@waratahlabs/canopy 0.5.0 → 0.6.0

package/dist/references/container-taxonomy.js

@@ -0,0 +1,207 @@
+/**
+ * Container Security Taxonomy — Infrastructure Layer Risks
+ *
+ * Source: "A Container Security Survey: Exploits, Attacks, and Defenses" (2025)
+ * Authors: Omar Jarkas, Ryan K. L. Ko, Naipeng Dong, Redowan Mahmud
+ * Published: ACM Computing Surveys, vol. 57, no. 7, Article 170, February 2025
+ * DOI: https://doi.org/10.1145/3715001
+ *
+ * Scope: 200+ container-related CVEs classified into 47 exploit types (E1–E47)
+ * across 11 attack categories (A1–A11) spanning five architectural layers:
+ *   L1 Orchestration — Kubernetes/Swarm control plane, scheduling, registry
+ *   L2 Application   — application code, dependencies, runtime configuration
+ *   L3 Engine        — container runtime (runc/containerd/Docker), image lifecycle
+ *   L4 Host          — Linux kernel namespaces, syscalls, eBPF, VFS, kernel modules
+ *   L5 Hardware      — CPU speculative execution, cache side-channels, MDS, timing
+ *
+ * Integration note: these risks apply to the infrastructure beneath an AI agent
+ * workload — complementing AIVSS V4 (which scores AI-specific behaviour) and
+ * ACSC (which covers agentic system design). Activate when AgentDefinition.deployment
+ * indicates a container-based runtime (ECS, Fargate, Kubernetes, Docker, containerd,
+ * runc, Podman, or any OCI-compatible deployment).
+ *
+ * ATLAS mappings are provided where ATLAS techniques directly cover the container
+ * attack surface (supply chain, model infrastructure compromise). Infrastructure
+ * risks without an AI/ML adversary analogue leave atlasTechniqueIds empty.
+ */
+import { buildHelpers } from "./registry.js";
+export const CONTAINER_TAXONOMY_RISKS = [
+    // ── L1 ORCHESTRATION ────────────────────────────────────────────────────────
+    {
+        id: "container-l1-control-plane-bypass",
+        framework: "container-taxonomy",
+        category: "L1 Orchestration",
+        name: "Control plane bypass and API server compromise",
+        riskType: "security",
+        description: "Vulnerabilities in orchestration control plane components (Kubernetes API server, admission controllers, scheduler) enable unauthorised access, privilege escalation, or denial-of-service. Inadequate rate limiting, unvalidated redirects, mishandled TLS credentials, and insufficient webhook validation are primary root causes. A compromised control plane grants an attacker system-wide authority over all containerised workloads. Covers exploits E2 (Control Plane Bypassing) and E3 (Input and Parsing Mishandling) from the taxonomy.",
+        aivssMetrics: ["CS", "DC", "GV"],
+        atlasTechniqueIds: [
+            "AML.T0010", // ML supply chain compromise — control plane as delivery vector
+        ],
+        sourceSection: "Section 3.1 — Orchestration Layer L1, A1 (E1–E7)",
+    },
+    {
+        id: "container-l1-secrets-exposure",
+        framework: "container-taxonomy",
+        category: "L1 Orchestration",
+        name: "Secrets and credential exposure via orchestration misconfiguration",
+        riskType: "security",
+        description: "Improper logging reveals tokens in log files; ingress-nginx custom snippets allow cluster secret access; kube-proxy flaws expose services on localhost to adjacent nodes. Orchestration-layer misconfiguration creates exfiltration paths for API keys, model credentials, inference endpoint tokens, and data pipeline secrets stored as Kubernetes Secrets. Covers exploit E5 (Unauthorized Access and Secrets) from the taxonomy.",
+        aivssMetrics: ["CS", "DS", "GV"],
+        atlasTechniqueIds: [
+            "AML.T0037", // Data from information repositories — credential harvesting
+        ],
+        sourceSection: "Section 3.1 — Orchestration Layer L1, E5",
+    },
+    // ── L2 APPLICATION ──────────────────────────────────────────────────────────
+    {
+        id: "container-l2-code-injection-ace",
+        framework: "container-taxonomy",
+        category: "L2 Application",
+        name: "Arbitrary code execution via application-layer injection",
+        riskType: "security",
+        description: "Insecure input validation, improper deserialization, mismanagement of scripting engines, and insufficient sandboxing enable attackers to inject and execute malicious commands within containers. In containerised AI systems, the application layer includes tool execution environments, plugin runtimes, and LLM output processors — all of which are injection surfaces. A single ACE vector in a containerised agent can spread laterally to co-located workloads sharing the kernel. Covers exploits E8 (Input Manipulation) and E11 (Code Injection) from the taxonomy.",
+        aivssMetrics: ["CS", "MR", "DC"],
+        atlasTechniqueIds: [
+            "AML.T0051", // LLM prompt injection — application-layer injection analogue
+            "AML.T0054", // LLM jailbreak — boundary escape via injection
+        ],
+        sourceSection: "Section 3.2 — Application Layer L2, A2 (E8–E12)",
+    },
+    {
+        id: "container-l2-default-misconfiguration",
+        framework: "container-taxonomy",
+        category: "L2 Application",
+        name: "Default and insecure container misconfiguration",
+        riskType: "security",
+        description: "Default settings prioritise ease-of-deployment over security: incorrect database permissions expose password hashes; default support for local_file_scheme enables file inclusion; debug information surfaces sensitive internals to attackers. Containers separate applications by design, but misconfiguration breaks isolation — enabling unauthorised data access, privilege escalation, and lateral movement between containers. Covers exploit E12 (Default Misconfigurations) from the taxonomy.",
+        aivssMetrics: ["DC", "GV", "LL"],
+        atlasTechniqueIds: [],
+        sourceSection: "Section 3.2 — Application Layer L2, E12",
+    },
+    // ── L3 ENGINE ───────────────────────────────────────────────────────────────
+    {
+        id: "container-l3-image-integrity",
+        framework: "container-taxonomy",
+        category: "L3 Engine",
+        name: "Container image integrity and supply chain attacks",
+        riskType: "security",
+        description: "Outdated base images introduce system-wide vulnerabilities (default root passwords, unpatched CVEs). Image spoofing via repository spoofing, path traversal, and image cache poisoning undermines trust in workload provenance. Build-phase vulnerabilities enable malicious code injection into container images before deployment. For AI workloads, a poisoned base image can introduce backdoors into model serving infrastructure or training pipelines at the point of image construction. Covers exploits E13 (Base Image Propagation), E14 (Image Spoofing), and E15 (Build Manipulation) from the taxonomy.",
+        aivssMetrics: ["LL", "CS", "DS"],
+        atlasTechniqueIds: [
+            "AML.T0010", // ML supply chain compromise
+            "AML.T0018", // Backdoor ML model — image as delivery mechanism
+            "AML.T0115.000", // Publish poisoned AI artifacts: datasets — analogue: publish poisoned images
+        ],
+        sourceSection: "Section 3.3 — Engine Layer L3, A3 (E13–E16)",
+    },
+    {
+        id: "container-l3-runtime-privilege",
+        framework: "container-taxonomy",
+        category: "L3 Engine",
+        name: "Container runtime privilege mismanagement",
+        riskType: "security",
+        description: "Misconfigurations and inherent flaws in Docker Engine, runc, containerd, and Kata Containers lead to unauthorised access and privilege escalation. Inadequate access controls, exposed Unix sockets, and improper image configuration management broaden the attack surface — enabling container escape, ACE, and information disclosure. Security Policy Mishandling (AppArmor bypasses, LSM policy exploitation) compounds runtime privilege issues. Covers exploits E17 (Security Policy Mishandling) and E18 (Privilege Mismanagement) from the taxonomy.",
+        aivssMetrics: ["CS", "DC", "GV"],
+        atlasTechniqueIds: [],
+        sourceSection: "Section 3.3 — Engine Layer L3, A4 (E17–E19)",
+    },
+    // ── L4 HOST — NAMESPACES ────────────────────────────────────────────────────
+    {
+        id: "container-l4-namespace-escape",
+        framework: "container-taxonomy",
+        category: "L4 Host",
+        name: "Namespace isolation failure and container escape",
+        riskType: "security",
+        description: "Linux namespaces (PID, network, mount, user, IPC, cgroup) are the foundational isolation mechanism for containers, but vulnerabilities across all namespace types enable container escape to the host. Filesystem isolation failures allow compromised containers to execute code on the host or impersonate the container runtime agent. UID mismanagement via --userns-remap misconfiguration grants remapped-root access. Process Isolation Lapse requires integrating mount, user, and cgroup namespaces simultaneously for complete isolation — gaps are routinely exploited. Covers exploits E22–E34 and E29 (Filesystem Isolation Failures) from the taxonomy.",
+        aivssMetrics: ["CS", "DC"],
+        atlasTechniqueIds: [],
+        sourceSection: "Section 3.4 — Host Layer L4, A6 (E22–E34)",
+    },
+    {
+        id: "container-l4-syscall-exposure",
+        framework: "container-taxonomy",
+        category: "L4 Host",
+        name: "System call exposure and kernel attack surface",
+        riskType: "security",
+        description: "Unsecured or mismanaged system calls bridge user-space containers to kernel-space functions. Flawed system call handling enables unauthorized access, privilege escalation, denial-of-service, and sensitive data leakage. Dirty COW (CVE-2016-5195) exploits a race condition for unauthorized write access. Syscall misimplementations (timer_create, waitid, pkexec) enable ACE via environment variable manipulation or insufficient validation. The shared kernel means a syscall exploit in any container compromises host-level security for all co-located workloads. Covers exploits E35 (System Calls Mishandling) and E36 (Syscall Misimplementations).",
+        aivssMetrics: ["CS", "DC"],
+        atlasTechniqueIds: [],
+        sourceSection: "Section 3.4 — Host Layer L4, A7 (E35–E36)",
+    },
+    {
+        id: "container-l4-ebpf-dual-use",
+        framework: "container-taxonomy",
+        category: "L4 Host",
+        name: "eBPF kernel-space exploitation",
+        riskType: "security",
+        description: "eBPF enables powerful kernel-space observability and network policy enforcement but its capacity for kernel-space bytecode execution introduces significant security risk in containerised environments. Exploitable features (bpf_probe_write_user) can manipulate network packets, access and modify other processes' memory, and alter system call arguments or return codes. eBPF's cross-container tracing capability enables attacks across containers on eBPF-enabled platforms. Register boundary violations, verifier bypass, and FD mismanagement are specific exploit vectors. Covers exploits E39 (Registers Manipulation), E40 (Boundary Conditions), and E41 (eBPF FD Mismanagement).",
+        aivssMetrics: ["CS", "GV"],
+        atlasTechniqueIds: [],
+        sourceSection: "Section 3.4 — Host Layer L4, A9 (E39–E41)",
+    },
+    // ── L5 HARDWARE ─────────────────────────────────────────────────────────────
+    {
+        id: "container-l5-speculative-execution",
+        framework: "container-taxonomy",
+        category: "L5 Hardware",
+        name: "Speculative execution and microarchitectural side-channel attacks",
+        riskType: "security",
+        description: "Spectre, Meltdown, Retbleed, and Zenbleed exploit CPU speculative execution to enable unauthorised memory access, control flow hijacking, and L1 data cache exfiltration across kernel, user space, and hypervisor boundaries. In multi-tenant container environments, these vulnerabilities allow cross-container data leakage without any software-level vulnerability in the target container. For AI workloads, speculative execution side-channels create exfiltration paths for model weights, inference inputs, and training data held in shared memory. Mitigations (Page Table Isolation, microcode updates, SMT disablement) carry significant performance cost. Covers exploits E44 (Speculative Execution), E45 (Cache Attacks), E46 (MDS), E47 (Power Analysis and Timing).",
+        aivssMetrics: ["CS", "DS"],
+        atlasTechniqueIds: [
+            "AML.T0043", // Craft adversarial data — timing/side-channel as data extraction
+        ],
+        sourceSection: "Section 3.5 — Hardware Layer L5, A11 (E44–E47)",
+    },
+];
+/**
+ * Container deployment keywords that indicate container taxonomy risks apply.
+ * Match against AgentDefinition.deployment (case-insensitive).
+ */
+const CONTAINER_DEPLOYMENT_KEYWORDS = [
+    "ecs",
+    "fargate",
+    "kubernetes",
+    "k8s",
+    "eks",
+    "aks",
+    "gke",
+    "docker",
+    "containerd",
+    "runc",
+    "podman",
+    "container",
+    "cri-o",
+    "kata",
+];
+/**
+ * Returns true if the deployment string indicates a container-based runtime.
+ * Use this to gate container taxonomy risks on relevant AgentDefinitions.
+ */
+export function isContainerDeployment(deployment) {
+    const lower = deployment.toLowerCase();
+    return CONTAINER_DEPLOYMENT_KEYWORDS.some((kw) => lower.includes(kw));
+}
+/**
+ * Returns the full risk list filtered to the specified architectural layer(s).
+ * Layers: "L1 Orchestration" | "L2 Application" | "L3 Engine" | "L4 Host" | "L5 Hardware"
+ */
+export function getRisksForLayer(layer) {
+    return CONTAINER_TAXONOMY_RISKS.filter((r) => r.category === layer);
+}
+export const CONTAINER_TAXONOMY_CITATION = {
+    id: "container-taxonomy",
+    title: "A Container Security Survey: Exploits, Attacks, and Defenses",
+    version: "ACM Computing Surveys vol. 57, no. 7, Article 170",
+    authors: [
+        "Omar Jarkas",
+        "Ryan K. L. Ko",
+        "Naipeng Dong",
+        "Redowan Mahmud",
+    ],
+    year: 2025,
+    url: "https://doi.org/10.1145/3715001",
+};
+export const { getRisksForMetric, getRisksByType, getRiskById } = buildHelpers(CONTAINER_TAXONOMY_RISKS);
+//# sourceMappingURL=container-taxonomy.js.map

