genai-security-crosswalk 2.0.0

package/data/entries/DSGAI16.json

@@ -0,0 +1,716 @@
+{
+  "id": "DSGAI16",
+  "name": "Endpoint and Browser Overreach",
+  "source_list": "DSGAI-2026",
+  "version": "2026-Q1",
+  "severity": "High",
+  "aivss_score": null,
+  "audience": [
+    "red-teamer",
+    "security-engineer",
+    "ciso",
+    "compliance",
+    "ml-engineer",
+    "ot-engineer",
+    "auditor",
+    "developer",
+    "data-engineer"
+  ],
+  "mappings": [
+    {
+      "framework": "MITRE ATLAS",
+      "control_id": "AML.T0013",
+      "control_name": "Discover ML Model Ontology",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "Adversary learns what data the browser assistant can access across open applications"
+    },
+    {
+      "framework": "MITRE ATLAS",
+      "control_id": "AML.T0057",
+      "control_name": "Data from Information Repositories",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "Browser assistant accesses sensitive data across tabs and applications — adversary controls assistant to exfiltrate"
+    },
+    {
+      "framework": "MITRE ATLAS",
+      "control_id": "AML.T0035",
+      "control_name": "Exfiltrate via ML Inference API",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "Compromised browser assistant used as exfiltration channel — sensitive data from accessible applications transmitted"
+    },
+    {
+      "framework": "NIST AI RMF 1.0",
+      "control_id": "GV-1.7",
+      "control_name": "Policies for trustworthy AI",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "Endpoint AI agent governance policy — approved extensions, permission scoping, mandatory updates"
+    },
+    {
+      "framework": "NIST AI RMF 1.0",
+      "control_id": "MP-3.5",
+      "control_name": "AI system impact",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "Impact assessment of endpoint AI agents — data access scope, exfiltration paths, user risk"
+    },
+    {
+      "framework": "NIST AI RMF 1.0",
+      "control_id": "MS-2.5",
+      "control_name": "Testing — adversarial",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "Adversarial testing of approved browser extensions — prompt injection via web content scenarios"
+    },
+    {
+      "framework": "NIST AI RMF 1.0",
+      "control_id": "MG-2.2",
+      "control_name": "Risk response",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "Incident response for endpoint AI agent compromise — extension disable, data impact assessment"
+    },
+    {
+      "framework": "EU AI Act",
+      "control_id": "Endpoint AI agent risks identified and mitigated",
+      "control_name": "Art. 9 — Risk management",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "Browser and endpoint agent deployments assessed in Art. 9 risk management"
+    },
+    {
+      "framework": "EU AI Act",
+      "control_id": "High-risk AI designed to allow human oversight — users must be able to stop and override",
+      "control_name": "Art. 14 — Human oversight",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "Users must be able to pause and override endpoint AI agents — Art. 14 human oversight requirement"
+    },
+    {
+      "framework": "EU AI Act",
+      "control_id": "Deployers ensure human oversight as instructed by provider",
+      "control_name": "Art. 29 — Deployer obligations",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "Deployers responsible for ensuring endpoint AI agents operate within Art. 14 human oversight scope"
+    },
+    {
+      "framework": "ISO/IEC 27001:2022",
+      "control_id": "A.8.1",
+      "control_name": "Endpoint device management",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "Endpoint AI agents managed under device management policy — approved versions, permissions scoped"
+    },
+    {
+      "framework": "ISO/IEC 27001:2022",
+      "control_id": "A.8.7",
+      "control_name": "Protection against malware",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "Endpoint AI agents subject to malware protection — extension integrity verification"
+    },
+    {
+      "framework": "ISO/IEC 27001:2022",
+      "control_id": "A.5.10",
+      "control_name": "Acceptable use of assets",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "Policy governing permitted browser AI extensions and endpoint agent permissions"
+    },
+    {
+      "framework": "ISO/IEC 27001:2022",
+      "control_id": "A.8.12",
+      "control_name": "Data leakage prevention",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "DLP controls on endpoint AI agent data access and exfiltration paths"
+    },
+    {
+      "framework": "ISO/IEC 42001:2023",
+      "control_id": "Use of AI systems",
+      "control_name": "A.9.1",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "Foundational"
