@blamejs/exceptd-skills 0.19.38 → 0.20.0

package/manifest.json

@@ -1,10 +1,10 @@
 {
   "name": "exceptd-security",
-  "version": "0.19.38",
+  "version": "0.20.0",
   "description": "AI security skills grounded in mid-2026 threat reality, not stale framework documentation",
   "homepage": "https://exceptd.com",
   "license": "Apache-2.0",
-  "atlas_version": "2026.07",
+  "atlas_version": "2026.09",
   "atlas_version_date": "2026-08-07",
   "attack_version": "19.2",
   "attack_version_date": "2026-05-12",
@@ -57,7 +57,7 @@
       ],
       "last_threat_review": "2026-05-15",
       "signature": "0H+JfyUVmo/pVFEi5rLENATHjlukPVUqnOWmNPEH77wm8svKGK0aNJ46k6QU5GdHb8c9X9pVJKiuhON6AxDjDw==",
-      "signed_at": "2026-08-30T16:48:29.512Z",
+      "signed_at": "2026-09-19T05:28:17.024Z",
       "cwe_refs": [
         "CWE-125",
         "CWE-362",
@@ -84,7 +84,7 @@
       "name": "ai-attack-surface",
       "version": "1.0.0",
       "path": "skills/ai-attack-surface/skill.md",
-      "description": "Comprehensive AI/ML attack surface assessment mapped to MITRE ATLAS v2026.06 with gap flags",
+      "description": "Comprehensive AI/ML attack surface assessment mapped to MITRE ATLAS v2026.09 with explicit framework gap flags",
       "triggers": [
         "ai attack surface",
         "prompt injection",
@@ -131,9 +131,9 @@
         "UK-CAF-A1",
         "AU-Essential-8-App-Hardening"
       ],
-      "last_threat_review": "2026-06-10",
-      "signature": "hnKY1LYEKUurrzJIFcvwCZpclpk/XT8fMVJeCKqzrpOpfgov2d3AciuiEky85PhREzAmYGFfk2sLRC6ayJ6UDw==",
-      "signed_at": "2026-08-30T16:48:29.513Z",
+      "last_threat_review": "2026-09-18",
+      "signature": "PfXydBMsoPgfPGfjtF30mO5L1m9zlrmyoMCqhbaVGiFyfR2oNg1rvohEdYZIQwISNwhRgYhGF0lqX2cC0Oc2AA==",
+      "signed_at": "2026-09-19T05:28:17.026Z",
       "cwe_refs": [
         "CWE-1039",
         "CWE-1426",
@@ -213,9 +213,9 @@
         "RFC-9421",
         "RFC-9700"
       ],
-      "last_threat_review": "2026-06-10",
-      "signature": "uiJt3Oj0lSLr7Nm0OoM2qI/z/oAIAiPwMfP12s97jVYeA7xfOlU21fc7zidT/9YulunfaSjBSAlgv6paWmosBg==",
-      "signed_at": "2026-08-30T16:48:29.514Z",
+      "last_threat_review": "2026-09-18",
+      "signature": "pZDdXCnXy1V6lP8Q7c3jih2bJSNaCYnWl3b+bn7OkooM0nr2OR3Hc5bytgIZbQhMVQSS6YqC5CSEh3OktD4oBA==",
+      "signed_at": "2026-09-19T05:28:17.026Z",
       "cwe_refs": [
         "CWE-22",
         "CWE-345",
@@ -267,9 +267,9 @@
       "atlas_refs": [],
       "attack_refs": [],
       "framework_gaps": [],
-      "last_threat_review": "2026-06-10",
-      "signature": "80LN540R3z/gcIMCF/8H6nh2V6xdudctYKE74Ve7bqecyPUQf2NfCA/8T9L18tIz7BTyBkiI/V5JcG4ClgNyCQ==",
-      "signed_at": "2026-08-30T16:48:29.514Z"
+      "last_threat_review": "2026-09-18",
+      "signature": "2hXPSi37nQXyc16aAgbCK7yOrpoXz9IdZCjpVXaIQozYyryUFQw52rKCwQrI8HfeiUvXieGuEgCLaTqFXpkmCQ==",
+      "signed_at": "2026-09-19T05:28:17.027Z"
     },
     {
       "name": "compliance-theater",
@@ -299,9 +299,9 @@
         "FedRAMP-Rev5-Moderate",
         "CMMC-2.0-Level-2"
       ],
-      "last_threat_review": "2026-06-10",
-      "signature": "Tsat4OgtCJ6yGJQeIQnz+XTU11B8SLgbPe1zmb2UFOzxqlBnRoKeOzIVwFsv7wM0mP1bXQvQgFFpIOxN2VeTCQ==",
-      "signed_at": "2026-08-30T16:48:29.514Z"
+      "last_threat_review": "2026-09-18",
+      "signature": "ULvL7X7lORtHGtccOuqMnLYgDjhrYKUpVXjIveOkYEH+x6TlWTqRf6MCtK7jovRbNco2G4KGKPD5ujc9g41zBw==",
+      "signed_at": "2026-09-19T05:28:17.027Z"
     },
     {
       "name": "exploit-scoring",
@@ -330,9 +330,9 @@
         "CWE-Top-25-2024-meta",
         "CIS-Controls-v8-Control7"
       ],
-      "last_threat_review": "2026-06-10",
-      "signature": "zxsj3SExhBJ+A7UDZEI4uWl4OCbnn5+ddCRCalhlHKFyRML9fcB9qd1v9a+hDoeVJXGr/OBXHR3MdyD8XEhrDQ==",
-      "signed_at": "2026-08-30T16:48:29.515Z"
+      "last_threat_review": "2026-09-18",
+      "signature": "0s5UuQbjpLKKQrFkoGsuBdbIgOvfOSdG8T41r0u2Qr8mSjPhkynzqmVCNhRQlhX0FHZTu47VeWCja/SMwLpeCA==",
+      "signed_at": "2026-09-19T05:28:17.028Z"
     },
     {
       "name": "rag-pipeline-security",
@@ -372,9 +372,9 @@
         "UK-CAF-B2",
         "AU-Essential-8-App-Hardening"
       ],
-      "last_threat_review": "2026-06-10",
-      "signature": "lrj8/nJWYzgeOYPF9Ax59A0mxCXWKKhH9QI+88KQNiKly0Hq+pA5wdtL0J9LY24YrVWmqEhpSHueGlj03UNOAA==",
-      "signed_at": "2026-08-30T16:48:29.515Z",
+      "last_threat_review": "2026-09-18",
+      "signature": "CCekpdnULetngyfqpqnZ7gviGRdJFRBogzJksFprDMvkEtSh7bFEBPc/Jq92m9BNdJeByVDJyLJpCPeC5c98BA==",
+      "signed_at": "2026-09-19T05:28:17.028Z",
       "cwe_refs": [
         "CWE-1395",