package/dist/references/container-taxonomy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"container-taxonomy.js","sourceRoot":"","sources":["../../src/references/container-taxonomy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAG7C,MAAM,CAAC,MAAM,wBAAwB,GAAoB;IAEvD,+EAA+E;IAE/E;QACE,EAAE,EAAE,mCAAmC;QACvC,SAAS,EAAE,oBAAoB;QAC/B,QAAQ,EAAE,kBAAkB;QAC5B,IAAI,EAAE,gDAAgD;QACtD,QAAQ,EAAE,UAAU;QACpB,WAAW,EACT,qhBAAqhB;QACvhB,YAAY,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC;QAChC,iBAAiB,EAAE;YACjB,WAAW,EAAE,gEAAgE;SAC9E;QACD,aAAa,EAAE,kDAAkD;KAClE;IACD;QACE,EAAE,EAAE,+BAA+B;QACnC,SAAS,EAAE,oBAAoB;QAC/B,QAAQ,EAAE,kBAAkB;QAC5B,IAAI,EAAE,oEAAoE;QAC1E,QAAQ,EAAE,UAAU;QACpB,WAAW,EACT,saAAsa;QACxa,YAAY,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC;QAChC,iBAAiB,EAAE;YACjB,WAAW,EAAE,6DAA6D;SAC3E;QACD,aAAa,EAAE,0CAA0C;KAC1D;IAED,+EAA+E;IAE/E;QACE,EAAE,EAAE,iCAAiC;QACrC,SAAS,EAAE,oBAAoB;QAC/B,QAAQ,EAAE,gBAAgB;QAC1B,IAAI,EAAE,0DAA0D;QAChE,QAAQ,EAAE,UAAU;QACpB,WAAW,EACT,gjBAAgjB;QACljB,YAAY,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC;QAChC,iBAAiB,EAAE;YACjB,WAAW,EAAE,8DAA8D;YAC3E,WAAW,EAAE,gDAAgD;SAC9D;QACD,aAAa,EAAE,iDAAiD;KACjE;IACD;QACE,EAAE,EAAE,uCAAuC;QAC3C,SAAS,EAAE,oBAAoB;QAC/B,QAAQ,EAAE,gBAAgB;QAC1B,IAAI,EAAE,iDAAiD;QACvD,QAAQ,EAAE,UAAU;QACpB,WAAW,EACT,yeAAye;QAC3e,YAAY,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC;QAChC,iBAAiB,EAAE,EAAE;QACrB,aAAa,EAAE,yCAAyC;KACzD;IAED,+EAA+E;IAE/E;QACE,EAAE,EAAE,8BAA8B;QAClC,SAAS,EAAE,oBAAoB;QAC/B,QAAQ,EAAE,WAAW;QACrB,IAAI,EAAE,oDAAoD;QAC1D,QAAQ,EAAE,UAAU;QACpB,WAAW,EACT,slBAAslB;QACxlB,YAAY,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC;QAChC,iBAAiB,EAAE;YACjB,WAAW,EAAE,6BAA6B;YAC1C,WAAW,EAAE,kDAAkD;YAC/D,eAAe,EAAE,8EAA8E;SAChG;QACD,aAAa,EAAE,6CAA6C;KAC7D;IACD;QACE,EAAE,EAAE,gCAAgC;QACpC,SAAS,EAAE,oBAAoB;QAC/B,QAAQ,EAAE,WAAW;QACrB,IAAI,EAAE,2CAA2C;QACjD,QAAQ,EAAE,UAAU;QACpB,WAAW,EACT,+hBAA+hB;QACjiB,YAAY,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC;QAChC,iBAAiB,EAAE,EAAE;QACrB,aAAa,EAAE,6CAA6C;KAC7D;IAED,+EAA+E;IAE/E;QACE,EAAE,EAAE,+BAA+B;QACnC,SAAS,EAAE,oBAAoB;QAC/B,QAAQ,EAAE,SAAS;QACnB,IAAI,EAAE,kDAAkD;QACxD,QAAQ,EAAE,UAAU;QACpB,WAAW,EACT,uoBAAuoB;QACzoB,YAAY,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC;QAC1B,iBAAiB,EAAE,EAAE;QACrB,aAAa,EAAE,2CAA2C;KAC3D;IACD;QACE,EAAE,EAAE,+BAA+B;QACnC,SAAS,EAAE,oBAAoB;QAC/B,QAAQ,EAAE,SAAS;QACnB,IAAI,EAAE,gDAAgD;QACtD,QAAQ,EAAE,UAAU;QACpB,WAAW,EACT,ooBAAooB;QACtoB,YAAY,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC;QAC1B,iBAAiB,EAAE,EAAE;QACrB,aAAa,EAAE,2CAA2C;KAC3D;IACD;QACE,EAAE,EAAE,4BAA4B;QAChC,SAAS,EAAE,oBAAoB;QAC/B,QAAQ,EAAE,SAAS;QACnB,IAAI,EAAE,gCAAgC;QACtC,QAAQ,EAAE,UAAU;QACpB,WAAW,EACT,qqBAAqqB;QACvqB,YAAY,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC;QAC1B,iBAAiB,EAAE,EAAE;QACrB,aAAa,EAAE,2CAA2C;KAC3D;IAED,+EAA+E;IAE/E;QACE,EAAE,EAAE,oCAAoC;QACxC,SAAS,EAAE,oBAAoB;QAC/B,QAAQ,EAAE,aAAa;QACvB,IAAI,EAAE,mEAAmE;QACzE,QAAQ,EAAE,UAAU;QACpB,WAAW,EACT,0vBAA0vB;QAC5vB,YAAY,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC;QAC1B,iBAAiB,EAAE;YACjB,WAAW,EAAE,kEAAkE;SAChF;QACD,aAAa,EAAE,gDAAgD;KAChE;CACF,CAAC;AAEF;;;GAGG;AACH,MAAM,6BAA6B,GAAG;IACpC,KAAK;IACL,SAAS;IACT,YAAY;IACZ,KAAK;IACL,KAAK;IACL,KAAK;IACL,KAAK;IACL,QAAQ;IACR,YAAY;IACZ,MAAM;IACN,QAAQ;IACR,WAAW;IACX,OAAO;IACP,MAAM;CACP,CAAC;AAEF;;;GAGG;AACH,MAAM,UAAU,qBAAqB,CAAC,UAAkB;IACtD,MAAM,KAAK,GAAG,UAAU,CAAC,WAAW,EAAE,CAAC;IACvC,OAAO,6BAA6B,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC;AACxE,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAC9B,KAAsF;IAEtF,OAAO,wBAAwB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,KAAK,CAAC,CAAC;AACtE,CAAC;AAED,MAAM,CAAC,MAAM,2BAA2B,GAAsB;IAC5D,EAAE,EAAE,oBAAoB;IACxB,KAAK,EAAE,8DAA8D;IACrE,OAAO,EAAE,mDAAmD;IAC5D,OAAO,EAAE;QACP,aAAa;QACb,eAAe;QACf,cAAc;QACd,gBAAgB;KACjB;IACD,IAAI,EAAE,IAAI;IACV,GAAG,EAAE,iCAAiC;CACvC,CAAC;AAEF,MAAM,CAAC,MAAM,EAAE,iBAAiB,EAAE,cAAc,EAAE,WAAW,EAAE,GAC7D,YAAY,CAAC,wBAAwB,CAAC,CAAC"}

package/dist/references/index.d.ts

@@ -8,13 +8,6 @@
  * then add one registerFrameworkAdapter() call below.
  */
 import { FRAMEWORK_REGISTRY } from "./registry.js";
-/**
- * Framework IDs this build actually registers. Exported so the parity test and
- * the CLI can assert against one list rather than re-deriving it, and so drift
- * between what package.json advertises and what the engine does is mechanical
- * to detect.
- * */
-export declare const REGISTERED_FRAMEWORK_IDS: string[];
 export { FRAMEWORK_REGISTRY };
 export type { FrameworkAdapter, FrameworkRisk, FrameworkCitation, RiskType } from "./registry.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/references/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/references/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAA4B,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAe7E;;;;;KAKK;AACL,eAAO,MAAM,wBAAwB,UAAsD,CAAC;AAE5F,OAAO,EAAE,kBAAkB,EAAE,CAAC;AAC9B,YAAY,EAAE,gBAAgB,EAAE,aAAa,EAAE,iBAAiB,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/references/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAA4B,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAS7E,OAAO,EAAE,kBAAkB,EAAE,CAAC;AAC9B,YAAY,EAAE,gBAAgB,EAAE,aAAa,EAAE,iBAAiB,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC"}

package/dist/references/index.js

@@ -11,21 +11,8 @@ import { registerFrameworkAdapter, FRAMEWORK_REGISTRY } from "./registry.js";
 import { ACSC_ADAPTER } from "./acsc-risks.js";
 import { DSTG_MEAID_ADAPTER } from "./dstg-meaid.js";
 import { AICM_ADAPTER } from "./aicm.js";
-import { NIST_AI_RMF_ADAPTER } from "./nist-ai-rmf.js";
-import { OWASP_AGENTIC_TOP10_ADAPTER } from "./owasp-agentic-top10.js";
-import { NEMOCLAW_ADAPTER } from "./nemoclaw.js";
 registerFrameworkAdapter(ACSC_ADAPTER);
 registerFrameworkAdapter(DSTG_MEAID_ADAPTER);
 registerFrameworkAdapter(AICM_ADAPTER);
-registerFrameworkAdapter(NIST_AI_RMF_ADAPTER);
-registerFrameworkAdapter(OWASP_AGENTIC_TOP10_ADAPTER);
-registerFrameworkAdapter(NEMOCLAW_ADAPTER);
-/**
- * Framework IDs this build actually registers. Exported so the parity test and
- * the CLI can assert against one list rather than re-deriving it, and so drift
- * between what package.json advertises and what the engine does is mechanical
- * to detect.
- * */
-export const REGISTERED_FRAMEWORK_IDS = FRAMEWORK_REGISTRY.map((a) => a.citation.id).sort();
 export { FRAMEWORK_REGISTRY };
 //# sourceMappingURL=index.js.map

package/dist/references/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/references/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,wBAAwB,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAC7E,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAC/C,OAAO,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AACrD,OAAO,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AACvD,OAAO,EAAE,2BAA2B,EAAE,MAAM,0BAA0B,CAAC;AACvE,OAAO,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAEjD,wBAAwB,CAAC,YAAY,CAAC,CAAC;AACvC,wBAAwB,CAAC,kBAAkB,CAAC,CAAC;AAC7C,wBAAwB,CAAC,YAAY,CAAC,CAAC;AACvC,wBAAwB,CAAC,mBAAmB,CAAC,CAAC;AAC9C,wBAAwB,CAAC,2BAA2B,CAAC,CAAC;AACtD,wBAAwB,CAAC,gBAAgB,CAAC,CAAC;AAE3C;;;;;KAKK;AACL,MAAM,CAAC,MAAM,wBAAwB,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;AAE5F,OAAO,EAAE,kBAAkB,EAAE,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/references/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,wBAAwB,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAC7E,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAC/C,OAAO,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AACrD,OAAO,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AAEzC,wBAAwB,CAAC,YAAY,CAAC,CAAC;AACvC,wBAAwB,CAAC,kBAAkB,CAAC,CAAC;AAC7C,wBAAwB,CAAC,YAAY,CAAC,CAAC;AAEvC,OAAO,EAAE,kBAAkB,EAAE,CAAC"}

