8fa58c254fc601800e4bacb07ddb609",
+    "manifest.json": "06e97688670822402c8878d854e06f6790969a0a8a3c119e3aa5bef7d8c7e2d3",
     "README.md": "e7b854e7db9a364a1b368b5084b4f0c2a8282f0459ce39800ac1d1dabdc06074",
     "data/atlas-ttps.json": "5bc59e23d6c2defa54168de161a0825299b9cc4a49c6b26df2dae70b4f42eedf",
     "data/attack-techniques.json": "53c6f248760eecb11a0354f74ab467a5814e95075a686b9b3bf18c34e2f7435e",

package/data/playbooks/citation-hygiene.json

@@ -533,11 +533,11 @@
       ],
       "escalation_criteria": [
         {
-          "condition": "blast_radius_score >= 3 AND any deterministic indicator fires",
+          "condition": "blast_radius_score >= 3 AND fabricated-cve-id == true",
           "action": "raise_severity"
         },
         {
-          "condition": "compliance_theater_check.verdict == 'theater' AND citation appears in published disclosure surface",
+          "condition": "compliance_theater_check.verdict == 'theater' AND (fabricated-cve-id == true OR rejected-or-disputed-cve == true)",
           "action": "trigger_playbook",
           "target_playbook": "framework"
         },

package/data/playbooks/crypto-codebase.json

@@ -930,11 +930,11 @@
       ],
       "escalation_criteria": [
         {
-          "condition": "blast_radius_score >= 4 AND any deterministic indicator fires",
+          "condition": "blast_radius_score >= 4 AND (weak-hash-import == true OR weak-cipher-mode == true OR rsa-1024-anywhere == true OR math-random-in-security-path == true OR pbkdf2-under-iterated == true OR bcrypt-cost-low == true OR no-ml-kem-implementation == true OR fips-claim-without-runtime-activation == true OR hardcoded-key-material == true OR tls-old-protocol == true)",
           "action": "raise_severity"
         },
         {
-          "condition": "rwep >= 75 AND library is published_to_registry == true",
+          "condition": "rwep >= 75 AND blast_radius_score >= 4",
           "action": "page_on_call"
         },
         {

package/data/playbooks/idp-incident.json

@@ -877,7 +877,7 @@
       ],
       "escalation_criteria": [
         {
-          "condition": "rwep >= 90 AND any deterministic indicator fires",
+          "condition": "rwep >= 90 AND anomalous-federated-trust-addition == true",
           "action": "page_on_call"
         },
         {

package/data/playbooks/mcp.json

@@ -847,7 +847,7 @@
           "action": "page_on_call"
         },
         {
-          "condition": "mcp-typosquat-candidate == true AND no benign_match",
+          "condition": "mcp-typosquat-candidate == true",
           "action": "raise_severity"
         },
         {

package/lib/playbook-runner.js

@@ -953,6 +953,31 @@ function detect(playbookId, directiveId, agentSubmission = {}, runOpts = {}) {
 
 // --- phase 5: analyze ---
 
+/**
+ * Mirror the FIRED detect indicators (verdict === 'hit') into a flat
+ * `{ <indicator-id>: true }` map for the escalation / feeds_into / precondition
+ * eval contexts. Indicator hits arrive from the collector / AI evidence path as
+ * `signal_overrides` (which detect() reads); the condition contexts spread
+ * `agentSubmission.signals`, NOT signal_overrides — so an escalation written as
+ * `<indicator-id> == true` (the catalog's canonical form) stayed false even when
+ * that indicator DETECTED, unless the operator redundantly re-submitted the id
+ * under `signals`. The standard `exceptd collect <playbook>` path never does
+ * that, so the entire indicator-gated escalation/chain layer was dead on the
+ * real evidence path. Mirroring fired indicators here binds the condition layer
+ * to the detect layer. Only verdict 'hit' (FP-checks satisfied) is mirrored — an
+ * 'inconclusive' indicator is unconfirmed and must not fire an escalation. The
+ * map is spread with the LOWEST precedence (before agentSignals, which is before
+ * the engine roots) so an operator can still override a specific id and the
+ * engine-computed values always win.
+ */
+function firedIndicatorSignals(detectIndicators) {
+  const out = {};
+  for (const ind of (detectIndicators || [])) {
+    if (ind && ind.verdict === 'hit' && typeof ind.id === 'string') out[ind.id] = true;
+  }
+  return out;
+}
+
 /**
  * RWEP composition + blast-radius scoring + theater check + framework gap
  * mapping + escalation evaluation. Inputs are the detect result + any
@@ -1490,7 +1515,7 @@ function analyze(playbookId, directiveId, detectResult, agentSignals = {}, runOp
     findingShape = {};
   }
   for (const ec of an.escalation_criteria || []) {
-    if (evalCondition(ec.condition, { ...agentSignals, ...evalCtxRoot, rwep: adjustedRwep, blast_radius_score: blastRadiusScore, theater_verdict: theaterVerdict, compliance_theater_check: result.compliance_theater_check, jurisdiction_obligations: (playbook.phases && playbook.phases.govern && playbook.phases.govern.jurisdiction_obligations) || [], analyze: result, matched_cve: result.matched_cves || [],
+    if (evalCondition(ec.condition, { ...firedIndicatorSignals(detectResult.indicators), ...agentSignals, ...evalCtxRoot, rwep: adjustedRwep, blast_radius_score: blastRadiusScore, theater_verdict: theaterVerdict, compliance_theater_check: result.compliance_theater_check, jurisdiction_obligations: (playbook.phases && playbook.phases.govern && playbook.phases.govern.jurisdiction_obligations) || [], analyze: result, matched_cve: result.matched_cves || [],
         // finding.* is two-sourced: the engine computes the CVE/severity-derived
         // keys (severity, rwep_adjusted, matched_cve_*, blast_radius_score,
         // active_exploitation, framework/control_id_first) via analyzeFindingShape,
@@ -1596,6 +1621,10 @@ function validate(playbookId, directiveId, analyzeResult, agentSignals = {}, run
   let findingShape = {};
   try { findingShape = analyzeFindingShape(analyzeResult || {}); } catch { findingShape = {}; }
   const evalCtx = {
+    // Fired detect indicators mirrored in (lowest precedence) so a precondition
+    // referencing an indicator id resolves on the collector path. See
+    // firedIndicatorSignals.
+    ...firedIndicatorSignals(analyzeResult && analyzeResult._detect_indicators),
     ...agentSignals,
     rwep: analyzeResult && analyzeResult.rwep ? analyzeResult.rwep.adjusted : undefined,
     blast_radius_score: analyzeResult ? analyzeResult.blast_radius_score : undefined,
@@ -2083,6 +2112,11 @@ function close(playbookId, directiveId, analyzeResult, validateResult, agentSign
   // feeds_into chaining — full analyze result is exposed so conditions can
   // reference `analyze.compliance_theater_check.verdict` etc.
   const feedsCtx = {
+    // Fired detect indicators (verdict 'hit') mirrored in so a feeds_into
+    // condition written as `<indicator-id> == true` resolves on the standard
+    // collector path (signal_overrides), not only when the id is re-submitted
+    // under signals. Lowest precedence — operator signals and engine values win.
+    ...firedIndicatorSignals(analyzeResult && analyzeResult._detect_indicators),
     // Operator-submitted signals come FIRST so the engine-computed reserved
     // keys below always win — otherwise a submitted signals.rwep / finding /
     // analyze would override the engine value the feeds_into condition tests