+    },
+    {
+      "framework": "ISO/IEC 42001:2023",
+      "control_id": "Lifecycle — design",
+      "control_name": "A.6.1.2",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "Foundational"
+    },
+    {
+      "framework": "ISO/IEC 42001:2023",
+      "control_id": "Policies",
+      "control_name": "A.2.2",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "Foundational"
+    },
+    {
+      "framework": "ISO/IEC 42001:2023",
+      "control_id": "Context",
+      "control_name": "Cl.4",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "Foundational"
+    },
+    {
+      "framework": "CIS Controls v8.1",
+      "control_id": "CIS 2",
+      "control_name": "2.6 — Allowlist authorised software",
+      "tier": "Foundational",
+      "scope": "Both"
+    },
+    {
+      "framework": "CIS Controls v8.1",
+      "control_id": "CIS 4",
+      "control_name": "4.1 — Secure configuration baseline",
+      "tier": "Foundational",
+      "scope": "Both"
+    },
+    {
+      "framework": "CIS Controls v8.1",
+      "control_id": "CIS 10",
+      "control_name": "10.1 — Deploy anti-malware",
+      "tier": "Foundational",
+      "scope": "Both"
+    },
+    {
+      "framework": "OWASP ASVS 4.0.3",
+      "control_id": "V4 Access Control",
+      "control_name": "V4.1.2 — Least privilege",
+      "tier": "Foundational",
+      "scope": "Both"
+    },
+    {
+      "framework": "OWASP ASVS 4.0.3",
+      "control_id": "V11 Business Logic",
+      "control_name": "V11.1.5 — Business logic prevents excess data access",
+      "tier": "Foundational",
+      "scope": "Both"
+    },
+    {
+      "framework": "OWASP ASVS 4.0.3",
+      "control_id": "V1 Architecture",
+      "control_name": "V1.1.2 — Secure architecture and design",
+      "tier": "Foundational",
+      "scope": "Both"
+    },
+    {
+      "framework": "ISA/IEC 62443",
+      "control_id": "SR 3.2",
+      "control_name": "Software and information integrity",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "Browser AI extensions assessed as third-party software — 62443-2-4 requirements before Zone 3 deployment"
+    },
+    {
+      "framework": "ISA/IEC 62443",
+      "control_id": "SR 1.2",
+      "control_name": "Human user authentication",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "Approved extensions only on Zone 3 workstations — unapproved AI extensions blocked at device management"
+    },
+    {
+      "framework": "ISA/IEC 62443",
+      "control_id": "SR 6.6",
+      "control_name": "Timely response to events",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "Browser AI anomalies on Zone 3 workstations treated as security events"
+    },
+    {
+      "framework": "NIST SP 800-82 Rev 3",
+      "control_id": "Supply chain risks",
+      "control_name": "§5.5",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "Third-party data in OT context"
+    },
+    {
+      "framework": "NIST SP 800-82 Rev 3",
+      "control_id": "Supply chain risk management",
+      "control_name": "§6.3",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "Data source assessment for OT GenAI"
+    },
+    {
+      "framework": "NIST SP 800-82 Rev 3",
+      "control_id": "Third-party management",
+      "control_name": "§8.4",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "Vendor programme for OT data suppliers"
+    },
+    {
+      "framework": "NIST CSF 2.0",
+      "control_id": "GV.SC-01",
+      "control_name": "Supply Chain Risk Management",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "Browser AI extension providers with sensitive data access treated as third-party suppliers"
+    },
+    {
+      "framework": "NIST CSF 2.0",
+      "control_id": "PR.PS-02",
+      "control_name": "Platform Security",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "Software managed to reduce risk — browser AI extensions version-controlled, patched, approved before deployment"
+    },
+    {
+      "framework": "NIST CSF 2.0",
+      "control_id": "DE.CM-01",
+      "control_name": "Continuous Monitoring",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "AI assistant access to sensitive data on endpoints monitored"
+    },
+    {
+      "framework": "NIST CSF 2.0",
+      "control_id": "ID.AM-08",
+      "control_name": "Asset Management",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "Approved browser AI extensions inventoried — data access scope, security assessment status"
+    },
+    {
+      "framework": "SOC 2",
+      "control_id": "Approved AI assistants with scoped permissions — permission minimisation documented and enforced",
+      "control_name": "CC6.1 — Logical access",
+      "tier": "Foundational",
