@blamejs/exceptd-skills 0.18.15 → 0.18.16

package/CHANGELOG.md

@@ -1,5 +1,17 @@
 # Changelog
 
+## 0.18.16 — 2026-06-22
+
+A correctness pass on the evidence-output and attestation surfaces.
+
+SARIF finding results always carry a location now. A result with no `locations` is silently dropped by GitHub Code Scanning; previously only playbooks whose look-artifact sources happened to be bare file paths got one, so most playbooks' (prose/glob/command sources) findings were emitted location-less and disappeared from the alerts list. Each finding without a concrete file now carries a rule-scoped logical location, keeping it visible and attributable; a physical file location is still used whenever the agent supplied one.
+
+`attest diff` no longer reports identical evidence as changed. The artifact diff was keyed by the operator-chosen observation key rather than the indicator the observation targeted, so two attestations with the same finding under different observation keys (a different collector run, the array vs object evidence shape, reordered observations) showed every artifact as added-and-removed with zero unchanged. The diff is now keyed by the stable indicator id, so identical evidence compares as unchanged.
+
+Risk-acceptance exception language now reports its unresolved placeholders. The auditor-ready exception text is filled from operator-supplied values that a standard run does not pre-stage, so it could ship literal `<MISSING:…>` tokens; the exception now carries a `missing_interpolation_vars` list (and surfaces a runtime error) naming exactly which values still need filling, matching the notification-draft behavior.
+
+CSAF advisories bind their per-version affected products. The product tree's per-version product entries were defined but never referenced from any vulnerability, so a dashboard correlating affected products to the tree saw only the generic synthetic product; each CVE's version entries are now bound into its `product_status`.
+
 ## 0.18.15 — 2026-06-22
 
 Indicator-gated escalations and playbook chains now fire when their indicators are detected. An escalation or `feeds_into` written as `<indicator-id> == true` (the catalog's standard form) resolved only when that id was also passed as a raw signal; the normal scan path delivers detections separately, so on a real `exceptd collect <playbook>` these escalations and downstream chains stayed silent even when the indicator was found. Fired indicators are now bound into the escalation, chain, and remediation-precondition contexts, so a detection drives the condition that gates on it. An operator can still override a specific indicator, and engine-computed values still take precedence.

package/bin/exceptd.js

@@ -6554,6 +6554,39 @@ function submissionHasData(submission) {
     || nonEmpty(submission.signal_overrides)
     || nonEmpty(submission.observations);
 }
+// attest diff compares artifacts by map key. normalizeSubmission keys
+// flat-shape artifacts by the operator-chosen OBSERVATION key (obs-kver, x1, an
+// array index, …), NOT by the stable indicator id the observation targeted — so
+// two attestations with identical (indicator, value) evidence under different
+// observation keys diffed as all-added/all-removed (unchanged_count 0), while the
+// correctly-keyed signal_override_diff on the same comparison showed the true
+// unchanged result. Re-key the artifact map by the stable indicator id (recovered
+// from normalizeSubmission's _signal_origins, which maps indicator -> obs-key)
+// before diffing, falling back to the original key when an observation carries no
+// indicator binding. Diff-only — does NOT touch normalizeSubmission's map or the
+// evidence_hash.
+function rekeyArtifactsByStableId(artifacts, signalOrigins) {
+  if (!artifacts || !signalOrigins || typeof signalOrigins !== "object") return artifacts || {};
+  const obsKeyToIndicator = {};
+  for (const [indicatorId, obsKey] of Object.entries(signalOrigins)) {
+    if (typeof obsKey === "string") obsKeyToIndicator[obsKey] = indicatorId;
+  }
+  const originalKeys = new Set(Object.keys(artifacts));
+  const out = {};
+  for (const [k, v] of Object.entries(artifacts)) {
+    const mapped = obsKeyToIndicator[k];
+    // Re-key to the stable indicator id ONLY when it won't drop an artifact: the
+    // indicator id must not already be a DISTINCT original artifact key, and must
+    // not have been claimed by an earlier re-keyed entry. On any such collision,
+    // keep the original key so no artifact is silently overwritten / lost from
+    // the diff (two observations sharing one indicator, or an artifact key that
+    // already equals an indicator id).
+    const stable = (mapped && mapped !== k && !originalKeys.has(mapped)
+      && !Object.prototype.hasOwnProperty.call(out, mapped)) ? mapped : k;
+    out[stable] = v;
+  }
+  return out;
+}
 function normalizedArtifacts(submission, runner, playbookId, applyEmptyFallback = true) {
   if (!submission || typeof submission !== "object") {
     return applyEmptyFallback ? (_playbookArtifactCatalog(runner, playbookId) || {}) : {};
@@ -6568,7 +6601,9 @@ function normalizedArtifacts(submission, runner, playbookId, applyEmptyFallback
         const pb = runner.loadPlaybook ? runner.loadPlaybook(playbookId) : null;
         if (pb) {
           const norm = runner.normalizeSubmission({ observations: submission.observations }, pb);
-          if (norm && norm.artifacts && Object.keys(norm.artifacts).length > 0) return norm.artifacts;
+          if (norm && norm.artifacts && Object.keys(norm.artifacts).length > 0) {
+            return rekeyArtifactsByStableId(norm.artifacts, norm._signal_origins);
+          }
         }
       } catch { /* fall through */ }
     }

package/data/_indexes/_meta.json

@@ -1,10 +1,10 @@
 {
   "schema_version": "1.1.0",
-  "generated_at": "2026-06-22T15:58:38.839Z",
+  "generated_at": "2026-06-22T17:11:04.498Z",
   "generator": "scripts/build-indexes.js",
   "source_count": 64,
   "source_hashes": {
-    "manifest.json": "06e97688670822402c8878d854e06f6790969a0a8a3c119e3aa5bef7d8c7e2d3",
+    "manifest.json": "c8376cbda42a9657b6a5d50f75d8c08a0bcab7c8456340042be7998133922ecb",
     "README.md": "e7b854e7db9a364a1b368b5084b4f0c2a8282f0459ce39800ac1d1dabdc06074",
     "data/atlas-ttps.json": "5bc59e23d6c2defa54168de161a0825299b9cc4a49c6b26df2dae70b4f42eedf",
     "data/attack-techniques.json": "53c6f248760eecb11a0354f74ab467a5814e95075a686b9b3bf18c34e2f7435e",

