@blamejs/exceptd-skills 0.20.1 → 0.21.0

package/CHANGELOG.md

@@ -1,5 +1,43 @@
 # Changelog
 
+## 0.21.0 — 2026-09-23
+
+Australian ISM citations now name the controls they describe. Most ISM control numbers in the catalog, the framework-gap registry, the skills and the playbooks pointed at a different control from the one the surrounding text described. ISM-1546, which 207 entries cited as the patching control, requires users to be authenticated before they are granted access to a system. ISM-1556, ISM-1559 and ISM-1808 were also cited for obligations they do not contain. Every citation was checked against the OSCAL catalog ASD publishes for ISM release 2026.09.4. Each citation now names the control whose statement matches the claim, or it was removed where no control makes that claim.
+
+Four framework-gap keys are renamed because the control named in the key was wrong. Update saved attestations, policy exceptions and queries that use them:
+
+- `AU-ISM-1546-Cloud-Service-Account` is now `AU-ISM-1685-Cloud-Service-Account`
+- `AU-ISM-1556` is now `AU-ISM-1173-Telecom-NMS` for telecom network management. Skills that cited it for update integrity, input validation, event-log protection or database access now cite `AU-ISM-0298`, `AU-ISM-1240`, `AU-ISM-1815` or `AU-ISM-1268`.
+- `AU-ISM-1559-IdP` is now `AU-ISM-1685-IdP`
+- `ATLAS-AML.T0048` is now `ATLAS-AML.T0010`
+
+`AU-ISM-1546` and `AU-ISM-1808` keep their keys and now describe their real controls: authentication before access, and a vulnerability scanner with a current vulnerability database. Of the 207 entries that cited `AU-ISM-1546`, 193 now cite `AU-Essential-8-Patch` with a statement that names the ISM control for the product's asset class, 12 describe an authentication bypass and keep `AU-ISM-1546`, and 2 describe a supplier compromise. The supply-chain gap recorded under `AU-ISM-1808` moved to a new key, `AU-ISM-1452`. New keys `AU-ISM-0298`, `AU-ISM-1240`, `AU-ISM-1815` and `AU-ISM-1268` cover update integrity, input validation, protection of event logs and need-to-know database access, which skills had cited under unrelated control numbers. Four lessons that used an unregistered Australian key for the wrong control now name the control they describe; the Copy Fail lesson, for example, cited ISM-1623, which covers PowerShell logging.
+
+The Essential Eight patching gap now gives the window for each maturity level. Release 0.20.1 stated a 48-hour window for browsers, office suites, email clients, PDF readers and security products. That window applies only at Maturity Level Three (ISM-1692). At Maturity Levels One and Two the window for those applications is two weeks (ISM-1691), and workstation operating systems get one month (ISM-1695). The 48-hour window at every level covers online services (ISM-1876) and the operating systems of internet-facing servers and network devices (ISM-1877). Patching drivers and firmware is a Maturity Level Three requirement only.
+
+Statements for server software now depend on how the instance is exposed. ASD defines an online service as any service directly accessible over the internet, including one behind a perimeter firewall, so an internet-accessible web application, API, management console or model-serving endpoint falls under ISM-1876 and ISM-1690 at every maturity level: 48 hours from release when the vendor rates the flaw critical or a working exploit exists, and two weeks otherwise. An instance reachable only internally is an other application under ISM-1693, one month from Maturity Level Two. Libraries and model loaders that run inside a user's own process stay under ISM-1693.
+
+Skills that said the ISM has no AI controls, or that its post-quantum guidance is advisory, now cite the controls: the ISM carries controls for AI systems and MCP servers, although none are in the Essential Eight, and ISM-1917 and ISM-2073 require post-quantum support and a transition plan.