         "CWE-1426"
@@ -439,9 +439,9 @@
         "RFC-9114",
         "RFC-9000"
       ],
-      "last_threat_review": "2026-06-10",
-      "signature": "nqqZUnu7ZocLNJKs3KJO6NnoC8MgmS1iGP9TGrv51e+trjqb4Gf2mAjCTe7pINFivWDK00A0ZHazaMAKKbaNCA==",
-      "signed_at": "2026-08-30T16:48:29.515Z",
+      "last_threat_review": "2026-09-18",
+      "signature": "NPtJimG32ubukGmXjfpt5t2Cvpojhn98p0idJ9WBwgv103DGo6zhoHbYqRGdI7IkIeJqotYNX4QnpBVcf0DhCQ==",
+      "signed_at": "2026-09-19T05:28:17.029Z",
       "cwe_refs": [
         "CWE-918"
       ],
@@ -480,9 +480,9 @@
       "atlas_refs": [],
       "attack_refs": [],
       "framework_gaps": [],
-      "last_threat_review": "2026-06-10",
-      "signature": "ZfFXIDjwGDwlZA30TOMPmNr0IK/sydbsiox7LYU0pGkaRlQW18/oSjkHZRgiQpP5yzQhuFsKdztA7Ec6BDQLAA==",
-      "signed_at": "2026-08-30T16:48:29.516Z",
+      "last_threat_review": "2026-09-18",
+      "signature": "nI93oN7VnrtJYPVuqjznDtzAes7ABjxE6KYdi9HlRahKtAVOLsRZjRP4dkntt8HW7A7/PM7eebMRWD6GEtVHAg==",
+      "signed_at": "2026-09-19T05:28:17.029Z",
       "cwe_refs": [
         "CWE-1188"
       ],
@@ -515,9 +515,9 @@
       "atlas_refs": [],
       "attack_refs": [],
       "framework_gaps": [],
-      "last_threat_review": "2026-06-10",
-      "signature": "CtiEhtzaqg/hCGX1wmgEGq0O6o+UNf9RAM3xxn0rQVEkFt/IEmyYqsWd1qjpqMdp8kbEXgAsd816AwFwLYMaAA==",
-      "signed_at": "2026-08-30T16:48:29.516Z",
+      "last_threat_review": "2026-09-18",
+      "signature": "M0dazAvW3h8EDpLHo9fmENLzstDC3EFvkIRSCtE8VrztY0kCpfdq+VPjwjrMMmS7h+PY27FJ1UaNJ+RnVQg8Dw==",
+      "signed_at": "2026-09-19T05:28:17.030Z",
       "forward_watch": [
         "New AI attack classes as ATLAS v6 publishes",
         "Post-quantum adversary capability timeline",
@@ -556,9 +556,9 @@
       "atlas_refs": [],
       "attack_refs": [],
       "framework_gaps": [],
-      "last_threat_review": "2026-08-05",
-      "signature": "Eu2AnT4xyZH9n3OKjm5S9vaiHqUE+1N3oLAQbbt78OCp2HnAQMvqBkUn9rgl4Il7Il7yZW8N7c8hq3mkst+EAA==",
-      "signed_at": "2026-08-30T16:48:29.517Z",
+      "last_threat_review": "2026-09-09",
+      "signature": "SVrgHZlCIv+NWBZle0lLG4ldCXKC4YCXkMRA8UQkRwYf+5eAFkeUYumYNY7rvIhrxo+mWtsQT8cNE5Jot/SfBg==",
+      "signed_at": "2026-09-19T05:28:17.030Z",
       "d3fend_refs": [
         "D3-EAL",
         "D3-EFA",
@@ -598,9 +598,9 @@
       "atlas_refs": [],
       "attack_refs": [],
       "framework_gaps": [],
-      "last_threat_review": "2026-06-10",
-      "signature": "tlvk8q1fa1scoDsJMZnigCoRNO3dqoK03Ve8tuYE2/nPwAMAGlofHpoE0mI0BX4pPODPgCfSjzgKEUn6HkcZDw==",
-      "signed_at": "2026-08-30T16:48:29.517Z",
+      "last_threat_review": "2026-09-18",
+      "signature": "RtqVZ2mVmnxls34xiReTILRCX5rPt8fiWweq8FdHZcbHhsVE/y9P/EG3kMm5bISZMH+bgTX0X+k/nmEMC+MEBA==",
+      "signed_at": "2026-09-19T05:28:17.031Z",
       "forward_watch": [
         "New CISA KEV entries",
         "New ATLAS TTP additions in each ATLAS release",
@@ -669,7 +669,7 @@
       ],
       "last_threat_review": "2026-08-05",
       "signature": "DNXmzLVK71XI/b9mkIBw30KVdVV5Wc9/0o/pP35RkferqtvlsMHjj4WJpoGXpIu8/hJyuMJRQrV7pzfR68iIAg==",
-      "signed_at": "2026-08-30T16:48:29.518Z",
+      "signed_at": "2026-09-19T05:28:17.031Z",
       "cwe_refs": [
         "CWE-327"
       ],
@@ -717,9 +717,9 @@
         "Framework publication updates (NIST SP updates, ISO amendments, NIS2 implementing acts)",
         "IETF RFC publications and draft status changes (datatracker.ietf.org, rfc-editor.org); run `npm run validate-rfcs` quarterly"
       ],
-      "last_threat_review": "2026-06-10",
-      "signature": "AzyfBZd5bxpQpaFb/S5ZJI2/NjeACLuq/u8GzKHehhlggWUqILIrS4aJ6eXn0I3UBhuXRcNBBx1mXriCSmhQAA==",
-      "signed_at": "2026-08-30T16:48:29.518Z"
+      "last_threat_review": "2026-09-18",
+      "signature": "MbiFq5G7gjfNkq2tstHHXtaIbTp+TKOzy/FqVLtKkMmc8o57T6Uf49/4bfpbGe/rp4j1pqqHm6wrL2+XBIncDw==",
+      "signed_at": "2026-09-19T05:28:17.032Z"
     },
     {
       "name": "security-maturity-tiers",
@@ -757,9 +757,9 @@
         "New tooling that makes higher tiers more accessible",
         "PQC tooling maturity shifting overkill to practical"
       ],
-      "last_threat_review": "2026-08-05",
-      "signature": "8JHth6QjMcUuAD069/QvpMxgRMG+L/PVTE68/UdX9kG4SNA20ds7vHU15YzMNBmWWgiUvpLAE6hzctz1N7bWCg==",
-      "signed_at": "2026-08-30T16:48:29.519Z",
+      "last_threat_review": "2026-09-18",
+      "signature": "qt66AfLK6ZAoK50xqO8xgxUoN2OND7Qo6H0mPakiG4Qji2IZFISzAyLpvTn7cq0nfgk9J+4Zhl88sIdVO36SCQ==",
+      "signed_at": "2026-09-19T05:28:17.032Z",
       "cwe_refs": [
         "CWE-1188"
       ],