package/lib/playbook-runner.js

@@ -1994,14 +1994,26 @@ function close(playbookId, directiveId, analyzeResult, validateResult, agentSign
     const triggered = evalCondition(c.exception_generation.trigger_condition, closeEvalCtx, playbook);
     if (triggered) {
       const t = c.exception_generation.exception_template;
+      // Track unresolved ${placeholder} tokens the SAME way the draft_notification
+      // render does (missing_interpolation_vars). Exception-template tokens are
+      // operator-fill values (affected_host_count, compensating_controls,
+      // patch_available_status, …) that analyzeFindingShape does NOT supply and
+      // that operators rarely pre-stage on the standard `exceptd run` path, so the
+      // auditor-ready risk-acceptance language otherwise ships literal
+      // `<MISSING:…>` tokens with no machine-readable signal of which placeholders
+      // failed. Surface them as exception.missing_interpolation_vars (empty when
+      // all resolved) so a `ci`/JSON consumer — and the operator filling the
+      // exception — sees exactly what still needs a value.
+      const exMissing = [];
+      const findingShape = (() => { try { return analyzeFindingShape(analyzeResult); } catch { return {}; } })();
       exception = {
-        scope: interpolate(t.scope, { ...agentSignals, ...analyzeFindingShape(analyzeResult) }),
+        scope: interpolate(t.scope, { ...agentSignals, ...findingShape }, exMissing),
         duration: t.duration,
         compensating_controls: t.compensating_controls,
         risk_acceptance_owner: t.risk_acceptance_owner,
         auditor_ready_language: interpolate(t.auditor_ready_language, {
           ...agentSignals,
-          ...analyzeFindingShape(analyzeResult),
+          ...findingShape,
           framework_id: playbook.domain.frameworks_in_scope[0] || 'unspecified',
           control_id: analyzeResult.framework_gap_mapping?.[0]?.claimed_control || 'unspecified',
           ciso_name: agentSignals.ciso_name || '<CISO NAME>',
@@ -2010,8 +2022,16 @@ function close(playbookId, directiveId, analyzeResult, validateResult, agentSign
           // same auditor-facing date.
           acceptance_date: (deterministic ? frozenEpoch : new Date().toISOString()).slice(0, 10),
           duration_expiry: agentSignals.duration_expiry || 'until vendor patch'
-        })
+        }, exMissing),
+        missing_interpolation_vars: exMissing,
       };
+      // Make the unresolved-placeholder gap observable to JSON/ci consumers, not
+      // just present on the exception object.
+      if (exMissing.length && Array.isArray(runOpts._runErrors)) {
+        pushRunError(runOpts._runErrors,
+          { kind: 'exception_unresolved_placeholders', placeholders: exMissing.slice() },
+          { dedupeKey: e => (e.placeholders || []).join(',') });
+      }
     }
   }
 
@@ -2330,12 +2350,23 @@ function vulnIdToUrn(id) {
 function buildCsafBranches(matchedCves, runOpts) {
   // Build a (vendor → product → Set<version>) map.
   const tree = new Map();
-  const addLeaf = (vendor, product, version) => {
+  // Track which CVE contributed each leaf so the emitted CSAFPID-N product_ids
+  // can be bound back into that CVE's vulnerabilities[].product_status — without
+  // this the branch tree's per-version products are referenced by nothing and a
+  // CSAF consumer correlating product_status to the tree resolves only the
+  // generic synthetic product. leafKey = vendor\0product\0version.
+  const leafKey = (vendor, product, version) => JSON.stringify([vendor, product, version]);
+  const cveLeaves = new Map(); // cve_id → Set<leafKey>
+  const addLeaf = (vendor, product, version, cveId) => {
     if (!vendor || !product || !version) return;
     if (!tree.has(vendor)) tree.set(vendor, new Map());
     const products = tree.get(vendor);
     if (!products.has(product)) products.set(product, new Set());
     products.get(product).add(version);
+    if (cveId) {
+      if (!cveLeaves.has(cveId)) cveLeaves.set(cveId, new Set());
+      cveLeaves.get(cveId).add(leafKey(vendor, product, version));
+    }
   };
 
   // Comparison / range operators that appear between a package name and a
@@ -2386,7 +2417,7 @@ function buildCsafBranches(matchedCves, runOpts) {
     if (Array.isArray(c.affected_products) && c.affected_products.length > 0) {
       for (const ap of c.affected_products) {
         if (ap && typeof ap === 'object' && ap.vendor && ap.product && ap.version) {
-          addLeaf(String(ap.vendor), String(ap.product), String(ap.version));
+          addLeaf(String(ap.vendor), String(ap.product), String(ap.version), c.cve_id);
         }
       }
       continue;
@@ -2396,7 +2427,7 @@ function buildCsafBranches(matchedCves, runOpts) {
     for (const comp of components) {
       const parsed = parseComponentString(comp);
       if (parsed) {
-        addLeaf(parsed.vendor, parsed.product, parsed.version);
+        addLeaf(parsed.vendor, parsed.product, parsed.version, c.cve_id);
       } else if (typeof comp === 'string' && comp.trim() && runOpts && Array.isArray(runOpts._runErrors)) {
         pushRunError(runOpts._runErrors, {
           kind: 'csaf_branch_unparseable',
@@ -2409,6 +2440,7 @@ function buildCsafBranches(matchedCves, runOpts) {
 
   // Sort + emit.
   const productIds = [];
+  const leafKeyToPid = new Map();
   let pidCounter = 0;
   const vendors = Array.from(tree.keys()).sort();
   const branches = vendors.map(vendor => {
@@ -2425,6 +2457,7 @@ function buildCsafBranches(matchedCves, runOpts) {
           branches: versions.map(version => {
             const pid = `CSAFPID-${pidCounter++}`;
             productIds.push({ vendor, product, version, product_id: pid });
+            leafKeyToPid.set(leafKey(vendor, product, version), pid);
             return {
               category: 'product_version',
               name: version,
@@ -2438,7 +2471,15 @@ function buildCsafBranches(matchedCves, runOpts) {
       }),
     };
   });
-  return { branches, productIds };
+  // Per-CVE CSAFPID binding so the caller can add the version leaves to each
+  // vulnerability's product_status.known_affected.
+  const cveProductIds = {};
+  for (const [cveId, keys] of cveLeaves.entries()) {
+    const pids = [];
+    for (const k of keys) { const pid = leafKeyToPid.get(k); if (pid) pids.push(pid); }
+    if (pids.length) cveProductIds[cveId] = pids.sort();
+  }
+  return { branches, productIds, cveProductIds };
 }
 
 // Slugify a string into a URN-safe segment (RFC 8141 NSS). Empty input →
@@ -2545,6 +2586,24 @@ function sarifLocationsForIndicator(playbook, indicator) {
   return [{ physicalLocation: { artifactLocation: { uri: candidates[0] } } }];
 }
 
+// Locations for a finding-class SARIF result, with a guaranteed non-empty
+// fallback. sarifLocationsForIndicator returns a PHYSICAL location only when the
+// agent supplied evidence_locations or the playbook's look-artifact source is a
+// bare path token; the dominant catalog shape is a prose / glob / shell-command
+// source (which carries whitespace and is rejected by looksLikePath), so the
+// physical fallback is null for ~most playbooks. A SARIF result with no
+// `locations[]` is silently DROPPED by GitHub Code Scanning — so a result with
+// no concrete file still gets a `logicalLocations` entry naming its rule, which
+// is SARIF-conformant (§3.33), keeps the finding attributable + visible in the
+// alerts list and in SARIF viewers, and is honest (there is no physical file to
+// point at when the agent supplied no evidence location). Physical location is
+// always preferred when available.
+function sarifResultLocations(playbook, indicator, fqRuleId) {
+  const phys = sarifLocationsForIndicator(playbook, indicator);
+  if (phys && phys.length) return phys;
+  return [{ logicalLocations: [{ name: fqRuleId, fullyQualifiedName: fqRuleId, kind: 'rule' }] }];
+}
+
 // Resolve the package version once per process so CSAF tracking.generator
 // can name the engine that emitted the advisory. Best-effort read — bundle
 // emission must not crash if package.json is missing (e.g. exotic install).
@@ -2783,6 +2842,11 @@ function buildEvidenceBundle(format, playbook, analyze, validate, agentSignals,
     };
     const CSAF_CVE_RE = /^CVE-\d{4}-\d{4,}$/;
 
