@waratahlabs/canopy 0.5.0

package/dist/references/aicm.js

@@ -0,0 +1,447 @@
+/**
+ * CSA AI Controls Matrix (AICM) v1.1.1
+ *
+ * Source: "AI Controls Matrix" (AICM v1.1.1) + "AI CAIQ" v1.1.0
+ * Author: Cloud Security Alliance (CSA)
+ * URL: https://cloudsecurityalliance.org/artifacts/ai-controls-matrix
+ * Machine-readable bundle: https://cloudsecurityalliance.org/artifacts/aicm-machine-readable-bundle-json-yaml-oscal
+ * Published: 2026-07-22 (OSCAL/JSON/YAML bundle generation date)
+ *
+ * AICM extends CSA's Cloud Controls Matrix (CCM) with AI-specific controls across
+ * 18 domains and 247 total controls, each tagged by `control_type`:
+ * "AI-Specific" (novel to AICM), "Cloud & AI Related" (CCM controls with AI-relevant
+ * scope extensions), or "Cloud-Specific" (unmodified CCM — out of scope here).
+ *
+ * Sub-set selection rationale (mirrors the NIST AI RMF adapter's precedent — curate
+ * to the agentic-AI-security use case rather than transcribe every control verbatim):
+ * this adapter covers the 31 controls CSA itself tags "AI-Specific" — the layer AICM
+ * actually adds beyond cloud security baseline, and the layer with the tightest
+ * correspondence to AIVSS metrics and ATLAS technique coverage. The 200 "Cloud & AI
+ * Related" and 15 "Cloud-Specific" controls are general cloud-security hygiene
+ * (already covered by CCM/ISO 27017 territory) with no direct agentic-AI-specific
+ * finding to contribute; omitting them keeps this adapter's findings load-bearing
+ * rather than diluted by generic cloud controls with an AI label attached.
+ *
+ * AIVSS metric mapping rationale:
+ * - AIS (agent/app boundary, sandboxing, cache, prompt differentiation) → AA, CS, MR
+ * - DSP (poisoning, PETs, data integrity/relevance) → MR, DS, LL
+ * - GRC (acceptable use, impact/bias/ethics assessment, explainability, oversight) → EI, GV, DC
+ * - HRS (competency + acceptable-use training) → GV
+ * - IAM (output-modification authorization) → GV, CS
+ * - LOG (input/output monitoring) → AA, GV
+ * - MDS (model documentation, adversarial analysis/hardening, integrity, failure, open-model risk) → MR, AA, LL, DC
+ * - STA (service BOM) → LL, CS
+ * - TVM (threat modelling, guardrails) → AA, GV
+ */
+import { buildHelpers, } from "./registry.js";
+// ── AIS — Application & Interface Security ──────────────────────────────────
+// Agent runtime boundaries, sandboxing, cache protection, prompt differentiation.
+const AIS_RISKS = [
+    {
+        id: "aicm-ais-11-agent-boundaries",
+        framework: "aicm",
+        category: "AIS",
+        name: "Agents Security Boundaries",
+        description: "Establish security boundaries for agents. Without explicit isolation between an agent's permissions, tool access, and the systems it can reach, a compromised or manipulated agent inherits the full blast radius of its host environment rather than a scoped subset — the same gap Canopy's `UNDECLARED_CAPABILITY_RISK` finding already targets for capability-surface adapters.",
+        riskType: "security",
+        aivssMetrics: ["AA", "CS"],
+        atlasTechniqueIds: ["AML.T0053", "AML.T0084"],
+        sourceSection: "AICM v1.1.1 > AIS-11",
+    },
+    {
+        id: "aicm-ais-13-sandboxing",
+        framework: "aicm",
+        category: "AIS",
+        name: "AI Sandboxing",
+        description: "Implement sandboxing techniques to execute AI tools and plugins in isolated environments to prevent unintended interactions with critical systems or data and limit the possibility of lateral movement. Directly targets the same tool-execution attack surface as agent-to-agent handoffs in Canopy's N8N adapter.",
+        riskType: "security",
+        aivssMetrics: ["AA", "CS"],
+        atlasTechniqueIds: ["AML.T0053"],
+        sourceSection: "AICM v1.1.1 > AIS-13",
+    },
+    {
+        id: "aicm-ais-14-cache-protection",
+        framework: "aicm",
+        category: "AIS",
+        name: "AI Cache Protection",
+        description: "Implement security measures to protect caches in GenAI systems and services. Unprotected prompt/response caches are a cross-tenant and cross-session data-sensitivity risk distinct from the model or the transport layer.",
+        riskType: "security",
+        aivssMetrics: ["CS", "DS"],
+        atlasTechniqueIds: [],
+        sourceSection: "AICM v1.1.1 > AIS-14",
+    },
+    {
+        id: "aicm-ais-15-prompt-differentiation",
+        framework: "aicm",
+        category: "AIS",
+        name: "Prompt Differentiation",
+        description: "Implement mechanisms enabling the model to clearly distinguish user-provided input instructions from data and system instructions (e.g., system prompts). This is the structural control-side answer to prompt injection — the single most-cited agentic AI vulnerability class.",
+        riskType: "security",
+        aivssMetrics: ["AA", "MR"],
+        atlasTechniqueIds: ["AML.T0051", "AML.T0054", "AML.T0056"],
+        sourceSection: "AICM v1.1.1 > AIS-15",
+    },
+];
+// ── DSP — Data Security and Privacy Lifecycle Management ────────────────────
+// Training/fine-tuning/augmentation data integrity, poisoning, and privacy.