+
+A new pre-publish check compares every `ISM-NNNN` citation in the repository, and every `AU-ISM` registry key, with the ISM release pinned in `sources/index.json`. It fails when a citation names a control the release does not contain, or when a registry entry's `control_name` does not begin with the statement of the control its key names. It fetches `ISM_catalog.json` from ASD's `ism-oscal` repository at the pinned tag and caches it under `.cache/upstream/ism/`, and it exits non-zero when it cannot reach the release.
+
+The eight ATLAS entries that carried another technique's name now match ATLAS v2026.09, and the analysis they held moved to the technique it describes:
+
+- AML.T0001 is Search Open AI Vulnerability Analysis.
+- AML.T0016 is Obtain Capabilities and AML.T0017 is Develop Capabilities. Citations of AI-assisted exploit development now use AML.T0017, and citations of public AI services used to write phishing, malware or evasion code use AML.T0016.
+- The model ontology discovery content that sat under AML.T0017 is now under AML.T0013 (Discover AI Model Ontology), and citations of model exfiltration through the inference API use AML.T0024.
+- AML.T0040 is AI Model Inference API Access. Tool and plugin compromise is under AML.T0110 (AI Agent Tool Poisoning), and AI-RAN xApp compromise under AML.T0010.
+- AML.T0047 is AI-Enabled Product or Service. System prompt extraction is under AML.T0056.
+- AML.T0048 is External Harms. Gradual erosion of model integrity is under AML.T0031.
+- AML.T0053 is AI Agent Tool Invocation.
+- AML.T0096 is AI Service API. Several skills printed it as "LLM Integration Abuse".
+
+Every sub-technique list in the ATLAS catalog now holds the ids ATLAS publishes for that technique. Fifty-four ids that do not exist upstream were removed, and lists that gave real ids the wrong names were regenerated. Nine CVE entries cited one of these ids for its old meaning. Eight now cite the technique that matches, and the NGINX rewrite-module overflow (CVE-2026-42945) no longer cites an ATLAS technique. The ATLAS currency check records no divergences.
+
+Every ATLAS entry's `tactic` now uses the tactic names ATLAS v2026.09 assigns. Fifteen entries named a tactic ATLAS does not assign to the technique; for example, AML.T0020 (Training Data Poisoning) is Persistence and AML.T0044 (Full AI Model Access) is AI Model Access. Twenty-one entries stored the tactic as a STIX slug such as `ai-attack-staging`, which also carried the name ATLAS replaced with AI Attack Adaptation in 2026.08, and AML.T0012 (Valid Accounts) now includes Lateral Movement. The ATLAS currency check now also fails when an entry lists a tactic the pinned release does not assign to that technique. The ATLAS refresher maps every tactic slug the STIX mirror has used to the tactic's current name, so new rows no longer arrive with `lateral-movement`, `ai-model-access` or `ai-attack-staging`.
+
+`exceptd skill` now lists each skill's current description. Eleven skills showed a stale one cached in the manifest.
+
 ## 0.20.1 — 2026-09-22
 
 The catalog holds 1,716 CVEs after 99 additions from CISA KEV. Twenty-eight are from 2021 and twenty-six from 2020, twenty-five carry a 2026 identifier, and the oldest is from 2014. Google accounts for 25, of which 24 are Chrome or Chromium; Microsoft for 13, Cisco for 8 and Citrix for 7. Eighteen carry CISA's ransomware designation, 64 have an obtainable public exploit, 35 need a restart before the fix is running, and two have no vendor fix at all.