@@ -811,9 +811,9 @@
       "atlas_refs": [],
       "attack_refs": [],
       "framework_gaps": [],
-      "last_threat_review": "2026-05-11",
-      "signature": "iJWevUBurLvt2v8X+Ch2eHmZkPWpKeAtIpxTIP4MwbUHyco3igDeBywJCyaR2vURYRx8LkzzIMM8DxQM4LAXBQ==",
-      "signed_at": "2026-08-30T16:48:29.519Z"
+      "last_threat_review": "2026-09-09",
+      "signature": "wlczcAvZJzoosd2k7MxQg3kN/JcS7f7LXs6F4zrOYvUUAJUqQi95czUvWIPn8NXtCJ5WWhraitzZiyL2lSUpAg==",
+      "signed_at": "2026-09-19T05:28:17.033Z"
     },
     {
       "name": "attack-surface-pentest",
@@ -880,7 +880,7 @@
         "D3-EAL",
         "D3-NTA"
       ],
-      "last_threat_review": "2026-06-10",
+      "last_threat_review": "2026-09-18",
       "forward_watch": [
         "NIST SP 800-115 successor publication (the 2008 original is the active gap)",
         "TIBER-EU scenario library refresh under DORA Year-2 supervisory cycle",
@@ -888,8 +888,8 @@
         "PTES revision incorporating AI-surface enumeration",
         "Pwn2Own Berlin 2026 (disclosed 2026-05-14, embargo ends 2026-08-12) — Microsoft Edge 4-bug sandbox escape by Orange Tsai (DEVCORE); forward-watch only (browser sandbox, out of current playbook scope); track Microsoft Edge security advisory and KEV add"
       ],
-      "signature": "GuHxmoEU97+lQfU11chYwXVQhSMpddU0OS1iLkYDmEJhBkHRWWaOa2emYJoVUBDB9v/PTKcFEuEraZwYg+8nCw==",
-      "signed_at": "2026-08-30T16:48:29.519Z"
+      "signature": "WRu5Yg1RBOPUZ+dmQWOE2t+HGBDHcRUk1d975hkuuiQoAvBWFEDsXr2y9GCHo/cblDrUkpD7LT8ylj5XyCtcDA==",
+      "signed_at": "2026-09-19T05:28:17.033Z"
     },
     {
       "name": "fuzz-testing-strategy",
@@ -942,15 +942,15 @@
         "D3-IOPR",
         "D3-PSEP"
       ],
-      "last_threat_review": "2026-06-10",
+      "last_threat_review": "2026-09-18",
       "forward_watch": [
         "NIST SP 800-218A (AI-specific SSDF practices) for any explicit fuzz requirement on model-serving stacks",
         "OpenSSF Scorecard \"fuzzing\" check threshold evolution",
         "syzkaller eBPF and io_uring surface expansion as new kernel attack surfaces ship",
         "OSS-Fuzz-Gen / AI-assisted harness generation becoming the default expectation for OSS maintainers"
       ],
-      "signature": "R2jcBorSMWFuZKHUugWEni9q/W7Qk73Kg0SztXlySYu9+D2Ee43gyYsUy0nSa0oCTS8pyuhFiFv2XN0EaweTBQ==",
-      "signed_at": "2026-08-30T16:48:29.520Z"
+      "signature": "1rpQIBRamlNF6gFGwycmgGLcmNalYeAZjkRKdQ0NWQW1lXQegE4sTObgDFkKCLuLSB+6j3zjzinwSQyxwxL9Dw==",
+      "signed_at": "2026-09-19T05:28:17.033Z"
     },
     {
       "name": "dlp-gap-analysis",
@@ -1019,7 +1019,7 @@
         "D3-NTA",
         "D3-NTPM"
       ],
-      "last_threat_review": "2026-06-10",
+      "last_threat_review": "2026-09-18",
       "forward_watch": [
         "EU AI Office secondary legislation under EU AI Act Art 10 / Art 15 that may operationalise inference-time data-flow controls",
         "ISO/IEC 42001 amendments expected 2026-2027 likely to add prescriptive data-flow guidance for AI systems",
@@ -1027,8 +1027,8 @@
         "MCP gateway / proxy standardisation (Anthropic enterprise MCP gateway, Portkey MCP) — tool-call argument inspection is the missing primary control",
         "Quebec Law 25, India DPDPA, KSA PDPL enforcement actions naming AI-tool prompt data as in-scope personal information"
       ],
-      "signature": "uIQdYlbKIQw8qQRDeGnXv4D/wuPAvYFRzos3kqkyELx+v9rGmfmT7w5s1608lpJxXzGLIA7BSN2/wLJJAZmXCg==",
-      "signed_at": "2026-08-30T16:48:29.520Z"
+      "signature": "8bQYr8vU3mlCrBIbVwj3MDDUQkIYSP4oeEjfXyeM8VJReqGmgO4MFvvcZOVRxuf5XRS40dpOfEO5AKj1ImKvAw==",
+      "signed_at": "2026-09-19T05:28:17.034Z"
     },
     {
       "name": "supply-chain-integrity",
@@ -1100,7 +1100,7 @@
         "D3-EAL",
         "D3-EHB"
       ],
-      "last_threat_review": "2026-06-10",
+      "last_threat_review": "2026-09-18",
       "forward_watch": [
         "SLSA v1.1 (draft) — adds attestation chain requirements above L3 and a hardened-builder profile; track for re-baselining",
         "CSAF 2.1 finalization — VEX status vocabulary expansion and machine-readable advisory pivoting",
@@ -1111,8 +1111,8 @@
         "Pwn2Own Berlin 2026 (disclosed 2026-05-14, embargo ends 2026-08-12) — NVIDIA Megatron Bridge overly permissive allowed list by Satoki Tsuji; AI training-stack supply-chain exposure; track patch and SBOM-attestation impact",
         "Pwn2Own Berlin 2026 (disclosed 2026-05-14, embargo ends 2026-08-12) — NVIDIA Megatron Bridge path traversal by haehae; AI training-stack file-system trust boundary; track patch and SBOM-attestation impact"
