@blamejs/exceptd-skills 0.18.27 → 0.18.28

package/data/_indexes/section-offsets.json

@@ -1121,111 +1121,120 @@
     },
     "global-grc": {
       "path": "skills/global-grc/skill.md",
-      "total_bytes": 41090,
-      "total_lines": 573,
+      "total_bytes": 58154,
+      "total_lines": 662,
       "frontmatter": {
         "line_start": 1,
-        "line_end": 28,
+        "line_end": 43,
         "byte_start": 0,
-        "byte_end": 621
+        "byte_end": 805
       },
       "sections": [
         {
           "name": "Frontmatter Scope",
           "normalized_name": "frontmatter-scope",
-          "line": 34,
-          "byte_start": 960,
-          "byte_end": 1390,
+          "line": 49,
+          "byte_start": 1144,
+          "byte_end": 1574,
           "bytes": 430,
           "h3_count": 0
         },
         {
           "name": "Framework Registry (mid-2026 currency)",
           "normalized_name": "framework-registry-mid-2026-currency",
-          "line": 40,
-          "byte_start": 1390,
-          "byte_end": 19138,
-          "bytes": 17748,
+          "line": 55,
+          "byte_start": 1574,
+          "byte_end": 28188,
+          "bytes": 26614,
           "h3_count": 8
         },
         {
           "name": "Universal Gaps (No Jurisdiction Covers These)",
           "normalized_name": "universal-gaps-no-jurisdiction-covers-these",
-          "line": 352,
-          "byte_start": 19138,
-          "byte_end": 20242,
+          "line": 410,
+          "byte_start": 28188,
+          "byte_end": 29292,
           "bytes": 1104,
           "h3_count": 0
         },
+        {
+          "name": "Defensive Countermeasure Mapping",
+          "normalized_name": "defensive-countermeasure-mapping",
+          "line": 428,
+          "byte_start": 29292,
+          "byte_end": 33737,
+          "bytes": 4445,
+          "h3_count": 0
+        },
         {
           "name": "Notification Timeline Summary",
           "normalized_name": "notification-timeline-summary",
-          "line": 370,
-          "byte_start": 20242,
-          "byte_end": 21166,
-          "bytes": 924,
+          "line": 454,
+          "byte_start": 33737,
+          "byte_end": 35057,
+          "bytes": 1320,
           "h3_count": 0
         },
         {
           "name": "Threat Context",
           "normalized_name": "threat-context",
-          "line": 390,
-          "byte_start": 21166,
-          "byte_end": 23728,
-          "bytes": 2562,
+          "line": 476,
+          "byte_start": 35057,
+          "byte_end": 38381,
+          "bytes": 3324,
           "h3_count": 0
         },
         {
           "name": "Framework Lag Declaration",
           "normalized_name": "framework-lag-declaration",
-          "line": 406,
-          "byte_start": 23728,
-          "byte_end": 31553,
-          "bytes": 7825,
+          "line": 492,
+          "byte_start": 38381,
+          "byte_end": 46768,
+          "bytes": 8387,
           "h3_count": 0
         },
         {
           "name": "TTP Mapping",
           "normalized_name": "ttp-mapping",
-          "line": 449,
-          "byte_start": 31553,
-          "byte_end": 33689,
-          "bytes": 2136,
+          "line": 535,
+          "byte_start": 46768,
+          "byte_end": 49084,
+          "bytes": 2316,
           "h3_count": 0
         },
         {
           "name": "Exploit Availability Matrix",
           "normalized_name": "exploit-availability-matrix",
-          "line": 472,
-          "byte_start": 33689,
-          "byte_end": 36588,
-          "bytes": 2899,
+          "line": 558,
+          "byte_start": 49084,
+          "byte_end": 52918,
+          "bytes": 3834,
           "h3_count": 0
         },
         {
           "name": "Compliance Theater Check",
           "normalized_name": "compliance-theater-check",
-          "line": 500,
-          "byte_start": 36588,