package/data/_indexes/_meta.json

@@ -1,73 +1,73 @@
 {
   "schema_version": "1.1.0",
-  "generated_at": "2026-09-22T21:48:30.098Z",
+  "generated_at": "2026-09-23T08:58:56.658Z",
   "generator": "scripts/build-indexes.js",
   "source_count": 64,
   "source_hashes": {
-    "manifest.json": "97ccccfa08ed4adf599c699a473146e22a1043de9c39b693ecf3c8d011268919",
+    "manifest.json": "bd60904ccc4042aaa0063e4025a58ced6f29873773623871671328b9b3b624ae",
     "README.md": "864570c1f7fb221b0176d22d3b0823a8d077d6a7209edc6045b426b1e9ec555d",
-    "data/atlas-ttps.json": "739a72a0145c19cd93d0d6d99d6aa1e64581125fdb4fa63c4ff77267e6923734",
+    "data/atlas-ttps.json": "c36c0a27c8de8a37a7070923d7b187345c46db9db778f58e4637f1f81ca6d6b1",
     "data/attack-techniques.json": "e7498b7ad3582154184eb08f71f6690e2fea37e3fdee6c8a83b26879da2b0d50",
-    "data/cve-catalog.json": "13921f687cc0168404f0216209cfe1953e4e13cd9f9b70956882c8e5ab351f48",
+    "data/cve-catalog.json": "210d9c3102122a7feb76747de31a48d61176bdc7f6e9dd7dbe5a8e6a980aba02",
     "data/cwe-catalog.json": "173b4803d5d3bc57723a036c3740c72647a10eb24dbf1502e254e12c91b715bc",
-    "data/d3fend-catalog.json": "9a4a356a1446d7db8be8b6684fa789802405a96cdaf769f06db4136bd07db6ac",
+    "data/d3fend-catalog.json": "feec37e4b0a40cd7bc14616b50e7b9bcdb58a92d8e9326f9e2e632896d8ea576",
     "data/dlp-controls.json": "791f6a46b19b0c0fa2f46630ac8b398afb7ec9c2f2019056828c8820fe255f19",
     "data/exploit-availability.json": "7139702266a8d5ba8b235ab76518b8a84deaa31fdb912e81cb124121cf3e9930",
-    "data/framework-control-gaps.json": "4b83cabed493ad118b4d4ed8b3c6cfc072c24e0ca8832fddeb31526f12a7d1b1",
-    "data/global-frameworks.json": "20b18a851b3ab82e57cd159b49476d69fe544f02523398b2015189ab81c7c3f8",
+    "data/framework-control-gaps.json": "b60e4731a19f496775e1651dc6320b52212db5d79b0c3e88b78f967d49248f9d",
+    "data/global-frameworks.json": "86249047c50d2584b4854eb381ba53c309c0e6e29d4cb0e522b4ba1405481de6",
     "data/rfc-references.json": "6e9017eca910ab7e4bee85ad7c23927fd6ec766f34be7fce49ebf020cec3381a",
-    "data/zeroday-lessons.json": "eb2665c2cc6c937d99125706961f69f4525bbf80e1fb06de9f60f1d27cd1d268",
-    "skills/kernel-lpe-triage/skill.md": "0f79c641cef6e5f4a942eb94f43c460562bf83dfb67ae112d146c39c6b320fb0",
-    "skills/ai-attack-surface/skill.md": "0d6c3ad77c5d4188836941f2a7200aad1a2f5fcb32542023c7a9d12a2ffa93f4",
-    "skills/mcp-agent-trust/skill.md": "6925a1355dedaf9a5e2832cfa8140d67db34670cb6a7da661f240c00a444657a",
-    "skills/framework-gap-analysis/skill.md": "0939a59f8f9d2c40735cefbfa809752b8dd8a14ce36d8ac9ef975bd962132c35",
-    "skills/compliance-theater/skill.md": "7c9db098d969ce994b82f23e7332bdc62d1884e28c01f38b30de31fa5ffd87e5",
-    "skills/exploit-scoring/skill.md": "058048fb30cdf857f3951ec4530e0106017be4daac0cf87d64736ce38a90e031",
-    "skills/rag-pipeline-security/skill.md": "f0d81496051dd048cd900b12ebbf704c3c697663800e879a085b7e561cb6ec20",