+    // Build the product-tree branches up front so each CVE's per-version CSAFPID
+    // leaves can be bound into its product_status.known_affected (and the same
+    // tree reused for product_tree below — buildCsafBranches is not re-run).
+    const csafProductTree = buildCsafBranches(analyze.matched_cves || [], runOpts);
+
     const cveVulns = analyze.matched_cves.map(c => {
       const isFixed = c.vex_status === 'fixed';
       const remediations = [{
@@ -2867,7 +2931,17 @@ function buildEvidenceBundle(format, playbook, analyze, validate, agentSignals,
         scores,
         threats: c.active_exploitation === 'confirmed' ? [{ category: 'exploit_status', details: `Active exploitation confirmed${c.cisa_kev ? ' (CISA KEV)' : ''}.` }] : [],
         remediations,
-        product_status: isFixed ? { fixed: [productId] } : { known_affected: [productId] }
+        // Bind this CVE's per-version CSAFPID leaves (from the product tree) into
+        // known_affected, so a CSAF consumer correlating product_status back to
+        // the branches tree resolves the real affected versions, not only the
+        // opaque synthetic product. The leaves are parsed from affected_products
+        // / affected_versions — VULNERABLE version ranges — so they belong ONLY
+        // under known_affected. The VEX-fixed disposition keeps just the synthetic
+        // target product under `fixed`; adding affected ranges there would
+        // mislabel vulnerable versions as fixed releases.
+        product_status: isFixed
+          ? { fixed: [productId] }
+          : { known_affected: [productId, ...(csafProductTree.cveProductIds[c.cve_id] || [])] }
       };
       // route by id shape.
       if (idIsCve) {
@@ -3054,7 +3128,7 @@ function buildEvidenceBundle(format, playbook, analyze, validate, agentSignals,
           // from catalog data. CSAF §3.1.5.1 makes branches[] strongly
           // recommended because NVD / ENISA / Red Hat dashboards render the
           // affected-product list off the branches tree, not full_product_names[].
-          const { branches } = buildCsafBranches(analyze.matched_cves || [], runOpts);
+          const branches = csafProductTree.branches;
           const tree = { full_product_names: fullProductNames };
           if (branches.length > 0) tree.branches = branches;
           return tree;
@@ -3109,7 +3183,6 @@ function buildEvidenceBundle(format, playbook, analyze, validate, agentSignals,
     // (passing a null indicator skips the per-indicator evidence-locations
     // branch). Without any `locations`, GitHub Code Scanning silently DROPS
     // these results — the highest-severity result class would never surface.
-    const cveFallbackLocs = sarifLocationsForIndicator(playbook, null);
     const cveResults = analyze.matched_cves.map(c => {
       const result = {
         ruleId: `${rulePrefix}${c.cve_id}`,
@@ -3125,12 +3198,15 @@ function buildEvidenceBundle(format, playbook, analyze, validate, agentSignals,
           blast_radius_score: analyze.blast_radius_score,
         }),
       };
-      if (cveFallbackLocs) result.locations = cveFallbackLocs;
+      // Always carry a location (physical when known, else a rule-scoped
+      // logicalLocations fallback) so GitHub Code Scanning does not drop the
+      // highest-severity result class.
+      result.locations = sarifResultLocations(playbook, null, result.ruleId);
       return result;
     });
     const indicatorHits = (analyze._detect_indicators || []).filter(i => i.verdict === 'hit');
     const indicatorResults = indicatorHits.map(i => {
-      const locs = sarifLocationsForIndicator(playbook, i);
+      const locs = sarifResultLocations(playbook, i, `${rulePrefix}${i.id}`);
       const result = {
         ruleId: `${rulePrefix}${i.id}`,
         level: i.deterministic ? 'error' : (i.confidence === 'high' ? 'warning' : 'note'),
@@ -3143,7 +3219,7 @@ function buildEvidenceBundle(format, playbook, analyze, validate, agentSignals,
           attack_ref: i.attack_ref,
         }),
       };
-      if (locs) result.locations = locs;
+      result.locations = locs; // always present (physical or logical fallback)
       return result;
     });
     const gapResults = (analyze.framework_gap_mapping || []).map((g, idx) => ({