-          "byte_end": 38551,
-          "bytes": 1963,
+          "line": 587,
+          "byte_start": 52918,
+          "byte_end": 55615,
+          "bytes": 2697,
           "h3_count": 0
         },
         {
           "name": "Analysis Procedure",
           "normalized_name": "analysis-procedure",
-          "line": 514,
-          "byte_start": 38551,
-          "byte_end": 39587,
+          "line": 603,
+          "byte_start": 55615,
+          "byte_end": 56651,
           "bytes": 1036,
           "h3_count": 4
         },
         {
           "name": "Output Format",
           "normalized_name": "output-format",
-          "line": 543,
-          "byte_start": 39587,
-          "byte_end": 41090,
+          "line": 632,
+          "byte_start": 56651,
+          "byte_end": 58154,
           "bytes": 1503,
           "h3_count": 0
         }
@@ -1345,147 +1354,147 @@
     },
     "pqc-first": {
       "path": "skills/pqc-first/skill.md",
-      "total_bytes": 38036,
-      "total_lines": 572,
+      "total_bytes": 38292,
+      "total_lines": 573,
       "frontmatter": {
         "line_start": 1,
-        "line_end": 57,
+        "line_end": 58,
         "byte_start": 0,
-        "byte_end": 1533
+        "byte_end": 1546
       },
       "sections": [
         {
           "name": "Threat Context (mid-2026)",
           "normalized_name": "threat-context",
-          "line": 61,
-          "byte_start": 1557,
-          "byte_end": 4185,
+          "line": 62,
+          "byte_start": 1570,
+          "byte_end": 4198,
           "bytes": 2628,
           "h3_count": 0
         },
         {
           "name": "Framework Lag Declaration",
           "normalized_name": "framework-lag-declaration",
-          "line": 89,
-          "byte_start": 4185,
-          "byte_end": 12104,
-          "bytes": 7919,
+          "line": 90,
+          "byte_start": 4198,
+          "byte_end": 12360,
+          "bytes": 8162,
           "h3_count": 2
         },
         {
           "name": "TTP Mapping",
           "normalized_name": "ttp-mapping",
-          "line": 134,
-          "byte_start": 12104,
-          "byte_end": 14224,
+          "line": 135,
+          "byte_start": 12360,
+          "byte_end": 14480,
           "bytes": 2120,
           "h3_count": 0
         },
         {
           "name": "Exploit Availability Matrix",
           "normalized_name": "exploit-availability-matrix",
-          "line": 151,
-          "byte_start": 14224,
-          "byte_end": 16696,
+          "line": 152,
+          "byte_start": 14480,
+          "byte_end": 16952,
           "bytes": 2472,
           "h3_count": 0
         },
         {
           "name": "Core Principle",
           "normalized_name": "core-principle",
-          "line": 167,
-          "byte_start": 16696,
-          "byte_end": 17423,
+          "line": 168,
+          "byte_start": 16952,
+          "byte_end": 17679,
           "bytes": 727,
           "h3_count": 0
         },
         {
           "name": "Version Gates — Non-Negotiable Minimums",
           "normalized_name": "version-gates-non-negotiable-minimums",
-          "line": 179,
-          "byte_start": 17423,
-          "byte_end": 19857,
+          "line": 180,
+          "byte_start": 17679,
+          "byte_end": 20113,
           "bytes": 2434,
           "h3_count": 7
         },
         {
           "name": "Algorithm Registry",
           "normalized_name": "algorithm-registry",
-          "line": 256,
-          "byte_start": 19857,
-          "byte_end": 23426,
+          "line": 257,
+          "byte_start": 20113,
+          "byte_end": 23682,
           "bytes": 3569,
           "h3_count": 4
         },
         {
           "name": "Hybrid Construction Requirements",
           "normalized_name": "hybrid-construction-requirements",
-          "line": 329,
-          "byte_start": 23426,