-    "skills/ai-c2-detection/skill.md": "8567c4066ec41eae53f0f0e1eb6b7e4e9eab3ec3e95c6c48760f2d62b3a8d870",
-    "skills/policy-exception-gen/skill.md": "d5f1ff0fd8f9b161573d2c1168096d270ae8474c7ae2e4785a7a3e72080689e9",
-    "skills/threat-model-currency/skill.md": "4c0d9885861e7a074a57b4f24670f814a29cce33f08e026711099b254dfa8c2a",
-    "skills/global-grc/skill.md": "5811a02d4c768642ee2b32a5863e6e6bb31532e9655086f417dfd778ff708343",
-    "skills/zeroday-gap-learn/skill.md": "cb64c4af5734a867a09f87ed6e08c8017dc7662d0bacba5d2bd0dd9fc20cdd17",
-    "skills/pqc-first/skill.md": "307984c12c2daa473197b5f4b3d9ca97b037f1967610dce29b46aa282a3a842d",
-    "skills/skill-update-loop/skill.md": "2033331565b74536674ff1d08c823747a9040f1b81081b410250adc797faf200",
-    "skills/security-maturity-tiers/skill.md": "cb3a447292c707d5b897d1a4ef64538d1b478ff094f11b6fe1c3c7091ffb2562",
-    "skills/researcher/skill.md": "f538dde79206c91ba7791f90abc12fc99a7d45cd2e35fab7c264d9ea4b5d383f",
-    "skills/attack-surface-pentest/skill.md": "29faa4807c35832f316faffa0aea8032b1709922a70b74ef3d00fd0e7d053f6d",
+    "data/zeroday-lessons.json": "b522bf407207ca0161f2bd6885d34ed0a623bdab7b9817b5a1136f82c25fc5f1",
+    "skills/kernel-lpe-triage/skill.md": "78a547771c42b9348a1f80201e0f1b8a5ed3e7b4f15b35b1f64cf4ee54b0480b",
+    "skills/ai-attack-surface/skill.md": "bc9084127e4e928cba439187025f9e77aaca8089fe64891312824e74dd9fdb5b",
+    "skills/mcp-agent-trust/skill.md": "c20bda4c1267b16db4f713667216d93e0ab4b98c0fb244024749dcfb32d709cf",
+    "skills/framework-gap-analysis/skill.md": "f3bac33a0ffce7a26ecf56410b0f0c1dad1c721239de2d9cb5a8bb624889bf4f",
+    "skills/compliance-theater/skill.md": "a56a5ea0585c6c0fd5a15f7db4dd7142b87c539f0fa63376b5828953bdb7110c",
+    "skills/exploit-scoring/skill.md": "b92709bc6a55ee39a89c6c08ab6e03d7244176957fc7b314bb6d8a823d10bdc8",
+    "skills/rag-pipeline-security/skill.md": "a26e53f99919ee920e2233924738503e6300d5857289caba01db7f70a2057250",
+    "skills/ai-c2-detection/skill.md": "fdc616f274738977d0a643fb516ae0b5e540a719be68bbdb2bd2ef08a6fa65f2",
+    "skills/policy-exception-gen/skill.md": "abdc725a1f7c0e919118ff63a6cf818c544a2debe8c3570a8d8abfd9acd9f1e4",
+    "skills/threat-model-currency/skill.md": "13668235ae4207fe6ab741e59de88772304788e43f0026e0aaafb239ba20b8ef",
+    "skills/global-grc/skill.md": "d3c381b0389e3fa90c2eef9c6c950d6f1af418364ab4a1a60ebf09c1441c984d",
+    "skills/zeroday-gap-learn/skill.md": "c51360a0353201de7438a2f045bfb291102ceed93ea44a2f4d86aa1c8bd2d465",
+    "skills/pqc-first/skill.md": "78f562a7caff7a994389a80478962dbe31258ec8960e6cefa2b18bc22b5535eb",
+    "skills/skill-update-loop/skill.md": "44ee82f3166c72ac0fb1b5fe441e265201042ea6737d24dd1944d5ab27f91719",
+    "skills/security-maturity-tiers/skill.md": "2e8ffedb22bef2f76a8b5afb425480cf815ffec64063d809ba4f6eb78f03e411",
+    "skills/researcher/skill.md": "e1d1eb28feb248c31e9365dd4380706385eac5015f6ded1729a5e3e31ee0ee32",