+      "scope": "Both"
+    },
+    {
+      "framework": "SOC 2",
+      "control_id": "Browser AI extension providers assessed in vendor risk programme — data handling, telemetry, update security",
+      "control_name": "CC9.1 — Vendor risk",
+      "tier": "Foundational",
+      "scope": "Both"
+    },
+    {
+      "framework": "SOC 2",
+      "control_id": "Endpoint AI acceptable use procedures — approved extension list, prohibited data access, employee acknowledgement",
+      "control_name": "CC5.2 — Control activities",
+      "tier": "Foundational",
+      "scope": "Both"
+    },
+    {
+      "framework": "SOC 2",
+      "control_id": "Endpoint AI overreach risks identified — data access scope, exfiltration paths assessed",
+      "control_name": "CC3.2 — Risk assessment",
+      "tier": "Foundational",
+      "scope": "Both"
+    },
+    {
+      "framework": "PCI DSS v4.0",
+      "control_id": "Req 12.8.1",
+      "control_name": "TPSP programme",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "Browser AI extension providers with CDE access are TPSPs — add to TPSP list, initiate compliance process"
+    },
+    {
+      "framework": "PCI DSS v4.0",
+      "control_id": "Req 6.3.3",
+      "control_name": "Vulnerability management",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "Browser AI extensions patched and version-controlled — vulnerable extensions are Req 6.3 findings in CDE"
+    },
+    {
+      "framework": "PCI DSS v4.0",
+      "control_id": "Req 10.2.1",
+      "control_name": "Logging",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "AI assistant access to CDE data on endpoint logged — Req 10 audit trail requirement"
+    },
+    {
+      "framework": "PCI DSS v4.0",
+      "control_id": "Req 12.3.2",
+      "control_name": "Targeted risk analysis",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "Targeted risk analysis for endpoint AI assistant scope in CDE — data accessible, exfiltration paths"
+    },
+    {
+      "framework": "ENISA Multilayer Framework",
+      "control_id": "L2",
+      "control_name": "AI System Integrity (ASI)",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "Endpoint AI assistants operate under explicit, minimal permissions — scope defined and enforced by the underlying platform"
+    },
+    {
+      "framework": "ENISA Multilayer Framework",
+      "control_id": "L2",
+      "control_name": "Governance and Risk (GOV)",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "Privacy policy explicitly covers endpoint AI assistant data collection — user consent, scope disclosure, and opt-out mechanism required"
+    },
+    {
+      "framework": "ENISA Multilayer Framework",
+      "control_id": "MON",
+      "control_name": "Monitoring and Detection",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "Endpoint AI assistant activity logged — data access, network calls, and file operations monitored"
+    },
+    {
+      "framework": "ENISA Multilayer Framework",
+      "control_id": "L1",
+      "control_name": "General ICT — Access Control",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "Endpoint AI assistants installed with least-privilege permissions — no broad file system or browser data access without per-action authorisation"
+    },
+    {
+      "framework": "OWASP SAMM v2.0",
+      "control_id": "G-PC",
+      "control_name": "Governance / Policy & Compliance",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "Approved vendor list for all external data sources"
+    },
+    {
+      "framework": "OWASP SAMM v2.0",
+      "control_id": "I-SB",
+      "control_name": "Implementation / Secure Build",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "Inventory of all external data sources with security contact and last-verified date"
+    },
+    {
+      "framework": "OWASP SAMM v2.0",
+      "control_id": "V-AA",
+      "control_name": "Verification / Architecture Assessment",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "Architecture review validates all external data dependencies against policy"
+    },
+    {
+      "framework": "OWASP SAMM v2.0",
+      "control_id": "O-OM",
+      "control_name": "Operations / Operational Management",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "Track security advisories and availability for all integrated data sources"
+    },
+    {
+      "framework": "CWE/CVE",
+      "control_id": "CWE-668",
+      "control_name": "CWE-668",
+      "tier": "Foundational",
+      "scope": "Both",
+      "url": "https://cwe.mitre.org/data/definitions/668.html"
+    },
+    {
+      "framework": "CWE/CVE",
+      "control_id": "CWE-272",
+      "control_name": "CWE-272",
+      "tier": "Foundational",
+      "scope": "Both",