package/lib/validate-playbooks.js

@@ -95,6 +95,55 @@ const { safeExit } = require('./exit-codes');
 let _evalCondition = null;
 try { ({ _evalCondition } = require('./playbook-runner')); } catch { /* warned at the gate */ }
 
+// Decompose a condition into its leaf atoms the SAME way evalCondition does —
+// strip wrapping parens, split on top-level OR (lowest precedence), then on
+// top-level AND, quote- and depth-aware. This exists because evalCondition
+// evaluates AND via `.every` / OR via `.some`, which SHORT-CIRCUIT: a dead
+// (unparseable) sub-clause behind a leading clause that resolves false (AND) or
+// true (OR) in the empty validation context is never reached, so running the
+// whole condition once never surfaces its condition_unparsed. Atomizing and
+// parse-checking each leaf independently catches a dead sub-clause regardless of
+// short-circuit (e.g. `blast_radius_score >= 3 AND any deterministic indicator
+// fires` — the first clause is false with no signals, so the dead prose second
+// clause never parsed). Mirrors evalCondition's splitAtTopLevel / stripOuterParens.
+function _splitTopLevel(expr, sep) {
+  const parts = []; const needle = ' ' + sep + ' ';
+  let depth = 0, buf = '', i = 0, quote = null;
+  while (i < expr.length) {
+    const ch = expr[i];
+    if (quote) { if (ch === '\\' && i + 1 < expr.length) { buf += ch + expr[i + 1]; i += 2; continue; } if (ch === quote) quote = null; buf += ch; i++; continue; }
+    if (ch === "'" || ch === '"') { quote = ch; buf += ch; i++; continue; }
+    if (ch === '(') { depth++; buf += ch; i++; continue; }
+    if (ch === ')') { depth--; buf += ch; i++; continue; }
+    if (depth === 0 && expr.startsWith(needle, i)) { parts.push(buf.trim()); buf = ''; i += needle.length; continue; }
+    buf += ch; i++;
+  }
+  parts.push(buf.trim());
+  return parts;
+}
+function _stripWrappingParens(e) {
+  e = e.trim();
+  while (e.startsWith('(') && e.endsWith(')')) {
+    let d = 0, wraps = true;
+    for (let i = 0; i < e.length; i++) {
+      if (e[i] === '(') d++;
+      else if (e[i] === ')') { d--; if (d === 0 && i < e.length - 1) { wraps = false; break; } }
+    }
+    if (wraps) e = e.slice(1, -1).trim(); else break;
+  }
+  return e;
+}
+function atomizeCondition(cond) {
+  const atoms = [];
+  (function rec(e) {
+    e = _stripWrappingParens(e);
+    const ors = _splitTopLevel(e, 'OR'); if (ors.length > 1) { ors.forEach(rec); return; }
+    const ands = _splitTopLevel(e, 'AND'); if (ands.length > 1) { ands.forEach(rec); return; }
+    atoms.push(e);
+  })(cond);
+  return atoms;
+}
+
 const REPO_ROOT = path.resolve(__dirname, '..');
 const SCHEMA_PATH = path.join(REPO_ROOT, 'lib', 'schemas', 'playbook.schema.json');
 const PLAYBOOKS_DIR = path.join(REPO_ROOT, 'data', 'playbooks');
@@ -597,10 +646,16 @@ function checkCrossRefs(playbook, ctx, playbookIds) {
   const conditionParses = (cond) => {
     if (typeof cond !== 'string' || !cond.trim()) return true;
     if (!_evalCondition) return true; // engine unavailable — warned above, never a silent error-skip
-    const runErrors = [];
-    try { _evalCondition(cond, { _runErrors: runErrors }, { _runErrors: runErrors }); }
-    catch { return true; } // an evaluator throw is a separate concern, not "unparseable"
-    return !runErrors.some((e) => e && e.kind === 'condition_unparsed');
+    // Check EACH atomic leaf, not the whole condition once: evalCondition's
+    // AND/OR short-circuit hides a dead sub-clause behind a leading clause that
+    // resolves false (AND) / true (OR) in the empty validation context.
+    for (const atom of atomizeCondition(cond)) {
+      const runErrors = [];
+      try { _evalCondition(atom, { _runErrors: runErrors }, { _runErrors: runErrors }); }
+      catch { continue; } // an evaluator throw is a separate concern, not "unparseable"
+      if (runErrors.some((e) => e && e.kind === 'condition_unparsed')) return false;
+    }
+    return true;
   };
   for (const [i, ec] of (((phases.analyze || {}).escalation_criteria) || []).entries()) {
     if (ec && typeof ec === 'object' && !conditionParses(ec.condition)) {