package/manifest.json

@@ -1,6 +1,6 @@
 {
   "name": "exceptd-security",
-  "version": "0.18.15",
+  "version": "0.18.16",
   "description": "AI security skills grounded in mid-2026 threat reality, not stale framework documentation",
   "homepage": "https://exceptd.com",
   "license": "Apache-2.0",
@@ -57,7 +57,7 @@
       ],
       "last_threat_review": "2026-05-15",
       "signature": "0H+JfyUVmo/pVFEi5rLENATHjlukPVUqnOWmNPEH77wm8svKGK0aNJ46k6QU5GdHb8c9X9pVJKiuhON6AxDjDw==",
-      "signed_at": "2026-06-22T15:58:37.527Z",
+      "signed_at": "2026-06-22T17:11:02.747Z",
       "cwe_refs": [
         "CWE-125",
         "CWE-362",
@@ -133,7 +133,7 @@
       ],
       "last_threat_review": "2026-06-10",
       "signature": "WfqxU2x/feWgatYrCeO9PD3dIY0FAfs4nkVdQRac4fg5BDQPG/vhzhvYVN6Mg11oITACghbPOtZXvS37sACsCA==",
-      "signed_at": "2026-06-22T15:58:37.529Z",
+      "signed_at": "2026-06-22T17:11:02.749Z",
       "cwe_refs": [
         "CWE-1039",
         "CWE-1426",
@@ -215,7 +215,7 @@
       ],
       "last_threat_review": "2026-06-10",
       "signature": "9bNOW4MzmUlFgkXH5tIZkq8YpzhMM+r8YVcNEM39kdEZwfRNG4Bj+Dgr7v4Qgp9D4q7hGNFpK0ywX+dPd3VWAg==",
-      "signed_at": "2026-06-22T15:58:37.529Z",
+      "signed_at": "2026-06-22T17:11:02.751Z",
       "cwe_refs": [
         "CWE-22",
         "CWE-345",
@@ -269,7 +269,7 @@
       "framework_gaps": [],
       "last_threat_review": "2026-06-10",
       "signature": "5A08+nAu5jwNQ1+vGbFgFAJA/kYD3oiaevhCxT4/2FeW++F070Pm4MD1+oXdv8R2DbtYr+7yXnCGM7UbUPR2AA==",
-      "signed_at": "2026-06-22T15:58:37.530Z"
+      "signed_at": "2026-06-22T17:11:02.752Z"
     },
     {
       "name": "compliance-theater",
@@ -301,7 +301,7 @@
       ],
       "last_threat_review": "2026-06-10",
       "signature": "RCgbI0sMNTKAscXUtrVU25u7OuE64uQvO5JKsB8vIJFWguvT6nZyD7euKuIxIzYhLTyHBiD7Rhp70btlK+JkCg==",
-      "signed_at": "2026-06-22T15:58:37.530Z"
+      "signed_at": "2026-06-22T17:11:02.753Z"
     },
     {
       "name": "exploit-scoring",
@@ -332,7 +332,7 @@
       ],
       "last_threat_review": "2026-06-10",
       "signature": "JJrs+B22/hYxvdYs+abmoire5PbQXPb2uVYyjInZ3UbT8gEjs/5SyfGKx7z86jbtvB3ItApQVAx1AuseIgdyAQ==",
-      "signed_at": "2026-06-22T15:58:37.531Z"
+      "signed_at": "2026-06-22T17:11:02.754Z"
     },
     {
       "name": "rag-pipeline-security",
@@ -374,7 +374,7 @@
       ],
       "last_threat_review": "2026-06-10",
       "signature": "Z6WbTqG98bQVRd6+kXDb6xIEe0ZryAeGxVSuKKxdK1PoZqew7NJcMsa6sJVSq+0r7KMsFwfTEdKorp6UDdhpCA==",
-      "signed_at": "2026-06-22T15:58:37.531Z",
+      "signed_at": "2026-06-22T17:11:02.755Z",
       "cwe_refs": [
         "CWE-1395",
         "CWE-1426"
@@ -441,7 +441,7 @@
       ],
       "last_threat_review": "2026-06-10",
       "signature": "DLKcrgon+MZrqmivlFLBH4vlzZbJSW1531RsYDm9/KdW2CgcUUHwNMSzAfU1mAsFwFkAHjy/a8e1FbS9msTvDA==",
-      "signed_at": "2026-06-22T15:58:37.531Z",
+      "signed_at": "2026-06-22T17:11:02.756Z",
       "cwe_refs": [
         "CWE-918"
       ],
@@ -482,7 +482,7 @@
       "framework_gaps": [],
       "last_threat_review": "2026-06-10",
       "signature": "eWCOD+mR1c6B8vKDBot8y8UkQrKPCIEBHU3JRQET9xZnYGx8hrOyeRUElcKqCO5aG/2LISs9Atg1H+ehWDNbCw==",
-      "signed_at": "2026-06-22T15:58:37.532Z",
+      "signed_at": "2026-06-22T17:11:02.757Z",
       "cwe_refs": [
         "CWE-1188"
       ],
@@ -517,7 +517,7 @@
       "framework_gaps": [],
       "last_threat_review": "2026-06-10",
       "signature": "kZca725/+BFr1mpxL29+cGzjqsiYhChWScf7VjU6vCTBZrmCps6W9gYYjf4lVORXaM4DAg3UVBOXyhpTst0rAw==",
-      "signed_at": "2026-06-22T15:58:37.532Z",
+      "signed_at": "2026-06-22T17:11:02.758Z",
       "forward_watch": [
         "New AI attack classes as ATLAS v6 publishes",
         "Post-quantum adversary capability timeline",
@@ -557,7 +557,7 @@
       "framework_gaps": [],
       "last_threat_review": "2026-05-01",
       "signature": "b5miTiY0cnxETd2btxorfZBdJKt/fLnQx20sGYUb9zEqGqtm0LMLpghkW68j4/9k48KNyuGMtNWiKTSnodUGBw==",
-      "signed_at": "2026-06-22T15:58:37.533Z"
+      "signed_at": "2026-06-22T17:11:02.759Z"
     },
     {
       "name": "zeroday-gap-learn",
@@ -584,7 +584,7 @@
       "framework_gaps": [],
       "last_threat_review": "2026-06-10",
       "signature": "NVBY4I5a+v2/nUeCYcy3LLVKk3Tg9gmz+sCKyvnf8t2fXMNSIGtoy+P8K4Gfos1rGzRRMaU01V7L4kh/IQ8UBQ==",
-      "signed_at": "2026-06-22T15:58:37.533Z",
+      "signed_at": "2026-06-22T17:11:02.760Z",
       "forward_watch": [
         "New CISA KEV entries",
         "New ATLAS TTP additions in each ATLAS release",
@@ -652,7 +652,7 @@
       ],
       "last_threat_review": "2026-06-10",
       "signature": "U54OxIjPT+W9yafjpeFgY7klXMltLYBuSCtu/AAlXxOIPehJrbf/vbGgnBn58nqOd7RjoKjmKz9WQs4DMqWcDw==",
-      "signed_at": "2026-06-22T15:58:37.534Z",
+      "signed_at": "2026-06-22T17:11:02.762Z",
       "cwe_refs": [
         "CWE-327"
       ],
@@ -702,7 +702,7 @@
       ],
       "last_threat_review": "2026-06-10",
       "signature": "QsJMwvnUJXHwoBPJ4BiUx3FO9giXfos/sMbx5tyO83AJ2JxdVskeC6g/WDfO+rVkWNXRgWi4h1eSYz6T8/tpAg==",
-      "signed_at": "2026-06-22T15:58:37.534Z"
+      "signed_at": "2026-06-22T17:11:02.763Z"
     },
     {
       "name": "security-maturity-tiers",
@@ -740,7 +740,7 @@
       ],
       "last_threat_review": "2026-05-01",
       "signature": "8KbLVVPI1QgYa+HAnEYvKf1cXnxQ3zsncqTGrAOrBP4rwUeZsxJm8KyFCwI0XytnZG35PZ830BFlG/okPW3sBQ==",