+      "url": "https://cwe.mitre.org/data/definitions/272.html"
+    },
+    {
+      "framework": "CWE/CVE",
+      "control_id": "CWE-284",
+      "control_name": "CWE-284",
+      "tier": "Foundational",
+      "scope": "Both",
+      "url": "https://cwe.mitre.org/data/definitions/284.html"
+    },
+    {
+      "framework": "MAESTRO",
+      "control_id": "L4",
+      "control_name": "Deployment & Infrastructure",
+      "tier": "Foundational",
+      "scope": "Both"
+    },
+    {
+      "framework": "MAESTRO",
+      "control_id": "L2",
+      "control_name": "Data Operations",
+      "tier": "Foundational",
+      "scope": "Both"
+    },
+    {
+      "framework": "MAESTRO",
+      "control_id": "L6",
+      "control_name": "Security & Compliance",
+      "tier": "Foundational",
+      "scope": "Both"
+    },
+    {
+      "framework": "AIUC-1",
+      "control_id": "B001",
+      "control_name": "Third-party adversarial robustness testing",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "Foundational"
+    },
+    {
+      "framework": "AIUC-1",
+      "control_id": "B003",
+      "control_name": "Third-party security assessment",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "Hardening"
+    },
+    {
+      "framework": "AIUC-1",
+      "control_id": "B008",
+      "control_name": "Third-party NHI controls",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "Hardening"
+    },
+    {
+      "framework": "OWASP NHI Top 10",
+      "control_id": "Third-party data source API keys with excessive scope",
+      "control_name": "NHI-3 Vulnerable Third-Party NHI",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "Review all third-party credentials; reduce to minimum"
+    },
+    {
+      "framework": "OWASP NHI Top 10",
+      "control_id": "Third-party development credentials used in production",
+      "control_name": "NHI-8 Environment Isolation Failure",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "Enforce environment isolation for third-party credentials"
+    },
+    {
+      "framework": "OWASP NHI Top 10",
+      "control_id": "Third-party credentials embedded in shared config",
+      "control_name": "NHI-2 Secret Leakage",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "Vault all third-party data source credentials"
+    },
+    {
+      "framework": "NIST SP 800-218A",
+      "control_id": "PW.1.1-PS",
+      "control_name": "Define security requirements — privacy preservation requirements",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "Define security requirements that mandate privacy impact assessments, privacy-preserving techniques, and limits on inference of sensitive attributes for all AI systems"
+    },
+    {
+      "framework": "NIST SP 800-218A",
+      "control_id": "PW.2.1-PS",
+      "control_name": "Design software — privacy-preserving AI architecture",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "Design AI systems with privacy preservation as a core architectural principle; embed differential privacy, federated learning, or secure computation where appropriate"
+    },
+    {
+      "framework": "NIST SP 800-218A",
+      "control_id": "PS.1.1-PS",
+      "control_name": "Protect all code from unauthorised access — privacy boundary enforcement",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "Implement access controls that prevent cross-context data combination enabling re-identification or sensitive attribute inference"
+    },
+    {
+      "framework": "FedRAMP",
+      "control_id": "SC-28",
+      "control_name": "Protection of Information at Rest — privacy-preserving storage",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "Encrypt AI data at rest; implement privacy-preserving storage techniques to prevent inference and re-identification"
+    },
+    {
+      "framework": "FedRAMP",
+      "control_id": "AC-3",
+      "control_name": "Access Enforcement — privacy-aligned access",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "Enforce access controls that account for inference and aggregation risk; restrict access based on combined sensitivity"
+    },
+    {
+      "framework": "FedRAMP",
+      "control_id": "PM-9",
+      "control_name": "Risk Management Strategy — privacy risk assessment",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "Include AI privacy erosion in risk management; assess inference, aggregation, and memorisation risks for AI systems"
+    },
+    {
+      "framework": "FedRAMP",
+      "control_id": "SI-4",
+      "control_name": "System Monitoring — privacy erosion detection",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "Monitor for privacy erosion indicators; detect inference capabilities, re-identification risk, and memorisation patterns"