package/dist/references/nist-ai-rmf.d.ts

@@ -19,13 +19,8 @@
  * environmental impact) that have no direct AIVSS metric equivalent and add little value for
  * the agentic AI security use case this PoC targets.
  */
-import { type FrameworkAdapter, type FrameworkCitation, type FrameworkRisk } from "./registry.js";
+import { type FrameworkCitation, type FrameworkRisk } from "./registry.js";
 export declare const NIST_AI_RMF_RISKS: FrameworkRisk[];
 export declare const NIST_AI_RMF_CITATION: FrameworkCitation;
 export declare const getRisksForMetric: (metric: import("../aivss/types.js").MetricCode) => FrameworkRisk[], getRisksByType: (type: import("./registry.js").RiskType) => FrameworkRisk[], getRiskById: (id: string) => FrameworkRisk | undefined;
-/**
- * The registrable adapter. Registered in ./index.ts — an adapter that is not
- * registered there never annotates a finding, however complete its risk list.
- */
-export declare const NIST_AI_RMF_ADAPTER: FrameworkAdapter;
 //# sourceMappingURL=nist-ai-rmf.d.ts.map

package/dist/references/nist-ai-rmf.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"nist-ai-rmf.d.ts","sourceRoot":"","sources":["../../src/references/nist-ai-rmf.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,EAEL,KAAK,gBAAgB,EACrB,KAAK,iBAAiB,EACtB,KAAK,aAAa,EACnB,MAAM,eAAe,CAAC;AAMvB,eAAO,MAAM,iBAAiB,EAAE,aAAa,EAgoB5C,CAAC;AAEF,eAAO,MAAM,oBAAoB,EAAE,iBAOlC,CAAC;AAEF,eAAO,MAAQ,iBAAiB,uEAAE,cAAc,+DAAE,WAAW,2CAAoC,CAAC;AAElG;;;GAGG;AACH,eAAO,MAAM,mBAAmB,EAAE,gBAIjC,CAAC"}
+{"version":3,"file":"nist-ai-rmf.d.ts","sourceRoot":"","sources":["../../src/references/nist-ai-rmf.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,EAAgB,KAAK,iBAAiB,EAAE,KAAK,aAAa,EAAE,MAAM,eAAe,CAAC;AAMzF,eAAO,MAAM,iBAAiB,EAAE,aAAa,EAgoB5C,CAAC;AAEF,eAAO,MAAM,oBAAoB,EAAE,iBAOlC,CAAC;AAEF,eAAO,MAAQ,iBAAiB,uEAAE,cAAc,+DAAE,WAAW,2CAAoC,CAAC"}

package/dist/references/nist-ai-rmf.js

@@ -19,7 +19,7 @@
  * environmental impact) that have no direct AIVSS metric equivalent and add little value for
  * the agentic AI security use case this PoC targets.
  */
-import { buildHelpers, } from "./registry.js";
+import { buildHelpers } from "./registry.js";
 // ── GOVERN function ────────────────────────────────────────────────────────────
 // Policies, accountability structures, and oversight mechanisms that enable
 // responsible AI risk management across the organisation.
@@ -615,13 +615,4 @@ export const NIST_AI_RMF_CITATION = {
     url: "https://airc.nist.gov/RMF/1",
 };
 export const { getRisksForMetric, getRisksByType, getRiskById } = buildHelpers(NIST_AI_RMF_RISKS);
-/**
- * The registrable adapter. Registered in ./index.ts — an adapter that is not
- * registered there never annotates a finding, however complete its risk list.
- */
-export const NIST_AI_RMF_ADAPTER = {
-    citation: NIST_AI_RMF_CITATION,
-    risks: NIST_AI_RMF_RISKS,
-    ...buildHelpers(NIST_AI_RMF_RISKS),
-};
 //# sourceMappingURL=nist-ai-rmf.js.map