-      "signed_at": "2026-06-22T15:58:37.535Z",
+      "signed_at": "2026-06-22T17:11:02.764Z",
       "cwe_refs": [
         "CWE-1188"
       ]
@@ -776,7 +776,7 @@
       "framework_gaps": [],
       "last_threat_review": "2026-05-11",
       "signature": "iJWevUBurLvt2v8X+Ch2eHmZkPWpKeAtIpxTIP4MwbUHyco3igDeBywJCyaR2vURYRx8LkzzIMM8DxQM4LAXBQ==",
-      "signed_at": "2026-06-22T15:58:37.535Z"
+      "signed_at": "2026-06-22T17:11:02.766Z"
     },
     {
       "name": "attack-surface-pentest",
@@ -852,7 +852,7 @@
         "Pwn2Own Berlin 2026 (disclosed 2026-05-14, embargo ends 2026-08-12) — Microsoft Edge 4-bug sandbox escape by Orange Tsai (DEVCORE); forward-watch only (browser sandbox, out of current playbook scope); track Microsoft Edge security advisory and KEV add"
       ],
       "signature": "ZnFi+Rk4CWrjFEVU4hC6Q66UbDmndNL/ICLWQNA1TQYFGSTnng+nboM4tfi6h0yMbbDj7dOXYqqeHNK+M5ZiBA==",
-      "signed_at": "2026-06-22T15:58:37.536Z"
+      "signed_at": "2026-06-22T17:11:02.767Z"
     },
     {
       "name": "fuzz-testing-strategy",
@@ -913,7 +913,7 @@
         "OSS-Fuzz-Gen / AI-assisted harness generation becoming the default expectation for OSS maintainers"
       ],
       "signature": "45ICz7vcnmHYE1+RIDv8wQjScKj6p8hqJQ5m6I0tDdKVnGdMXCYIgZnYqFJgHBDXYAXlGx7D7UxhFz6WOCDqAQ==",
-      "signed_at": "2026-06-22T15:58:37.536Z"
+      "signed_at": "2026-06-22T17:11:02.768Z"
     },
     {
       "name": "dlp-gap-analysis",
@@ -991,7 +991,7 @@
         "Quebec Law 25, India DPDPA, KSA PDPL enforcement actions naming AI-tool prompt data as in-scope personal information"
       ],
       "signature": "k6A7QcFEzgGXYWftt/elhQe7kU4F67c0ol3a8DZfj1XW4UrH99SLhPHr6ih3R3EYCl/Ey/zXt/x3a9fDT3RmAw==",
-      "signed_at": "2026-06-22T15:58:37.536Z"
+      "signed_at": "2026-06-22T17:11:02.770Z"
     },
     {
       "name": "supply-chain-integrity",
@@ -1075,7 +1075,7 @@
         "Pwn2Own Berlin 2026 (disclosed 2026-05-14, embargo ends 2026-08-12) — NVIDIA Megatron Bridge path traversal by haehae; AI training-stack file-system trust boundary; track patch and SBOM-attestation impact"
       ],
       "signature": "5shKqNcLC8Obt0EdvKnck8OwWIuRMgZuuZd12pvWqJIltsYMyTrw2M+lgbQfqg3x2KO6qsJljGAhTew5jM58DQ==",
-      "signed_at": "2026-06-22T15:58:37.537Z"
+      "signed_at": "2026-06-22T17:11:02.771Z"
     },
     {
       "name": "defensive-countermeasure-mapping",
@@ -1132,7 +1132,7 @@
       ],
       "last_threat_review": "2026-06-10",
       "signature": "lfa5Wgep26mK3o2ZSe5qN2vVxg+xRRURRpmnqP4JdQvvecW3T2+PxHqjT48DegXJHRXJ6DPzyIElFc7no86TAg==",
-      "signed_at": "2026-06-22T15:58:37.537Z"
+      "signed_at": "2026-06-22T17:11:02.772Z"
     },
     {
       "name": "identity-assurance",
@@ -1206,7 +1206,7 @@
       ],
       "last_threat_review": "2026-05-11",
       "signature": "UV3458QXSkEpenzrOmdlTTfPHUD4hNyKMDHoeZDq/kiFb4mAG0ghQGTTgI9Ru8cJbSmYM1++m9N5TFIJ6JJPBg==",
-      "signed_at": "2026-06-22T15:58:37.537Z"
+      "signed_at": "2026-06-22T17:11:02.773Z"
     },
     {
       "name": "ot-ics-security",
@@ -1265,7 +1265,7 @@
       "d3fend_refs": [],
       "last_threat_review": "2026-06-10",
       "signature": "afJ00EDXgARQJrbRqN6xe1+E/kbHF7O2fxQFVvrLLXdrKfK86RK/oJU1AwpxX6mclX9f+5ivy6FvFIuRMA4dBQ==",
-      "signed_at": "2026-06-22T15:58:37.538Z"
+      "signed_at": "2026-06-22T17:11:02.774Z"
     },
     {
       "name": "coordinated-vuln-disclosure",
@@ -1325,7 +1325,7 @@
         "NYDFS 23 NYCRR 500 amendments potentially adding explicit CVD program requirements"
       ],
       "signature": "VzivMW82mRrG9+07ZX8sj4j9O9YjE/m07m1UHgSwEgex+FLaVPvIj3y1Vk6qeFOvDURmtVaztWlpSlk7iSn0DA==",
-      "signed_at": "2026-06-22T15:58:37.538Z"
+      "signed_at": "2026-06-22T17:11:02.776Z"
     },
     {
       "name": "threat-modeling-methodology",
@@ -1379,7 +1379,7 @@
         "PASTA v2 updates incorporating AI/ML application threats"
       ],
       "signature": "Fk5LzzeS/bH5SQJNySgZqSdeQf1udwdRs3FVLwig5kuqyyKkuIJcF4HW+xHF/1e66HR+gjgRUoqWZGsv58lLAg==",
-      "signed_at": "2026-06-22T15:58:37.538Z"
+      "signed_at": "2026-06-22T17:11:02.778Z"
     },
     {
       "name": "webapp-security",
@@ -1462,7 +1462,7 @@
       ],
       "last_threat_review": "2026-06-10",
       "signature": "1skHJsPPOIXLQdU5MGHirP/Q07aCYTirtDmfWDO7ZNuto58NlCttW5ZjCpyh37vASlMljIZx0/R+PIl2PfwTBw==",
-      "signed_at": "2026-06-22T15:58:37.539Z",
+      "signed_at": "2026-06-22T17:11:02.778Z",
       "forward_watch": [
         "NGINX Rift CVE-2026-42945 (disclosed 2026-05-13, source depthfirst) — KEV-watch predicted CISA KEV listing by 2026-05-29; AI-assisted discovery angle; track for active-exploitation confirmation and patch advisory affecting front-door web app deployments"
       ]
@@ -1522,7 +1522,7 @@
       ],
       "last_threat_review": "2026-05-15",
       "signature": "SBB7c3wNYfIdkyOp4g4nW0WP7xS+YokMzg32aaeJdbf14LTGQRzQUvSqb2TCj2HFUSHESOyKT1JpkAfyHLSQBQ==",
-      "signed_at": "2026-06-22T15:58:37.539Z"
+      "signed_at": "2026-06-22T17:11:02.780Z"
     },
     {
       "name": "sector-healthcare",
@@ -1589,7 +1589,7 @@
       ],
       "last_threat_review": "2026-06-10",
       "signature": "yyAGG3nUC6/XWQGRF2ufzILfiJitMFczqWNY83lZShCgYSxfFCul0UsICClOc7Xjw76052uydm8kLH9gIzhsAg==",
-      "signed_at": "2026-06-22T15:58:37.540Z"
+      "signed_at": "2026-06-22T17:11:02.781Z"
     },
     {
       "name": "sector-financial",
@@ -1678,7 +1678,7 @@