+const DSP_RISKS = [
+    {
+        id: "aicm-dsp-21-data-poisoning",
+        framework: "aicm",
+        category: "DSP",
+        name: "Data Poisoning Prevention & Detection",
+        description: "Define, implement and evaluate processes, procedures and technical measures to prevent data poisoning in AI models and continuously detect such. Covers both training-time poisoning and RAG/retrieval-time poisoning of the corpora an agent draws context from.",
+        riskType: "security",
+        aivssMetrics: ["MR", "AA", "LL"],
+        atlasTechniqueIds: ["AML.T0020", "AML.T0070"],
+        sourceSection: "AICM v1.1.1 > DSP-21",
+    },
+    {
+        id: "aicm-dsp-22-privacy-enhancing-tech",
+        framework: "aicm",
+        category: "DSP",
+        name: "Privacy Enhancing Technologies",
+        description: "Use Privacy Enhancing Technologies for training data, informed by risk and privacy impact analysis and business use cases. A governance control on the data pipeline feeding model training rather than the runtime agent itself.",
+        riskType: "compliance",
+        aivssMetrics: ["DS", "GV"],
+        atlasTechniqueIds: [],
+        sourceSection: "AICM v1.1.1 > DSP-22",
+    },
+    {
+        id: "aicm-dsp-23-data-integrity-check",
+        framework: "aicm",
+        category: "DSP",
+        name: "Data Integrity Check",
+        description: "Regularly validate the consistency and conformity of training, fine-tuning or augmentation data. Implement dataset versioning to ensure traceability and enforce restrictions to prevent unauthorized changes. Without versioning, a poisoning event is undetectable after the fact — this is the audit trail poisoning detection depends on.",
+        riskType: "security",
+        aivssMetrics: ["LL", "MR"],
+        atlasTechniqueIds: ["AML.T0020"],
+        sourceSection: "AICM v1.1.1 > DSP-23",
+    },
+    {
+        id: "aicm-dsp-24-data-differentiation",
+        framework: "aicm",
+        category: "DSP",
+        name: "Data Differentiation and Relevance",
+        description: "Ensure training-data differentiation and relevance to the intended use of the AI Model. Out-of-distribution or irrelevant training data widens the model's behavioural surface beyond what any downstream threat model accounts for.",
+        riskType: "security",
+        aivssMetrics: ["MR", "LL"],
+        atlasTechniqueIds: [],
+        sourceSection: "AICM v1.1.1 > DSP-24",
+    },
+];
+// ── GRC — Governance, Risk and Compliance ────────────────────────────────────
+// Acceptable use, impact/bias/ethics assessment, explainability, human oversight.
+const GRC_RISKS = [
+    {
+        id: "aicm-grc-09-acceptable-use",
+        framework: "aicm",
+        category: "GRC",
+        name: "Acceptable Use of the AI Service",
+        description: "Define, document and enforce policies and procedures on the acceptable use of AI services offered by the organization. Ensure effectiveness by continuous risk assessments, reviews and human oversight. Directly answers the BAU-misappropriation gap Canopy's product direction already names as invisible to CIA-triad threat modelling.",
+        riskType: "compliance",
+        aivssMetrics: ["GV", "EI"],
+        atlasTechniqueIds: [],
+        sourceSection: "AICM v1.1.1 > GRC-09",
+    },
+    {
+        id: "aicm-grc-10-ai-impact-assessment",
+        framework: "aicm",
+        category: "GRC",
+        name: "AI Impact Assessment",
+        description: "Establish, document, and communicate to all relevant stakeholders an AI Impact Assessment process and its criteria to regularly evaluate the ethical, societal, operational, legal, and security impacts of the AI system throughout its lifecycle.",
+        riskType: "compliance",
+        aivssMetrics: ["EI", "GV"],
+        atlasTechniqueIds: [],
+        sourceSection: "AICM v1.1.1 > GRC-10",
+    },
+    {
+        id: "aicm-grc-11-bias-fairness",
+        framework: "aicm",
+        category: "GRC",
+        name: "Bias and Fairness Assessment",
+        description: "Regularly evaluate AI systems, models, datasets & algorithms for bias and fairness to ensure compliance with ethical standards. Ethical-domain risk outside AIVSS's CIA-triad scope by design — surfaced as a framework finding rather than a scored metric.",
+        riskType: "ethical",
+        aivssMetrics: ["EI"],
+        atlasTechniqueIds: [],
+        sourceSection: "AICM v1.1.1 > GRC-11",
+    },
+    {
+        id: "aicm-grc-12-ethics-committee",
+        framework: "aicm",
+        category: "GRC",
+        name: "Ethics Committee",
+        description: "Establish an ethics committee to review AI applications, ensuring alignment with ethical standards and organizational values. Organisational/process control — no direct technical AIVSS surface, included for completeness of the ethical-risk pillar.",
+        riskType: "ethical",
+        aivssMetrics: ["EI", "GV"],
+        atlasTechniqueIds: [],
+        sourceSection: "AICM v1.1.1 > GRC-12",
+    },
+    {
+        id: "aicm-grc-13-explainability-requirement",
+        framework: "aicm",
+        category: "GRC",
+        name: "Explainability Requirement",
+        description: "Establish, document, and communicate the degree of explainability needed for the AI Services.",
+        riskType: "compliance",
+        aivssMetrics: ["GV", "EI"],
+        atlasTechniqueIds: [],
+        sourceSection: "AICM v1.1.1 > GRC-13",
+    },
+    {
+        id: "aicm-grc-14-explainability-evaluation",
+        framework: "aicm",
+        category: "GRC",
+        name: "Explainability Evaluation",
+        description: "Evaluate, document, and communicate the degree of explainability of the AI Services, including possible limitations and exceptions.",
+        riskType: "compliance",
+        aivssMetrics: ["GV", "EI"],
+        atlasTechniqueIds: [],
+        sourceSection: "AICM v1.1.1 > GRC-14",
+    },
+    {
+        id: "aicm-grc-15-human-supervision",
+        framework: "aicm",
+        category: "GRC",
+        name: "Human Supervision",
+        description: "Establish, execute, and assess processes, procedures, and technical measures to ensure human oversight and control of the AI system in compliance with regulatory requirements and organizational risk management. The control that determines whether an agent's autonomous decisions ever hit a human checkpoint before consequential action.",
+        riskType: "compliance",
+        aivssMetrics: ["GV", "DC"],
+        atlasTechniqueIds: [],
+        sourceSection: "AICM v1.1.1 > GRC-15",
+    },
+];
+// ── HRS — Human Resources ────────────────────────────────────────────────────
+// Personnel-facing training and acceptable-use policy for AI technologies.