+    "skills/attack-surface-pentest/skill.md": "06e52ab2c50f8b9899c8ede117db116ad014fde954d9f0f903e3bda52dc8a393",
     "skills/fuzz-testing-strategy/skill.md": "ee1f001258f19f7c1ca8b82de67abb79bb16002fb92e40581fd074279e17c6ab",
-    "skills/dlp-gap-analysis/skill.md": "2306ece78407ea4acba32ad0a2e3eb9755d7424e22b3f8a86c8cbc7922059c7e",
+    "skills/dlp-gap-analysis/skill.md": "3b7590c14612a86da06b8ef211f5e19105c5dab6abab97b45c6783c8bbc21564",
     "skills/supply-chain-integrity/skill.md": "6de2d1b2426019f5f026162216e0ae673b5f186441781aac91e64c22e987b5d2",
     "skills/defensive-countermeasure-mapping/skill.md": "e182f3130fe78e403db6c81c24757bc81dfbc86997e0b5f304f05d5572f7abb2",
     "skills/identity-assurance/skill.md": "86649aa573bde5b2ef2456a77d2fbfa9d1b623a4ef1326dd7a7ab384d0419307",
     "skills/ot-ics-security/skill.md": "4c85b1caf2e8bcb3683a3d98ba8f3cc58b656d3ec8dd88b86e2f70e9ecd4710f",
-    "skills/coordinated-vuln-disclosure/skill.md": "59288f7423e90138dd05b0e3f21bb4c09769b2eee74070f1c2ae38cbfdef8806",
-    "skills/threat-modeling-methodology/skill.md": "d3123e9732f972c736b2dc570968a1318002ce73df7d979ca94f17d39bd01e26",
+    "skills/coordinated-vuln-disclosure/skill.md": "8b4a8332ad597757d06988941970458a67159320944780d37e9d5dacfb98e1d2",
+    "skills/threat-modeling-methodology/skill.md": "03cb4a0658042bb364d066bf6e696bdab2f96d849992bbfde471d33ae6ba9810",
     "skills/webapp-security/skill.md": "ff8a4f9d6296cbf27e0ad5318865eee6971098eb59d66de1ac60b801e1ebda12",
-    "skills/ai-risk-management/skill.md": "3e116dc6f03f31e32f1ee885516d72d9c11d3ff67d2184108b13dcbdf5f417bf",
-    "skills/sector-healthcare/skill.md": "45d8bcccbe1c758dbf96e3fc9f7ee98fd9051b23f9e665c7cdafaf0ca3fcbdcd",
-    "skills/sector-financial/skill.md": "5c16936f529fdb615c89bf57bceccd6ecf46a06441f3dbbc0540fc1c6aba6665",
+    "skills/ai-risk-management/skill.md": "6d4fc768022e9df97d1c06e539fd69f7ba43d5e0cd6d4282171f24282ccd5097",
+    "skills/sector-healthcare/skill.md": "59d5c4d5a1727b071ae1dac93a057c5b5507744b73c9126ac1e1218926c260fa",
+    "skills/sector-financial/skill.md": "256aa802341dc8dcfed587cdde94c58ee8ad628f313d20305f6f46cc26bd896a",
     "skills/sector-federal-government/skill.md": "9b836c4c140c2fbd9ce0c5b900cb344c8f45d4e5fabdbb23ff7a95887445f68f",
     "skills/sector-energy/skill.md": "4a61701fd57fa6b1382ebdfd5ba9f259d5b6f81fd9c67b35cff2ce422238ecbe",
-    "skills/sector-telecom/skill.md": "4b80771e78a474e3f43227ecc730ddda1684bff98d7e6e53f5ec373e1e886f34",
-    "skills/api-security/skill.md": "fa79bae604fd10a189fd4d536fd0dab8aa32c93ab79ab0cc4eb8a938d34a7e7f",
-    "skills/cloud-security/skill.md": "f3c7cb10af02d5f37ac0978e81d7c7c9316265a4778d6a120f17d007e3e20068",
+    "skills/sector-telecom/skill.md": "f5065bdda938602dd4a1ab9de14984a657762fcfd818372dfc0df81fd7986cee",
+    "skills/api-security/skill.md": "e99c0d1421ca0ee85bce4d538b382da20105adf33a4336bcd630e65ff7f7f0ba",