         "TIBER-EU framework v2.0 alignment with DORA TLPT RTS (JC 2024/40); cross-recognition with CBEST and iCAST"
       ],
       "signature": "/+df91Qhl1TIxEAqzgqB7+YJ6mneX6Dif+h6RaCbxOLGE6KRTFst1Q/Fu5SStt8Zx5JI62bkQ2BBrNOKfUlPBg==",
-      "signed_at": "2026-06-22T15:58:37.540Z"
+      "signed_at": "2026-06-22T17:11:02.782Z"
     },
     {
       "name": "sector-federal-government",
@@ -1755,7 +1755,7 @@
         "Australia PSPF 2024 revision and ISM quarterly updates — track for Essential Eight Maturity Level requirements for federal entities"
       ],
       "signature": "k6MAPS8HJivu0DNwC1azPvyKeig2xLGz/hcqYd8T+s5GvIypPGfkeYRRKmdqMgHUe24f7bQeRZ7AxcQ9Bi6SCg==",
-      "signed_at": "2026-06-22T15:58:37.541Z"
+      "signed_at": "2026-06-22T17:11:02.783Z"
     },
     {
       "name": "sector-energy",
@@ -1829,7 +1829,7 @@
         "ICS-CERT advisory feed (https://www.cisa.gov/news-events/cybersecurity-advisories/ics-advisories) for vendor CVEs in Siemens, Rockwell, Schneider Electric, ABB, GE Vernova, Hitachi Energy, AVEVA / OSIsoft PI"
       ],
       "signature": "IYKXn009jfhpKdQKiGB4xb7VgxsJXa6PZawoguP42khU6S/TTemp/YsK1YQCUyabE+2biElL/PP1Hi8zCkSSBw==",
-      "signed_at": "2026-06-22T15:58:37.541Z"
+      "signed_at": "2026-06-22T17:11:02.785Z"
     },
     {
       "name": "sector-telecom",
@@ -1915,7 +1915,7 @@
         "O-RAN SFG / WG11 security specifications"
       ],
       "signature": "NAtyzfLPXlUuB78Snb9nWmbZalC1CNlIYN9rYhdEmtB/xQGC6vVnThgrEAHlm7v/jMCFuknvEpUHKdscUnUADw==",
-      "signed_at": "2026-06-22T15:58:37.542Z"
+      "signed_at": "2026-06-22T17:11:02.786Z"
     },
     {
       "name": "api-security",
@@ -1994,7 +1994,7 @@
       ],
       "last_threat_review": "2026-06-10",
       "signature": "HUjhPGpZeZeVi1nzBIsEAYh18x5ltlIXnt1yQ5YKz+jC2Dvxw7vV/Clx1/1gDBLAuBvRW9wcNtDr4c0RxhfGDQ==",
-      "signed_at": "2026-06-22T15:58:37.542Z",
+      "signed_at": "2026-06-22T17:11:02.789Z",
       "forward_watch": [
         "NGINX Rift CVE-2026-42945 (disclosed 2026-05-13, source depthfirst) — KEV-watch predicted CISA KEV listing by 2026-05-29; track for active-exploitation confirmation and patch advisory affecting API gateway / reverse-proxy deployments",
         "Pwn2Own Berlin 2026 (disclosed 2026-05-14, embargo ends 2026-08-12) — LiteLLM 3-bug SSRF + Code Injection chain by k3vg3n; LLM-proxy API surface; track upstream patch and CVE assignments",
@@ -2089,7 +2089,7 @@
         "CISA KEV additions for cloud-control-plane CVEs (IMDSv1 abuses, federation token mishandling, cross-tenant boundary failures); CISA Cybersecurity Advisories for cross-cloud advisories"
       ],
       "signature": "xa1kr/92/0fBds7LVtRy9aCM2tQRWAfNSFoC6ygbOU7QjamUo8Wt2h2n9W+nZT34STN3woYhXqtfmm8NSjXdBQ==",
-      "signed_at": "2026-06-22T15:58:37.543Z"
+      "signed_at": "2026-06-22T17:11:02.790Z"
     },
     {
       "name": "container-runtime-security",
@@ -2161,7 +2161,7 @@
       ],
       "last_threat_review": "2026-06-10",
       "signature": "60hyXAiYfY9lI+EpHG3iFFxa+oF5n71c0tTMa6iXFLNjBJKPevTsdNgQlQsBEnmRJ+dWtOjb/GNBW1KiBx4XAQ==",
-      "signed_at": "2026-06-22T15:58:37.543Z",
+      "signed_at": "2026-06-22T17:11:02.791Z",
       "forward_watch": [
         "Pwn2Own Berlin 2026 (disclosed 2026-05-14, embargo ends 2026-08-12) — NVIDIA Container Toolkit container escape ($50K award) by chompie / IBM X-Force XOR; high-severity container/hypervisor boundary break; track patch and KEV add post-embargo"
       ]
@@ -2242,7 +2242,7 @@
         "MITRE ATLAS v2026.05 (released May 2026) shipped the AML.T0010 sub-technique expansion this forecast tracked plus new techniques (\"Publish Poisoned AI Agent Tool\", \"Escape to Host\"); inventory now 16 tactics, 84 techniques, 56 sub-techniques. Forward watch: subsequent ATLAS minor and major releases — track next-cadence updates to agentic-AI TTPs and MLOps-pipeline-specific techniques"
       ],
       "signature": "IEECw5lO6ZdpkE/j7Hv6/3Jg2vj9fpXlozY+h85Hrn9QYOJuI0gfBjHoBEchJ2GUTmPwUKoiBoI72PBAQw9RCQ==",
-      "signed_at": "2026-06-22T15:58:37.544Z"
+      "signed_at": "2026-06-22T17:11:02.793Z"
     },
     {
       "name": "incident-response-playbook",
@@ -2316,7 +2316,7 @@
         "NYDFS 23 NYCRR 500.17 amendments tightening ransom-payment 24h disclosure operationalization"
       ],
       "signature": "pN1Qa5NRyNJ6h0pmbbqpy3xWdkMANDMUbBst5SKR5fmmqMFopmyrzwIGagiiNgqxjjCunj9J9Wbzs1sL48sMCQ==",
-      "signed_at": "2026-06-22T15:58:37.544Z"
+      "signed_at": "2026-06-22T17:11:02.795Z"
     },
     {
       "name": "ransomware-response",
@@ -2396,7 +2396,7 @@
       ],
       "last_threat_review": "2026-06-10",
       "signature": "sXPA1lvWvZpf5sHxZXRkO0Kcs6gnXiYq0mWA53y1HeBwQGJ+viSPMt5IMobkjd5qLFYchg0CpW/nBUIvUE6/DA==",
-      "signed_at": "2026-06-22T15:58:37.544Z"
+      "signed_at": "2026-06-22T17:11:02.796Z"
     },
     {
       "name": "email-security-anti-phishing",
@@ -2464,7 +2464,7 @@
       ],
       "last_threat_review": "2026-05-18",
       "signature": "FVBn4ex2qPIo9SHMVJ6tntoz4tVwjbIq3m6wDjjZyv2JODlS+90GBYCOkNamxxkmw/6de6SMs0YHQiF/xjo/DQ==",
-      "signed_at": "2026-06-22T15:58:37.545Z"
+      "signed_at": "2026-06-22T17:11:02.797Z"
     },
     {
       "name": "age-gates-child-safety",
@@ -2539,7 +2539,7 @@
         "US state adult-site age-verification laws — 19+ states by mid-2026 (TX HB 18 upheld by SCOTUS June 2025 in Free Speech Coalition v. Paxton); track ongoing challenges in remaining states"