       ],
-      "signature": "4EMvqqcYHnM+9fmlS156Utl3T248EqHdiB89zVyW8+wUYHAU/VLUOr27JiiSmj5iZrdY5Prq7t9Hsk3LuVx5Aw==",
-      "signed_at": "2026-08-30T16:48:29.520Z"
+      "signature": "fZ7VVjKFgQsgNNQd6m71lLY+POS/85jSZopbDwC96M+SfqSCQGW+6F9CqOhjE9vwkxoKhaKRULTfhpdbcsHhBg==",
+      "signed_at": "2026-09-19T05:28:17.034Z"
     },
     {
       "name": "defensive-countermeasure-mapping",
@@ -1169,7 +1169,7 @@
       ],
       "last_threat_review": "2026-06-10",
       "signature": "W8kg2Okd/VF521VmeVFGK2TmXkFPycuwgYdyNxLU2fMN+sR9Aals/X+Xqr/prrGEsqWnZsCInSq1TYzFr0wiDg==",
-      "signed_at": "2026-08-30T16:48:29.521Z"
+      "signed_at": "2026-09-19T05:28:17.035Z"
     },
     {
       "name": "identity-assurance",
@@ -1243,7 +1243,7 @@
       ],
       "last_threat_review": "2026-05-11",
       "signature": "UV3458QXSkEpenzrOmdlTTfPHUD4hNyKMDHoeZDq/kiFb4mAG0ghQGTTgI9Ru8cJbSmYM1++m9N5TFIJ6JJPBg==",
-      "signed_at": "2026-08-30T16:48:29.521Z"
+      "signed_at": "2026-09-19T05:28:17.035Z"
     },
     {
       "name": "ot-ics-security",
@@ -1300,9 +1300,9 @@
         "CWE-1037"
       ],
       "d3fend_refs": [],
-      "last_threat_review": "2026-06-10",
-      "signature": "1PFZXMfQwM0dHsZQfo+rg5hJB00dfeOL41VA3J8gNF6cCUpplw9vQuZfODX/SwXI/WmDQwM9G2sd1X/i7LG9DA==",
-      "signed_at": "2026-08-30T16:48:29.521Z"
+      "last_threat_review": "2026-09-18",
+      "signature": "2pmqMIfqL1VAK5ZzPY4l1wllI7tnl5ne7ML6u9qQnA3SScRR1++TPUjEaB3iLZeRanCKGgkMj8LmU96dbqYYDA==",
+      "signed_at": "2026-09-19T05:28:17.036Z"
     },
     {
       "name": "coordinated-vuln-disclosure",
@@ -1352,7 +1352,7 @@
         "CWE-1357"
       ],
       "d3fend_refs": [],
-      "last_threat_review": "2026-06-10",
+      "last_threat_review": "2026-09-18",
       "forward_watch": [
         "EU CRA Art. 11 implementing regulations and ENISA single-reporting-platform rollout (target operational 2026-09; first manufacturer notifications due 2027-12 per CRA transition timeline)",
         "ISO/IEC 29147 and ISO/IEC 30111 revisions expected post-CRA to align \"method-neutral\" language with EU 24h-notification reality",
@@ -1361,8 +1361,8 @@
         "UK NCSC Vulnerability Disclosure Toolkit revisions and AU ISM CVD guidance updates",
         "NYDFS 23 NYCRR 500 amendments potentially adding explicit CVD program requirements"
       ],
-      "signature": "5b3J9mk/iEi6OzeC0O2hw/K/ofTrH8519l+ZUpK8gqB/v0XbDFceIIBPB8TQM8wCct5iG0Krb7OCDSIbU0jVBw==",
-      "signed_at": "2026-08-30T16:48:29.522Z"
+      "signature": "3AZhfmMXX43i6y/usRLXHHiypnrKCVpA2qkNEJmZxqSF/9hQp9dAIEpA+Ko0R4aVgjCX7cRtcWR3xQuPhZMwAg==",
+      "signed_at": "2026-09-19T05:28:17.036Z"
     },
     {
       "name": "threat-modeling-methodology",
@@ -1406,7 +1406,7 @@
       "rfc_refs": [],
       "cwe_refs": [],
       "d3fend_refs": [],
-      "last_threat_review": "2026-06-10",
+      "last_threat_review": "2026-09-18",
       "forward_watch": [
         "ISO/IEC 27005 revision integrating AI-system threats",
         "OWASP Threat Modeling Manifesto v2 (post-2020)",
@@ -1415,8 +1415,8 @@
         "LINDDUN-GO and LINDDUN-PRO updates incorporating LLM privacy threats",
         "PASTA v2 updates incorporating AI/ML application threats"
       ],
-      "signature": "fibgNRd+STEyN3ZlnIxJddfaOXISYosdjoxkQ/oNVTP3GKhN1A4c3Jh0HZPbhTdjhrbJM/mE5ufiIOs7+RCMCQ==",
-      "signed_at": "2026-08-30T16:48:29.522Z"
+      "signature": "y331xjTn8EY4xrIw18R9LWpLa78Qqa/bZZ2cUCZ3VV94ZlDfsfsU+ljZvGfPzBYbAfjEonHrHS6e7VTJLq6mAw==",
+      "signed_at": "2026-09-19T05:28:17.037Z"
     },
     {
       "name": "webapp-security",
@@ -1497,9 +1497,9 @@
         "D3-EAL",
         "D3-MFA"
       ],
-      "last_threat_review": "2026-06-10",
-      "signature": "3qtC0X8QR9YufDfeL/AUiw3EeJwvSfSrUWojndEZVmeJ3MtM12I94OJmaQT1AWaTRWVa9f91owgLl6AgoTNVAA==",
-      "signed_at": "2026-08-30T16:48:29.522Z",
+      "last_threat_review": "2026-09-18",
+      "signature": "YhdXy2fMZubdoGemwvt8XCPFaMpcA3uVzGlGH7j+3koPuPl99VqkD1Q2gsJjs894V3CiRSWuRU75q4nIGwUAAQ==",
+      "signed_at": "2026-09-19T05:28:17.037Z",
       "forward_watch": [
         "NGINX Rift CVE-2026-42945 (disclosed 2026-05-13, source depthfirst) — KEV-watch predicted CISA KEV listing by 2026-05-29; AI-assisted discovery angle; track for active-exploitation confirmation and patch advisory affecting front-door web app deployments"
       ]
@@ -1559,7 +1559,7 @@
       ],
       "last_threat_review": "2026-05-15",
       "signature": "SBB7c3wNYfIdkyOp4g4nW0WP7xS+YokMzg32aaeJdbf14LTGQRzQUvSqb2TCj2HFUSHESOyKT1JpkAfyHLSQBQ==",
-      "signed_at": "2026-08-30T16:48:29.523Z"
