Kjell Tore Guttormsen
2e3d33efb4
docs/catalog-census.py classifies every OWASP LLM number in tracked files:
old (2025 meaning, maps mechanically), wrong (a meaning no edition gave it,
each with its reason), same, current, history, migration-plan, self.
At 6702d7a the denominator is 95 sites in 23 files (82 old, 13 wrong);
the listing is frozen with its sha256 and a test reproduces it from git.
24 KiB
24 KiB
| 1 | class | path | line | number | year | meaning_2025 | same_risk_2026 | reason |
|---|---|---|---|---|---|---|---|---|
| 2 | history | CHANGELOG.md | 512 | LLM10 | Unbounded Consumption | LLM06:2026 | released entries are snapshots | |
| 3 | history | CHANGELOG.md | 689 | LLM10 | Unbounded Consumption | LLM06:2026 | released entries are snapshots | |
| 4 | history | CHANGELOG.md | 722 | LLM10 | Unbounded Consumption | LLM06:2026 | released entries are snapshots | |
| 5 | history | CHANGELOG.md | 896 | LLM10 | Unbounded Consumption | LLM06:2026 | released entries are snapshots | |
| 6 | history | CHANGELOG.md | 1043 | LLM05 | Improper Output Handling | LLM10:2026 | released entries are snapshots | |
| 7 | history | CHANGELOG.md | 1051 | LLM02 | Sensitive Information Disclosure | LLM02:2026 | released entries are snapshots | |
| 8 | history | CHANGELOG.md | 1068 | LLM02 | Sensitive Information Disclosure | LLM02:2026 | released entries are snapshots | |
| 9 | history | CHANGELOG.md | 1146 | LLM02 | Sensitive Information Disclosure | LLM02:2026 | released entries are snapshots | |
| 10 | same | CLAUDE.md | 54 | LLM02 | Sensitive Information Disclosure | LLM02:2026 | ||
| 11 | same | README.md | 216 | LLM01 | Prompt Injection | LLM01:2026 | ||
| 12 | same | README.md | 217 | LLM02 | Sensitive Information Disclosure | LLM02:2026 | ||
| 13 | old | README.md | 218 | LLM05 | Improper Output Handling | LLM10:2026 | ||
| 14 | old | README.md | 219 | LLM06 | Excessive Agency | LLM03:2026 | ||
| 15 | wrong | README.md | 220 | LLM10 | Unbounded Consumption | LLM06:2026 | Fail-secure disposition is not Unbounded Consumption in any edition; it is the guard's own failure semantics | |
| 16 | old | README.md | 299 | LLM08 | Vector and Embedding Weaknesses | LLM09:2026 | ||
| 17 | same | README.md | 315 | LLM01 | Prompt Injection | LLM01:2026 | ||
| 18 | same | README.md | 315 | LLM02 | Sensitive Information Disclosure | LLM02:2026 | ||
| 19 | old | README.md | 315 | LLM04 | Data and Model Poisoning | LLM05:2026 | ||
| 20 | old | README.md | 315 | LLM05 | Improper Output Handling | LLM10:2026 | ||
| 21 | old | README.md | 315 | LLM06 | Excessive Agency | LLM03:2026 | ||
| 22 | old | README.md | 315 | LLM08 | Vector and Embedding Weaknesses | LLM09:2026 | ||
| 23 | old | README.md | 315 | LLM09 | Misinformation | LLM07:2026 | ||
| 24 | old | README.md | 315 | LLM10 | Unbounded Consumption | LLM06:2026 | ||
| 25 | same | docs/ADOPTION-BRIEF.md | 149 | LLM02 | Sensitive Information Disclosure | LLM02:2026 | ||
| 26 | same | docs/ADOPTION-BRIEF.md | 236 | LLM01 | Prompt Injection | LLM01:2026 | ||
| 27 | same | docs/ADOPTION-BRIEF.md | 236 | LLM02 | Sensitive Information Disclosure | LLM02:2026 | ||
| 28 | old | docs/ADOPTION-BRIEF.md | 236 | LLM04 | Data and Model Poisoning | LLM05:2026 | ||
| 29 | old | docs/ADOPTION-BRIEF.md | 236 | LLM05 | Improper Output Handling | LLM10:2026 | ||
| 30 | old | docs/ADOPTION-BRIEF.md | 236 | LLM06 | Excessive Agency | LLM03:2026 | ||
| 31 | old | docs/ADOPTION-BRIEF.md | 236 | LLM08 | Vector and Embedding Weaknesses | LLM09:2026 | ||
| 32 | same | docs/BRIEF.md | 209 | LLM01 | Prompt Injection | LLM01:2026 | ||
| 33 | same | docs/LIMITATIONS.md | 221 | LLM02 | Sensitive Information Disclosure | LLM02:2026 | ||
| 34 | old | docs/LIMITATIONS.md | 710 | LLM10 | Unbounded Consumption | LLM06:2026 | ||
| 35 | old | docs/LIMITATIONS.md | 810 | LLM08 | Vector and Embedding Weaknesses | LLM09:2026 | ||
| 36 | history | docs/PLAN-v1.md | 57 | LLM05 | Improper Output Handling | LLM10:2026 | the v1 plan | |