package/dist/references/nist-ai-rmf.js.map

@@ -1 +1 @@
-{"version":3,"file":"nist-ai-rmf.js","sourceRoot":"","sources":["../../src/references/nist-ai-rmf.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,EACL,YAAY,GAIb,MAAM,eAAe,CAAC;AAEvB,kFAAkF;AAClF,4EAA4E;AAC5E,0DAA0D;AAE1D,MAAM,CAAC,MAAM,iBAAiB,GAAoB;IAChD;QACE,EAAE,EAAE,qBAAqB;QACzB,SAAS,EAAE,aAAa;QACxB,QAAQ,EAAE,QAAQ;QAClB,IAAI,EAAE,mCAAmC;QACzC,WAAW,EACT,yaAAya;QAC3a,QAAQ,EAAE,YAAY;QACtB,YAAY,EAAE,CAAC,IAAI,CAAC;QACpB,iBAAiB,EAAE,EAAE;QACrB,aAAa,EAAE,gCAAgC;KAChD;IACD;QACE,EAAE,EAAE,qBAAqB;QACzB,SAAS,EAAE,aAAa;QACxB,QAAQ,EAAE,QAAQ;QAClB,IAAI,EAAE,4CAA4C;QAClD,WAAW,EACT,0ZAA0Z;QAC5Z,QAAQ,EAAE,YAAY;QACtB,YAAY,EAAE,CAAC,IAAI,CAAC;QACpB,iBAAiB,EAAE,EAAE;QACrB,aAAa,EAAE,gCAAgC;KAChD;IACD;QACE,EAAE,EAAE,qBAAqB;QACzB,SAAS,EAAE,aAAa;QACxB,QAAQ,EAAE,QAAQ;QAClB,IAAI,EAAE,wCAAwC;QAC9C,WAAW,EACT,iVAAiV;QACnV,QAAQ,EAAE,YAAY;QACtB,YAAY,EAAE,CAAC,IAAI,CAAC;QACpB,iBAAiB,EAAE,EAAE;QACrB,aAAa,EAAE,gCAAgC;KAChD;IACD;QACE,EAAE,EAAE,qBAAqB;QACzB,SAAS,EAAE,aAAa;QACxB,QAAQ,EAAE,QAAQ;QAClB,IAAI,EAAE,qCAAqC;QAC3C,WAAW,EACT,oWAAoW;QACtW,QAAQ,EAAE,YAAY;QACtB,YAAY,EAAE,CAAC,IAAI,CAAC;QACpB,iBAAiB,EAAE,EAAE;QACrB,aAAa,EAAE,gCAAgC;KAChD;IACD;QACE,EAAE,EAAE,qBAAqB;QACzB,SAAS,EAAE,aAAa;QACxB,QAAQ,EAAE,QAAQ;QAClB,IAAI,EAAE,wCAAwC;QAC9C,WAAW,EACT,kYAAkY;QACpY,QAAQ,EAAE,YAAY;QACtB,YAAY,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC;QAC1B,iBAAiB,EAAE,EAAE;QACrB,aAAa,EAAE,gCAAgC;KAChD;IACD;QACE,EAAE,EAAE,qBAAqB;QACzB,SAAS,EAAE,aAAa;QACxB,QAAQ,EAAE,QAAQ;QAClB,IAAI,EAAE,qBAAqB;QAC3B,WAAW,EACT,4UAA4U;QAC9U,QAAQ,EAAE,YAAY;QACtB,YAAY,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC;QAC1B,iBAAiB,EAAE,EAAE;QACrB,aAAa,EAAE,gCAAgC;KAChD;IACD;QACE,EAAE,EAAE,qBAAqB;QACzB,SAAS,EAAE,aAAa;QACxB,QAAQ,EAAE,QAAQ;QAClB,IAAI,EAAE,oCAAoC;QAC1C,WAAW,EACT,mYAAmY;QACrY,QAAQ,EAAE,YAAY;QACtB,YAAY,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC;QAC1B,iBAAiB,EAAE,EAAE;QACrB,aAAa,EAAE,gCAAgC;KAChD;IACD;QACE,EAAE,EAAE,qBAAqB;QACzB,SAAS,EAAE,aAAa;QACxB,QAAQ,EAAE,QAAQ;QAClB,IAAI,EAAE,kDAAkD;QACxD,WAAW,EACT,qVAAqV;QACvV,QAAQ,EAAE,YAAY;QACtB,YAAY,EAAE,CAAC,IAAI,CAAC;QACpB,iBAAiB,EAAE,EAAE;QACrB,aAAa,EAAE,gCAAgC;KAChD;IACD;QACE,EAAE,EAAE,qBAAqB;QACzB,SAAS,EAAE,aAAa;QACxB,QAAQ,EAAE,QAAQ;QAClB,IAAI,EAAE,sCAAsC;QAC5C,WAAW,EACT,2WAA2W;QAC7W,QAAQ,EAAE,YAAY;QACtB,YAAY,EAAE,CAAC,IAAI,CAAC;QACpB,iBAAiB,EAAE,EAAE;QACrB,aAAa,EAAE,gCAAgC;KAChD;IACD;QACE,EAAE,EAAE,qBAAqB;QACzB,SAAS,EAAE,aAAa;QACxB,QAAQ,EAAE,QAAQ;QAClB,IAAI,EAAE,4CAA4C;QAClD,WAAW,EACT,mXAAmX;QACrX,QAAQ,EAAE,YAAY;QACtB,YAAY,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC;QAC1B,iBAAiB,EAAE,EAAE;QACrB,aAAa,EAAE,gCAAgC;KAChD;IACD;QACE,EAAE,EAAE,qBAAqB;QACzB,SAAS,EAAE,aAAa;QACxB,QAAQ,EAAE,QAAQ;QAClB,IAAI,EAAE,qCAAqC;QAC3C,WAAW,EACT,mWAAmW;QACrW,QAAQ,EAAE,YAAY;QACtB,YAAY,EAAE,CAAC,IAAI,CAAC;QACpB,iBAAiB,EAAE,EAAE;QACrB,aAAa,EAAE,gCAAgC;KAChD;IACD;QACE,EAAE,EAAE,qBAAqB;QACzB,SAAS,EAAE,aAAa;QACxB,QAAQ,EAAE,QAAQ;QAClB,IAAI,EAAE,sCAAsC;QAC5C,WAAW,EACT,yXAAyX;QAC3X,QAAQ,EAAE,YAAY;QACtB,YAAY,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC;QAC1B,iBAAiB,EAAE,EAAE;QACrB,aAAa,EAAE,gCAAgC;KAChD;IACD;QACE,EAAE,EAAE,qBAAqB;QACzB,SAAS,EAAE,aAAa;QACxB,QAAQ,EAAE,QAAQ;QAClB,IAAI,EAAE,8DAA8D;QACpE,WAAW,EACT,0XAA0X;QAC5X,QAAQ,EAAE,YAAY;QACtB,YAAY,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC;QAC1B,iBAAiB,EAAE,EAAE;QACrB,aAAa,EAAE,gCAAgC;KAChD;IACD;QACE,EAAE,EAAE,qBAAqB;QACzB,SAAS,EAAE,aAAa;QACxB,QAAQ,EAAE,QAAQ;QAClB,IAAI,EAAE,8BAA8B;QACpC,WAAW,EACT,mZAAmZ;QACrZ,QAAQ,EAAE,YAAY;QACtB,YAAY,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC;QAC1B,iBAAiB,EAAE,EAAE;QACrB,aAAa,EAAE,gCAAgC;KAChD;IACD;QACE,EAAE,EAAE,qBAAqB;QACzB,SAAS,EAAE,aAAa;QACxB,QAAQ,EAAE,QAAQ;QAClB,IAAI,EAAE,2CAA2C;QACjD,WAAW,EACT,sXAAsX;QACxX,QAAQ,EAAE,UAAU;QACpB,YAAY,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC;QAC1B,iBAAiB,EAAE,CAAC,WAAW,CAAC;QAChC,aAAa,EAAE,gCAAgC;KAChD;IAED,gFAAgF;IAChF,4EAA4E;IAC5E,2CAA2C;IAE3C;QACE,EAAE,EAAE,kBAAkB;QACtB,SAAS,EAAE,aAAa;QACxB,QAAQ,EAAE,KAAK;QACf,IAAI,EAAE,yCAAyC;QAC/C,WAAW,EACT,+bAA+b;QACjc,QAAQ,EAAE,YAAY;QACtB,YAAY,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC;QAC1B,iBAAiB,EAAE,EAAE;QACrB,aAAa,EAAE,6BAA6B;KAC7C;IACD;QACE,EAAE,EAAE,kBAAkB;QACtB,SAAS,EAAE,aAAa;QACxB,QAAQ,EAAE,KAAK;QACf,IAAI,EAAE,6CAA6C;QACnD,WAAW,EACT,0TAA0T;QAC5T,QAAQ,EAAE,YAAY;QACtB,YAAY,EAAE,CAAC,IAAI,CAAC;QACpB,iBAAiB,EAAE,EAAE;QACrB,aAAa,EAAE,6BAA6B;KAC7C;IACD;QACE,EAAE,EAAE,kBAAkB;QACtB,SAAS,EAAE,aAAa;QACxB,QAAQ,EAAE,KAAK;QACf,IAAI,EAAE,qCAAqC;QAC3C,WAAW,EACT,kYAAkY;QACpY,QAAQ,EAAE,YAAY;QACtB,YAAY,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC;QAC1B,iBAAiB,EAAE,EAAE;QACrB,aAAa,EAAE,6BAA6B;KAC7C;IACD;QACE,EAAE,EAAE,kBAAkB;QACtB,SAAS,EAAE,aAAa;QACxB,QAAQ,EAAE,KAAK;QACf,IAAI,EAAE,kCAAkC;QACxC,WAAW,EACT,oWAAoW;QACtW,QAAQ,EAAE,YAAY;QACtB,YAAY,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC;QAC1B,iBAAiB,EAAE,EAAE;QACrB,aAAa,EAAE,6BAA6B;KAC7C;IACD;QACE,EAAE,EAAE,kBAAkB;QACtB,SAAS,EAAE,aAAa;QACxB,QAAQ,EAAE,KAAK;QACf,IAAI,EAAE,oDAAoD;QAC1D,WAAW,EACT,uZAAuZ;QACzZ,QAAQ,EAAE,YAAY;QACtB,YAAY,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC;QAChC,iBAAiB,EAAE,EAAE;QACrB,aAAa,EAAE,6BAA6B;KAC7C;IACD;QACE,EAAE,EAAE,kBAAkB;QACtB,SAAS,EAAE,aAAa;QACxB,QAAQ,EAAE,KAAK;QACf,IAAI,EAAE,8CAA8C;QACpD,WAAW,EACT,gYAAgY;QAClY,QAAQ,EAAE,YAAY;QACtB,YAAY,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC;QAC1B,iBAAiB,EAAE,EAAE;QACrB,aAAa,EAAE,6BAA6B;KAC7C;IACD;QACE,EAAE,EAAE,kBAAkB;QACtB,SAAS,EAAE,aAAa;QACxB,QAAQ,EAAE,KAAK;QACf,IAAI,EAAE,mCAAmC;QACzC,WAAW,EACT,sWAAsW;QACxW,QAAQ,EAAE,YAAY;QACtB,YAAY,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC;QAC1B,iBAAiB,EAAE,EAAE;QACrB,aAAa,EAAE,6BAA6B;KAC7C;IACD;QACE,EAAE,EAAE,kBAAkB;QACtB,SAAS,EAAE,aAAa;QACxB,QAAQ,EAAE,KAAK;QACf,IAAI,EAAE,2BAA2B;QACjC,WAAW,EACT,gcAAgc;QAClc,QAAQ,EAAE,YAAY;QACtB,YAAY,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC;QAC1B,iBAAiB,EAAE,EAAE;QACrB,aAAa,EAAE,6BAA6B;KAC7C;IACD;QACE,EAAE,EAAE,kBAAkB;QACtB,SAAS,EAAE,aAAa;QACxB,QAAQ,EAAE,KAAK;QACf,IAAI,EAAE,sCAAsC;QAC5C,WAAW,EACT,sYAAsY;QACxY,QAAQ,EAAE,YAAY;QACtB,YAAY,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC;QAChC,iBAAiB,EAAE,EAAE;QACrB,aAAa,EAAE,6BAA6B;KAC7C;IACD;QACE,EAAE,EAAE,kBAAkB;QACtB,SAAS,EAAE,aAAa;QACxB,QAAQ,EAAE,KAAK;QACf,IAAI,EAAE,0CAA0C;QAChD,WAAW,EACT,uWAAuW;QACzW,QAAQ,EAAE,UAAU;QACpB,YAAY,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC;QAChC,iBAAiB,EAAE,CAAC,WAAW,CAAC;QAChC,aAAa,EAAE,6BAA6B;KAC7C;IACD;QACE,EAAE,EAAE,kBAAkB;QACtB,SAAS,EAAE,aAAa;QACxB,QAAQ,EAAE,KAAK;QACf,IAAI,EAAE,4CAA4C;QAClD,WAAW,EACT,mYAAmY;QACrY,QAAQ,EAAE,YAAY;QACtB,YAAY,EAAE,CAAC,IAAI,CAAC;QACpB,iBAAiB,EAAE,EAAE;QACrB,aAAa,EAAE,6BAA6B;KAC7C;IAED,iFAAiF;IACjF,yEAAyE;IACzE,wDAAwD;IAExD;QACE,EAAE,EAAE,sBAAsB;QAC1B,SAAS,EAAE,aAAa;QACxB,QAAQ,EAAE,SAAS;QACnB,IAAI,EAAE,qCAAqC;QAC3C,WAAW,EACT,8XAA8X;QAChY,QAAQ,EAAE,YAAY;QACtB,YAAY,EAAE,CAAC,IAAI,CAAC;QACpB,iBAAiB,EAAE,EAAE;QACrB,aAAa,EAAE,iCAAiC;KACjD;IACD;QACE,EAAE,EAAE,sBAAsB;QAC1B,SAAS,EAAE,aAAa;QACxB,QAAQ,EAAE,SAAS;QACnB,IAAI,EAAE,kDAAkD;QACxD,WAAW,EACT,gYAAgY;QAClY,QAAQ,EAAE,YAAY;QACtB,YAAY,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC;QAC1B,iBAAiB,EAAE,EAAE;QACrB,aAAa,EAAE,iCAAiC;KACjD;IACD;QACE,EAAE,EAAE,sBAAsB;QAC1B,SAAS,EAAE,aAAa;QACxB,QAAQ,EAAE,SAAS;QACnB,IAAI,EAAE,oCAAoC;QAC1C,WAAW,EACT,8XAA8X;QAChY,QAAQ,EAAE,YAAY;QACtB,YAAY,EAAE,CAAC,IAAI,CAAC;QACpB,iBAAiB,EAAE,EAAE;QACrB,aAAa,EAAE,iCAAiC;KACjD;IACD;QACE,EAAE,EAAE,sBAAsB;QAC1B,SAAS,EAAE,aAAa;QACxB,QAAQ,EAAE,SAAS;QACnB,IAAI,EAAE,oBAAoB;QAC1B,WAAW,EACT,2TAA2T;QAC7T,QAAQ,EAAE,YAAY;QACtB,YAAY,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC;QAC1B,iBAAiB,EAAE,EAAE;QACrB,aAAa,EAAE,iCAAiC;KACjD;IACD;QACE,EAAE,EAAE,sBAAsB;QAC1B,SAAS,EAAE,aAAa;QACxB,QAAQ,EAAE,SAAS;QACnB,IAAI,EAAE,gDAAgD;QACtD,WAAW,EACT,8VAA8V;QAChW,QAAQ,EAAE,YAAY;QACtB,YAAY,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC;QAC1B,iBAAiB,EAAE,EAAE;QACrB,aAAa,EAAE,iCAAiC;KACjD;IACD;QACE,EAAE,EAAE,sBAAsB;QAC1B,SAAS,EAAE,aAAa;QACxB,QAAQ,EAAE,SAAS;QACnB,IAAI,EAAE,8CAA8C;QACpD,WAAW,EACT,+ZAA+Z;QACja,QAAQ,EAAE,YAAY;QACtB,YAAY,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC;QAChC,iBAAiB,EAAE,EAAE;QACrB,aAAa,EAAE,iCAAiC;KACjD;IACD;QACE,EAAE,EAAE,sBAAsB;QAC1B,SAAS,EAAE,aAAa;QACxB,QAAQ,EAAE,SAAS;QACnB,IAAI,EAAE,6CAA6C;QACnD,WAAW,EACT,kWAAkW;QACpW,QAAQ,EAAE,YAAY;QACtB,YAAY,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC;QAC1B,iBAAiB,EAAE,EAAE;QACrB,aAAa,EAAE,iCAAiC;KACjD;IACD;QACE,EAAE,EAAE,sBAAsB;QAC1B,SAAS,EAAE,aAAa;QACxB,QAAQ,EAAE,SAAS;QACnB,IAAI,EAAE,wBAAwB;QAC9B,WAAW,EACT,oWAAoW;QACtW,QAAQ,EAAE,UAAU;QACpB,YAAY,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC;QAChC,iBAAiB,EAAE,EAAE;QACrB,aAAa,EAAE,iCAAiC;KACjD;IACD;QACE,EAAE,EAAE,sBAAsB;QAC1B,SAAS,EAAE,aAAa;QACxB,QAAQ,EAAE,SAAS;QACnB,IAAI,EAAE,oCAAoC;QAC1C,WAAW,EACT,6YAA6Y;QAC/Y,QAAQ,EAAE,UAAU;QACpB,YAAY,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC;QACtC,iBAAiB,EAAE,CAAC,WAAW,EAAE,WAAW,EAAE,WAAW,EAAE,WAAW,CAAC;QACvE,aAAa,EAAE,iCAAiC;KACjD;IACD;QACE,EAAE,EAAE,sBAAsB;QAC1B,SAAS,EAAE,aAAa;QACxB,QAAQ,EAAE,SAAS;QACnB,IAAI,EAAE,kDAAkD;QACxD,WAAW,EACT,gZAAgZ;QAClZ,QAAQ,EAAE,YAAY;QACtB,YAAY,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC;QAChC,iBAAiB,EAAE,EAAE;QACrB,aAAa,EAAE,iCAAiC;KACjD;IACD;QACE,EAAE,EAAE,sBAAsB;QAC1B,SAAS,EAAE,aAAa;QACxB,QAAQ,EAAE,SAAS;QACnB,IAAI,EAAE,gDAAgD;QACtD,WAAW,EACT,qYAAqY;QACvY,QAAQ,EAAE,YAAY;QACtB,YAAY,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC;QAC1B,iBAAiB,EAAE,EAAE;QACrB,aAAa,EAAE,iCAAiC;KACjD;IACD;QACE,EAAE,EAAE,uBAAuB;QAC3B,SAAS,EAAE,aAAa;QACxB,QAAQ,EAAE,SAAS;QACnB,IAAI,EAAE,0BAA0B;QAChC,WAAW,EACT,0YAA0Y;QAC5Y,QAAQ,EAAE,YAAY;QACtB,YAAY,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC;QAChC,iBAAiB,EAAE,CAAC,WAAW,CAAC;QAChC,aAAa,EAAE,kCAAkC;KAClD;IACD;QACE,EAAE,EAAE,uBAAuB;QAC3B,SAAS,EAAE,aAAa;QACxB,QAAQ,EAAE,SAAS;QACnB,IAAI,EAAE,8BAA8B;QACpC,WAAW,EACT,uWAAuW;QACzW,QAAQ,EAAE,SAAS;QACnB,YAAY,EAAE,CAAC,IAAI,CAAC;QACpB,iBAAiB,EAAE,EAAE;QACrB,aAAa,EAAE,kCAAkC;KAClD;IACD;QACE,EAAE,EAAE,sBAAsB;QAC1B,SAAS,EAAE,aAAa;QACxB,QAAQ,EAAE,SAAS;QACnB,IAAI,EAAE,0CAA0C;QAChD,WAAW,EACT,0XAA0X;QAC5X,QAAQ,EAAE,YAAY;QACtB,YAAY,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC;QAChC,iBAAiB,EAAE,EAAE;QACrB,aAAa,EAAE,iCAAiC;KACjD;IACD;QACE,EAAE,EAAE,sBAAsB;QAC1B,SAAS,EAAE,aAAa;QACxB,QAAQ,EAAE,SAAS;QACnB,IAAI,EAAE,qCAAqC;QAC3C,WAAW,EACT,oYAAoY;QACtY,QAAQ,EAAE,YAAY;QACtB,YAAY,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC;QAC1B,iBAAiB,EAAE,EAAE;QACrB,aAAa,EAAE,iCAAiC;KACjD;IAED,iFAAiF;IACjF,0EAA0E;IAC1E,sCAAsC;IAEtC;QACE,EAAE,EAAE,qBAAqB;QACzB,SAAS,EAAE,aAAa;QACxB,QAAQ,EAAE,QAAQ;QAClB,IAAI,EAAE,mCAAmC;QACzC,WAAW,EACT,mUAAmU;QACrU,QAAQ,EAAE,YAAY;QACtB,YAAY,EAAE,CAAC,IAAI,CAAC;QACpB,iBAAiB,EAAE,EAAE;QACrB,aAAa,EAAE,gCAAgC;KAChD;IACD;QACE,EAAE,EAAE,qBAAqB;QACzB,SAAS,EAAE,aAAa;QACxB,QAAQ,EAAE,QAAQ;QAClB,IAAI,EAAE,+BAA+B;QACrC,WAAW,EACT,4WAA4W;QAC9W,QAAQ,EAAE,YAAY;QACtB,YAAY,EAAE,CAAC,IAAI,CAAC;QACpB,iBAAiB,EAAE,EAAE;QACrB,aAAa,EAAE,gCAAgC;KAChD;IACD;QACE,EAAE,EAAE,qBAAqB;QACzB,SAAS,EAAE,aAAa;QACxB,QAAQ,EAAE,QAAQ;QAClB,IAAI,EAAE,sCAAsC;QAC5C,WAAW,EACT,wVAAwV;QAC1V,QAAQ,EAAE,YAAY;QACtB,YAAY,EAAE,CAAC,IAAI,CAAC;QACpB,iBAAiB,EAAE,EAAE;QACrB,aAAa,EAAE,gCAAgC;KAChD;IACD;QACE,EAAE,EAAE,qBAAqB;QACzB,SAAS,EAAE,aAAa;QACxB,QAAQ,EAAE,QAAQ;QAClB,IAAI,EAAE,6BAA6B;QACnC,WAAW,EACT,iWAAiW;QACnW,QAAQ,EAAE,YAAY;QACtB,YAAY,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC;QAC1B,iBAAiB,EAAE,EAAE;QACrB,aAAa,EAAE,gCAAgC;KAChD;IACD;QACE,EAAE,EAAE,qBAAqB;QACzB,SAAS,EAAE,aAAa;QACxB,QAAQ,EAAE,QAAQ;QAClB,IAAI,EAAE,oCAAoC;QAC1C,WAAW,EACT,qUAAqU;QACvU,QAAQ,EAAE,UAAU;QACpB,YAAY,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC;QAC1B,iBAAiB,EAAE,EAAE;QACrB,aAAa,EAAE,gCAAgC;KAChD;IACD;QACE,EAAE,EAAE,qBAAqB;QACzB,SAAS,EAAE,aAAa;QACxB,QAAQ,EAAE,QAAQ;QAClB,IAAI,EAAE,qCAAqC;QAC3C,WAAW,EACT,2bAA2b;QAC7b,QAAQ,EAAE,UAAU;QACpB,YAAY,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC;QAChC,iBAAiB,EAAE,EAAE;QACrB,aAAa,EAAE,gCAAgC;KAChD;IACD;QACE,EAAE,EAAE,qBAAqB;QACzB,SAAS,EAAE,aAAa;QACxB,QAAQ,EAAE,QAAQ;QAClB,IAAI,EAAE,gCAAgC;QACtC,WAAW,EACT,4XAA4X;QAC9X,QAAQ,EAAE,UAAU;QACpB,YAAY,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC;QAChC,iBAAiB,EAAE,CAAC,WAAW,CAAC;QAChC,aAAa,EAAE,gCAAgC;KAChD;IACD;QACE,EAAE,EAAE,qBAAqB;QACzB,SAAS,EAAE,aAAa;QACxB,QAAQ,EAAE,QAAQ;QAClB,IAAI,EAAE,8BAA8B;QACpC,WAAW,EACT,sWAAsW;QACxW,QAAQ,EAAE,UAAU;QACpB,YAAY,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC;QAChC,iBAAiB,EAAE,CAAC,WAAW,EAAE,WAAW,CAAC;QAC7C,aAAa,EAAE,gCAAgC;KAChD;IACD;QACE,EAAE,EAAE,qBAAqB;QACzB,SAAS,EAAE,aAAa;QACxB,QAAQ,EAAE,QAAQ;QAClB,IAAI,EAAE,gDAAgD;QACtD,WAAW,EACT,wbAAwb;QAC1b,QAAQ,EAAE,YAAY;QACtB,YAAY,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC;QAChC,iBAAiB,EAAE,EAAE;QACrB,aAAa,EAAE,gCAAgC;KAChD;IACD;QACE,EAAE,EAAE,qBAAqB;QACzB,SAAS,EAAE,aAAa;QACxB,QAAQ,EAAE,QAAQ;QAClB,IAAI,EAAE,mCAAmC;QACzC,WAAW,EACT,mYAAmY;QACrY,QAAQ,EAAE,YAAY;QACtB,YAAY,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC;QAC1B,iBAAiB,EAAE,EAAE;QACrB,aAAa,EAAE,gCAAgC;KAChD;IACD;QACE,EAAE,EAAE,qBAAqB;QACzB,SAAS,EAAE,aAAa;QACxB,QAAQ,EAAE,QAAQ;QAClB,IAAI,EAAE,gDAAgD;QACtD,WAAW,EACT,qbAAqb;QACvb,QAAQ,EAAE,UAAU;QACpB,YAAY,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC;QAChC,iBAAiB,EAAE,EAAE;QACrB,aAAa,EAAE,gCAAgC;KAChD;CACF,CAAC;AAEF,MAAM,CAAC,MAAM,oBAAoB,GAAsB;IACrD,EAAE,EAAE,aAAa;IACjB,KAAK,EAAE,gEAAgE;IACvE,OAAO,EAAE,KAAK;IACd,OAAO,EAAE,CAAC,uDAAuD,CAAC;IAClE,IAAI,EAAE,IAAI;IACV,GAAG,EAAE,6BAA6B;CACnC,CAAC;AAEF,MAAM,CAAC,MAAM,EAAE,iBAAiB,EAAE,cAAc,EAAE,WAAW,EAAE,GAAG,YAAY,CAAC,iBAAiB,CAAC,CAAC;AAElG;;;GAGG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAqB;IACnD,QAAQ,EAAE,oBAAoB;IAC9B,KAAK,EAAE,iBAAiB;IACxB,GAAG,YAAY,CAAC,iBAAiB,CAAC;CACnC,CAAC"}
+{"version":3,"file":"nist-ai-rmf.js","sourceRoot":"","sources":["../../src/references/nist-ai-rmf.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,EAAE,YAAY,EAA8C,MAAM,eAAe,CAAC;AAEzF,kFAAkF;AAClF,4EAA4E;AAC5E,0DAA0D;AAE1D,MAAM,CAAC,MAAM,iBAAiB,GAAoB;IAChD;QACE,EAAE,EAAE,qBAAqB;QACzB,SAAS,EAAE,aAAa;QACxB,QAAQ,EAAE,QAAQ;QAClB,IAAI,EAAE,mCAAmC;QACzC,WAAW,EACT,yaAAya;QAC3a,QAAQ,EAAE,YAAY;QACtB,YAAY,EAAE,CAAC,IAAI,CAAC;QACpB,iBAAiB,EAAE,EAAE;QACrB,aAAa,EAAE,gCAAgC;KAChD;IACD;QACE,EAAE,EAAE,qBAAqB;QACzB,SAAS,EAAE,aAAa;QACxB,QAAQ,EAAE,QAAQ;QAClB,IAAI,EAAE,4CAA4C;QAClD,WAAW,EACT,0ZAA0Z;QAC5Z,QAAQ,EAAE,YAAY;QACtB,YAAY,EAAE,CAAC,IAAI,CAAC;QACpB,iBAAiB,EAAE,EAAE;QACrB,aAAa,EAAE,gCAAgC;KAChD;IACD;QACE,EAAE,EAAE,qBAAqB;QACzB,SAAS,EAAE,aAAa;QACxB,QAAQ,EAAE,QAAQ;QAClB,IAAI,EAAE,wCAAwC;QAC9C,WAAW,EACT,iVAAiV;QACnV,QAAQ,EAAE,YAAY;QACtB,YAAY,EAAE,CAAC,IAAI,CAAC;QACpB,iBAAiB,EAAE,EAAE;QACrB,aAAa,EAAE,gCAAgC;KAChD;IACD;QACE,EAAE,EAAE,qBAAqB;QACzB,SAAS,EAAE,aAAa;QACxB,QAAQ,EAAE,QAAQ;QAClB,IAAI,EAAE,qCAAqC;QAC3C,WAAW,EACT,oWAAoW;QACtW,QAAQ,EAAE,YAAY;QACtB,YAAY,EAAE,CAAC,IAAI,CAAC;QACpB,iBAAiB,EAAE,EAAE;QACrB,aAAa,EAAE,gCAAgC;KAChD;IACD;QACE,EAAE,EAAE,qBAAqB;QACzB,SAAS,EAAE,aAAa;QACxB,QAAQ,EAAE,QAAQ;QAClB,IAAI,EAAE,wCAAwC;QAC9C,WAAW,EACT,kYAAkY;QACpY,QAAQ,EAAE,YAAY;QACtB,YAAY,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC;QAC1B,iBAAiB,EAAE,EAAE;QACrB,aAAa,EAAE,gCAAgC;KAChD;IACD;QACE,EAAE,EAAE,qBAAqB;QACzB,SAAS,EAAE,aAAa;QACxB,QAAQ,EAAE,QAAQ;QAClB,IAAI,EAAE,qBAAqB;QAC3B,WAAW,EACT,4UAA4U;QAC9U,QAAQ,EAAE,YAAY;QACtB,YAAY,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC;QAC1B,iBAAiB,EAAE,EAAE;QACrB,aAAa,EAAE,gCAAgC;KAChD;IACD;QACE,EAAE,EAAE,qBAAqB;QACzB,SAAS,EAAE,aAAa;QACxB,QAAQ,EAAE,QAAQ;QAClB,IAAI,EAAE,oCAAoC;QAC1C,WAAW,EACT,mYAAmY;QACrY,QAAQ,EAAE,YAAY;QACtB,YAAY,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC;QAC1B,iBAAiB,EAAE,EAAE;QACrB,aAAa,EAAE,gCAAgC;KAChD;IACD;QACE,EAAE,EAAE,qBAAqB;QACzB,SAAS,EAAE,aAAa;QACxB,QAAQ,EAAE,QAAQ;QAClB,IAAI,EAAE,kDAAkD;QACxD,WAAW,EACT,qVAAqV;QACvV,QAAQ,EAAE,YAAY;QACtB,YAAY,EAAE,CAAC,IAAI,CAAC;QACpB,iBAAiB,EAAE,EAAE;QACrB,aAAa,EAAE,gCAAgC;KAChD;IACD;QACE,EAAE,EAAE,qBAAqB;QACzB,SAAS,EAAE,aAAa;QACxB,QAAQ,EAAE,QAAQ;QAClB,IAAI,EAAE,sCAAsC;QAC5C,WAAW,EACT,2WAA2W;QAC7W,QAAQ,EAAE,YAAY;QACtB,YAAY,EAAE,CAAC,IAAI,CAAC;QACpB,iBAAiB,EAAE,EAAE;QACrB,aAAa,EAAE,gCAAgC;KAChD;IACD;QACE,EAAE,EAAE,qBAAqB;QACzB,SAAS,EAAE,aAAa;QACxB,QAAQ,EAAE,QAAQ;QAClB,IAAI,EAAE,4CAA4C;QAClD,WAAW,EACT,mXAAmX;QACrX,QAAQ,EAAE,YAAY;QACtB,YAAY,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC;QAC1B,iBAAiB,EAAE,EAAE;QACrB,aAAa,EAAE,gCAAgC;KAChD;IACD;QACE,EAAE,EAAE,qBAAqB;QACzB,SAAS,EAAE,aAAa;QACxB,QAAQ,EAAE,QAAQ;QAClB,IAAI,EAAE,qCAAqC;QAC3C,WAAW,EACT,mWAAmW;QACrW,QAAQ,EAAE,YAAY;QACtB,YAAY,EAAE,CAAC,IAAI,CAAC;QACpB,iBAAiB,EAAE,EAAE;QACrB,aAAa,EAAE,gCAAgC;KAChD;IACD;QACE,EAAE,EAAE,qBAAqB;QACzB,SAAS,EAAE,aAAa;QACxB,QAAQ,EAAE,QAAQ;QAClB,IAAI,EAAE,sCAAsC;QAC5C,WAAW,EACT,yXAAyX;QAC3X,QAAQ,EAAE,YAAY;QACtB,YAAY,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC;QAC1B,iBAAiB,EAAE,EAAE;QACrB,aAAa,EAAE,gCAAgC;KAChD;IACD;QACE,EAAE,EAAE,qBAAqB;QACzB,SAAS,EAAE,aAAa;QACxB,QAAQ,EAAE,QAAQ;QAClB,IAAI,EAAE,8DAA8D;QACpE,WAAW,EACT,0XAA0X;QAC5X,QAAQ,EAAE,YAAY;QACtB,YAAY,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC;QAC1B,iBAAiB,EAAE,EAAE;QACrB,aAAa,EAAE,gCAAgC;KAChD;IACD;QACE,EAAE,EAAE,qBAAqB;QACzB,SAAS,EAAE,aAAa;QACxB,QAAQ,EAAE,QAAQ;QAClB,IAAI,EAAE,8BAA8B;QACpC,WAAW,EACT,mZAAmZ;QACrZ,QAAQ,EAAE,YAAY;QACtB,YAAY,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC;QAC1B,iBAAiB,EAAE,EAAE;QACrB,aAAa,EAAE,gCAAgC;KAChD;IACD;QACE,EAAE,EAAE,qBAAqB;QACzB,SAAS,EAAE,aAAa;QACxB,QAAQ,EAAE,QAAQ;QAClB,IAAI,EAAE,2CAA2C;QACjD,WAAW,EACT,sXAAsX;QACxX,QAAQ,EAAE,UAAU;QACpB,YAAY,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC;QAC1B,iBAAiB,EAAE,CAAC,WAAW,CAAC;QAChC,aAAa,EAAE,gCAAgC;KAChD;IAED,gFAAgF;IAChF,4EAA4E;IAC5E,2CAA2C;IAE3C;QACE,EAAE,EAAE,kBAAkB;QACtB,SAAS,EAAE,aAAa;QACxB,QAAQ,EAAE,KAAK;QACf,IAAI,EAAE,yCAAyC;QAC/C,WAAW,EACT,+bAA+b;QACjc,QAAQ,EAAE,YAAY;QACtB,YAAY,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC;QAC1B,iBAAiB,EAAE,EAAE;QACrB,aAAa,EAAE,6BAA6B;KAC7C;IACD;QACE,EAAE,EAAE,kBAAkB;QACtB,SAAS,EAAE,aAAa;QACxB,QAAQ,EAAE,KAAK;QACf,IAAI,EAAE,6CAA6C;QACnD,WAAW,EACT,0TAA0T;QAC5T,QAAQ,EAAE,YAAY;QACtB,YAAY,EAAE,CAAC,IAAI,CAAC;QACpB,iBAAiB,EAAE,EAAE;QACrB,aAAa,EAAE,6BAA6B;KAC7C;IACD;QACE,EAAE,EAAE,kBAAkB;QACtB,SAAS,EAAE,aAAa;QACxB,QAAQ,EAAE,