+      "signed_at": "2026-09-19T05:28:17.038Z"
     },
     {
       "name": "sector-healthcare",
@@ -1624,9 +1624,9 @@
         "D3-CSPP",
         "D3-MFA"
       ],
-      "last_threat_review": "2026-06-10",
-      "signature": "Z/lPfIH5ARAOoeR81ATj6lQlekZP/8tzg23Pr1H9BxxdQedRsLGDNVIHu81qNuoA7GNRRMtxXpwrS7fXbMh5Cw==",
-      "signed_at": "2026-08-30T16:48:29.523Z"
+      "last_threat_review": "2026-09-18",
+      "signature": "wzn+2M42Jirv4SaakneHXsICUvx0YjHT+lY/vwp+hbvR17U9JaXMKWyIFH1GbbYYuHy+3f4Xgouqatkg8pJlDw==",
+      "signed_at": "2026-09-19T05:28:17.038Z"
     },
     {
       "name": "sector-financial",
@@ -1699,7 +1699,7 @@
         "D3-NTA",
         "D3-IOPR"
       ],
-      "last_threat_review": "2026-06-10",
+      "last_threat_review": "2026-09-18",
       "forward_watch": [
         "PSD3 + PSR (Payment Services Regulation) trilogue and final adoption (expected 2026-2027); track agent-initiated payment treatment in final text",
         "DORA Art. 26 TLPT first full cycle completion mid-2027; ESAs publishing aggregate findings under JC 2024/40 RTS",
@@ -1714,8 +1714,8 @@
         "OSFI B-13 (Technology and Cyber Risk Management) post-2024 examination findings",
         "TIBER-EU framework v2.0 alignment with DORA TLPT RTS (JC 2024/40); cross-recognition with CBEST and iCAST"
       ],
-      "signature": "kPV8cEpIUAMKY2USvFxAn6JkkRMlBAM2mGLy6ViS9O3rv+3dsAgBqKgcBTBbuSoMZgY2KKruoG+SkrR3aoViAg==",
-      "signed_at": "2026-08-30T16:48:29.523Z"
+      "signature": "LJuRKWJevk24XppOXTNoWEpJFNsYh20uk+LEmPkKISUM0vt2M19dUzaS4vbWxoSXBHB1apA4SISFKD+J5rJnCQ==",
+      "signed_at": "2026-09-19T05:28:17.039Z"
     },
     {
       "name": "sector-federal-government",
@@ -1778,7 +1778,7 @@
         "D3-EHB",
         "D3-CBAN"
       ],
-      "last_threat_review": "2026-06-10",
+      "last_threat_review": "2026-09-18",
       "forward_watch": [
         "CMMC 2.0 phased rollout milestones through 2028 — Phase 1 (self-assessment) effective Dec 2024, Phase 2 (C3PAO assessments) ramping in 2025-2026, Phase 3 (DIBCAC-level assessments) and Phase 4 (full enforcement in all contracts) push into 2028",
         "NIST SP 800-171 Rev 3 (May 2024) replacing Rev 2 in contracts — three-year transition; track which DoD / civilian agency contracts have crossed the Rev 3 boundary",
@@ -1791,8 +1791,8 @@
         "EU Cybersecurity Certification Scheme on Common Criteria (EUCC) operational — first certificates issued 2024; high-assurance level for government use cases ramping",
         "Australia PSPF 2024 revision and ISM quarterly updates — track for Essential Eight Maturity Level requirements for federal entities"
       ],
-      "signature": "CbxW5qhlaiqf+P3xIemSHlMz9OoWat2srh7F3+nAIsa0Y4nBr6WCXZXZlUUjrjptZ3Ny+Cw485HMLWRO9qbcBw==",
-      "signed_at": "2026-08-30T16:48:29.524Z"
+      "signature": "eFY8sPJCCqYTLGKx+1Spc8UhXNF5Lg3PxN11++lGHBEtPJf/HWeLtrrw2CZSabeqZxdrSLEjuiJxkFo9r+VkAg==",
+      "signed_at": "2026-09-19T05:28:17.039Z"
     },
     {
       "name": "sector-energy",
@@ -1854,7 +1854,7 @@
         "D3-EAL",
         "D3-PSEP"
       ],
-      "last_threat_review": "2026-06-10",
+      "last_threat_review": "2026-09-18",
       "forward_watch": [
         "NERC CIP v7 final FERC order (anticipated 2026–2027) — additions for low-impact BES Cyber Systems, supply chain, and INSM (internal network security monitoring)",
         "CISA + EPA joint guidance evolution for water/wastewater following the 2023 Unitronics campaign and the 2024 EPA enforcement memorandum",
@@ -1865,8 +1865,8 @@
         "MadIoT-class research on consumer-IoT-driven grid frequency manipulation moving from proof-of-concept to attributed campaigns",
         "ICS-CERT advisory feed (https://www.cisa.gov/news-events/cybersecurity-advisories/ics-advisories) for vendor CVEs in Siemens, Rockwell, Schneider Electric, ABB, GE Vernova, Hitachi Energy, AVEVA / OSIsoft PI"
       ],
-      "signature": "lVHORFJzvkxNqJfT34inW28BzlA8dCWDfo0JS9tsiNW3PUxdijZS22g4GMbQJgaSKGv7F3ag5rWk75O+IChUAw==",
-      "signed_at": "2026-08-30T16:48:29.524Z"
+      "signature": "tpbR4Azrmbh9YSByEBqsb40/c6e17bKw6RDYzdW1P1gK31g+It5wOCgVvoacCv4F5SjQWIQnlrm1QWTMYYJWAA==",
+      "signed_at": "2026-09-19T05:28:17.040Z"
     },
     {
       "name": "sector-telecom",
@@ -1952,7 +1952,7 @@
         "O-RAN SFG / WG11 security specifications"
       ],
       "signature": "NAtyzfLPXlUuB78Snb9nWmbZalC1CNlIYN9rYhdEmtB/xQGC6vVnThgrEAHlm7v/jMCFuknvEpUHKdscUnUADw==",
-      "signed_at": "2026-08-30T16:48:29.524Z"
+      "signed_at": "2026-09-19T05:28:17.040Z"
     },
     {