-          "byte_end": 24698,
+          "line": 330,
+          "byte_start": 23682,
+          "byte_end": 24954,
           "bytes": 1272,
           "h3_count": 3
         },
         {
           "name": "Harvest-Now-Decrypt-Later (HNDL) Threat Assessment",
           "normalized_name": "harvest-now-decrypt-later-hndl-threat-assessment",
-          "line": 372,
-          "byte_start": 24698,
-          "byte_end": 26329,
+          "line": 373,
+          "byte_start": 24954,
+          "byte_end": 26585,
           "bytes": 1631,
           "h3_count": 2
         },
         {
           "name": "Loopback Learning — Standards Evolution Tracking",
           "normalized_name": "loopback-learning-standards-evolution-tracking",
-          "line": 405,
-          "byte_start": 26329,
-          "byte_end": 28874,
+          "line": 406,
+          "byte_start": 26585,
+          "byte_end": 29130,
           "bytes": 2545,
           "h3_count": 2
         },
         {
           "name": "Framework Coverage",
           "normalized_name": "framework-coverage",
-          "line": 450,
-          "byte_start": 28874,
-          "byte_end": 30472,
+          "line": 451,
+          "byte_start": 29130,
+          "byte_end": 30728,
           "bytes": 1598,
           "h3_count": 1
         },
         {
           "name": "Analysis Procedure",
           "normalized_name": "analysis-procedure",
-          "line": 471,
-          "byte_start": 30472,
-          "byte_end": 31971,
+          "line": 472,
+          "byte_start": 30728,
+          "byte_end": 32227,
           "bytes": 1499,
           "h3_count": 5
         },
         {
           "name": "Output Format",
           "normalized_name": "output-format",
-          "line": 515,
-          "byte_start": 31971,
-          "byte_end": 33462,
+          "line": 516,
+          "byte_start": 32227,
+          "byte_end": 33718,
           "bytes": 1491,
           "h3_count": 0
         },
         {
           "name": "Defensive Countermeasure Mapping",
           "normalized_name": "defensive-countermeasure-mapping",
-          "line": 548,
-          "byte_start": 33462,
-          "byte_end": 37376,
+          "line": 549,
+          "byte_start": 33718,
+          "byte_end": 37632,
           "bytes": 3914,
           "h3_count": 0
         },
         {
           "name": "Compliance Theater Check",
           "normalized_name": "compliance-theater-check",
-          "line": 569,
-          "byte_start": 37376,
-          "byte_end": 38036,
+          "line": 570,
+          "byte_start": 37632,
+          "byte_end": 38292,
           "bytes": 660,
           "h3_count": 0
         }
@@ -1623,147 +1632,156 @@
     },
     "security-maturity-tiers": {
       "path": "skills/security-maturity-tiers/skill.md",
-      "total_bytes": 30791,
-      "total_lines": 490,
+      "total_bytes": 37336,
+      "total_lines": 540,
       "frontmatter": {
         "line_start": 1,
-        "line_end": 30,
+        "line_end": 48,
         "byte_start": 0,
-        "byte_end": 921
+        "byte_end": 1153
       },
       "sections": [
         {
           "name": "Frontmatter Scope",
           "normalized_name": "frontmatter-scope",
-          "line": 40,
-          "byte_start": 1266,
-          "byte_end": 1788,
+          "line": 58,
+          "byte_start": 1498,
+          "byte_end": 2020,
           "bytes": 522,
           "h3_count": 0
         },
         {
           "name": "How to Use This Skill",
           "normalized_name": "how-to-use-this-skill",
-          "line": 46,
-          "byte_start": 1788,
-          "byte_end": 2199,
+          "line": 64,
+          "byte_start": 2020,
+          "byte_end": 2431,
           "bytes": 411,
           "h3_count": 0
         },
         {
           "name": "Tier Framework",
           "normalized_name": "tier-framework",
-          "line": 57,