+const HRS_RISKS = [
+    {
+        id: "aicm-hrs-14-ai-competency-training",
+        framework: "aicm",
+        category: "HRS",
+        name: "AI Competency Training",
+        description: "Establish, document, approve, communicate, apply, evaluate and maintain policies and procedures defining the AI training program for all relevant personnel of the organization based on their roles and provide regular training updates. Mirrors MEAID's Education topic — personnel who cannot understand a system cannot be reasonably held responsible for its outputs.",
+        riskType: "compliance",
+        aivssMetrics: ["GV"],
+        atlasTechniqueIds: [],
+        sourceSection: "AICM v1.1.1 > HRS-14",
+    },
+    {
+        id: "aicm-hrs-15-ai-acceptable-use",
+        framework: "aicm",
+        category: "HRS",
+        name: "AI Acceptable Use",
+        description: "Establish, document, and communicate to all personnel the policies and procedures on the acceptable use of AI technologies within the organization. The personnel-facing counterpart to GRC-09's service-level acceptable-use control.",
+        riskType: "compliance",
+        aivssMetrics: ["GV", "EI"],
+        atlasTechniqueIds: [],
+        sourceSection: "AICM v1.1.1 > HRS-15",
+    },
+];
+// ── IAM — Identity & Access Management ───────────────────────────────────────
+const IAM_RISKS = [
+    {
+        id: "aicm-iam-17-output-modification",
+        framework: "aicm",
+        category: "IAM",
+        name: "Output Modification and Special Authorization",
+        description: "When allowing model output modification of AI generated output, establish a role for this access and allow changes only by authorized identities. Prevents unaudited tampering with an agent's output between generation and downstream consumption.",
+        riskType: "security",
+        aivssMetrics: ["GV", "CS"],
+        atlasTechniqueIds: [],
+        sourceSection: "AICM v1.1.1 > IAM-17",
+    },
+];
+// ── LOG — Logging and Monitoring ─────────────────────────────────────────────
+const LOG_RISKS = [
+    {
+        id: "aicm-log-15-input-monitoring",
+        framework: "aicm",
+        category: "LOG",
+        name: "Input Monitoring",
+        description: "Log and monitor all input events (content and metadata) to enable auditing and reporting on the usage of AI models. Without input-side logging, prompt injection and jailbreak attempts leave no forensic trail.",
+        riskType: "security",
+        aivssMetrics: ["AA", "GV"],
+        atlasTechniqueIds: ["AML.T0051", "AML.T0054"],
+        sourceSection: "AICM v1.1.1 > LOG-15",
+    },
+    {
+        id: "aicm-log-16-output-monitoring",
+        framework: "aicm",
+        category: "LOG",
+        name: "Output Monitoring",
+        description: "Log and monitor all output events (content and metadata) to enable auditing and reporting on the usage of AI models. Complements input monitoring — the pair together are the audit trail a post-incident investigation depends on.",
+        riskType: "compliance",
+        aivssMetrics: ["GV", "EI"],
+        atlasTechniqueIds: [],
+        sourceSection: "AICM v1.1.1 > LOG-16",
+    },
+];
+// ── MDS — Model Security ─────────────────────────────────────────────────────
+// Model artifact scanning, documentation, adversarial hardening, integrity, failure.
+const MDS_RISKS = [
+    {
+        id: "aicm-mds-02-artifact-scanning",
+        framework: "aicm",
+        category: "MDS",
+        name: "Model Artifact Scanning",
+        description: "Define, implement, and evaluate policies, procedures, and technical measures for the scanning of model artifacts for vulnerabilities and attacks, at each step of the service lifecycle and at each hand over point. Answers the supply-chain question STA-09's BOM control names but at the technical scanning layer.",
+        riskType: "security",
+        aivssMetrics: ["LL", "CS"],
+        atlasTechniqueIds: ["AML.T0010", "AML.T0011.000", "AML.T0011.001"],
+        sourceSection: "AICM v1.1.1 > MDS-02",
+    },
+    {
+        id: "aicm-mds-03-model-documentation",