package/manifest.json

@@ -1,6 +1,6 @@
 {
   "name": "exceptd-security",
-  "version": "0.18.14",
+  "version": "0.18.15",
   "description": "AI security skills grounded in mid-2026 threat reality, not stale framework documentation",
   "homepage": "https://exceptd.com",
   "license": "Apache-2.0",
@@ -57,7 +57,7 @@
       ],
       "last_threat_review": "2026-05-15",
       "signature": "0H+JfyUVmo/pVFEi5rLENATHjlukPVUqnOWmNPEH77wm8svKGK0aNJ46k6QU5GdHb8c9X9pVJKiuhON6AxDjDw==",
-      "signed_at": "2026-06-22T14:16:29.795Z",
+      "signed_at": "2026-06-22T15:58:37.527Z",
       "cwe_refs": [
         "CWE-125",
         "CWE-362",
@@ -133,7 +133,7 @@
       ],
       "last_threat_review": "2026-06-10",
       "signature": "WfqxU2x/feWgatYrCeO9PD3dIY0FAfs4nkVdQRac4fg5BDQPG/vhzhvYVN6Mg11oITACghbPOtZXvS37sACsCA==",
-      "signed_at": "2026-06-22T14:16:29.797Z",
+      "signed_at": "2026-06-22T15:58:37.529Z",
       "cwe_refs": [
         "CWE-1039",
         "CWE-1426",
@@ -215,7 +215,7 @@
       ],
       "last_threat_review": "2026-06-10",
       "signature": "9bNOW4MzmUlFgkXH5tIZkq8YpzhMM+r8YVcNEM39kdEZwfRNG4Bj+Dgr7v4Qgp9D4q7hGNFpK0ywX+dPd3VWAg==",
-      "signed_at": "2026-06-22T14:16:29.798Z",
+      "signed_at": "2026-06-22T15:58:37.529Z",
       "cwe_refs": [
         "CWE-22",
         "CWE-345",
@@ -269,7 +269,7 @@
       "framework_gaps": [],
       "last_threat_review": "2026-06-10",
       "signature": "5A08+nAu5jwNQ1+vGbFgFAJA/kYD3oiaevhCxT4/2FeW++F070Pm4MD1+oXdv8R2DbtYr+7yXnCGM7UbUPR2AA==",
-      "signed_at": "2026-06-22T14:16:29.798Z"
+      "signed_at": "2026-06-22T15:58:37.530Z"
     },
     {
       "name": "compliance-theater",
@@ -301,7 +301,7 @@
       ],
       "last_threat_review": "2026-06-10",
       "signature": "RCgbI0sMNTKAscXUtrVU25u7OuE64uQvO5JKsB8vIJFWguvT6nZyD7euKuIxIzYhLTyHBiD7Rhp70btlK+JkCg==",
-      "signed_at": "2026-06-22T14:16:29.799Z"
+      "signed_at": "2026-06-22T15:58:37.530Z"
     },
     {
       "name": "exploit-scoring",
@@ -332,7 +332,7 @@
       ],
       "last_threat_review": "2026-06-10",
       "signature": "JJrs+B22/hYxvdYs+abmoire5PbQXPb2uVYyjInZ3UbT8gEjs/5SyfGKx7z86jbtvB3ItApQVAx1AuseIgdyAQ==",
-      "signed_at": "2026-06-22T14:16:29.799Z"
+      "signed_at": "2026-06-22T15:58:37.531Z"
     },
     {
       "name": "rag-pipeline-security",
@@ -374,7 +374,7 @@
       ],
       "last_threat_review": "2026-06-10",
       "signature": "Z6WbTqG98bQVRd6+kXDb6xIEe0ZryAeGxVSuKKxdK1PoZqew7NJcMsa6sJVSq+0r7KMsFwfTEdKorp6UDdhpCA==",
-      "signed_at": "2026-06-22T14:16:29.799Z",
+      "signed_at": "2026-06-22T15:58:37.531Z",
       "cwe_refs": [
         "CWE-1395",
         "CWE-1426"
@@ -441,7 +441,7 @@
       ],
       "last_threat_review": "2026-06-10",
       "signature": "DLKcrgon+MZrqmivlFLBH4vlzZbJSW1531RsYDm9/KdW2CgcUUHwNMSzAfU1mAsFwFkAHjy/a8e1FbS9msTvDA==",
-      "signed_at": "2026-06-22T14:16:29.800Z",
+      "signed_at": "2026-06-22T15:58:37.531Z",
       "cwe_refs": [
         "CWE-918"
       ],
@@ -482,7 +482,7 @@
       "framework_gaps": [],
       "last_threat_review": "2026-06-10",
       "signature": "eWCOD+mR1c6B8vKDBot8y8UkQrKPCIEBHU3JRQET9xZnYGx8hrOyeRUElcKqCO5aG/2LISs9Atg1H+ehWDNbCw==",
-      "signed_at": "2026-06-22T14:16:29.800Z",
+      "signed_at": "2026-06-22T15:58:37.532Z",
       "cwe_refs": [
         "CWE-1188"
       ],
@@ -517,7 +517,7 @@
       "framework_gaps": [],
       "last_threat_review": "2026-06-10",
       "signature": "kZca725/+BFr1mpxL29+cGzjqsiYhChWScf7VjU6vCTBZrmCps6W9gYYjf4lVORXaM4DAg3UVBOXyhpTst0rAw==",
-      "signed_at": "2026-06-22T14:16:29.801Z",
+      "signed_at": "2026-06-22T15:58:37.532Z",
       "forward_watch": [
         "New AI attack classes as ATLAS v6 publishes",
         "Post-quantum adversary capability timeline",
@@ -557,7 +557,7 @@
       "framework_gaps": [],
       "last_threat_review": "2026-05-01",
       "signature": "b5miTiY0cnxETd2btxorfZBdJKt/fLnQx20sGYUb9zEqGqtm0LMLpghkW68j4/9k48KNyuGMtNWiKTSnodUGBw==",
-      "signed_at": "2026-06-22T14:16:29.801Z"
+      "signed_at": "2026-06-22T15:58:37.533Z"
     },
     {
       "name": "zeroday-gap-learn",
@@ -584,7 +584,7 @@
       "framework_gaps": [],
       "last_threat_review": "2026-06-10",
       "signature": "NVBY4I5a+v2/nUeCYcy3LLVKk3Tg9gmz+sCKyvnf8t2fXMNSIGtoy+P8K4Gfos1rGzRRMaU01V7L4kh/IQ8UBQ==",