       ],
       "signature": "7Wdii9uwYmDrzQohoWRWDa5A4aDRKOmdLPq5Jsql86O0Gm7pQANnj9tX+cHpQcQ/Ui8VLuNVP8UFdKxxHeDnBg==",
-      "signed_at": "2026-06-22T15:58:37.545Z"
+      "signed_at": "2026-06-22T17:11:02.799Z"
     },
     {
       "name": "cloud-iam-incident",
@@ -2619,7 +2619,7 @@
       ],
       "last_threat_review": "2026-05-15",
       "signature": "r9ii4nb3HJELdtKCGF5qy9PHOiot3GC24yfxfGAKlLENHkdRvRkvvL99eV/6RXyfUaMyrnc2Te8tPQcNu5bsDg==",
-      "signed_at": "2026-06-22T15:58:37.545Z",
+      "signed_at": "2026-06-22T17:11:02.800Z",
       "forward_watch": [
         "AWS IAM Identity Center session-policy refresh and step-up-on-admin enforcement (anticipated 2026-H2 release)",
         "GCP Workload Identity Federation principal-set attribute mapping tightening (post-2026 Q3 Federation hardening guide)",
@@ -2713,7 +2713,7 @@
       ],
       "last_threat_review": "2026-05-15",
       "signature": "9mfDtMApMAg9V/lmwpniNxo/6gNZoOEoYDfyFvyWvKrPMtc7H9F8uz06FVoARe/J49saAKTVXOurNE1D/KtpCQ==",
-      "signed_at": "2026-06-22T15:58:37.546Z",
+      "signed_at": "2026-06-22T17:11:02.801Z",
       "forward_watch": [
         "Entra ID conditional access evolution post-Midnight Blizzard — Microsoft's 2025-2026 commitments on legacy-tenant MFA enforcement and OAuth-app consent gating",
         "Okta IPSIE (Interoperability Profile for Secure Identity in the Enterprise) OpenID Foundation working-group output and adoption timeline",
@@ -2785,7 +2785,7 @@
       "d3fend_refs": [],
       "last_threat_review": "2026-06-02",
       "signature": "dOFgANMtHm64uSFRjMfeA0fWZS9ISwMTt59I2CbjaF1PgTtbtb8yg/f+3pC4eXcXIET0KPGxRRmENycfIz3rAw==",
-      "signed_at": "2026-06-22T15:58:37.546Z"
+      "signed_at": "2026-06-22T17:11:02.803Z"
     },
     {
       "name": "mail-server-hardening",
@@ -2844,7 +2844,7 @@
       "d3fend_refs": [],
       "last_threat_review": "2026-06-02",
       "signature": "5x8RGzKo/T2IbYnFkYMZs16ThD9a5FEdrKHsnwvtMuGxdyyfZsKNIJVWw2I8O0um0UOXwwkl17Z3zhch26ymCQ==",
-      "signed_at": "2026-06-22T15:58:37.546Z"
+      "signed_at": "2026-06-22T17:11:02.803Z"
     },
     {
       "name": "network-trust",
@@ -2900,7 +2900,7 @@
       "d3fend_refs": [],
       "last_threat_review": "2026-06-02",
       "signature": "C/RdmnGjXKreKiGkwJfUESIxUwQzisGJ9A7KBdE9cBRBHBYHkAcScV89L+Z3kOG032Qax6LeIQai7Lr3nrQBCA==",
-      "signed_at": "2026-06-22T15:58:37.546Z"
+      "signed_at": "2026-06-22T17:11:02.804Z"
     },
     {
       "name": "audit-log-integrity",
@@ -2955,7 +2955,7 @@
       "d3fend_refs": [],
       "last_threat_review": "2026-06-02",
       "signature": "LvUAq+rXCA8PgNy9lTKOmFqa8T9EJg4JEH0axXvEAf9MIHqbR51ergUkFMLaTuvFuApwsPu0r1C30QgScZbiAw==",
-      "signed_at": "2026-06-22T15:58:37.546Z"
+      "signed_at": "2026-06-22T17:11:02.805Z"
     },
     {
       "name": "self-update-integrity",
@@ -3009,7 +3009,7 @@
       "d3fend_refs": [],
       "last_threat_review": "2026-06-02",
       "signature": "BOQZ8G9LdyG/tfpz6rCU4THz5Dq2HGJkUV7uCqSTCMrqnXH6seNXKM41FWawYo0s2VUlXtRgaO7ETp5qgxw+CQ==",
-      "signed_at": "2026-06-22T15:58:37.547Z"
+      "signed_at": "2026-06-22T17:11:02.806Z"
     },
     {
       "name": "multitenancy-isolation",
@@ -3067,7 +3067,7 @@
       "d3fend_refs": [],
       "last_threat_review": "2026-06-02",
       "signature": "bncN0VE4ns0lxtPe48xDR33lerw54BPVkSwX7XlrLQcMHTrV94lmjO8z4ZP4Ko61n+KpuP2SNU8v9JT0bGMmAA==",
-      "signed_at": "2026-06-22T15:58:37.547Z"
+      "signed_at": "2026-06-22T17:11:02.807Z"
     },
     {
       "name": "decompression-dos",
@@ -3125,7 +3125,7 @@
       "d3fend_refs": [],
       "last_threat_review": "2026-06-02",
       "signature": "03i0ZO5ScHIOjGvDKUEsws6m+20fnlJrEhSBtMU7PJzQutrPpmW9gULE0wbayTD5H9URh5nSKZuuVjvjVhZNCg==",
-      "signed_at": "2026-06-22T15:58:37.547Z"
+      "signed_at": "2026-06-22T17:11:02.807Z"
     },
     {
       "name": "log-injection-telemetry",
@@ -3180,7 +3180,7 @@
       "d3fend_refs": [],
       "last_threat_review": "2026-06-02",
       "signature": "twTmA2l+Am2k2PCzB2DNxDQwoYlGopJp/3QgQwBsP7h2LF+uNudisqfuOVV/bYnWfrUhuYZUWbsR3mhzbJCUBw==",
-      "signed_at": "2026-06-22T15:58:37.547Z"
+      "signed_at": "2026-06-22T17:11:02.808Z"
     },
     {
       "name": "privacy-consent-ops",
@@ -3235,11 +3235,11 @@
       "d3fend_refs": [],
       "last_threat_review": "2026-06-02",
       "signature": "0sfKSVrIf555c9bDGkXB96fUClN52fMAMYoQsNQ9eUUSzDiWUwdou+q0gYt43nObtj3m9Yb9X6q3oCXDVMgUDg==",
-      "signed_at": "2026-06-22T15:58:37.547Z"
+      "signed_at": "2026-06-22T17:11:02.809Z"
     }
   ],
   "manifest_signature": {
     "algorithm": "Ed25519",
-    "signature_base64": "ZR30n0xZK4kwxyCoB+GAgj6DGNvBhTURUQtiaits9MSYcDKMmPHj0RLPZZ/ym9aCRpPtUemr0YEPxun86iFAAg=="
+    "signature_base64": "n5BM7fxzNpnPWaoIaoKOReV3hdZ6095VSvxHN9nOq5mtPMmQ3RZCkF7DXwHgQYjgTsF4wfc4Qjua3vqNpZ3sAQ=="
   }
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@blamejs/exceptd-skills",
-  "version": "0.18.15",
+  "version": "0.18.16",
   "description": "AI security skills grounded in mid-2026 threat reality, not stale framework documentation. 51 skills, 11 catalogs (459 CVEs / 181 CWEs / 805 ATT&CK + ICS / 170 ATLAS / 468 D3FEND / 8888 RFCs), 35 jurisdictions, 10-class catalog gap detector + budget gate, real XML parser + canonical-form diff + content-pattern regression detection, Ed25519-signed.",
   "keywords": [
     "ai-security",