KAAK;QACf,IAAI,EAAE,qCAAqC;QAC3C,WAAW,EACT,kYAAkY;QACpY,QAAQ,EAAE,YAAY;QACtB,YAAY,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC;QAC1B,iBAAiB,EAAE,EAAE;QACrB,aAAa,EAAE,6BAA6B;KAC7C;IACD;QACE,EAAE,EAAE,kBAAkB;QACtB,SAAS,EAAE,aAAa;QACxB,QAAQ,EAAE,KAAK;QACf,IAAI,EAAE,kCAAkC;QACxC,WAAW,EACT,oWAAoW;QACtW,QAAQ,EAAE,YAAY;QACtB,YAAY,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC;QAC1B,iBAAiB,EAAE,EAAE;QACrB,aAAa,EAAE,6BAA6B;KAC7C;IACD;QACE,EAAE,EAAE,kBAAkB;QACtB,SAAS,EAAE,aAAa;QACxB,QAAQ,EAAE,KAAK;QACf,IAAI,EAAE,oDAAoD;QAC1D,WAAW,EACT,uZAAuZ;QACzZ,QAAQ,EAAE,YAAY;QACtB,YAAY,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC;QAChC,iBAAiB,EAAE,EAAE;QACrB,aAAa,EAAE,6BAA6B;KAC7C;IACD;QACE,EAAE,EAAE,kBAAkB;QACtB,SAAS,EAAE,aAAa;QACxB,QAAQ,EAAE,KAAK;QACf,IAAI,EAAE,8CAA8C;QACpD,WAAW,EACT,gYAAgY;QAClY,QAAQ,EAAE,YAAY;QACtB,YAAY,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC;QAC1B,iBAAiB,EAAE,EAAE;QACrB,aAAa,EAAE,6BAA6B;KAC7C;IACD;QACE,EAAE,EAAE,kBAAkB;QACtB,SAAS,EAAE,aAAa;QACxB,QAAQ,EAAE,KAAK;QACf,IAAI,EAAE,mCAAmC;QACzC,WAAW,EACT,sWAAsW;QACxW,QAAQ,EAAE,YAAY;QACtB,YAAY,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC;QAC1B,iBAAiB,EAAE,EAAE;QACrB,aAAa,EAAE,6BAA6B;KAC7C;IACD;QACE,EAAE,EAAE,kBAAkB;QACtB,SAAS,EAAE,aAAa;QACxB,QAAQ,EAAE,KAAK;QACf,IAAI,EAAE,2BAA2B;QACjC,WAAW,EACT,gcAAgc;QAClc,QAAQ,EAAE,YAAY;QACtB,YAAY,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC;QAC1B,iBAAiB,EAAE,EAAE;QACrB,aAAa,EAAE,6BAA6B;KAC7C;IACD;QACE,EAAE,EAAE,kBAAkB;QACtB,SAAS,EAAE,aAAa;QACxB,QAAQ,EAAE,KAAK;QACf,IAAI,EAAE,sCAAsC;QAC5C,WAAW,EACT,sYAAsY;QACxY,QAAQ,EAAE,YAAY;QACtB,YAAY,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC;QAChC,iBAAiB,EAAE,EAAE;QACrB,aAAa,EAAE,6BAA6B;KAC7C;IACD;QACE,EAAE,EAAE,kBAAkB;QACtB,SAAS,EAAE,aAAa;QACxB,QAAQ,EAAE,KAAK;QACf,IAAI,EAAE,0CAA0C;QAChD,WAAW,EACT,uWAAuW;QACzW,QAAQ,EAAE,UAAU;QACpB,YAAY,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC;QAChC,iBAAiB,EAAE,CAAC,WAAW,CAAC;QAChC,aAAa,EAAE,6BAA6B;KAC7C;IACD;QACE,EAAE,EAAE,kBAAkB;QACtB,SAAS,EAAE,aAAa;QACxB,QAAQ,EAAE,KAAK;QACf,IAAI,EAAE,4CAA4C;QAClD,WAAW,EACT,mYAAmY;QACrY,QAAQ,EAAE,YAAY;QACtB,YAAY,EAAE,CAAC,IAAI,CAAC;QACpB,iBAAiB,EAAE,EAAE;QACrB,aAAa,EAAE,6BAA6B;KAC7C;IAED,iFAAiF;IACjF,yEAAyE;IACzE,wDAAwD;IAExD;QACE,EAAE,EAAE,sBAAsB;QAC1B,SAAS,EAAE,aAAa;QACxB,QAAQ,EAAE,SAAS;QACnB,IAAI,EAAE,qCAAqC;QAC3C,WAAW,EACT,8XAA8X;QAChY,QAAQ,EAAE,YAAY;QACtB,YAAY,EAAE,CAAC,IAAI,CAAC;QACpB,iBAAiB,EAAE,EAAE;QACrB,aAAa,EAAE,iCAAiC;KACjD;IACD;QACE,EAAE,EAAE,sBAAsB;QAC1B,SAAS,EAAE,aAAa;QACxB,QAAQ,EAAE,SAAS;QACnB,IAAI,EAAE,kDAAkD;QACxD,WAAW,EACT,gYAAgY;QAClY,QAAQ,EAAE,YAAY;QACtB,YAAY,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC;QAC1B,iBAAiB,EAAE,EAAE;QACrB,aAAa,EAAE,iCAAiC;KACjD;IACD;QACE,EAAE,EAAE,sBAAsB;QAC1B,SAAS,EAAE,aAAa;QACxB,QAAQ,EAAE,SAAS;QACnB,IAAI,EAAE,oCAAoC;QAC1C,WAAW,EACT,8XAA8X;QAChY,QAAQ,EAAE,YAAY;QACtB,YAAY,EAAE,CAAC,IAAI,CAAC;QACpB,iBAAiB,EAAE,EAAE;QACrB,aAAa,EAAE,iCAAiC;KACjD;IACD;QACE,EAAE,EAAE,sBAAsB;QAC1B,SAAS,EAAE,aAAa;QACxB,QAAQ,EAAE,SAAS;QACnB,IAAI,EAAE,oBAAoB;QAC1B,WAAW,EACT,2TAA2T;QAC7T,QAAQ,EAAE,YAAY;QACtB,YAAY,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC;QAC1B,iBAAiB,EAAE,EAAE;QACrB,aAAa,EAAE,iCAAiC;KACjD;IACD;QACE,EAAE,EAAE,sBAAsB;QAC1B,SAAS,EAAE,aAAa;QACxB,QAAQ,EAAE,SAAS;QACnB,IAAI,EAAE,gDAAgD;QACtD,WAAW,EACT,8VAA8V;QAChW,QAAQ,EAAE,YAAY;QACtB,YAAY,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC;QAC1B,iBAAiB,EAAE,EAAE;QACrB,aAAa,EAAE,iCAAiC;KACjD;IACD;QACE,EAAE,EAAE,sBAAsB;QAC1B,SAAS,EAAE,aAAa;QACxB,QAAQ,EAAE,SAAS;QACnB,IAAI,EAAE,8CAA8C;QACpD,WAAW,EACT,+ZAA+Z;QACja,QAAQ,EAAE,YAAY;QACtB,YAAY,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC;QAChC,iBAAiB,EAAE,EAAE;QACrB,aAAa,EAAE,iCAAiC;KACjD;IACD;QACE,EAAE,EAAE,sBAAsB;QAC1B,SAAS,EAAE,aAAa;QACxB,QAAQ,EAAE,SAAS;QACnB,IAAI,EAAE,6CAA6C;QACnD,WAAW,EACT,kWAAkW;QACpW,QAAQ,EAAE,YAAY;QACtB,YAAY,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC;QAC1B,iBAAiB,EAAE,EAAE;QACrB,aAAa,EAAE,iCAAiC;KACjD;IACD;QACE,EAAE,EAAE,sBAAsB;QAC1B,SAAS,EAAE,aAAa;QACxB,QAAQ,EAAE,SAAS;QACnB,IAAI,EAAE,wBAAwB;QAC9B,WAAW,EACT,oWAAoW;QACtW,QAAQ,EAAE,UAAU;QACpB,YAAY,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC;QAChC,iBAAiB,EAAE,EAAE;QACrB,aAAa,EAAE,iCAAiC;KACjD;IACD;QACE,EAAE,EAAE,sBAAsB;QAC1B,SAAS,EAAE,aAAa;QACxB,QAAQ,EAAE,SAAS;QACnB,IAAI,EAAE,oCAAoC;QAC1C,WAAW,EACT,6YAA6Y;QAC/Y,QAAQ,EAAE,UAAU;QACpB,YAAY,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC;QACtC,iBAAiB,EAAE,CAAC,WAAW,EAAE,WAAW,EAAE,WAAW,EAAE,WAAW,CAAC;QACvE,aAAa,EAAE,iCAAiC;KACjD;IACD;QACE,EAAE,EAAE,sBAAsB;QAC1B,SAAS,EAAE,aAAa;QACxB,QAAQ,EAAE,SAAS;QACnB,IAAI,EAAE,kDAAkD;QACxD,WAAW,EACT,gZAAgZ;QAClZ,QAAQ,EAAE,YAAY;QACtB,YAAY,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC;QAChC,iBAAiB,EAAE,EAAE;QACrB,aAAa,EAAE,iCAAiC;KACjD;IACD;QACE,EAAE,EAAE,sBAAsB;QAC1B,SAAS,EAAE,aAAa;QACxB,QAAQ,EAAE,SAAS;QACnB,IAAI,EAAE,gDAAgD;QACtD,WAAW,EACT,qYAAqY;QACvY,QAAQ,EAAE,YAAY;QACtB,YAAY,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC;QAC1B,iBAAiB,EAAE,EAAE;QACrB,aAAa,EAAE,iCAAiC;KACjD;IACD;QACE,EAAE,EAAE,uBAAuB;QAC3B,SAAS,EAAE,aAAa;QACxB,QAAQ,EAAE,SAAS;QACnB,IAAI,EAAE,0BAA0B;QAChC,WAAW,EACT,0YAA0Y;QAC5Y,QAAQ,EAAE,YAAY;QACtB,YAAY,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC;QAChC,iBAAiB,EAAE,CAAC,WAAW,CAAC;QAChC,aAAa,EAAE,kCAAkC;KAClD;IACD;QACE,EAAE,EAAE,uBAAuB;QAC3B,SAAS,EAAE,aAAa;QACxB,QAAQ,EAAE,SAAS;QACnB,IAAI,EAAE,8BAA8B;QACpC,WAAW,EACT,uWAAuW;QACzW,QAAQ,EAAE,SAAS;QACnB,YAAY,EAAE,CAAC,IAAI,CAAC;QACpB,iBAAiB,EAAE,EAAE;QACrB,aAAa,EAAE,kCAAkC;KAClD;IACD;QACE,EAAE,EAAE,sBAAsB;QAC1B,SAAS,EAAE,aAAa;QACxB,QAAQ,EAAE,SAAS;QACnB,IAAI,EAAE,0CAA0C;QAChD,WAAW,EACT,0XAA0X;QAC5X,QAAQ,EAAE,YAAY;QACtB,YAAY,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC;QAChC,iBAAiB,EAAE,EAAE;QACrB,aAAa,EAAE,iCAAiC;KACjD;IACD;QACE,EAAE,EAAE,sBAAsB;QAC1B,SAAS,EAAE,aAAa;QACxB,QAAQ,EAAE,SAAS;QACnB,IAAI,EAAE,qCAAqC;QAC3C,WAAW,EACT,oYAAoY;QACtY,QAAQ,EAAE,YAAY;QACtB,YAAY,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC;QAC1B,iBAAiB,EAAE,EAAE;QACrB,aAAa,EAAE,iCAAiC;KACjD;IAED,iFAAiF;IACjF,0EAA0E;IAC1E,sCAAsC;IAEtC;QACE,EAAE,EAAE,qBAAqB;QACzB,SAAS,EAAE,aAAa;QACxB,QAAQ,EAAE,QAAQ;QAClB,IAAI,EAAE,mCAAmC;QACzC,WAAW,EACT,mUAAmU;QACrU,QAAQ,EAAE,YAAY;QACtB,YAAY,EAAE,CAAC,IAAI,CAAC;QACpB,iBAAiB,EAAE,EAAE;QACrB,aAAa,EAAE,gCAAgC;KAChD;IACD;QACE,EAAE,EAAE,qBAAqB;QACzB,SAAS,EAAE,aAAa;QACxB,QAAQ,EAAE,QAAQ;QAClB,IAAI,EAAE,+BAA+B;QACrC,WAAW,EACT,4WAA4W;QAC9W,QAAQ,EAAE,YAAY;QACtB,YAAY,EAAE,CAAC,IAAI,CAAC;QACpB,iBAAiB,EAAE,EAAE;QACrB,aAAa,EAAE,gCAAgC;KAChD;IACD;QACE,EAAE,EAAE,qBAAqB;QACzB,SAAS,EAAE,aAAa;QACxB,QAAQ,EAAE,QAAQ;QAClB,IAAI,EAAE,sCAAsC;QAC5C,WAAW,EACT,wVAAwV;QAC1V,QAAQ,EAAE,YAAY;QACtB,YAAY,EAAE,CAAC,IAAI,CAAC;QACpB,iBAAiB,EAAE,EAAE;QACrB,aAAa,EAAE,gCAAgC;KAChD;IACD;QACE,EAAE,EAAE,qBAAqB;QACzB,SAAS,EAAE,aAAa;QACxB,QAAQ,EAAE,QAAQ;QAClB,IAAI,EAAE,6BAA6B;QACnC,WAAW,EACT,iWAAiW;QACnW,QAAQ,EAAE,YAAY;QACtB,YAAY,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC;QAC1B,iBAAiB,EAAE,EAAE;QACrB,aAAa,EAAE,gCAAgC;KAChD;IACD;QACE,EAAE,EAAE,qBAAqB;QACzB,SAAS,EAAE,aAAa;QACxB,QAAQ,EAAE,QAAQ;QAClB,IAAI,EAAE,oCAAoC;QAC1C,WAAW,EACT,qUAAqU;QACvU,QAAQ,EAAE,UAAU;QACpB,YAAY,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC;QAC1B,iBAAiB,EAAE,EAAE;QACrB,aAAa,EAAE,gCAAgC;KAChD;IACD;QACE,EAAE,EAAE,qBAAqB;QACzB,SAAS,EAAE,aAAa;QACxB,QAAQ,EAAE,QAAQ;QAClB,IAAI,EAAE,qCAAqC;QAC3C,WAAW,EACT,2bAA2b;QAC7b,QAAQ,EAAE,UAAU;QACpB,YAAY,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC;QAChC,iBAAiB,EAAE,EAAE;QACrB,aAAa,EAAE,gCAAgC;KAChD;IACD;QACE,EAAE,EAAE,qBAAqB;QACzB,SAAS,EAAE,aAAa;QACxB,QAAQ,EAAE,QAAQ;QAClB,IAAI,EAAE,gCAAgC;QACtC,WAAW,EACT,4XAA4X;QAC9X,QAAQ,EAAE,UAAU;QACpB,YAAY,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC;QAChC,iBAAiB,EAAE,CAAC,WAAW,CAAC;QAChC,aAAa,EAAE,gCAAgC;KAChD;IACD;QACE,EAAE,EAAE,qBAAqB;QACzB,SAAS,EAAE,aAAa;QACxB,QAAQ,EAAE,QAAQ;QAClB,IAAI,EAAE,8BAA8B;QACpC,WAAW,EACT,sWAAsW;QACxW,QAAQ,EAAE,UAAU;QACpB,YAAY,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC;QAChC,iBAAiB,EAAE,CAAC,WAAW,EAAE,WAAW,CAAC;QAC7C,aAAa,EAAE,gCAAgC;KAChD;IACD;QACE,EAAE,EAAE,qBAAqB;QACzB,SAAS,EAAE,aAAa;QACxB,QAAQ,EAAE,QAAQ;QAClB,IAAI,EAAE,gDAAgD;QACtD,WAAW,EACT,wbAAwb;QAC1b,QAAQ,EAAE,YAAY;QACtB,YAAY,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC;QAChC,iBAAiB,EAAE,EAAE;QACrB,aAAa,EAAE,gCAAgC;KAChD;IACD;QACE,EAAE,EAAE,qBAAqB;QACzB,SAAS,EAAE,aAAa;QACxB,QAAQ,EAAE,QAAQ;QAClB,IAAI,EAAE,mCAAmC;QACzC,WAAW,EACT,mYAAmY;QACrY,QAAQ,EAAE,YAAY;QACtB,YAAY,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC;QAC1B,iBAAiB,EAAE,EAAE;QACrB,aAAa,EAAE,gCAAgC;KAChD;IACD;QACE,EAAE,EAAE,qBAAqB;QACzB,SAAS,EAAE,aAAa;QACxB,QAAQ,EAAE,QAAQ;QAClB,IAAI,EAAE,gDAAgD;QACtD,WAAW,EACT,qbAAqb;QACvb,QAAQ,EAAE,UAAU;QACpB,YAAY,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC;QAChC,iBAAiB,EAAE,EAAE;QACrB,aAAa,EAAE,gCAAgC;KAChD;CACF,CAAC;AAEF,MAAM,CAAC,MAAM,oBAAoB,GAAsB;IACrD,EAAE,EAAE,aAAa;IACjB,KAAK,EAAE,gEAAgE;IACvE,OAAO,EAAE,KAAK;IACd,OAAO,EAAE,CAAC,uDAAuD,CAAC;IAClE,IAAI,EAAE,IAAI;IACV,GAAG,EAAE,6BAA6B;CACnC,CAAC;AAEF,MAAM,CAAC,MAAM,EAAE,iBAAiB,EAAE,cAAc,EAAE,WAAW,EAAE,GAAG,YAAY,CAAC,iBAAiB,CAAC,CAAC"}