+    "skills/cloud-security/skill.md": "ef21acca3da5b23b15dede1d1fb5f2caf0b8e65afb83acbeb7346863caebf63d",
     "skills/container-runtime-security/skill.md": "36d7e93fbacd9d797dd1127cd1db0a60d1793745d1b310d0ac3a198d8ba8f563",
-    "skills/mlops-security/skill.md": "f64e46099b139fd7f10a69cbe12b1675541aff82f7fa2bb3ec3507ddecbf3776",
-    "skills/incident-response-playbook/skill.md": "599a0bf585d23ded6c5ae1c517decf6e084bdff61ef4ee51c4b63658672c6e78",
-    "skills/ransomware-response/skill.md": "c35ea6718f78b35da97c39d4159c9fd794d31945f5c96ed772d5fc13f513c4cb",
+    "skills/mlops-security/skill.md": "40b84e3034bc07bff52bfd6295308b6d7dca3b7dc072dc52c407af8b661bb23a",
+    "skills/incident-response-playbook/skill.md": "8c35ee344df0902409918ab0520e87c4e24141e4a3efb3121e96bbeabf11d96b",
+    "skills/ransomware-response/skill.md": "23883384128e7f6d24d8d533eaa4a92c8ed03cd7a62e1e9991d5ca6f726672c9",
     "skills/email-security-anti-phishing/skill.md": "0965eca982e8fc633b85e70c0ba6becb8c0f5ee7bdd0be96ad73a9a222bb8816",
     "skills/age-gates-child-safety/skill.md": "cd4abcbe200f8ab589ae6c06cba1c6ee46144ba83624c6bd69e3559678ea4e9b",
-    "skills/cloud-iam-incident/skill.md": "5155c3f441541c490ef84c200cd42c134ca5fb9b6ea685abfe0dc2bad64c4c01",
-    "skills/idp-incident-response/skill.md": "cb2f2c5b90de4592bfd66dcd55f9bf2004f370746d519cad577fcbaf36125878",
+    "skills/cloud-iam-incident/skill.md": "36312db2ffd776e57d0d0e6dafbef008784be87aeab58fb4ee8ae92d0c4f0bdf",
+    "skills/idp-incident-response/skill.md": "529c6f3970bf3003d4b866ca0d2846c8ec501c65b76fa0029b93c3b560d52973",
     "skills/vc-wallet-trust/skill.md": "802dada75d934c9ab322246f650eb2eac9e2f72c1f094b0cebcfa605b56108a5",
     "skills/mail-server-hardening/skill.md": "0554e23457851ac1cdb3b8217fae902789798db1bbc67c5f4cf1df6fd265cf15",
     "skills/network-trust/skill.md": "d1c2fd6ce0bd74e508a41a61c8618cc5c979eaea2702ca97003ce46ba8c9dfa8",
     "skills/audit-log-integrity/skill.md": "0a83d540d0249228110403d330a6ad833488010b49552efacad125e4725ba54e",
-    "skills/self-update-integrity/skill.md": "305d4841d7434e18812be4b8646eb7a4f7f4416e3646aad3b6e7152d16f0c8af",
-    "skills/multitenancy-isolation/skill.md": "60d7db9cbac49b307c7062a3b27a3cef8aab8cc774176c428075981fbc18758f",
-    "skills/decompression-dos/skill.md": "53fd0a90ccc0e7ac6056e9c9fd40f3ab3342d30739399079b5e644eef6405d88",
-    "skills/log-injection-telemetry/skill.md": "69c4e65c6f78703b923c2455a5ecf5a6d79fcc28d56fff57acb2605639231104",
-    "skills/privacy-consent-ops/skill.md": "6c14052577178f0cffc943c2d7f1ac2aca6704cca912ce7492d9eac88a1c6d88"
+    "skills/self-update-integrity/skill.md": "20734640ad0d516fd47b7ea02123516bd3cbd947e31aa50ca94297d722dfb058",
+    "skills/multitenancy-isolation/skill.md": "6acb5613184a3ee3b8c0467b0c7c624dabecca176586a481191dbdd8ccfbf670",
+    "skills/decompression-dos/skill.md": "78a3d8ea1f3820f3a28247d9b01402cc45bd43225506c4825a946ba7e54785fb",
+    "skills/log-injection-telemetry/skill.md": "bc8a7a13368b43ee0477b0c7b24aafb1d9f4f5625439d514436a723f442c0c60",