-      "signed_at": "2026-06-22T14:16:29.801Z",
+      "signed_at": "2026-06-22T15:58:37.533Z",
       "forward_watch": [
         "New CISA KEV entries",
         "New ATLAS TTP additions in each ATLAS release",
@@ -652,7 +652,7 @@
       ],
       "last_threat_review": "2026-06-10",
       "signature": "U54OxIjPT+W9yafjpeFgY7klXMltLYBuSCtu/AAlXxOIPehJrbf/vbGgnBn58nqOd7RjoKjmKz9WQs4DMqWcDw==",
-      "signed_at": "2026-06-22T14:16:29.802Z",
+      "signed_at": "2026-06-22T15:58:37.534Z",
       "cwe_refs": [
         "CWE-327"
       ],
@@ -702,7 +702,7 @@
       ],
       "last_threat_review": "2026-06-10",
       "signature": "QsJMwvnUJXHwoBPJ4BiUx3FO9giXfos/sMbx5tyO83AJ2JxdVskeC6g/WDfO+rVkWNXRgWi4h1eSYz6T8/tpAg==",
-      "signed_at": "2026-06-22T14:16:29.803Z"
+      "signed_at": "2026-06-22T15:58:37.534Z"
     },
     {
       "name": "security-maturity-tiers",
@@ -740,7 +740,7 @@
       ],
       "last_threat_review": "2026-05-01",
       "signature": "8KbLVVPI1QgYa+HAnEYvKf1cXnxQ3zsncqTGrAOrBP4rwUeZsxJm8KyFCwI0XytnZG35PZ830BFlG/okPW3sBQ==",
-      "signed_at": "2026-06-22T14:16:29.803Z",
+      "signed_at": "2026-06-22T15:58:37.535Z",
       "cwe_refs": [
         "CWE-1188"
       ]
@@ -776,7 +776,7 @@
       "framework_gaps": [],
       "last_threat_review": "2026-05-11",
       "signature": "iJWevUBurLvt2v8X+Ch2eHmZkPWpKeAtIpxTIP4MwbUHyco3igDeBywJCyaR2vURYRx8LkzzIMM8DxQM4LAXBQ==",
-      "signed_at": "2026-06-22T14:16:29.803Z"
+      "signed_at": "2026-06-22T15:58:37.535Z"
     },
     {
       "name": "attack-surface-pentest",
@@ -852,7 +852,7 @@
         "Pwn2Own Berlin 2026 (disclosed 2026-05-14, embargo ends 2026-08-12) — Microsoft Edge 4-bug sandbox escape by Orange Tsai (DEVCORE); forward-watch only (browser sandbox, out of current playbook scope); track Microsoft Edge security advisory and KEV add"
       ],
       "signature": "ZnFi+Rk4CWrjFEVU4hC6Q66UbDmndNL/ICLWQNA1TQYFGSTnng+nboM4tfi6h0yMbbDj7dOXYqqeHNK+M5ZiBA==",
-      "signed_at": "2026-06-22T14:16:29.804Z"
+      "signed_at": "2026-06-22T15:58:37.536Z"
     },
     {
       "name": "fuzz-testing-strategy",
@@ -913,7 +913,7 @@
         "OSS-Fuzz-Gen / AI-assisted harness generation becoming the default expectation for OSS maintainers"
       ],
       "signature": "45ICz7vcnmHYE1+RIDv8wQjScKj6p8hqJQ5m6I0tDdKVnGdMXCYIgZnYqFJgHBDXYAXlGx7D7UxhFz6WOCDqAQ==",
-      "signed_at": "2026-06-22T14:16:29.804Z"
+      "signed_at": "2026-06-22T15:58:37.536Z"
     },
     {
       "name": "dlp-gap-analysis",
@@ -991,7 +991,7 @@
         "Quebec Law 25, India DPDPA, KSA PDPL enforcement actions naming AI-tool prompt data as in-scope personal information"
       ],
       "signature": "k6A7QcFEzgGXYWftt/elhQe7kU4F67c0ol3a8DZfj1XW4UrH99SLhPHr6ih3R3EYCl/Ey/zXt/x3a9fDT3RmAw==",
-      "signed_at": "2026-06-22T14:16:29.804Z"
+      "signed_at": "2026-06-22T15:58:37.536Z"
     },
     {
       "name": "supply-chain-integrity",
@@ -1075,7 +1075,7 @@
         "Pwn2Own Berlin 2026 (disclosed 2026-05-14, embargo ends 2026-08-12) — NVIDIA Megatron Bridge path traversal by haehae; AI training-stack file-system trust boundary; track patch and SBOM-attestation impact"
       ],
       "signature": "5shKqNcLC8Obt0EdvKnck8OwWIuRMgZuuZd12pvWqJIltsYMyTrw2M+lgbQfqg3x2KO6qsJljGAhTew5jM58DQ==",
-      "signed_at": "2026-06-22T14:16:29.805Z"
+      "signed_at": "2026-06-22T15:58:37.537Z"
     },
     {
       "name": "defensive-countermeasure-mapping",
@@ -1132,7 +1132,7 @@
       ],
       "last_threat_review": "2026-06-10",
       "signature": "lfa5Wgep26mK3o2ZSe5qN2vVxg+xRRURRpmnqP4JdQvvecW3T2+PxHqjT48DegXJHRXJ6DPzyIElFc7no86TAg==",
-      "signed_at": "2026-06-22T14:16:29.805Z"
+      "signed_at": "2026-06-22T15:58:37.537Z"
     },
     {
       "name": "identity-assurance",
@@ -1206,7 +1206,7 @@
       ],
       "last_threat_review": "2026-05-11",
       "signature": "UV3458QXSkEpenzrOmdlTTfPHUD4hNyKMDHoeZDq/kiFb4mAG0ghQGTTgI9Ru8cJbSmYM1++m9N5TFIJ6JJPBg==",
-      "signed_at": "2026-06-22T14:16:29.805Z"
+      "signed_at": "2026-06-22T15:58:37.537Z"
     },
     {
       "name": "ot-ics-security",
@@ -1265,7 +1265,7 @@
       "d3fend_refs": [],
       "last_threat_review": "2026-06-10",
       "signature": "afJ00EDXgARQJrbRqN6xe1+E/kbHF7O2fxQFVvrLLXdrKfK86RK/oJU1AwpxX6mclX9f+5ivy6FvFIuRMA4dBQ==",