-          "byte_start": 2199,
-          "byte_end": 2713,
+          "line": 75,
+          "byte_start": 2431,
+          "byte_end": 2945,
           "bytes": 514,
           "h3_count": 0
         },
         {
           "name": "Domain: Kernel LPE (Copy Fail / Dirty Frag Class)",
           "normalized_name": "domain-kernel-lpe-copy-fail-dirty-frag-class",
-          "line": 67,
-          "byte_start": 2713,
-          "byte_end": 6794,
-          "bytes": 4081,
+          "line": 85,
+          "byte_start": 2945,
+          "byte_end": 7285,
+          "bytes": 4340,
           "h3_count": 3
         },
         {
           "name": "Domain: AI Attack Surface",
           "normalized_name": "domain-ai-attack-surface",
-          "line": 177,
-          "byte_start": 6794,
-          "byte_end": 9500,
-          "bytes": 2706,
+          "line": 195,
+          "byte_start": 7285,
+          "byte_end": 10711,
+          "bytes": 3426,
           "h3_count": 3
         },
         {
           "name": "Domain: Cryptography / PQC",
           "normalized_name": "domain-cryptography-pqc",
-          "line": 229,
-          "byte_start": 9500,
-          "byte_end": 11544,
-          "bytes": 2044,
+          "line": 249,
+          "byte_start": 10711,
+          "byte_end": 12968,
+          "bytes": 2257,
           "h3_count": 3
         },
         {
           "name": "Domain: GRC / Compliance",
           "normalized_name": "domain-grc-compliance",
-          "line": 268,
-          "byte_start": 11544,
-          "byte_end": 13504,
+          "line": 288,
+          "byte_start": 12968,
+          "byte_end": 14928,
           "bytes": 1960,
           "h3_count": 3
         },
         {
           "name": "Analysis Procedure",
           "normalized_name": "analysis-procedure",
-          "line": 302,
-          "byte_start": 13504,
-          "byte_end": 15155,
+          "line": 322,
+          "byte_start": 14928,
+          "byte_end": 16579,
           "bytes": 1651,
           "h3_count": 4
         },
         {
           "name": "Output Format",
           "normalized_name": "output-format",
-          "line": 345,
-          "byte_start": 15155,
-          "byte_end": 16753,
+          "line": 365,
+          "byte_start": 16579,
+          "byte_end": 18177,
           "bytes": 1598,
           "h3_count": 0
         },
         {
           "name": "Compliance Theater Check",
           "normalized_name": "compliance-theater-check",
-          "line": 383,
-          "byte_start": 16753,
-          "byte_end": 19096,
+          "line": 403,
+          "byte_start": 18177,
+          "byte_end": 20520,
           "bytes": 2343,
           "h3_count": 0
         },
         {
           "name": "The Anti-Pattern: Tier 3 Security Theater",
           "normalized_name": "the-anti-pattern-tier-3-security-theater",
-          "line": 401,
-          "byte_start": 19096,
-          "byte_end": 19740,
+          "line": 421,
+          "byte_start": 20520,
+          "byte_end": 21164,
           "bytes": 644,
           "h3_count": 0
         },
         {
           "name": "Threat Context",
           "normalized_name": "threat-context",
-          "line": 417,
-          "byte_start": 19740,
-          "byte_end": 21735,
-          "bytes": 1995,
+          "line": 437,
+          "byte_start": 21164,
+          "byte_end": 23408,
+          "bytes": 2244,
           "h3_count": 0
         },
         {
           "name": "Framework Lag Declaration",
           "normalized_name": "framework-lag-declaration",
-          "line": 429,
-          "byte_start": 21735,
-          "byte_end": 25618,
-          "bytes": 3883,
+          "line": 449,
+          "byte_start": 23408,
+          "byte_end": 28018,
+          "bytes": 4610,
           "h3_count": 0
         },
         {
           "name": "TTP Mapping",