       "name": "api-security",
@@ -2029,9 +2029,9 @@
         "D3-MFA",
         "D3-CBAN"
       ],
-      "last_threat_review": "2026-06-10",
-      "signature": "hyLAsPCAkUkhNeaaFtgSg5XsKs2L8HuFoPka/Urzel54XPMQ0F3MwRD7j/ZURzIHQxvrAxmS3OCXEsBrgcFxAw==",
-      "signed_at": "2026-08-30T16:48:29.525Z",
+      "last_threat_review": "2026-09-18",
+      "signature": "kFrz/uEDmfGzaAnYjdC8LODy5Ezq0YzIyI+8K4bJp9+LIYkCbxE4kWr0tHCvoipud0keCljXY9M96y826fSZAQ==",
+      "signed_at": "2026-09-19T05:28:17.041Z",
       "forward_watch": [
         "NGINX Rift CVE-2026-42945 (disclosed 2026-05-13, source depthfirst) — KEV-watch predicted CISA KEV listing by 2026-05-29; track for active-exploitation confirmation and patch advisory affecting API gateway / reverse-proxy deployments",
         "Pwn2Own Berlin 2026 (disclosed 2026-05-14, embargo ends 2026-08-12) — LiteLLM 3-bug SSRF + Code Injection chain by k3vg3n; LLM-proxy API surface; track upstream patch and CVE assignments",
@@ -2108,7 +2108,7 @@
         "D3-IOPR",
         "D3-CBAN"
       ],
-      "last_threat_review": "2026-06-10",
+      "last_threat_review": "2026-09-18",
       "forward_watch": [
         "CSA CCM v5 (in development) for AI-workload-aware control objectives and shared-responsibility refinement on managed AI services (Bedrock, Azure OpenAI, Vertex)",
         "FedRAMP 20x continuous authorization transition through 2026 — machine-readable OSCAL controls, automated significant-change review, impact on commercial CSP authorizations",
@@ -2125,8 +2125,8 @@
         "eBPF-based runtime detection coverage of confidential-computing enclaves (AWS Nitro Enclaves, Azure Confidential VMs, GCP Confidential Space) — partial visibility is a tracked detection gap",
         "CISA KEV additions for cloud-control-plane CVEs (IMDSv1 abuses, federation token mishandling, cross-tenant boundary failures); CISA Cybersecurity Advisories for cross-cloud advisories"
       ],
-      "signature": "MfijBq1nzlyPQWf5/EcTn5Xx7ThdZ9BT8/W/+daxhATfMSoSTrMn9pYh1R83Chr9n2ahQeMoPUkSxL7Cr9V3Dw==",
-      "signed_at": "2026-08-30T16:48:29.526Z"
+      "signature": "8w+nFlBZ4+AgVrgiXyHzAHT2lgUbaP9Q8YOkt+NYPlwx2AjfTazB7S2G4Rg9ibUH+mcs9gpZMDAD+9CyZqo6Dw==",
+      "signed_at": "2026-09-19T05:28:17.042Z"
     },
     {
       "name": "container-runtime-security",
@@ -2196,9 +2196,9 @@
         "D3-NTPM",
         "D3-IOPR"
       ],
-      "last_threat_review": "2026-06-10",
-      "signature": "QJ8RF3ifPFc0mr3gYkloHqg5nuYe1GS4h+xbKYDCkM+HbA3iTd5keJ59P2P3z8TwVdOt8XM8WOsx6aRUrFL0Cw==",
-      "signed_at": "2026-08-30T16:48:29.526Z",
+      "last_threat_review": "2026-09-18",
+      "signature": "mN0q+CDc2WyUjgOzFwUBZBo3SbaOAvWn4CVBjLAYfWYDxm5em+vil0a5dlUWLXxviDNkeQpG0kaAv9dstqPWDg==",
+      "signed_at": "2026-09-19T05:28:17.042Z",
       "forward_watch": [
         "Pwn2Own Berlin 2026 (disclosed 2026-05-14, embargo ends 2026-08-12) — NVIDIA Container Toolkit container escape ($50K award) by chompie / IBM X-Force XOR; high-severity container/hypervisor boundary break; track patch and KEV add post-embargo"
       ]
@@ -2269,17 +2269,17 @@
         "D3-EAL",
         "D3-IOPR"
       ],
-      "last_threat_review": "2026-06-10",
+      "last_threat_review": "2026-09-18",
       "forward_watch": [
         "CycloneDX 1.7 ML-BOM enrichment — training-data lineage fields and model-card embedding stabilize; re-baseline ML-BOM coverage when published",
         "SPDX 3.1 AI / Dataset profile maturation — dataset provenance schema firms up; re-audit training-data lineage attestations",
         "OpenSSF model-signing emergence to v1.0 — Sigstore-based model-weight signing; track for production adoption and admission-control integration",
         "SLSA v1.1 ML profile (draft) — model-provenance extension for training-run attestation chains; track ID and section changes",
         "EU AI Act high-risk technical-file implementing acts (2026-2027) — operational requirements for Article 10 / 13 / 15 documentation may pin ML-BOM or model-signing",
-        "MITRE ATLAS v2026.07 (released June 2026) is additive over v2026.05 — it adds AML.T0113 (Steal Web Session Cookie), AML.T0091.001 (Use Alternate Authentication Material: Web Session Cookie), and AML.T0114 (AI Service Web Interface) and refreshes AML.T0054 (LLM Jailbreak), with no technique-ID removals. Earlier releases shipped the AML.T0010 sub-technique expansion and agentic-AI techniques (\"Publish Poisoned AI Agent Tool\", \"Escape to Host\") this forecast tracked. Forward watch: subsequent monthly ATLAS releases — track next-cadence updates to agentic-AI TTPs and MLOps-pipeline-specific techniques"