-      "signed_at": "2026-06-22T14:16:29.806Z"
+      "signed_at": "2026-06-22T15:58:37.538Z"
     },
     {
       "name": "coordinated-vuln-disclosure",
@@ -1325,7 +1325,7 @@
         "NYDFS 23 NYCRR 500 amendments potentially adding explicit CVD program requirements"
       ],
       "signature": "VzivMW82mRrG9+07ZX8sj4j9O9YjE/m07m1UHgSwEgex+FLaVPvIj3y1Vk6qeFOvDURmtVaztWlpSlk7iSn0DA==",
-      "signed_at": "2026-06-22T14:16:29.806Z"
+      "signed_at": "2026-06-22T15:58:37.538Z"
     },
     {
       "name": "threat-modeling-methodology",
@@ -1379,7 +1379,7 @@
         "PASTA v2 updates incorporating AI/ML application threats"
       ],
       "signature": "Fk5LzzeS/bH5SQJNySgZqSdeQf1udwdRs3FVLwig5kuqyyKkuIJcF4HW+xHF/1e66HR+gjgRUoqWZGsv58lLAg==",
-      "signed_at": "2026-06-22T14:16:29.807Z"
+      "signed_at": "2026-06-22T15:58:37.538Z"
     },
     {
       "name": "webapp-security",
@@ -1462,7 +1462,7 @@
       ],
       "last_threat_review": "2026-06-10",
       "signature": "1skHJsPPOIXLQdU5MGHirP/Q07aCYTirtDmfWDO7ZNuto58NlCttW5ZjCpyh37vASlMljIZx0/R+PIl2PfwTBw==",
-      "signed_at": "2026-06-22T14:16:29.807Z",
+      "signed_at": "2026-06-22T15:58:37.539Z",
       "forward_watch": [
         "NGINX Rift CVE-2026-42945 (disclosed 2026-05-13, source depthfirst) — KEV-watch predicted CISA KEV listing by 2026-05-29; AI-assisted discovery angle; track for active-exploitation confirmation and patch advisory affecting front-door web app deployments"
       ]
@@ -1522,7 +1522,7 @@
       ],
       "last_threat_review": "2026-05-15",
       "signature": "SBB7c3wNYfIdkyOp4g4nW0WP7xS+YokMzg32aaeJdbf14LTGQRzQUvSqb2TCj2HFUSHESOyKT1JpkAfyHLSQBQ==",
-      "signed_at": "2026-06-22T14:16:29.808Z"
+      "signed_at": "2026-06-22T15:58:37.539Z"
     },
     {
       "name": "sector-healthcare",
@@ -1589,7 +1589,7 @@
       ],
       "last_threat_review": "2026-06-10",
       "signature": "yyAGG3nUC6/XWQGRF2ufzILfiJitMFczqWNY83lZShCgYSxfFCul0UsICClOc7Xjw76052uydm8kLH9gIzhsAg==",
-      "signed_at": "2026-06-22T14:16:29.808Z"
+      "signed_at": "2026-06-22T15:58:37.540Z"
     },
     {
       "name": "sector-financial",
@@ -1678,7 +1678,7 @@
         "TIBER-EU framework v2.0 alignment with DORA TLPT RTS (JC 2024/40); cross-recognition with CBEST and iCAST"
       ],
       "signature": "/+df91Qhl1TIxEAqzgqB7+YJ6mneX6Dif+h6RaCbxOLGE6KRTFst1Q/Fu5SStt8Zx5JI62bkQ2BBrNOKfUlPBg==",
-      "signed_at": "2026-06-22T14:16:29.808Z"
+      "signed_at": "2026-06-22T15:58:37.540Z"
     },
     {
       "name": "sector-federal-government",
@@ -1755,7 +1755,7 @@
         "Australia PSPF 2024 revision and ISM quarterly updates — track for Essential Eight Maturity Level requirements for federal entities"
       ],
       "signature": "k6MAPS8HJivu0DNwC1azPvyKeig2xLGz/hcqYd8T+s5GvIypPGfkeYRRKmdqMgHUe24f7bQeRZ7AxcQ9Bi6SCg==",
-      "signed_at": "2026-06-22T14:16:29.809Z"
+      "signed_at": "2026-06-22T15:58:37.541Z"
     },
     {
       "name": "sector-energy",
@@ -1829,7 +1829,7 @@
         "ICS-CERT advisory feed (https://www.cisa.gov/news-events/cybersecurity-advisories/ics-advisories) for vendor CVEs in Siemens, Rockwell, Schneider Electric, ABB, GE Vernova, Hitachi Energy, AVEVA / OSIsoft PI"
       ],
       "signature": "IYKXn009jfhpKdQKiGB4xb7VgxsJXa6PZawoguP42khU6S/TTemp/YsK1YQCUyabE+2biElL/PP1Hi8zCkSSBw==",
-      "signed_at": "2026-06-22T14:16:29.809Z"
+      "signed_at": "2026-06-22T15:58:37.541Z"
     },
     {
       "name": "sector-telecom",
@@ -1915,7 +1915,7 @@
         "O-RAN SFG / WG11 security specifications"
       ],
       "signature": "NAtyzfLPXlUuB78Snb9nWmbZalC1CNlIYN9rYhdEmtB/xQGC6vVnThgrEAHlm7v/jMCFuknvEpUHKdscUnUADw==",
-      "signed_at": "2026-06-22T14:16:29.810Z"
+      "signed_at": "2026-06-22T15:58:37.542Z"
     },
     {
       "name": "api-security",
@@ -1994,7 +1994,7 @@
       ],
       "last_threat_review": "2026-06-10",
       "signature": "HUjhPGpZeZeVi1nzBIsEAYh18x5ltlIXnt1yQ5YKz+jC2Dvxw7vV/Clx1/1gDBLAuBvRW9wcNtDr4c0RxhfGDQ==",
-      "signed_at": "2026-06-22T14:16:29.810Z",
+      "signed_at": "2026-06-22T15:58:37.542Z",
       "forward_watch": [
         "NGINX Rift CVE-2026-42945 (disclosed 2026-05-13, source depthfirst) — KEV-watch predicted CISA KEV listing by 2026-05-29; track for active-exploitation confirmation and patch advisory affecting API gateway / reverse-proxy deployments",