+        framework: "aicm",
+        category: "MDS",
+        name: "Model Documentation",
+        description: "Define, implement, enforce, approve, document, communicate, maintain and evaluate processes and procedures for model documentation. Regularly review and update the model documentation.",
+        riskType: "compliance",
+        aivssMetrics: ["LL", "GV"],
+        atlasTechniqueIds: [],
+        sourceSection: "AICM v1.1.1 > MDS-03",
+    },
+    {
+        id: "aicm-mds-04-documentation-requirements",
+        framework: "aicm",
+        category: "MDS",
+        name: "Model Documentation Requirements",
+        description: "Establish and implement baseline requirements for Model documentation.",
+        riskType: "compliance",
+        aivssMetrics: ["LL", "GV"],
+        atlasTechniqueIds: [],
+        sourceSection: "AICM v1.1.1 > MDS-04",
+    },
+    {
+        id: "aicm-mds-05-documentation-validation",
+        framework: "aicm",
+        category: "MDS",
+        name: "Model Documentation Validation",
+        description: "Define, implement, and evaluate processes, procedures, and technical measures for the validation of the Model documentation aligned with the current model. Undocumented drift between a model card and the deployed model is itself an integrity gap.",
+        riskType: "compliance",
+        aivssMetrics: ["LL", "GV"],
+        atlasTechniqueIds: [],
+        sourceSection: "AICM v1.1.1 > MDS-05",
+    },
+    {
+        id: "aicm-mds-06-adversarial-attack-analysis",
+        framework: "aicm",
+        category: "MDS",
+        name: "Adversarial Attack Analysis",
+        description: "Define, implement, and evaluate processes and technical measures to assess adversarial threats specific to each AI model. The model-level counterpart to TVM-04's system-level threat modelling — this is the control Canopy's own ATLAS-injected metric prompts already operationalise.",
+        riskType: "security",
+        aivssMetrics: ["AA", "MR"],
+        atlasTechniqueIds: ["AML.T0043", "AML.T0018", "AML.T0031"],
+        sourceSection: "AICM v1.1.1 > MDS-06",
+    },
+    {
+        id: "aicm-mds-07-adversarial-hardening",
+        framework: "aicm",
+        category: "MDS",
+        name: "Robustness against Adversarial Attack / Model Hardening",
+        description: "Define, implement, and evaluate processes, procedures, and technical measures for Model Hardening to mitigate relevant adversarial attacks as identified in the Threat Analysis and Adversarial Threat Analysis. The remediation-side control MDS-06's analysis feeds into.",
+        riskType: "security",
+        aivssMetrics: ["MR", "AA"],
+        atlasTechniqueIds: ["AML.T0043", "AML.T0018"],
+        sourceSection: "AICM v1.1.1 > MDS-07",
+    },
+    {
+        id: "aicm-mds-08-integrity-checks",
+        framework: "aicm",
+        category: "MDS",
+        name: "Model Integrity Checks",
+        description: "Regularly calculate and compare checksums using cryptographic hashes of model checkpoints to detect unauthorized modifications. Apply at least annually based on the level of risk, or after any change of hands. Without this, model weight tampering post-deployment is undetectable.",
+        riskType: "security",
+        aivssMetrics: ["LL", "MR"],
+        atlasTechniqueIds: ["AML.T0018", "AML.T0044"],
+        sourceSection: "AICM v1.1.1 > MDS-08",
+    },
+    {
+        id: "aicm-mds-11-model-failure",
+        framework: "aicm",
+        category: "MDS",
+        name: "Model Failure",
+        description: "Perform a risk-based evaluation of the model and model serving infrastructure for model failure. Define and implement measures to mitigate model and model serving infrastructure failures, and regularly evaluate throughout the AI system's lifecycle. Availability/reliability risk distinct from adversarial compromise — a resource-exhaustion or serving-infra failure has the same operational impact as an attack without one occurring.",
+        riskType: "security",
+        aivssMetrics: ["DC", "AD"],
+        atlasTechniqueIds: ["AML.T0029", "AML.T0034"],