+        "MITRE ATLAS release 2026.06 (June 2026) added AML.T0113 (Steal Web Session Cookie), AML.T0091.001 (Use Alternate Authentication Material: Web Session Cookie) and AML.T0114 (AI Service Web Interface) to release 2026.05 and removed no technique ids. Earlier releases shipped the AML.T0010 sub-technique expansion and the agentic-AI techniques this forecast tracked (\"Publish Poisoned AI Agent Tool\", \"Escape to Host\"). Forward watch: subsequent monthly ATLAS releases, for updates to agentic-AI TTPs and MLOps-pipeline-specific techniques"
       ],
-      "signature": "e4uV8JvtEbC/lKGqJ6Y3ugEetF6aEv7R7CwJ/Y9N4thWNg8fconRcOPDS+045PW8xmcAqAbkSi+I4N1E6EPTAA==",
-      "signed_at": "2026-08-30T16:48:29.526Z"
+      "signature": "Rq8DoRSZdGHnteEe5UG/sJJe3OlWjqJVvFuKFHycaAamDVCXP9FQOP3GtAZKfDxN76PJEo7dbcxBkchkC5K7Bg==",
+      "signed_at": "2026-09-19T05:28:17.043Z"
     },
     {
       "name": "incident-response-playbook",
@@ -2341,7 +2341,7 @@
         "D3-IOPR",
         "D3-CSPP"
       ],
-      "last_threat_review": "2026-06-10",
+      "last_threat_review": "2026-09-18",
       "forward_watch": [
         "NIST 800-61r3 minor revisions (expected 2026-2027) aligning incident-handling language with the in-force EU CRA Art. 11 24h clock and EU AI Act Art. 73 serious-incident reporting",
         "ISO/IEC 27035-3:2026 (technical incident response operations) — final publication expected Q3 2026, expected to formalize AI-class incident sub-types currently absent from 27035-1/-2",
@@ -2352,8 +2352,8 @@
         "IL INCD Incident Response Process v4 (slated for 2026-2027) consolidating AI-incident sub-class",
         "NYDFS 23 NYCRR 500.17 amendments tightening ransom-payment 24h disclosure operationalization"
       ],
-      "signature": "asDHEy7Y2Bj4ikCkpP5MHRe33TIY8aQ1a+KN1UZgl89g9LyLcXzSg/weACafxJNzhOUkXnKBAtBrQIKW6p6nDQ==",
-      "signed_at": "2026-08-30T16:48:29.527Z"
+      "signature": "Mhw/tHJIg7J3caW2Hjue9GDFiU1KTUzoj0X5TzNYSsRYA8jtMxy2gW5yJLG0znFYfWmzSg/0WLq1peP6grqhAQ==",
+      "signed_at": "2026-09-19T05:28:17.043Z"
     },
     {
       "name": "ransomware-response",
@@ -2431,9 +2431,9 @@
         "No More Ransom Project decryptor releases — affiliate-takedown decryptor drops (Operation Cronos LockBit decryptor, BlackCat post-exit-scam decryptors)",
         "SCOTUS or circuit-court rulings on ransomware payment, sanctions liability, and insurance-policy enforcement"
       ],
-      "last_threat_review": "2026-06-10",
-      "signature": "UTDsSMDvW5cpuSDBgZO5AzKowXWAR3WqeUeqyHXaikxslC6YBDL/gIojm9Km3/mgOS6pD5JKb/LLcfb4T/r4BQ==",
-      "signed_at": "2026-08-30T16:48:29.527Z"
+      "last_threat_review": "2026-09-18",
+      "signature": "DlbATKeUswUKvYTL9eUyFUhZQGVnuKtJPwKDrSam5QucJeRufnIM1ygUvzU1GhXN9i7tl1rJ/3EP1T2GWco5AQ==",
+      "signed_at": "2026-09-19T05:28:17.044Z"
     },
     {
       "name": "email-security-anti-phishing",
@@ -2501,7 +2501,7 @@
       ],
       "last_threat_review": "2026-05-18",
       "signature": "FVBn4ex2qPIo9SHMVJ6tntoz4tVwjbIq3m6wDjjZyv2JODlS+90GBYCOkNamxxkmw/6de6SMs0YHQiF/xjo/DQ==",
-      "signed_at": "2026-08-30T16:48:29.528Z"
+      "signed_at": "2026-09-19T05:28:17.044Z"
     },
     {
       "name": "age-gates-child-safety",
@@ -2562,7 +2562,7 @@
         "D3-IOPR",
         "D3-CSPP"
       ],
-      "last_threat_review": "2026-06-10",
+      "last_threat_review": "2026-09-18",
       "forward_watch": [
         "KOSA (Kids Online Safety Act) federal enactment status — reintroduced 2024-2025 with bipartisan support; if enacted, duty-of-care + safest-defaults + age-appropriate-design obligations become US federal floor",
         "Ofcom UK Online Safety Act child-safety codes — illegal-content codes live July 2025; child-safety codes phasing through 2026 with iterative enforcement guidance",
@@ -2575,8 +2575,8 @@
         "France SREN (Securing and Regulating the Digital Space) Act 2024 — ARCOM age-verification referential for adult content services; double-anonymity model under deployment",
         "US state adult-site age-verification laws — 19+ states by mid-2026 (TX HB 18 upheld by SCOTUS June 2025 in Free Speech Coalition v. Paxton); track ongoing challenges in remaining states"
       ],
-      "signature": "l/jeAAnb7H2GQzp1x05bsdZwzC0NNTBi3ZuiwgDly5EVSoikbnVWpx921bT5G3OPkx4dqs2PohlvTG0gLxCrAA==",
-      "signed_at": "2026-08-30T16:48:29.528Z"
+      "signature": "rlHzyruu9OhkcVrYfHnMJvQf9z3rnDh5VbDQr4qCmqFXTzPqyQz9u1GvKdNiElSNXv3Qv3afvUFsvcHxOxX4DQ==",
+      "signed_at": "2026-09-19T05:28:17.045Z"
     },
     {
       "name": "cloud-iam-incident",