         "Pwn2Own Berlin 2026 (disclosed 2026-05-14, embargo ends 2026-08-12) — LiteLLM 3-bug SSRF + Code Injection chain by k3vg3n; LLM-proxy API surface; track upstream patch and CVE assignments",
@@ -2089,7 +2089,7 @@
         "CISA KEV additions for cloud-control-plane CVEs (IMDSv1 abuses, federation token mishandling, cross-tenant boundary failures); CISA Cybersecurity Advisories for cross-cloud advisories"
       ],
       "signature": "xa1kr/92/0fBds7LVtRy9aCM2tQRWAfNSFoC6ygbOU7QjamUo8Wt2h2n9W+nZT34STN3woYhXqtfmm8NSjXdBQ==",
-      "signed_at": "2026-06-22T14:16:29.811Z"
+      "signed_at": "2026-06-22T15:58:37.543Z"
     },
     {
       "name": "container-runtime-security",
@@ -2161,7 +2161,7 @@
       ],
       "last_threat_review": "2026-06-10",
       "signature": "60hyXAiYfY9lI+EpHG3iFFxa+oF5n71c0tTMa6iXFLNjBJKPevTsdNgQlQsBEnmRJ+dWtOjb/GNBW1KiBx4XAQ==",
-      "signed_at": "2026-06-22T14:16:29.811Z",
+      "signed_at": "2026-06-22T15:58:37.543Z",
       "forward_watch": [
         "Pwn2Own Berlin 2026 (disclosed 2026-05-14, embargo ends 2026-08-12) — NVIDIA Container Toolkit container escape ($50K award) by chompie / IBM X-Force XOR; high-severity container/hypervisor boundary break; track patch and KEV add post-embargo"
       ]
@@ -2242,7 +2242,7 @@
         "MITRE ATLAS v2026.05 (released May 2026) shipped the AML.T0010 sub-technique expansion this forecast tracked plus new techniques (\"Publish Poisoned AI Agent Tool\", \"Escape to Host\"); inventory now 16 tactics, 84 techniques, 56 sub-techniques. Forward watch: subsequent ATLAS minor and major releases — track next-cadence updates to agentic-AI TTPs and MLOps-pipeline-specific techniques"
       ],
       "signature": "IEECw5lO6ZdpkE/j7Hv6/3Jg2vj9fpXlozY+h85Hrn9QYOJuI0gfBjHoBEchJ2GUTmPwUKoiBoI72PBAQw9RCQ==",
-      "signed_at": "2026-06-22T14:16:29.812Z"
+      "signed_at": "2026-06-22T15:58:37.544Z"
     },
     {
       "name": "incident-response-playbook",
@@ -2316,7 +2316,7 @@
         "NYDFS 23 NYCRR 500.17 amendments tightening ransom-payment 24h disclosure operationalization"
       ],
       "signature": "pN1Qa5NRyNJ6h0pmbbqpy3xWdkMANDMUbBst5SKR5fmmqMFopmyrzwIGagiiNgqxjjCunj9J9Wbzs1sL48sMCQ==",
-      "signed_at": "2026-06-22T14:16:29.812Z"
+      "signed_at": "2026-06-22T15:58:37.544Z"
     },
     {
       "name": "ransomware-response",
@@ -2396,7 +2396,7 @@
       ],
       "last_threat_review": "2026-06-10",
       "signature": "sXPA1lvWvZpf5sHxZXRkO0Kcs6gnXiYq0mWA53y1HeBwQGJ+viSPMt5IMobkjd5qLFYchg0CpW/nBUIvUE6/DA==",
-      "signed_at": "2026-06-22T14:16:29.812Z"
+      "signed_at": "2026-06-22T15:58:37.544Z"
     },
     {
       "name": "email-security-anti-phishing",
@@ -2464,7 +2464,7 @@
       ],
       "last_threat_review": "2026-05-18",
       "signature": "FVBn4ex2qPIo9SHMVJ6tntoz4tVwjbIq3m6wDjjZyv2JODlS+90GBYCOkNamxxkmw/6de6SMs0YHQiF/xjo/DQ==",
-      "signed_at": "2026-06-22T14:16:29.813Z"
+      "signed_at": "2026-06-22T15:58:37.545Z"
     },
     {
       "name": "age-gates-child-safety",
@@ -2539,7 +2539,7 @@
         "US state adult-site age-verification laws — 19+ states by mid-2026 (TX HB 18 upheld by SCOTUS June 2025 in Free Speech Coalition v. Paxton); track ongoing challenges in remaining states"
       ],
       "signature": "7Wdii9uwYmDrzQohoWRWDa5A4aDRKOmdLPq5Jsql86O0Gm7pQANnj9tX+cHpQcQ/Ui8VLuNVP8UFdKxxHeDnBg==",
-      "signed_at": "2026-06-22T14:16:29.813Z"
+      "signed_at": "2026-06-22T15:58:37.545Z"
     },
     {
       "name": "cloud-iam-incident",
@@ -2619,7 +2619,7 @@
       ],
       "last_threat_review": "2026-05-15",
       "signature": "r9ii4nb3HJELdtKCGF5qy9PHOiot3GC24yfxfGAKlLENHkdRvRkvvL99eV/6RXyfUaMyrnc2Te8tPQcNu5bsDg==",
-      "signed_at": "2026-06-22T14:16:29.814Z",
+      "signed_at": "2026-06-22T15:58:37.545Z",
       "forward_watch": [
         "AWS IAM Identity Center session-policy refresh and step-up-on-admin enforcement (anticipated 2026-H2 release)",
         "GCP Workload Identity Federation principal-set attribute mapping tightening (post-2026 Q3 Federation hardening guide)",
@@ -2713,7 +2713,7 @@
       ],
       "last_threat_review": "2026-05-15",
       "signature": "9mfDtMApMAg9V/lmwpniNxo/6gNZoOEoYDfyFvyWvKrPMtc7H9F8uz06FVoARe/J49saAKTVXOurNE1D/KtpCQ==",
-      "signed_at": "2026-06-22T14:16:29.814Z",