+    },
+    {
+      "framework": "DORA",
+      "control_id": "Art. 5–7",
+      "control_name": "ICT Risk Management — privacy risk governance",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "Include AI privacy erosion in ICT risk management; assess inference, aggregation, and memorisation risks for financial AI systems"
+    },
+    {
+      "framework": "DORA",
+      "control_id": "Art. 9",
+      "control_name": "Protection and Prevention — privacy-preserving controls",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "Implement privacy-preserving controls for AI systems; prevent inference, re-identification, and memorisation-based privacy erosion"
+    },
+    {
+      "framework": "DORA",
+      "control_id": "Art. 10",
+      "control_name": "Detection — privacy degradation monitoring",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "Monitor for privacy degradation indicators; detect inference attacks, re-identification attempts, and memorisation in model outputs"
+    }
+  ],
+  "tools": [
+    {
+      "name": "LayerX Security",
+      "type": "commercial",
+      "url": "https://layerxsecurity.com"
+    },
+    {
+      "name": "Microsoft Intune",
+      "type": "commercial",
+      "url": "https://www.microsoft.com/en-us/security/business/endpoint-management"
+    },
+    {
+      "name": "Carbon Black",
+      "type": "commercial",
+      "url": "https://www.vmware.com/products/carbon-black-cloud.html"
+    },
+    {
+      "name": "osquery",
+      "type": "open-source",
+      "url": "https://github.com/osquery/osquery"
+    },
+    {
+      "name": "OpenDLP",
+      "type": "open-source",
+      "url": "https://github.com/ezarko/opendlp"
+    },
+    {
+      "name": "CrowdStrike Falcon",
+      "type": "commercial",
+      "url": "https://www.crowdstrike.com"
+    },
+    {
+      "name": "OpenDP",
+      "type": "open-source",
+      "url": "https://opendp.org"
+    },
+    {
+      "name": "PySyft",
+      "type": "open-source",
+      "url": "https://github.com/OpenMined/PySyft"
+    },
+    {
+      "name": "TensorFlow Privacy",
+      "type": "open-source",
+      "url": "https://github.com/tensorflow/privacy"
+    },
+    {
+      "name": "Flower (Federated Learning)",
+      "type": "open-source",
+      "url": "https://flower.ai"
+    },
+    {
+      "name": "Microsoft Presidio",
+      "type": "open-source",
+      "url": "https://github.com/microsoft/presidio"
+    },
+    {
+      "name": "ARX Data Anonymization",
+      "type": "open-source",
+      "url": "https://arx.deidentifier.org"
+    },
+    {
+      "name": "Opacus",
+      "type": "open-source",
+      "url": "https://opacus.ai"
+    },
+    {
+      "name": "OneTrust",
+      "type": "commercial",
+      "url": "https://www.onetrust.com"
+    }
+  ],
+  "incidents": [
+    {
+      "name": "Italy Garante orders ChatGPT GDPR enforcement — consent and data minimization failures",
+      "url": "https://github.com/emmanuelgjr/GenAI-Security-Crosswalk/blob/main/data/incidents.json",
+      "year": 2025,
+      "incident_id": "INC-035"
+    },
+    {
+      "name": "Synthetic data re-identification — de-anonymized patients from synthetic health records",
+      "url": "https://github.com/emmanuelgjr/GenAI-Security-Crosswalk/blob/main/data/incidents.json",
+      "year": 2025,
+      "incident_id": "INC-040"
+    },
+    {
+      "name": "TikTok EU data localization enforcement — Project Clover + EUR 345M GDPR fine",
+      "url": "https://github.com/emmanuelgjr/GenAI-Security-Crosswalk/blob/main/data/incidents.json",
+      "year": 2023,
+      "incident_id": "INC-043"
+    },
+    {
+      "name": "Scale AI / Sama contractor data exposure — third-party AI labeling workforce privacy violations",
+      "url": "https://github.com/emmanuelgjr/GenAI-Security-Crosswalk/blob/main/data/incidents.json",
+      "year": 2024,
+      "incident_id": "INC-044"
+    },
+    {
+      "name": "OpenAI ChatGPT data retention GDPR challenge — right to erasure vs model training",
+      "url": "https://github.com/emmanuelgjr/GenAI-Security-Crosswalk/blob/main/data/incidents.json",
+      "year": 2024,
+      "incident_id": "INC-050"
+    }
+  ],
+  "crossrefs": {
+    "agentic_top10": [
+      "ASI10",
+      "ASI02",
+      "ASI03",
+      "ASI07",
+      "ASI09"
+    ],
+    "dsgai_2026": [
+      "DSGAI03",
+      "DSGAI17"
+    ],
+    "llm_top10": [
+      "LLM06",
+      "LLM03",
+      "LLM08",
+      "LLM01",
+      "LLM02"
+    ]
+  },
+  "changelog": [
+    {
+      "date": "2026-03-27",
+      "version": "1.0.0",
+      "change": "Initial entry — generated from GenAI Security Crosswalk v1.5.1 mapping files",
+      "author": "emmanuelgjr"
+    }
+  ]
+}