package/sbom.cdx.json

@@ -1,22 +1,22 @@
 {
   "bomFormat": "CycloneDX",
   "specVersion": "1.6",
-  "serialNumber": "urn:uuid:91ed9f87-03ec-4e45-8017-4f069e6a6f46",
+  "serialNumber": "urn:uuid:0b112883-81a5-4ba8-8e61-746f26fe6ffc",
   "version": 1,
   "metadata": {
-    "timestamp": "2103-08-02T10:46:31.000Z",
+    "timestamp": "2031-11-20T00:04:19.000Z",
     "tools": [
       {
         "vendor": "blamejs",
         "name": "scripts/refresh-sbom.js",
-        "version": "0.18.15"
+        "version": "0.18.16"
       }
     ],
     "component": {
-      "bom-ref": "pkg:npm/@blamejs/exceptd-skills@0.18.15",
+      "bom-ref": "pkg:npm/@blamejs/exceptd-skills@0.18.16",
       "type": "application",
       "name": "@blamejs/exceptd-skills",
-      "version": "0.18.15",
+      "version": "0.18.16",
       "description": "AI security skills grounded in mid-2026 threat reality, not stale framework documentation. 51 skills, 11 catalogs (459 CVEs / 181 CWEs / 805 ATT&CK + ICS / 170 ATLAS / 468 D3FEND / 8888 RFCs), 35 jurisdictions, 10-class catalog gap detector + budget gate, real XML parser + canonical-form diff + content-pattern regression detection, Ed25519-signed.",
       "licenses": [
         {
@@ -25,17 +25,17 @@
           }
         }
       ],
-      "purl": "pkg:npm/%40blamejs/exceptd-skills@0.18.15",
+      "purl": "pkg:npm/%40blamejs/exceptd-skills@0.18.16",
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "1d3582af295fcb1bb845bee7d540febffe9643d0890a3bdbc91cb1006e85a77a"
+          "content": "e9468ce3b3ced06212212f4d673fd48029af7da454f706b27f808087a9dabb59"
         }
       ],
       "externalReferences": [
         {
           "type": "distribution",
-          "url": "https://www.npmjs.com/package/@blamejs/exceptd-skills/v/0.18.15"
+          "url": "https://www.npmjs.com/package/@blamejs/exceptd-skills/v/0.18.16"
         },
         {
           "type": "vcs",
@@ -116,11 +116,11 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "75af37acc132ac61508566b1f3aae6933fa591f7ea709f2991378b513143647a"
+          "content": "5fa37969557300b07eb36f4c82162ffd75f626d93c5b86c25bd6afb0c0c4e196"
         },
         {
           "alg": "SHA3-512",
-          "content": "6aa7d29979d2903e2c6b84a06cc91690af53fc1d00c3f74e16586372cfc706f5133518ceed0733ea61b9ec9ad17cbc5f8d52c4532b63d1ddca5b6058e8264c07"
+          "content": "74cc119ea3fafd51b551119855282a14786fd1514ab6a777ceb57e4e352098222840ddbbb5e7eeb1b3ee4b3d5b9e47ada3b34ef85b432922d61d53408ebd3b33"
         }
       ]
     },
@@ -281,11 +281,11 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "c92e6b3bda1e17776ad8d0bd2f6ae122fe7b4e2a59fc026fb5ee1d1d2bd5a103"
+          "content": "d2c715002ff57fe0896b994d946a379e2e11258b6df2080c2241247dd9cbe39e"
         },
         {
           "alg": "SHA3-512",
-          "content": "3fb30c0cde51d1aefe3178a6d589597deef8ea474e3337609b245bd7a3dd5e80d41d21956d753fe8947d1ed9bc74147ada7d53ba4d4c7a50f9990a5f2abe9c9f"
+          "content": "1aa590b60e4e66a34e882b216fa1862b83a96260859feea15a5bdb263299486e78cdf17ee79e9529936349ab6fef07a294f19ad765f56481fbb211ccbdea02a9"
         }
       ]
     },
@@ -1466,11 +1466,11 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "0931b9c7a334ee8233eb85eb28c58b0ce793778155e9de83a1d9a75371804eaa"
+          "content": "c33e749b67d2d1ff19a4f5e6aac4947c97b9ef03d44f0f273cd44eb7a1a76cd1"
         },
         {
           "alg": "SHA3-512",
-          "content": "b3a3d41def2a7cd88af86df76eff2c30f6e4466c40a95dafe320614eb0b468b08d6dd0f7decc8bb1eb8f8b96dd8edac391439c6dfebee893c1d0f364d4e4dd8a"
+          "content": "84c2b2d74d4fa8b88430a3c2bb662143bb580c7b7b42f2203a01a1384ad0cada0c51bd45f7d2697ba278715c9fd7ed37f3e1c0a3fcb1d6f4479d43386c285a2a"
         }
       ]
     },
@@ -1901,11 +1901,11 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "06e97688670822402c8878d854e06f6790969a0a8a3c119e3aa5bef7d8c7e2d3"
+          "content": "c8376cbda42a9657b6a5d50f75d8c08a0bcab7c8456340042be7998133922ecb"
         },
         {
           "alg": "SHA3-512",
-          "content": "9228366acf6f48f86b97528d4cc6c2fddb7ca3edd481d6acf25067ca9e28a43fec0e051ff377df188ddedf811521a8bf1b1ccf590d3c005a6e169b4e8c329c05"
+          "content": "eb932bc21fa7e5c210f265b6e7a5eaebae58354c5a4f8cd61c66b4e35939c65a02ea9e1d84e0f44975c1e582217a3e8dae2172e1824b26b4f05d2555c54562e2"
         }
       ]
     },