+      "signed_at": "2026-06-22T15:58:37.546Z",
       "forward_watch": [
         "Entra ID conditional access evolution post-Midnight Blizzard — Microsoft's 2025-2026 commitments on legacy-tenant MFA enforcement and OAuth-app consent gating",
         "Okta IPSIE (Interoperability Profile for Secure Identity in the Enterprise) OpenID Foundation working-group output and adoption timeline",
@@ -2785,7 +2785,7 @@
       "d3fend_refs": [],
       "last_threat_review": "2026-06-02",
       "signature": "dOFgANMtHm64uSFRjMfeA0fWZS9ISwMTt59I2CbjaF1PgTtbtb8yg/f+3pC4eXcXIET0KPGxRRmENycfIz3rAw==",
-      "signed_at": "2026-06-22T14:16:29.814Z"
+      "signed_at": "2026-06-22T15:58:37.546Z"
     },
     {
       "name": "mail-server-hardening",
@@ -2844,7 +2844,7 @@
       "d3fend_refs": [],
       "last_threat_review": "2026-06-02",
       "signature": "5x8RGzKo/T2IbYnFkYMZs16ThD9a5FEdrKHsnwvtMuGxdyyfZsKNIJVWw2I8O0um0UOXwwkl17Z3zhch26ymCQ==",
-      "signed_at": "2026-06-22T14:16:29.814Z"
+      "signed_at": "2026-06-22T15:58:37.546Z"
     },
     {
       "name": "network-trust",
@@ -2900,7 +2900,7 @@
       "d3fend_refs": [],
       "last_threat_review": "2026-06-02",
       "signature": "C/RdmnGjXKreKiGkwJfUESIxUwQzisGJ9A7KBdE9cBRBHBYHkAcScV89L+Z3kOG032Qax6LeIQai7Lr3nrQBCA==",
-      "signed_at": "2026-06-22T14:16:29.815Z"
+      "signed_at": "2026-06-22T15:58:37.546Z"
     },
     {
       "name": "audit-log-integrity",
@@ -2955,7 +2955,7 @@
       "d3fend_refs": [],
       "last_threat_review": "2026-06-02",
       "signature": "LvUAq+rXCA8PgNy9lTKOmFqa8T9EJg4JEH0axXvEAf9MIHqbR51ergUkFMLaTuvFuApwsPu0r1C30QgScZbiAw==",
-      "signed_at": "2026-06-22T14:16:29.815Z"
+      "signed_at": "2026-06-22T15:58:37.546Z"
     },
     {
       "name": "self-update-integrity",
@@ -3009,7 +3009,7 @@
       "d3fend_refs": [],
       "last_threat_review": "2026-06-02",
       "signature": "BOQZ8G9LdyG/tfpz6rCU4THz5Dq2HGJkUV7uCqSTCMrqnXH6seNXKM41FWawYo0s2VUlXtRgaO7ETp5qgxw+CQ==",
-      "signed_at": "2026-06-22T14:16:29.815Z"
+      "signed_at": "2026-06-22T15:58:37.547Z"
     },
     {
       "name": "multitenancy-isolation",
@@ -3067,7 +3067,7 @@
       "d3fend_refs": [],
       "last_threat_review": "2026-06-02",
       "signature": "bncN0VE4ns0lxtPe48xDR33lerw54BPVkSwX7XlrLQcMHTrV94lmjO8z4ZP4Ko61n+KpuP2SNU8v9JT0bGMmAA==",
-      "signed_at": "2026-06-22T14:16:29.815Z"
+      "signed_at": "2026-06-22T15:58:37.547Z"
     },
     {
       "name": "decompression-dos",
@@ -3125,7 +3125,7 @@
       "d3fend_refs": [],
       "last_threat_review": "2026-06-02",
       "signature": "03i0ZO5ScHIOjGvDKUEsws6m+20fnlJrEhSBtMU7PJzQutrPpmW9gULE0wbayTD5H9URh5nSKZuuVjvjVhZNCg==",
-      "signed_at": "2026-06-22T14:16:29.816Z"
+      "signed_at": "2026-06-22T15:58:37.547Z"
     },
     {
       "name": "log-injection-telemetry",
@@ -3180,7 +3180,7 @@
       "d3fend_refs": [],
       "last_threat_review": "2026-06-02",
       "signature": "twTmA2l+Am2k2PCzB2DNxDQwoYlGopJp/3QgQwBsP7h2LF+uNudisqfuOVV/bYnWfrUhuYZUWbsR3mhzbJCUBw==",
-      "signed_at": "2026-06-22T14:16:29.816Z"
+      "signed_at": "2026-06-22T15:58:37.547Z"
     },
     {
       "name": "privacy-consent-ops",
@@ -3235,11 +3235,11 @@
       "d3fend_refs": [],
       "last_threat_review": "2026-06-02",
       "signature": "0sfKSVrIf555c9bDGkXB96fUClN52fMAMYoQsNQ9eUUSzDiWUwdou+q0gYt43nObtj3m9Yb9X6q3oCXDVMgUDg==",
-      "signed_at": "2026-06-22T14:16:29.816Z"
+      "signed_at": "2026-06-22T15:58:37.547Z"
     }
   ],
   "manifest_signature": {
     "algorithm": "Ed25519",
-    "signature_base64": "M9BUq5cgR8+SjFVD09FDEKLySxzP4ooYVi99hZkybLUt22e4Nw/uZ4frEUvHrxUSbvG2Wej+J5GR1lRdhM4+AA=="
+    "signature_base64": "ZR30n0xZK4kwxyCoB+GAgj6DGNvBhTURUQtiaits9MSYcDKMmPHj0RLPZZ/ym9aCRpPtUemr0YEPxun86iFAAg=="
   }
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@blamejs/exceptd-skills",
-  "version": "0.18.14",
+  "version": "0.18.15",
   "description": "AI security skills grounded in mid-2026 threat reality, not stale framework documentation. 51 skills, 11 catalogs (459 CVEs / 181 CWEs / 805 ATT&CK + ICS / 170 ATLAS / 468 D3FEND / 8888 RFCs), 35 jurisdictions, 10-class catalog gap detector + budget gate, real XML parser + canonical-form diff + content-pattern regression detection, Ed25519-signed.",
   "keywords": [
     "ai-security",