+    "skills/privacy-consent-ops/skill.md": "75415d973657d333751370a0a83b5a26c58019dbd40710dfd91f793b37483ed7"
   },
   "skill_count": 51,
   "catalog_count": 11,
@@ -94,8 +94,8 @@
     "xref_entries": {
       "cwe_refs": 53,
       "d3fend_refs": 27,
-      "framework_gaps": 96,
-      "atlas_refs": 10,
+      "framework_gaps": 100,
+      "atlas_refs": 13,
       "attack_refs": 51,
       "rfc_refs": 36,
       "dlp_refs": 0
@@ -107,7 +107,7 @@
     "handoff_dag_nodes": 51,
     "summary_cards": 51,
     "section_offsets_skills": 51,
-    "token_budget_total_approx": 442042,
+    "token_budget_total_approx": 442647,
     "recipes": 8,
     "jurisdiction_clocks": 29,
     "did_ladders": 8,

package/data/_indexes/activity-feed.json

@@ -5,6 +5,22 @@
     "event_count": 63
   },
   "events": [
+    {
+      "date": "2026-09-22",
+      "type": "catalog_update",
+      "artifact": "data/atlas-ttps.json",
+      "path": "data/atlas-ttps.json",
+      "schema_version": "1.0.0",
+      "entry_count": 174
+    },
+    {
+      "date": "2026-09-22",
+      "type": "catalog_update",
+      "artifact": "data/framework-control-gaps.json",
+      "path": "data/framework-control-gaps.json",
+      "schema_version": "1.0.0",
+      "entry_count": 199
+    },
     {
       "date": "2026-09-18",
       "type": "skill_review",
@@ -80,14 +96,14 @@
       "type": "skill_review",
       "artifact": "skill-update-loop",
       "path": "skills/skill-update-loop/skill.md",
-      "note": "Meta-skill for keeping all exceptd skills current — fires on new CVEs, ATLAS updates, framework changes, and forward_watch triggers"
+      "note": "Meta-skill for keeping all exceptd skills current — fires on new CVEs and CISA KEV listings, ATLAS updates, framework changes, and forward_watch triggers, and scores each skill's currency"
     },
     {
       "date": "2026-09-18",
       "type": "skill_review",
       "artifact": "security-maturity-tiers",
       "path": "skills/security-maturity-tiers/skill.md",
-      "note": "Three-tier implementation roadmap — MVP you can ship today, practical best practices useable now, overkill gold standard for defense-in-depth"
+      "note": "Three-tier implementation roadmap — MVP you can ship today, practical best practices usable now, overkill gold standard for defense-in-depth"
     },
     {
       "date": "2026-09-18",
@@ -222,14 +238,6 @@
       "path": "skills/age-gates-child-safety/skill.md",
       "note": "Age-related gates and child online safety for mid-2026 — COPPA + CIPA + California AADC + GDPR Art. 8 + DSA Art. 28 + UK Online Safety Act + UK Children's Code + AU Online Safety Act + IN DPDPA child provisions + KOSA pending; age verification standards (IEEE 2089-2021, OpenID Connect age claims); AI product age policies"
     },
-    {
-      "date": "2026-09-18",
-      "type": "catalog_update",
-      "artifact": "data/atlas-ttps.json",