+        sourceSection: "AICM v1.1.1 > MDS-11",
+    },
+    {
+        id: "aicm-mds-12-open-model-risk",
+        framework: "aicm",
+        category: "MDS",
+        name: "Open Model Risk Assessment",
+        description: "Establish a process to evaluate risk associated with open models. Periodically review these risk factors, and implement a process to monitor and mitigate any determined vulnerabilities. Directly relevant wherever an agent's underlying model is an open-weight release rather than a vetted first-party API — a distinct supply-chain trust boundary from STA-09's service BOM.",
+        riskType: "security",
+        aivssMetrics: ["LL", "CS"],
+        atlasTechniqueIds: ["AML.T0010"],
+        sourceSection: "AICM v1.1.1 > MDS-12",
+    },
+];
+// ── STA — Supply Chain Management, Transparency, and Accountability ─────────
+const STA_RISKS = [
+    {
+        id: "aicm-sta-09-service-bom",
+        framework: "aicm",
+        category: "STA",
+        name: "Service Bill of Material (BOM)",
+        description: "Define, implement, and enforce a process for establishing a Bill of Material for the service supply chain. Review and update the Bill of Material at least annually, or upon significant changes. The provenance ledger MDS-02's artifact scanning and MDS-12's open-model risk assessment both depend on existing.",
+        riskType: "compliance",
+        aivssMetrics: ["LL", "CS"],
+        atlasTechniqueIds: ["AML.T0010"],
+        sourceSection: "AICM v1.1.1 > STA-09",
+    },
+];
+// ── TVM — Threat & Vulnerability Management ──────────────────────────────────
+const TVM_RISKS = [
+    {
+        id: "aicm-tvm-04-threat-analysis",
+        framework: "aicm",
+        category: "TVM",
+        name: "Threat Analysis and Modelling",
+        description: "Define, implement and evaluate threat analysis processes and procedures to identify, assess and review the threat landscape for Cloud and AI systems. Build threat models according to industry best practices to inform the risk mitigation strategy. This is the organisational process Canopy's `assessWorkflow()` itself operationalises as a deterministic artefact rather than a manual exercise.",
+        riskType: "security",
+        aivssMetrics: ["AA", "GV"],
+        atlasTechniqueIds: [],
+        sourceSection: "AICM v1.1.1 > TVM-04",
+    },
+    {
+        id: "aicm-tvm-13-guardrails",
+        framework: "aicm",
+        category: "TVM",
+        name: "Guardrails",
+        description: "Define and implement processes, procedures and technical measures to apply guardrails to the AI system. Continuously evaluate guardrails for changes in regulatory requirements and risk scenarios. The runtime enforcement layer that AIS-15's prompt differentiation and MDS-07's model hardening both feed into.",
+        riskType: "security",
+        aivssMetrics: ["AA", "GV", "EI"],
+        atlasTechniqueIds: ["AML.T0051", "AML.T0054", "AML.T0080"],
+        sourceSection: "AICM v1.1.1 > TVM-13",
+    },
+];
+const AICM_RISKS = [
+    ...AIS_RISKS,
+    ...DSP_RISKS,
+    ...GRC_RISKS,
+    ...HRS_RISKS,
+    ...IAM_RISKS,
+    ...LOG_RISKS,
+    ...MDS_RISKS,
+    ...STA_RISKS,
+    ...TVM_RISKS,
+];
+export const AICM_CITATION = {
+    id: "aicm",
+    title: "AI Controls Matrix (AICM)",
+    version: "1.1.1",
+    authors: ["Cloud Security Alliance (CSA)"],
+    year: 2026,
+    url: "https://cloudsecurityalliance.org/artifacts/ai-controls-matrix",
+};
+const helpers = buildHelpers(AICM_RISKS);
+export const AICM_ADAPTER = {
+    citation: AICM_CITATION,
+    risks: AICM_RISKS,
+    ...helpers,
+};
+export { AICM_RISKS };
+//# sourceMappingURL=aicm.js.map