@@ -2656,7 +2656,7 @@
       ],
       "last_threat_review": "2026-05-15",
       "signature": "vrMvYLdYJLlEAC8YvOb/g3LJ8gU1YmYewZ94J5AFgxxh2EiDyszqo3D/WVpt5NTrDSS/N5OgOf5Vwom/KGlMCA==",
-      "signed_at": "2026-08-30T16:48:29.528Z",
+      "signed_at": "2026-09-19T05:28:17.045Z",
       "forward_watch": [
         "AWS IAM Identity Center session-policy refresh and step-up-on-admin enforcement (anticipated 2026-H2 release)",
         "GCP Workload Identity Federation principal-set attribute mapping tightening (post-2026 Q3 Federation hardening guide)",
@@ -2750,7 +2750,7 @@
       ],
       "last_threat_review": "2026-05-15",
       "signature": "9mfDtMApMAg9V/lmwpniNxo/6gNZoOEoYDfyFvyWvKrPMtc7H9F8uz06FVoARe/J49saAKTVXOurNE1D/KtpCQ==",
-      "signed_at": "2026-08-30T16:48:29.529Z",
+      "signed_at": "2026-09-19T05:28:17.045Z",
       "forward_watch": [
         "Entra ID conditional access evolution post-Midnight Blizzard — Microsoft's 2025-2026 commitments on legacy-tenant MFA enforcement and OAuth-app consent gating",
         "Okta IPSIE (Interoperability Profile for Secure Identity in the Enterprise) OpenID Foundation working-group output and adoption timeline",
@@ -2822,7 +2822,7 @@
       "d3fend_refs": [],
       "last_threat_review": "2026-06-02",
       "signature": "dOFgANMtHm64uSFRjMfeA0fWZS9ISwMTt59I2CbjaF1PgTtbtb8yg/f+3pC4eXcXIET0KPGxRRmENycfIz3rAw==",
-      "signed_at": "2026-08-30T16:48:29.529Z"
+      "signed_at": "2026-09-19T05:28:17.046Z"
     },
     {
       "name": "mail-server-hardening",
@@ -2881,7 +2881,7 @@
       "d3fend_refs": [],
       "last_threat_review": "2026-06-02",
       "signature": "5x8RGzKo/T2IbYnFkYMZs16ThD9a5FEdrKHsnwvtMuGxdyyfZsKNIJVWw2I8O0um0UOXwwkl17Z3zhch26ymCQ==",
-      "signed_at": "2026-08-30T16:48:29.529Z"
+      "signed_at": "2026-09-19T05:28:17.046Z"
     },
     {
       "name": "network-trust",
@@ -2937,7 +2937,7 @@
       "d3fend_refs": [],
       "last_threat_review": "2026-06-02",
       "signature": "C/RdmnGjXKreKiGkwJfUESIxUwQzisGJ9A7KBdE9cBRBHBYHkAcScV89L+Z3kOG032Qax6LeIQai7Lr3nrQBCA==",
-      "signed_at": "2026-08-30T16:48:29.529Z"
+      "signed_at": "2026-09-19T05:28:17.046Z"
     },
     {
       "name": "audit-log-integrity",
@@ -2992,7 +2992,7 @@
       "d3fend_refs": [],
       "last_threat_review": "2026-06-02",
       "signature": "T7sFREX7P2QYrau+eTNXKkrU2aJ91dsX6GQWVJeexJ9SqbyFHtAnIKo4r6F6VdELADyVjaRXKk/fLuyUaCkGBA==",
-      "signed_at": "2026-08-30T16:48:29.530Z"
+      "signed_at": "2026-09-19T05:28:17.047Z"
     },
     {
       "name": "self-update-integrity",
@@ -3046,7 +3046,7 @@
       "d3fend_refs": [],
       "last_threat_review": "2026-06-02",
       "signature": "BOQZ8G9LdyG/tfpz6rCU4THz5Dq2HGJkUV7uCqSTCMrqnXH6seNXKM41FWawYo0s2VUlXtRgaO7ETp5qgxw+CQ==",
-      "signed_at": "2026-08-30T16:48:29.530Z"
+      "signed_at": "2026-09-19T05:28:17.047Z"
     },
     {
       "name": "multitenancy-isolation",
@@ -3104,7 +3104,7 @@
       "d3fend_refs": [],
       "last_threat_review": "2026-06-02",
       "signature": "bncN0VE4ns0lxtPe48xDR33lerw54BPVkSwX7XlrLQcMHTrV94lmjO8z4ZP4Ko61n+KpuP2SNU8v9JT0bGMmAA==",
-      "signed_at": "2026-08-30T16:48:29.530Z"
+      "signed_at": "2026-09-19T05:28:17.047Z"
     },
     {
       "name": "decompression-dos",
@@ -3162,7 +3162,7 @@
       "d3fend_refs": [],
       "last_threat_review": "2026-06-02",
       "signature": "03i0ZO5ScHIOjGvDKUEsws6m+20fnlJrEhSBtMU7PJzQutrPpmW9gULE0wbayTD5H9URh5nSKZuuVjvjVhZNCg==",
-      "signed_at": "2026-08-30T16:48:29.530Z"
+      "signed_at": "2026-09-19T05:28:17.047Z"
     },
     {
       "name": "log-injection-telemetry",
@@ -3217,7 +3217,7 @@
       "d3fend_refs": [],
       "last_threat_review": "2026-06-02",
       "signature": "twTmA2l+Am2k2PCzB2DNxDQwoYlGopJp/3QgQwBsP7h2LF+uNudisqfuOVV/bYnWfrUhuYZUWbsR3mhzbJCUBw==",
-      "signed_at": "2026-08-30T16:48:29.530Z"
+      "signed_at": "2026-09-19T05:28:17.047Z"
     },
     {
       "name": "privacy-consent-ops",
@@ -3272,11 +3272,11 @@
       "d3fend_refs": [],
       "last_threat_review": "2026-06-02",
       "signature": "0sfKSVrIf555c9bDGkXB96fUClN52fMAMYoQsNQ9eUUSzDiWUwdou+q0gYt43nObtj3m9Yb9X6q3oCXDVMgUDg==",
-      "signed_at": "2026-08-30T16:48:29.531Z"
+      "signed_at": "2026-09-19T05:28:17.048Z"
     }
   ],
   "manifest_signature": {
     "algorithm": "Ed25519",
-    "signature_base64": "VST5Hx6G4OpjoZF464mFNcp/hOCJfyGo9CzlIBLjGjHib6BG+U2N3Jjpi2dBBne172e3DVd/02kBz7j6oPZKDw=="
+    "signature_base64": "Sn8CGkS+zeeKJ1XvfxdxTXWnxh7Bw8KbLC66cBvl6Q4hDv69xQ0R68t4QpvgqOBMAuYWM5BrLALHLbChjMK5Dw=="
   }
 }