-      "path": "data/atlas-ttps.json",
-      "schema_version": "1.0.0",
-      "entry_count": 174
-    },
     {
       "date": "2026-09-09",
       "type": "skill_review",
@@ -268,14 +276,6 @@
       "schema_version": "1.0.0",
       "entry_count": 241
     },
-    {
-      "date": "2026-08-19",
-      "type": "catalog_update",
-      "artifact": "data/framework-control-gaps.json",
-      "path": "data/framework-control-gaps.json",
-      "schema_version": "1.0.0",
-      "entry_count": 194
-    },
     {
       "date": "2026-08-19",
       "type": "catalog_update",
@@ -289,7 +289,7 @@
       "type": "skill_review",
       "artifact": "pqc-first",
       "path": "skills/pqc-first/skill.md",
-      "note": "Post-quantum cryptography first mentality — hard version gates, algorithm sunset tracking, loopback learning for NIST/IETF standards evolution"
+      "note": "Post-quantum cryptography first mentality — hard version gates (OpenSSL 3.5+), algorithm sunset tracking, HNDL assessment, loopback learning for NIST/IETF standards evolution"
     },
     {
       "date": "2026-08-05",

package/data/_indexes/catalog-summaries.json

@@ -9,7 +9,7 @@
       "path": "data/atlas-ttps.json",
       "purpose": "MITRE ATLAS TTPs (AML.T0xxx) cited by skills, with tactic, name, description. Pinned to ATLAS v2026.09 (September 2026).",
       "schema_version": "1.0.0",
-      "last_updated": "2026-09-18",
+      "last_updated": "2026-09-22",
       "tlp": "CLEAR",
       "source_confidence_default": "A1",
       "freshness_policy": {
@@ -163,7 +163,7 @@
       "path": "data/framework-control-gaps.json",
       "purpose": "Per-control framework gap declarations: SI-2, A.8.8, PCI 6.3.3, etc. Each entry names the control, the lag, the evidence CVE, and remediation guidance.",
       "schema_version": "1.0.0",
-      "last_updated": "2026-08-19",
+      "last_updated": "2026-09-22",
       "tlp": "CLEAR",
       "source_confidence_default": "A1",
       "freshness_policy": {
@@ -172,7 +172,7 @@
         "rebuild_after_days": 365,
         "note": "Per-entry last_verified governs decay. Skills depending on this catalog must check entry freshness before high-stakes use."
       },
-      "entry_count": 194,
+      "entry_count": 199,
       "sample_keys": [
         "ALL-AI-PIPELINE-INTEGRITY",
         "ALL-MCP-TOOL-TRUST",

package/data/_indexes/chains.json

@@ -1,4 +1,4 @@
 [diffend] Oversized file quarantined before diffing.
 name: package/data/_indexes/chains.json
-size: 33657189 bytes
-sha256: d0c901e8e1c7069e0cfa3df9fbf54a05d0c52b52346e76f48541b81e3b0429f4
+size: 35647502 bytes
+sha256: e8e80d4de3f945407de1ac45aeaaf780851a8b9edae1e4ca4579253c73894a8e

package/data/_indexes/did-ladders.json

@@ -346,7 +346,7 @@
       "attack_class": "Model Weight / Training Data Exfiltration",
       "primary_ttps": [
         "AML.T0043",
-        "AML.T0017"
+        "AML.T0025"
       ],
       "layers": [
         {