package/dist/references/aicm.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"aicm.js","sourceRoot":"","sources":["../../src/references/aicm.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AAEH,OAAO,EAIL,YAAY,GACb,MAAM,eAAe,CAAC;AAEvB,+EAA+E;AAC/E,kFAAkF;AAElF,MAAM,SAAS,GAAoB;IACjC;QACE,EAAE,EAAE,8BAA8B;QAClC,SAAS,EAAE,MAAM;QACjB,QAAQ,EAAE,KAAK;QACf,IAAI,EAAE,4BAA4B;QAClC,WAAW,EACT,qXAAqX;QACvX,QAAQ,EAAE,UAAU;QACpB,YAAY,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC;QAC1B,iBAAiB,EAAE,CAAC,WAAW,EAAE,WAAW,CAAC;QAC7C,aAAa,EAAE,sBAAsB;KACtC;IACD;QACE,EAAE,EAAE,wBAAwB;QAC5B,SAAS,EAAE,MAAM;QACjB,QAAQ,EAAE,KAAK;QACf,IAAI,EAAE,eAAe;QACrB,WAAW,EACT,sTAAsT;QACxT,QAAQ,EAAE,UAAU;QACpB,YAAY,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC;QAC1B,iBAAiB,EAAE,CAAC,WAAW,CAAC;QAChC,aAAa,EAAE,sBAAsB;KACtC;IACD;QACE,EAAE,EAAE,8BAA8B;QAClC,SAAS,EAAE,MAAM;QACjB,QAAQ,EAAE,KAAK;QACf,IAAI,EAAE,qBAAqB;QAC3B,WAAW,EACT,4NAA4N;QAC9N,QAAQ,EAAE,UAAU;QACpB,YAAY,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC;QAC1B,iBAAiB,EAAE,EAAE;QACrB,aAAa,EAAE,sBAAsB;KACtC;IACD;QACE,EAAE,EAAE,oCAAoC;QACxC,SAAS,EAAE,MAAM;QACjB,QAAQ,EAAE,KAAK;QACf,IAAI,EAAE,wBAAwB;QAC9B,WAAW,EACT,kRAAkR;QACpR,QAAQ,EAAE,UAAU;QACpB,YAAY,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC;QAC1B,iBAAiB,EAAE,CAAC,WAAW,EAAE,WAAW,EAAE,WAAW,CAAC;QAC1D,aAAa,EAAE,sBAAsB;KACtC;CACF,CAAC;AAEF,+EAA+E;AAC/E,4EAA4E;AAE5E,MAAM,SAAS,GAAoB;IACjC;QACE,EAAE,EAAE,4BAA4B;QAChC,SAAS,EAAE,MAAM;QACjB,QAAQ,EAAE,KAAK;QACf,IAAI,EAAE,uCAAuC;QAC7C,WAAW,EACT,mQAAmQ;QACrQ,QAAQ,EAAE,UAAU;QACpB,YAAY,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC;QAChC,iBAAiB,EAAE,CAAC,WAAW,EAAE,WAAW,CAAC;QAC7C,aAAa,EAAE,sBAAsB;KACtC;IACD;QACE,EAAE,EAAE,oCAAoC;QACxC,SAAS,EAAE,MAAM;QACjB,QAAQ,EAAE,KAAK;QACf,IAAI,EAAE,gCAAgC;QACtC,WAAW,EACT,mOAAmO;QACrO,QAAQ,EAAE,YAAY;QACtB,YAAY,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC;QAC1B,iBAAiB,EAAE,EAAE;QACrB,aAAa,EAAE,sBAAsB;KACtC;IACD;QACE,EAAE,EAAE,kCAAkC;QACtC,SAAS,EAAE,MAAM;QACjB,QAAQ,EAAE,KAAK;QACf,IAAI,EAAE,sBAAsB;QAC5B,WAAW,EACT,+UAA+U;QACjV,QAAQ,EAAE,UAAU;QACpB,YAAY,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC;QAC1B,iBAAiB,EAAE,CAAC,WAAW,CAAC;QAChC,aAAa,EAAE,sBAAsB;KACtC;IACD;QACE,EAAE,EAAE,kCAAkC;QACtC,SAAS,EAAE,MAAM;QACjB,QAAQ,EAAE,KAAK;QACf,IAAI,EAAE,oCAAoC;QAC1C,WAAW,EACT,sOAAsO;QACxO,QAAQ,EAAE,UAAU;QACpB,YAAY,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC;QAC1B,iBAAiB,EAAE,EAAE;QACrB,aAAa,EAAE,sBAAsB;KACtC;CACF,CAAC;AAEF,gFAAgF;AAChF,kFAAkF;AAElF,MAAM,SAAS,GAAoB;IACjC;QACE,EAAE,EAAE,4BAA4B;QAChC,SAAS,EAAE,MAAM;QACjB,QAAQ,EAAE,KAAK;QACf,IAAI,EAAE,kCAAkC;QACxC,WAAW,EACT,6UAA6U;QAC/U,QAAQ,EAAE,YAAY;QACtB,YAAY,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC;QAC1B,iBAAiB,EAAE,EAAE;QACrB,aAAa,EAAE,sBAAsB;KACtC;IACD;QACE,EAAE,EAAE,kCAAkC;QACtC,SAAS,EAAE,MAAM;QACjB,QAAQ,EAAE,KAAK;QACf,IAAI,EAAE,sBAAsB;QAC5B,WAAW,EACT,qPAAqP;QACvP,QAAQ,EAAE,YAAY;QACtB,YAAY,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC;QAC1B,iBAAiB,EAAE,EAAE;QACrB,aAAa,EAAE,sBAAsB;KACtC;IACD;QACE,EAAE,EAAE,2BAA2B;QAC/B,SAAS,EAAE,MAAM;QACjB,QAAQ,EAAE,KAAK;QACf,IAAI,EAAE,8BAA8B;QACpC,WAAW,EACT,8PAA8P;QAChQ,QAAQ,EAAE,SAAS;QACnB,YAAY,EAAE,CAAC,IAAI,CAAC;QACpB,iBAAiB,EAAE,EAAE;QACrB,aAAa,EAAE,sBAAsB;KACtC;IACD;QACE,EAAE,EAAE,8BAA8B;QAClC,SAAS,EAAE,MAAM;QACjB,QAAQ,EAAE,KAAK;QACf,IAAI,EAAE,kBAAkB;QACxB,WAAW,EACT,yPAAyP;QAC3P,QAAQ,EAAE,SAAS;QACnB,YAAY,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC;QAC1B,iBAAiB,EAAE,EAAE;QACrB,aAAa,EAAE,sBAAsB;KACtC;IACD;QACE,EAAE,EAAE,wCAAwC;QAC5C,SAAS,EAAE,MAAM;QACjB,QAAQ,EAAE,KAAK;QACf,IAAI,EAAE,4BAA4B;QAClC,WAAW,EAAE,+FAA+F;QAC5G,QAAQ,EAAE,YAAY;QACtB,YAAY,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC;QAC1B,iBAAiB,EAAE,EAAE;QACrB,aAAa,EAAE,sBAAsB;KACtC;IACD;QACE,EAAE,EAAE,uCAAuC;QAC3C,SAAS,EAAE,MAAM;QACjB,QAAQ,EAAE,KAAK;QACf,IAAI,EAAE,2BAA2B;QACjC,WAAW,EACT,qIAAqI;QACvI,QAAQ,EAAE,YAAY;QACtB,YAAY,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC;QAC1B,iBAAiB,EAAE,EAAE;QACrB,aAAa,EAAE,sBAAsB;KACtC;IACD;QACE,EAAE,EAAE,+BAA+B;QACnC,SAAS,EAAE,MAAM;QACjB,QAAQ,EAAE,KAAK;QACf,IAAI,EAAE,mBAAmB;QACzB,WAAW,EACT,iVAAiV;QACnV,QAAQ,EAAE,YAAY;QACtB,YAAY,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC;QAC1B,iBAAiB,EAAE,EAAE;QACrB,aAAa,EAAE,sBAAsB;KACtC;CACF,CAAC;AAEF,gFAAgF;AAChF,2EAA2E;AAE3E,MAAM,SAAS,GAAoB;IACjC;QACE,EAAE,EAAE,oCAAoC;QACxC,SAAS,EAAE,MAAM;QACjB,QAAQ,EAAE,KAAK;QACf,IAAI,EAAE,wBAAwB;QAC9B,WAAW,EACT,8WAA8W;QAChX,QAAQ,EAAE,YAAY;QACtB,YAAY,EAAE,CAAC,IAAI,CAAC;QACpB,iBAAiB,EAAE,EAAE;QACrB,aAAa,EAAE,sBAAsB;KACtC;IACD;QACE,EAAE,EAAE,+BAA+B;QACnC,SAAS,EAAE,MAAM;QACjB,QAAQ,EAAE,KAAK;QACf,IAAI,EAAE,mBAAmB;QACzB,WAAW,EACT,wOAAwO;QAC1O,QAAQ,EAAE,YAAY;QACtB,YAAY,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC;QAC1B,iBAAiB,EAAE,EAAE;QACrB,aAAa,EAAE,sBAAsB;KACtC;CACF,CAAC;AAEF,gFAAgF;AAEhF,MAAM,SAAS,GAAoB;IACjC;QACE,EAAE,EAAE,iCAAiC;QACrC,SAAS,EAAE,MAAM;QACjB,QAAQ,EAAE,KAAK;QACf,IAAI,EAAE,+CAA+C;QACrD,WAAW,EACT,sPAAsP;QACxP,QAAQ,EAAE,UAAU;QACpB,YAAY,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC;QAC1B,iBAAiB,EAAE,EAAE;QACrB,aAAa,EAAE,sBAAsB;KACtC;CACF,CAAC;AAEF,gFAAgF;AAEhF,MAAM,SAAS,GAAoB;IACjC;QACE,EAAE,EAAE,8BAA8B;QAClC,SAAS,EAAE,MAAM;QACjB,QAAQ,EAAE,KAAK;QACf,IAAI,EAAE,kBAAkB;QACxB,WAAW,EACT,kNAAkN;QACpN,QAAQ,EAAE,UAAU;QACpB,YAAY,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC;QAC1B,iBAAiB,EAAE,CAAC,WAAW,EAAE,WAAW,CAAC;QAC7C,aAAa,EAAE,sBAAsB;KACtC;IACD;QACE,EAAE,EAAE,+BAA+B;QACnC,SAAS,EAAE,MAAM;QACjB,QAAQ,EAAE,KAAK;QACf,IAAI,EAAE,mBAAmB;QACzB,WAAW,EACT,qOAAqO;QACvO,QAAQ,EAAE,YAAY;QACtB,YAAY,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC;QAC1B,iBAAiB,EAAE,EAAE;QACrB,aAAa,EAAE,sBAAsB;KACtC;CACF,CAAC;AAEF,gFAAgF;AAChF,qFAAqF;AAErF,MAAM,SAAS,GAAoB;IACjC;QACE,EAAE,EAAE,+BAA+B;QACnC,SAAS,EAAE,MAAM;QACjB,QAAQ,EAAE,KAAK;QACf,IAAI,EAAE,yBAAyB;QAC/B,WAAW,EACT,wTAAwT;QAC1T,QAAQ,EAAE,UAAU;QACpB,YAAY,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC;QAC1B,iBAAiB,EAAE,CAAC,WAAW,EAAE,eAAe,EAAE,eAAe,CAAC;QAClE,aAAa,EAAE,sBAAsB;KACtC;IACD;QACE,EAAE,EAAE,iCAAiC;QACrC,SAAS,EAAE,MAAM;QACjB,QAAQ,EAAE,KAAK;QACf,IAAI,EAAE,qBAAqB;QAC3B,WAAW,EACT,0LAA0L;QAC5L,QAAQ,EAAE,YAAY;QACtB,YAAY,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC;QAC1B,iBAAiB,EAAE,EAAE;QACrB,aAAa,EAAE,sBAAsB;KACtC;IACD;QACE,EAAE,EAAE,wCAAwC;QAC5C,SAAS,EAAE,MAAM;QACjB,QAAQ,EAAE,KAAK;QACf,IAAI,EAAE,kCAAkC;QACxC,WAAW,EAAE,wEAAwE;QACrF,QAAQ,EAAE,YAAY;QACtB,YAAY,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC;QAC1B,iBAAiB,EAAE,EAAE;QACrB,aAAa,EAAE,sBAAsB;KACtC;IACD;QACE,EAAE,EAAE,sCAAsC;QAC1C,SAAS,EAAE,MAAM;QACjB,QAAQ,EAAE,KAAK;QACf,IAAI,EAAE,gCAAgC;QACtC,WAAW,EACT,wPAAwP;QAC1P,QAAQ,EAAE,YAAY;QACtB,YAAY,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC;QAC1B,iBAAiB,EAAE,EAAE;QACrB,aAAa,EAAE,sBAAsB;KACtC;IACD;QACE,EAAE,EAAE,yCAAyC;QAC7C,SAAS,EAAE,MAAM;QACjB,QAAQ,EAAE,KAAK;QACf,IAAI,EAAE,6BAA6B;QACnC,WAAW,EACT,0RAA0R;QAC5R,QAAQ,EAAE,UAAU;QACpB,YAAY,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC;QAC1B,iBAAiB,EAAE,CAAC,WAAW,EAAE,WAAW,EAAE,WAAW,CAAC;QAC1D,aAAa,EAAE,sBAAsB;KACtC;IACD;QACE,EAAE,EAAE,mCAAmC;QACvC,SAAS,EAAE,MAAM;QACjB,QAAQ,EAAE,KAAK;QACf,IAAI,EAAE,yDAAyD;QAC/D,WAAW,EACT,6QAA6Q;QAC/Q,QAAQ,EAAE,UAAU;QACpB,YAAY,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC;QAC1B,iBAAiB,EAAE,CAAC,WAAW,EAAE,WAAW,CAAC;QAC7C,aAAa,EAAE,sBAAsB;KACtC;IACD;QACE,EAAE,EAAE,8BAA8B;QAClC,SAAS,EAAE,MAAM;QACjB,QAAQ,EAAE,KAAK;QACf,IAAI,EAAE,wBAAwB;QAC9B,WAAW,EACT,yRAAyR;QAC3R,QAAQ,EAAE,UAAU;QACpB,YAAY,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC;QAC1B,iBAAiB,EAAE,CAAC,WAAW,EAAE,WAAW,CAAC;QAC7C,aAAa,EAAE,sBAAsB;KACtC;IACD;QACE,EAAE,EAAE,2BAA2B;QAC/B,SAAS,EAAE,MAAM;QACjB,QAAQ,EAAE,KAAK;QACf,IAAI,EAAE,eAAe;QACrB,WAAW,EACT,kbAAkb;QACpb,QAAQ,EAAE,UAAU;QACpB,YAAY,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC;QAC1B,iBAAiB,EAAE,CAAC,WAAW,EAAE,WAAW,CAAC;QAC7C,aAAa,EAAE,sBAAsB;KACtC;IACD;QACE,EAAE,EAAE,6BAA6B;QACjC,SAAS,EAAE,MAAM;QACjB,QAAQ,EAAE,KAAK;QACf,IAAI,EAAE,4BAA4B;QAClC,WAAW,EACT,qXAAqX;QACvX,QAAQ,EAAE,UAAU;QACpB,YAAY,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC;QAC1B,iBAAiB,EAAE,CAAC,WAAW,CAAC;QAChC,aAAa,EAAE,sBAAsB;KACtC;CACF,CAAC;AAEF,+EAA+E;AAE/E,MAAM,SAAS,GAAoB;IACjC;QACE,EAAE,EAAE,yBAAyB;QAC7B,SAAS,EAAE,MAAM;QACjB,QAAQ,EAAE,KAAK;QACf,IAAI,EAAE,gCAAgC;QACtC,WAAW,EACT,qTAAqT;QACvT,QAAQ,EAAE,YAAY;QACtB,YAAY,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC;QAC1B,iBAAiB,EAAE,CAAC,WAAW,CAAC;QAChC,aAAa,EAAE,sBAAsB;KACtC;CACF,CAAC;AAEF,gFAAgF;AAEhF,MAAM,SAAS,GAAoB;IACjC;QACE,EAAE,EAAE,6BAA6B;QACjC,SAAS,EAAE,MAAM;QACjB,QAAQ,EAAE,KAAK;QACf,IAAI,EAAE,+BAA+B;QACrC,WAAW,EACT,yYAAyY;QAC3Y,QAAQ,EAAE,UAAU;QACpB,YAAY,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC;QAC1B,iBAAiB,EAAE,EAAE;QACrB,aAAa,EAAE,sBAAsB;KACtC;IACD;QACE,EAAE,EAAE,wBAAwB;QAC5B,SAAS,EAAE,MAAM;QACjB,QAAQ,EAAE,KAAK;QACf,IAAI,EAAE,YAAY;QAClB,WAAW,EACT,qTAAqT;QACvT,QAAQ,EAAE,UAAU;QACpB,YAAY,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC;QAChC,iBAAiB,EAAE,CAAC,WAAW,EAAE,WAAW,EAAE,WAAW,CAAC;QAC1D,aAAa,EAAE,sBAAsB;KACtC;CACF,CAAC;AAEF,MAAM,UAAU,GAAoB;IAClC,GAAG,SAAS;IACZ,GAAG,SAAS;IACZ,GAAG,SAAS;IACZ,GAAG,SAAS;IACZ,GAAG,SAAS;IACZ,GAAG,SAAS;IACZ,GAAG,SAAS;IACZ,GAAG,SAAS;IACZ,GAAG,SAAS;CACb,CAAC;AAEF,MAAM,CAAC,MAAM,aAAa,GAAsB;IAC9C,EAAE,EAAE,MAAM;IACV,KAAK,EAAE,2BAA2B;IAClC,OAAO,EAAE,OAAO;IAChB,OAAO,EAAE,CAAC,+BAA+B,CAAC;IAC1C,IAAI,EAAE,IAAI;IACV,GAAG,EAAE,gEAAgE;CACtE,CAAC;AAEF,MAAM,OAAO,GAAG,YAAY,CAAC,UAAU,CAAC,CAAC;AAEzC,MAAM,CAAC,MAAM,YAAY,GAAqB;IAC5C,QAAQ,EAAE,aAAa;IACvB,KAAK,EAAE,UAAU;IACjB,GAAG,OAAO;CACX,CAAC;AAEF,OAAO,EAAE,UAAU,EAAE,CAAC"}

package/dist/references/dstg-meaid.d.ts

@@ -0,0 +1,59 @@
+/**
+ * DSTG MEAID — A Method for Ethical AI in Defence
+ *
+ * Primary source: "A Method for Ethical AI in Defence" (DSTG-TR-3786)
+ * Authors: Kate Devitt, Michael Gan, Jason Scholz and Robert Bolia
+ * Defence Science and Technology Group, Department of Defence
+ * © Commonwealth of Australia 2020
+ *
+ * Secondary source: "Case Study: A Method for Ethical AI in Defence Applied to
+ * an Envisioned Tactical Command and Control System" (DSTG-TR-3847)
+ * Authors: Dianna Gaetjens, Kate Devitt, and Christopher Shanahan
+ * © Commonwealth of Australia 2022
+ *
+ * MEAID is an ethical AI framework, not a security framework. It organises
+ * risk across five facets — Responsibility, Governance, Trust, Law, Traceability —
+ * and twenty evidence-based topics. Most risks are ethical or compliance in nature;
+ * this is correct and intentional. MEAID covers ground that AIVSS+ATLAS cannot.
+ *
+ * AIVSS metric mapping rationale:
+ * - Responsibility risks → EI (Ethical Implications), GV (Governance)
+ * - Governance risks → GV, EI, AD (Adaptive Defence — human factors/resilience)
+ * - Trust risks → GV, LL (Lifecycle & Lineage), CS (supply chain), MR, DS, EI
+ * - Law risks → GV, EI (legal compliance obligations)
+ * - Traceability risks → GV, LL, EI
+ */
+import type { MetricCode } from "../aivss/types.js";
+import { type FrameworkRisk, type FrameworkCitation, type FrameworkAdapter } from "./registry.js";
+/**
+ * Complete MEAID risk catalogue.
+ *
+ * 20 topics across 5 facets, plus one additional cross-cutting data governance
+ * risk surfaced by the DSTG-TR-3847 case study as a whole-of-Defence finding.
+ * Total: 21 entries.
+ */
+export declare const DSTG_MEAID_RISKS: FrameworkRisk[];
+/**
+ * Citation for the primary MEAID document.
+ * The case study (DSTG-TR-3847) is the secondary source and is referenced in
+ * individual risk sourceSection fields where it provides additional detail.
+ */
+export declare const DSTG_MEAID_CITATION: FrameworkCitation;
+/**
+ * Return MEAID risks relevant to a given AIVSS V4 metric.
+ * Results are ordered by number of ATLAS techniques (most-grounded first).
+ */
+export declare const getRisksForMetric: (metric: MetricCode) => FrameworkRisk[];
+/**
+ * Return MEAID risks of a given risk type (security | ethical | compliance).
+ */
+export declare const getRisksByType: (type: import("./registry.js").RiskType) => FrameworkRisk[];
+/**
+ * Look up a MEAID risk by its id. Returns undefined if not found.
+ */
+export declare const getRiskById: (id: string) => FrameworkRisk | undefined;
+/**
+ * Complete MEAID framework adapter.
+ */
+export declare const DSTG_MEAID_ADAPTER: FrameworkAdapter;
+//# sourceMappingURL=dstg-meaid.d.ts.map

package/dist/references/dstg-meaid.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dstg-meaid.d.ts","sourceRoot":"","sources":["../../src/references/dstg-meaid.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,EACL,KAAK,aAAa,EAClB,KAAK,iBAAiB,EACtB,KAAK,gBAAgB,EAEtB,MAAM,eAAe,CAAC;AA4SvB;;;;;;GAMG;AACH,eAAO,MAAM,gBAAgB,EAAE,aAAa,EAO3C,CAAC;AAEF;;;;GAIG;AACH,eAAO,MAAM,mBAAmB,EAAE,iBAcjC,CAAC;AAMF;;;GAGG;AACH,eAAO,MAAM,iBAAiB,yCAA4B,CAAC;AAE3D;;GAEG;AACH,eAAO,MAAM,cAAc,6DAAyB,CAAC;AAErD;;GAEG;AACH,eAAO,MAAM,WAAW,2CAAsB,CAAC;AAE/C;;GAEG;AACH,eAAO,MAAM,kBAAkB,EAAE,gBAMhC,CAAC"}