package/sbom.cdx.json

@@ -1,22 +1,22 @@
 {
   "bomFormat": "CycloneDX",
   "specVersion": "1.6",
-  "serialNumber": "urn:uuid:067abada-564e-42a3-b5d4-c0f82acd46c2",
+  "serialNumber": "urn:uuid:91ed9f87-03ec-4e45-8017-4f069e6a6f46",
   "version": 1,
   "metadata": {
-    "timestamp": "2029-06-12T04:15:22.000Z",
+    "timestamp": "2103-08-02T10:46:31.000Z",
     "tools": [
       {
         "vendor": "blamejs",
         "name": "scripts/refresh-sbom.js",
-        "version": "0.18.14"
+        "version": "0.18.15"
       }
     ],
     "component": {
-      "bom-ref": "pkg:npm/@blamejs/exceptd-skills@0.18.14",
+      "bom-ref": "pkg:npm/@blamejs/exceptd-skills@0.18.15",
       "type": "application",
       "name": "@blamejs/exceptd-skills",
-      "version": "0.18.14",
+      "version": "0.18.15",
       "description": "AI security skills grounded in mid-2026 threat reality, not stale framework documentation. 51 skills, 11 catalogs (459 CVEs / 181 CWEs / 805 ATT&CK + ICS / 170 ATLAS / 468 D3FEND / 8888 RFCs), 35 jurisdictions, 10-class catalog gap detector + budget gate, real XML parser + canonical-form diff + content-pattern regression detection, Ed25519-signed.",
       "licenses": [
         {
@@ -25,17 +25,17 @@
           }
         }
       ],
-      "purl": "pkg:npm/%40blamejs/exceptd-skills@0.18.14",
+      "purl": "pkg:npm/%40blamejs/exceptd-skills@0.18.15",
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "5229acc52d6c7f075290e6f99516cbc8a832a9a94ba8e421c093d181922db250"
+          "content": "1d3582af295fcb1bb845bee7d540febffe9643d0890a3bdbc91cb1006e85a77a"
         }
       ],
       "externalReferences": [
         {
           "type": "distribution",
-          "url": "https://www.npmjs.com/package/@blamejs/exceptd-skills/v/0.18.14"
+          "url": "https://www.npmjs.com/package/@blamejs/exceptd-skills/v/0.18.15"
         },
         {
           "type": "vcs",
@@ -116,11 +116,11 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "b78694e78efb23ab479560c09f0e08169c646718a4f924dc63c516f7342d8988"
+          "content": "75af37acc132ac61508566b1f3aae6933fa591f7ea709f2991378b513143647a"
         },
         {
           "alg": "SHA3-512",
-          "content": "c708aa3f4649f7d9675364a253a8de1eebc668a3c10e595c062e5e44f072c36be1ba55e85aef5a9d2a9bda909107800f869310f8451e79bb693d8350d969dbb6"
+          "content": "6aa7d29979d2903e2c6b84a06cc91690af53fc1d00c3f74e16586372cfc706f5133518ceed0733ea61b9ec9ad17cbc5f8d52c4532b63d1ddca5b6058e8264c07"
         }
       ]
     },
@@ -491,11 +491,11 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "3e3563a1b737f9e9afe4bdee10247ffbacb971be6e56ee281458ba2e8bd579cf"
+          "content": "d346a9fdd0dc289cee02cdbd2355eb61bd31231fa3c7745af6e071de5e85f747"
         },
         {
           "alg": "SHA3-512",
-          "content": "59d6f29f868301e2879ed3bbe3d76d5a4396ac7ce5e5b2e0812f5372db10e1f022404db653c6ea3b441c6d8dbef4902a82b7c7169fe3dc2607fc204507965010"
+          "content": "ee9681ac0aef46f77dc3537eee23b472dac68d4977d700896d341338498c567b1a3323b7b80586a6956f068c8e7128b950a393ff90ebf29f4d84debb25b59d61"
         }
       ]
     },
@@ -551,11 +551,11 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "8cb21531b4648f2fe534984adc70cf86962f1c8821732452ded8ad7853835bb7"
+          "content": "4734aa4636acf4f5cefb4c086ca8d64d6d5c2875b5f6ec23c7304a50166f41ba"
         },
         {
           "alg": "SHA3-512",
-          "content": "bce87020e5e9edb5628ecb10580cc04d02d8cd5b89110e2d3e477970a615b9b68ea3ef085d612ccf488b8cdb0441bed1ca14a80140e8c70cfd668f099efb4c29"
+          "content": "a82387ab591eec1dff1e63c88ae0a06c6e422d98631c23ba854eb074234ae5aeb2f7de98aa9813de07c3b9769047f9ac254a9cee53f9f8d95dc20a1b17aae38e"
         }
       ]
     },
@@ -641,11 +641,11 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "d4a30c75da45a354b6f8d4da6df9496c964c92d6c7223369902b27f52391c481"
+          "content": "5a21e14c0c1e59f28f530f7121b7a94f096766751b01fbfa4c82c9a4ed819a4c"
         },
         {
           "alg": "SHA3-512",
-          "content": "f1eb1c5c4d15006e169afa3e88e7bd04c7fb9aadeeb70caa0572a3ca10fc5df8e16b7a1993f545c98374b70b667f007d0f8ec162531c744316c375d5d6768afa"
+          "content": "f6facca12c0e27387d8c7b10064b30272782150ba7cc3cc404d52a6b4090e6b8c43aa34498454194a2230aea7a2c3fbd473dfe09ec40b6b5b2ae9ce5afdd8254"
         }
       ]
     },
@@ -731,11 +731,11 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "d477ed782fa2688b2f01dff8a911df6dfddbe9b6dba02eefda5917bc10b39676"
+          "content": "78d4e0b31bf3eb161cd343df2c6f87945bb5df3dafa59fc9ec68229a2d2d2ee1"
         },
         {
           "alg": "SHA3-512",
-          "content": "d3f453f264e65cc7d0df4f1c61b683caeb86dcdff1b5fdf56aa8a30c5e91764046c6a5341e171a9931e2f1ec11a37b1b096d65e67c836e501600582823c82a30"
+          "content": "b81137055a740d1b4504409b098b5190ff6860b0e1306425801abc0d6279c6bc327730bcc7bf65aa96b6c089ce7d7b167d5106e5b7ff08543ee1b6b93b9da9fd"
         }
       ]
     },
@@ -1466,11 +1466,11 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "7a80237a0efc67ef1c5356cfe2cb01682f2bdbd1c482c01f803bbcadeb2bd43d"
+          "content": "0931b9c7a334ee8233eb85eb28c58b0ce793778155e9de83a1d9a75371804eaa"
         },
         {
           "alg": "SHA3-512",
-          "content": "f48be7bb4286626dbc5a813850d7995d0eb370eae0933d990adf67de4dd0b11328ca1ade31f1d1db6cc8945fd56fa3c64da79fbd67456996c1c2c71a2f19b708"
+          "content": "b3a3d41def2a7cd88af86df76eff2c30f6e4466c40a95dafe320614eb0b468b08d6dd0f7decc8bb1eb8f8b96dd8edac391439c6dfebee893c1d0f364d4e4dd8a"
         }
       ]
     },
@@ -1781,11 +1781,11 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "6e330602c96826afef6d678cb981f7e8b6dc2f85e347157a4fbd31d13b18c423"
+          "content": "67a4ea6652f8be1602acf415461ce22536b4fe07245cbb577a237709f49d1b7f"
         },
         {
           "alg": "SHA3-512",
-          "content": "01df582251e0616594050f2c93ac513aaa18be01c330159b429cc775f868da2f4c766d4c6988c869374e0318e0dfb91551b3fa3df109430a238236ce89bdc8be"
+          "content": "2127dba695f401dcbae912b54e57fcea387dbd716974f807ab9a942cb43bc7cbe97a10f35d8a0daa0f8deb2aef3f82be5c651c3eeb0a46de8d546cb87a0a4598"
         }
       ]
     },
@@ -1901,11 +1901,11 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "be5406117ede866ec4dc653cf15f9555f8fa58c254fc601800e4bacb07ddb609"
+          "content": "06e97688670822402c8878d854e06f6790969a0a8a3c119e3aa5bef7d8c7e2d3"
         },
         {
           "alg": "SHA3-512",
-          "content": "ce5d386778093686cec9cea5bf274ed1b557c03e617d9c6538fbb05debc81cabdeffbb46879b00de2479fd6a76395cea1a4e08182899d34ce6f7220ce2b25321"
+          "content": "9228366acf6f48f86b97528d4cc6c2fddb7ca3edd481d6acf25067ca9e28a43fec0e051ff377df188ddedf811521a8bf1b1ccf590d3c005a6e169b4e8c329c05"
         }
       ]
     },