           "normalized_name": "ttp-mapping",
-          "line": 453,
-          "byte_start": 25618,
-          "byte_end": 28126,
+          "line": 474,
+          "byte_start": 28018,
+          "byte_end": 30526,
           "bytes": 2508,
           "h3_count": 0
         },
+        {
+          "name": "Defensive Countermeasure Mapping",
+          "normalized_name": "defensive-countermeasure-mapping",
+          "line": 496,
+          "byte_start": 30526,
+          "byte_end": 34671,
+          "bytes": 4145,
+          "h3_count": 0
+        },
         {
           "name": "Exploit Availability Matrix",
           "normalized_name": "exploit-availability-matrix",
-          "line": 475,
-          "byte_start": 28126,
-          "byte_end": 30791,
+          "line": 525,
+          "byte_start": 34671,
+          "byte_end": 37336,
           "bytes": 2665,
           "h3_count": 0
         }

package/data/_indexes/summary-cards.json

@@ -448,7 +448,21 @@
       "produces": "The skill produces a structured Global GRC Assessment that rolls compliance findings across the org's jurisdictional footprint — EU (NIS2, DORA, EU AI Act, CRA), UK (CAF, Cyber Essentials), AU (ISM, Essential 8, APRA CPS 234), ISO 27001:2022 / 42001:2023, NIST, and the expanded set tracked in `data/global-frameworks.json`. The shape below is consumed downstream by `framework-gap-analysis` (which produces per-jurisdiction Framework Lag Declarations), by `policy-exception-gen` (for cross-jurisdictional exception language), and by CSAF-style auditor evidence bundles. Preserve the per-jurisdiction ...",
       "key_xrefs": {
         "cwe_refs": [],
-        "d3fend_refs": [],
+        "d3fend_refs": [
+          "D3-EAL",
+          "D3-EFA",
+          "D3-FAPA",
+          "D3-FE",
+          "D3-IOPR",
+          "D3-KBPI",
+          "D3-MENCR",
+          "D3-MFA",
+          "D3-NI",
+          "D3-NTA",
+          "D3-OTF",
+          "D3-SCA",
+          "D3-CSPP"
+        ],
         "framework_gaps": [],
         "atlas_refs": [],
         "attack_refs": [],
@@ -460,9 +474,9 @@
       "attack_count": 0,
       "framework_gap_count": 0,
       "cwe_count": 0,
-      "d3fend_count": 0,
+      "d3fend_count": 13,
       "rfc_count": 0,
-      "last_threat_review": "2026-05-01",
+      "last_threat_review": "2026-08-05",
       "path": "skills/global-grc/skill.md",
       "handoff_targets": []
     },
@@ -515,6 +529,7 @@
           "RFC-9180",
           "RFC-9420",
           "RFC-9794",
+          "RFC-9954",
           "RFC-8032",
           "RFC-9106"
         ],
@@ -526,8 +541,8 @@
       "framework_gap_count": 2,
       "cwe_count": 1,
       "d3fend_count": 2,
-      "rfc_count": 8,
-      "last_threat_review": "2026-06-10",
+      "rfc_count": 9,
+      "last_threat_review": "2026-08-05",
       "path": "skills/pqc-first/skill.md",
       "handoff_targets": []
     },
@@ -563,11 +578,27 @@
         "cwe_refs": [
           "CWE-1188"
         ],
-        "d3fend_refs": [],
+        "d3fend_refs": [
+          "D3-CSPP",
+          "D3-EAL",
+          "D3-EFA",
+          "D3-FAPA",
+          "D3-IOPR",
+          "D3-ITF",
+          "D3-KBPI",
+          "D3-MENCR",
+          "D3-MFA",
+          "D3-NI",
+          "D3-NTA",
+          "D3-OTF",
+          "D3-SCA"
+        ],
         "framework_gaps": [],
         "atlas_refs": [],
         "attack_refs": [],
-        "rfc_refs": [],
+        "rfc_refs": [
+          "RFC-9954"
+        ],
         "dlp_refs": []
       },
       "trigger_count": 12,
@@ -575,9 +606,9 @@
       "attack_count": 0,
       "framework_gap_count": 0,
       "cwe_count": 1,
-      "d3fend_count": 0,
-      "rfc_count": 0,
-      "last_threat_review": "2026-05-01",
+      "d3fend_count": 13,
+      "rfc_count": 1,
+      "last_threat_review": "2026-08-05",
       "path": "skills/security-maturity-tiers/skill.md",
       "handoff_targets": []
     },