package/dist/references/owasp-agentic-top10.d.ts

@@ -9,7 +9,7 @@
  * enabling threat statements to be grounded in the OWASP community-driven agentic guidance.
  */
 import type { MetricCode } from "../aivss/types.js";
-import { type FrameworkAdapter, type FrameworkCitation, type FrameworkRisk } from "./registry.js";
+import { type FrameworkCitation, type FrameworkRisk } from "./registry.js";
 /**
  * OWASP Top 10 for Agentic Applications 2026 — complete risk catalogue with AIVSS metric
  * and MITRE ATLAS technique cross-references.
@@ -42,9 +42,4 @@ export declare const getRisksByType: (type: import("./registry.js").RiskType) =>
  * Find an OWASP Agentic Top 10 risk by its ID.
  */
 export declare const getRiskById: (id: string) => FrameworkRisk | undefined;
-/**
- * The registrable adapter. Registered in ./index.ts — an adapter that is not
- * registered there never annotates a finding, however complete its risk list.
- */
-export declare const OWASP_AGENTIC_TOP10_ADAPTER: FrameworkAdapter;
 //# sourceMappingURL=owasp-agentic-top10.d.ts.map

package/dist/references/owasp-agentic-top10.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"owasp-agentic-top10.d.ts","sourceRoot":"","sources":["../../src/references/owasp-agentic-top10.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,EAEL,KAAK,gBAAgB,EACrB,KAAK,iBAAiB,EACtB,KAAK,aAAa,EACnB,MAAM,eAAe,CAAC;AAEvB;;;;;;;;;;;;;;;GAeG;AACH,eAAO,MAAM,yBAAyB,EAAE,aAAa,EAoLpD,CAAC;AAEF,6EAA6E;AAC7E,eAAO,MAAM,4BAA4B,EAAE,iBAO1C,CAAC;AAIF;;;GAGG;AACH,eAAO,MAAM,iBAAiB,yCAA4B,CAAC;AAE3D;;GAEG;AACH,eAAO,MAAM,cAAc,6DAAyB,CAAC;AAErD;;GAEG;AACH,eAAO,MAAM,WAAW,2CAAsB,CAAC;AAE/C;;;GAGG;AACH,eAAO,MAAM,2BAA2B,EAAE,gBAIzC,CAAC"}
+{"version":3,"file":"owasp-agentic-top10.d.ts","sourceRoot":"","sources":["../../src/references/owasp-agentic-top10.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,EAEL,KAAK,iBAAiB,EACtB,KAAK,aAAa,EACnB,MAAM,eAAe,CAAC;AAEvB;;;;;;;;;;;;;;;GAeG;AACH,eAAO,MAAM,yBAAyB,EAAE,aAAa,EAoLpD,CAAC;AAEF,6EAA6E;AAC7E,eAAO,MAAM,4BAA4B,EAAE,iBAO1C,CAAC;AAIF;;;GAGG;AACH,eAAO,MAAM,iBAAiB,yCAA4B,CAAC;AAE3D;;GAEG;AACH,eAAO,MAAM,cAAc,6DAAyB,CAAC;AAErD;;GAEG;AACH,eAAO,MAAM,WAAW,2CAAsB,CAAC"}

package/dist/references/owasp-agentic-top10.js

@@ -190,13 +190,4 @@ export const getRisksByType = helpers.getRisksByType;
  * Find an OWASP Agentic Top 10 risk by its ID.
  */
 export const getRiskById = helpers.getRiskById;
-/**
- * The registrable adapter. Registered in ./index.ts — an adapter that is not
- * registered there never annotates a finding, however complete its risk list.
- */
-export const OWASP_AGENTIC_TOP10_ADAPTER = {
-    citation: OWASP_AGENTIC_TOP10_CITATION,
-    risks: OWASP_AGENTIC_TOP10_RISKS,
-    ...helpers,
-};
 //# sourceMappingURL=owasp-agentic-top10.js.map

package/dist/references/owasp-agentic-top10.js.map

@@ -1 +1 @@
-{"version":3,"file":"owasp-agentic-top10.js","sourceRoot":"","sources":["../../src/references/owasp-agentic-top10.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAGH,OAAO,EACL,YAAY,GAIb,MAAM,eAAe,CAAC;AAEvB;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAoB;IACxD,8EAA8E;IAE9E;QACE,EAAE,EAAE,+BAA+B;QACnC,SAAS,EAAE,qBAAqB;QAChC,QAAQ,EAAE,2BAA2B;QACrC,IAAI,EAAE,mBAAmB;QACzB,WAAW,EACT,qmBAAqmB;QACvmB,QAAQ,EAAE,UAAU;QACpB,YAAY,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC;QAChC,iBAAiB,EAAE;YACjB,WAAW,EAAE,wDAAwD;YACrE,WAAW,EAAE,4CAA4C;SAC1D;QACD,aAAa,EACX,uEAAuE;KAC1E;IAED,8EAA8E;IAE9E;QACE,EAAE,EAAE,yBAAyB;QAC7B,SAAS,EAAE,qBAAqB;QAChC,QAAQ,EAAE,sCAAsC;QAChD,IAAI,EAAE,8BAA8B;QACpC,WAAW,EACT,ykBAAykB;QAC3kB,QAAQ,EAAE,UAAU;QACpB,YAAY,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC;QAChC,iBAAiB,EAAE;YACjB,WAAW,EAAE,kDAAkD;YAC/D,WAAW,EAAE,6EAA6E;SAC3F;QACD,aAAa,EACX,kFAAkF;KACrF;IAED,8EAA8E;IAE9E;QACE,EAAE,EAAE,sCAAsC;QAC1C,SAAS,EAAE,qBAAqB;QAChC,QAAQ,EAAE,sCAAsC;QAChD,IAAI,EAAE,8BAA8B;QACpC,WAAW,EACT,2qBAA2qB;QAC7qB,QAAQ,EAAE,UAAU;QACpB,YAAY,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC;QAChC,iBAAiB,EAAE;YACjB,WAAW,EAAE,4EAA4E;SAC1F;QACD,aAAa,EACX,kFAAkF;KACrF;IAED,8EAA8E;IAE9E;QACE,EAAE,EAAE,0BAA0B;QAC9B,SAAS,EAAE,qBAAqB;QAChC,QAAQ,EAAE,8CAA8C;QACxD,IAAI,EAAE,sCAAsC;QAC5C,WAAW,EACT,isBAAisB;QACnsB,QAAQ,EAAE,UAAU;QACpB,YAAY,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC;QAChC,iBAAiB,EAAE;YACjB,WAAW,EAAE,6DAA6D;YAC1E,eAAe,EAAE,sGAAsG;YACvH,WAAW,EAAE,wEAAwE;SACtF;QACD,aAAa,EACX,0FAA0F;KAC7F;IAED,8EAA8E;IAE9E;QACE,EAAE,EAAE,4BAA4B;QAChC,SAAS,EAAE,qBAAqB;QAChC,QAAQ,EAAE,yCAAyC;QACnD,IAAI,EAAE,iCAAiC;QACvC,WAAW,EACT,grBAAgrB;QAClrB,QAAQ,EAAE,UAAU;QACpB,YAAY,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC;QAChC,iBAAiB,EAAE;YACjB,WAAW,EAAE,qEAAqE;SACnF;QACD,aAAa,EACX,qFAAqF;KACxF;IAED,8EAA8E;IAE9E;QACE,EAAE,EAAE,sCAAsC;QAC1C,SAAS,EAAE,qBAAqB;QAChC,QAAQ,EAAE,oCAAoC;QAC9C,IAAI,EAAE,4BAA4B;QAClC,WAAW,EACT,uqBAAuqB;QACzqB,QAAQ,EAAE,UAAU;QACpB,YAAY,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC;QAChC,iBAAiB,EAAE;YACjB,WAAW,EAAE,4DAA4D;YACzE,WAAW,EAAE,uEAAuE;SACrF;QACD,aAAa,EACX,gFAAgF;KACnF;IAED,8EAA8E;IAE9E;QACE,EAAE,EAAE,uCAAuC;QAC3C,SAAS,EAAE,qBAAqB;QAChC,QAAQ,EAAE,4CAA4C;QACtD,IAAI,EAAE,oCAAoC;QAC1C,WAAW,EACT,iqBAAiqB;QACnqB,QAAQ,EAAE,UAAU;QACpB,YAAY,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC;QAChC,iBAAiB,EAAE,EAAE;QACrB,aAAa,EACX,wFAAwF;KAC3F;IAED,8EAA8E;IAE9E;QACE,EAAE,EAAE,gCAAgC;QACpC,SAAS,EAAE,qBAAqB;QAChC,QAAQ,EAAE,4BAA4B;QACtC,IAAI,EAAE,oBAAoB;QAC1B,WAAW,EACT,ktBAAktB;QACptB,QAAQ,EAAE,UAAU;QACpB,YAAY,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC;QAChC,iBAAiB,EAAE,EAAE;QACrB,aAAa,EACX,wEAAwE;KAC3E;IAED,8EAA8E;IAE9E;QACE,EAAE,EAAE,4CAA4C;QAChD,SAAS,EAAE,qBAAqB;QAChC,QAAQ,EAAE,wCAAwC;QAClD,IAAI,EAAE,gCAAgC;QACtC,WAAW,EACT,grBAAgrB;QAClrB,QAAQ,EAAE,UAAU;QACpB,YAAY,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC;QAC1B,iBAAiB,EAAE,EAAE;QACrB,aAAa,EACX,oFAAoF;KACvF;IAED,8EAA8E;IAE9E;QACE,EAAE,EAAE,0BAA0B;QAC9B,SAAS,EAAE,qBAAqB;QAChC,QAAQ,EAAE,sBAAsB;QAChC,IAAI,EAAE,cAAc;QACpB,WAAW,EACT,kqBAAkqB;QACpqB,QAAQ,EAAE,UAAU;QACpB,YAAY,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC;QAChC,iBAAiB,EAAE;YACjB,WAAW,EAAE,sDAAsD;YACnE,WAAW,EAAE,0EAA0E;SACxF;QACD,aAAa,EACX,kEAAkE;KACrE;CACF,CAAC;AAEF,6EAA6E;AAC7E,MAAM,CAAC,MAAM,4BAA4B,GAAsB;IAC7D,EAAE,EAAE,qBAAqB;IACzB,KAAK,EAAE,4CAA4C;IACnD,OAAO,EAAE,MAAM;IACf,OAAO,EAAE,CAAC,6DAA6D,CAAC;IACxE,IAAI,EAAE,IAAI;IACV,GAAG,EAAE,yBAAyB;CAC/B,CAAC;AAEF,MAAM,OAAO,GAAG,YAAY,CAAC,yBAAyB,CAAC,CAAC;AAExD;;;GAGG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,OAAO,CAAC,iBAAiB,CAAC;AAE3D;;GAEG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,OAAO,CAAC,cAAc,CAAC;AAErD;;GAEG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC;AAE/C;;;GAGG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAqB;IAC3D,QAAQ,EAAE,4BAA4B;IACtC,KAAK,EAAE,yBAAyB;IAChC,GAAG,OAAO;CACX,CAAC"}
+{"version":3,"file":"owasp-agentic-top10.js","sourceRoot":"","sources":["../../src/references/owasp-agentic-top10.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAGH,OAAO,EACL,YAAY,GAGb,MAAM,eAAe,CAAC;AAEvB;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAoB;IACxD,8EAA8E;IAE9E;QACE,EAAE,EAAE,+BAA+B;QACnC,SAAS,EAAE,qBAAqB;QAChC,QAAQ,EAAE,2BAA2B;QACrC,IAAI,EAAE,mBAAmB;QACzB,WAAW,EACT,qmBAAqmB;QACvmB,QAAQ,EAAE,UAAU;QACpB,YAAY,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC;QAChC,iBAAiB,EAAE;YACjB,WAAW,EAAE,wDAAwD;YACrE,WAAW,EAAE,4CAA4C;SAC1D;QACD,aAAa,EACX,uEAAuE;KAC1E;IAED,8EAA8E;IAE9E;QACE,EAAE,EAAE,yBAAyB;QAC7B,SAAS,EAAE,qBAAqB;QAChC,QAAQ,EAAE,sCAAsC;QAChD,IAAI,EAAE,8BAA8B;QACpC,WAAW,EACT,ykBAAykB;QAC3kB,QAAQ,EAAE,UAAU;QACpB,YAAY,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC;QAChC,iBAAiB,EAAE;YACjB,WAAW,EAAE,kDAAkD;YAC/D,WAAW,EAAE,6EAA6E;SAC3F;QACD,aAAa,EACX,kFAAkF;KACrF;IAED,8EAA8E;IAE9E;QACE,EAAE,EAAE,sCAAsC;QAC1C,SAAS,EAAE,qBAAqB;QAChC,QAAQ,EAAE,sCAAsC;QAChD,IAAI,EAAE,8BAA8B;QACpC,WAAW,EACT,2qBAA2qB;QAC7qB,QAAQ,EAAE,UAAU;QACpB,YAAY,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC;QAChC,iBAAiB,EAAE;YACjB,WAAW,EAAE,4EAA4E;SAC1F;QACD,aAAa,EACX,kFAAkF;KACrF;IAED,8EAA8E;IAE9E;QACE,EAAE,EAAE,0BAA0B;QAC9B,SAAS,EAAE,qBAAqB;QAChC,QAAQ,EAAE,8CAA8C;QACxD,IAAI,EAAE,sCAAsC;QAC5C,WAAW,EACT,isBAAisB;QACnsB,QAAQ,EAAE,UAAU;QACpB,YAAY,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC;QAChC,iBAAiB,EAAE;YACjB,WAAW,EAAE,6DAA6D;YAC1E,eAAe,EAAE,sGAAsG;YACvH,WAAW,EAAE,wEAAwE;SACtF;QACD,aAAa,EACX,0FAA0F;KAC7F;IAED,8EAA8E;IAE9E;QACE,EAAE,EAAE,4BAA4B;QAChC,SAAS,EAAE,qBAAqB;QAChC,QAAQ,EAAE,yCAAyC;QACnD,IAAI,EAAE,iCAAiC;QACvC,WAAW,EACT,grBAAgrB;QAClrB,QAAQ,EAAE,UAAU;QACpB,YAAY,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC;QAChC,iBAAiB,EAAE;YACjB,WAAW,EAAE,qEAAqE;SACnF;QACD,aAAa,EACX,qFAAqF;KACxF;IAED,8EAA8E;IAE9E;QACE,EAAE,EAAE,sCAAsC;QAC1C,SAAS,EAAE,qBAAqB;QAChC,QAAQ,EAAE,oCAAoC;QAC9C,IAAI,EAAE,4BAA4B;QAClC,WAAW,EACT,uqBAAuqB;QACzqB,QAAQ,EAAE,UAAU;QACpB,YAAY,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC;QAChC,iBAAiB,EAAE;YACjB,WAAW,EAAE,4DAA4D;YACzE,WAAW,EAAE,uEAAuE;SACrF;QACD,aAAa,EACX,gFAAgF;KACnF;IAED,8EAA8E;IAE9E;QACE,EAAE,EAAE,uCAAuC;QAC3C,SAAS,EAAE,qBAAqB;QAChC,QAAQ,EAAE,4CAA4C;QACtD,IAAI,EAAE,oCAAoC;QAC1C,WAAW,EACT,iqBAAiqB;QACnqB,QAAQ,EAAE,UAAU;QACpB,YAAY,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC;QAChC,iBAAiB,EAAE,EAAE;QACrB,aAAa,EACX,wFAAwF;KAC3F;IAED,8EAA8E;IAE9E;QACE,EAAE,EAAE,gCAAgC;QACpC,SAAS,EAAE,qBAAqB;QAChC,QAAQ,EAAE,4BAA4B;QACtC,IAAI,EAAE,oBAAoB;QAC1B,WAAW,EACT,ktBAAktB;QACptB,QAAQ,EAAE,UAAU;QACpB,YAAY,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC;QAChC,iBAAiB,EAAE,EAAE;QACrB,aAAa,EACX,wEAAwE;KAC3E;IAED,8EAA8E;IAE9E;QACE,EAAE,EAAE,4CAA4C;QAChD,SAAS,EAAE,qBAAqB;QAChC,QAAQ,EAAE,wCAAwC;QAClD,IAAI,EAAE,gCAAgC;QACtC,WAAW,EACT,grBAAgrB;QAClrB,QAAQ,EAAE,UAAU;QACpB,YAAY,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC;QAC1B,iBAAiB,EAAE,EAAE;QACrB,aAAa,EACX,oFAAoF;KACvF;IAED,8EAA8E;IAE9E;QACE,EAAE,EAAE,0BAA0B;QAC9B,SAAS,EAAE,qBAAqB;QAChC,QAAQ,EAAE,sBAAsB;QAChC,IAAI,EAAE,cAAc;QACpB,WAAW,EACT,kqBAAkqB;QACpqB,QAAQ,EAAE,UAAU;QACpB,YAAY,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC;QAChC,iBAAiB,EAAE;YACjB,WAAW,EAAE,sDAAsD;YACnE,WAAW,EAAE,0EAA0E;SACxF;QACD,aAAa,EACX,kEAAkE;KACrE;CACF,CAAC;AAEF,6EAA6E;AAC7E,MAAM,CAAC,MAAM,4BAA4B,GAAsB;IAC7D,EAAE,EAAE,qBAAqB;IACzB,KAAK,EAAE,4CAA4C;IACnD,OAAO,EAAE,MAAM;IACf,OAAO,EAAE,CAAC,6DAA6D,CAAC;IACxE,IAAI,EAAE,IAAI;IACV,GAAG,EAAE,yBAAyB;CAC/B,CAAC;AAEF,MAAM,OAAO,GAAG,YAAY,CAAC,yBAAyB,CAAC,CAAC;AAExD;;;GAGG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,OAAO,CAAC,iBAAiB,CAAC;AAE3D;;GAEG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,OAAO,CAAC,cAAc,CAAC;AAErD;;GAEG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC"}

package/package.json

@@ -1,18 +1,7 @@
 {
   "name": "@waratahlabs/canopy",
-  "version": "0.5.0",
-  "description": "Multi-framework threat modelling for agentic AI systems \u2014 OWASP AIVSS V4 scoring and MITRE ATLAS technique mapping, with findings annotated against six risk frameworks",
-  "canopy": {
-    "comment": "Framework adapters registered by this build. Asserted against FRAMEWORK_REGISTRY by src/references/registry-parity.test.ts \u2014 a framework listed here but not registered (or vice versa) fails the suite. Update both together.",
-    "frameworks": [
-      "acsc",
-      "aicm",
-      "dstg-meaid",
-      "nemoclaw",
-      "nist-ai-rmf",
-      "owasp-agentic-top10"
-    ]
-  },
+  "version": "0.6.0",
+  "description": "Multi-framework threat modelling for agentic AI systems \u2014 AIVSS V4, MITRE ATLAS, ACSC, OWASP, NIST AI RMF, DSTG MEAID",
   "type": "module",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
@@ -37,7 +26,7 @@
     "dist",
     "vendor/atlas-release",
     "schemas",
-    "demo",
+    "demo/data",
     "SKILL.md",
     "README.md",
     "LICENSE"
@@ -71,11 +60,8 @@
     "agentic-ai",
     "AIVSS",
     "MITRE-ATLAS",
-    "OWASP-agentic-top-10",
+    "OWASP",
     "NIST-AI-RMF",
-    "AICM",
-    "DSTG-MEAID",
-    "ACSC",
     "threat-composer",
     "AI-security",
     "n8n"