| 37 | history | docs/PLAN-v1.md | 121 | LLM02 | Sensitive Information Disclosure | LLM02:2026 | the v1 plan | |
| 38 | history | docs/PLAN.md | 34 | LLM08 | 2025 | Vector and Embedding Weaknesses | LLM09:2026 | |
| 39 | history | docs/PLAN.md | 65 | LLM02 | Sensitive Information Disclosure | LLM02:2026 | ||
| 40 | history | docs/PLAN.md | 69 | LLM10 | Unbounded Consumption | LLM06:2026 | ||
| 41 | history | docs/PLAN.md | 115 | LLM02 | Sensitive Information Disclosure | LLM02:2026 | ||
| 42 | history | docs/PLAN.md | 170 | LLM08 | Vector and Embedding Weaknesses | LLM09:2026 | ||
| 43 | history | docs/PLAN.md | 186 | LLM01 | Prompt Injection | LLM01:2026 | ||
| 44 | history | docs/PLAN.md | 186 | LLM02 | Sensitive Information Disclosure | LLM02:2026 | ||
| 45 | history | docs/PLAN.md | 186 | LLM04 | Data and Model Poisoning | LLM05:2026 | ||
| 46 | history | docs/PLAN.md | 186 | LLM05 | Improper Output Handling | LLM10:2026 | ||
| 47 | history | docs/PLAN.md | 186 | LLM06 | Excessive Agency | LLM03:2026 | ||
| 48 | history | docs/PLAN.md | 186 | LLM08 | Vector and Embedding Weaknesses | LLM09:2026 | ||
| 49 | history | docs/PLAN.md | 187 | LLM09 | Misinformation | LLM07:2026 | ||
| 50 | history | docs/PLAN.md | 187 | LLM10 | Unbounded Consumption | LLM06:2026 | ||
| 51 | history | docs/PLAN.md | 312 | LLM10 | Unbounded Consumption | LLM06:2026 | ||
| 52 | history | docs/review-2026-07.md | 77 | LLM05 | Improper Output Handling | LLM10:2026 | published review | |
| 53 | history | docs/review-2026-07.md | 156 | LLM02 | Sensitive Information Disclosure | LLM02:2026 | published review | |
| 54 | history | docs/review-2026-07.md | 164 | LLM02 | Sensitive Information Disclosure | LLM02:2026 | published review | |
| 55 | history | docs/review-2026-07.md | 304 | LLM09 | Misinformation | LLM07:2026 | published review | |
| 56 | history | docs/review-2026-07.md | 338 | LLM01 | Prompt Injection | LLM01:2026 | published review | |
| 57 | history | docs/review-2026-07.md | 338 | LLM02 | Sensitive Information Disclosure | LLM02:2026 | published review | |
| 58 | history | docs/review-2026-07.md | 338 | LLM04 | Data and Model Poisoning | LLM05:2026 | published review | |
| 59 | history | docs/review-2026-07.md | 338 | LLM05 | Improper Output Handling | LLM10:2026 | published review | |
| 60 | history | docs/review-2026-07.md | 338 | LLM06 | Excessive Agency | LLM03:2026 | published review | |
| 61 | history | docs/review-2026-07.md | 338 | LLM08 | Vector and Embedding Weaknesses | LLM09:2026 | published review | |
| 62 | history | docs/review-2026-07.md | 338 | LLM09 | Misinformation | LLM07:2026 | published review | |
| 63 | history | docs/review-2026-07.md | 338 | LLM10 | Unbounded Consumption | LLM06:2026 | published review | |
| 64 | history | docs/review-2026-07.md | 343 | LLM10 | Unbounded Consumption | LLM06:2026 | published review | |
| 65 | old | src/llm_ingestion_guard/active_content.py | 9 | LLM05 | Improper Output Handling | LLM10:2026 | ||
| 66 | old | src/llm_ingestion_guard/active_content.py | 156 | LLM10 | Unbounded Consumption | LLM06:2026 | ||
| 67 | old | src/llm_ingestion_guard/active_content.py | 199 | LLM10 | Unbounded Consumption | LLM06:2026 | ||
| 68 | old | src/llm_ingestion_guard/active_content.py | 277 | LLM10 | Unbounded Consumption | LLM06:2026 | ||
| 69 | old | src/llm_ingestion_guard/active_content.py | 449 | LLM10 | Unbounded Consumption | LLM06:2026 | ||
| 70 | old | src/llm_ingestion_guard/active_content.py | 462 | LLM10 | Unbounded Consumption | LLM06:2026 | ||
| 71 | old | src/llm_ingestion_guard/active_content.py | 479 | LLM05 | Improper Output Handling | LLM10:2026 | ||
| 72 | old | src/llm_ingestion_guard/calibration.py | 42 | LLM10 | Unbounded Consumption | LLM06:2026 | ||
| 73 | same | src/llm_ingestion_guard/coverage.py | 25 | LLM02 | Sensitive Information Disclosure | LLM02:2026 | ||
| 74 | same | src/llm_ingestion_guard/coverage.py | 29 | LLM02 | Sensitive Information Disclosure | LLM02:2026 | ||
| 75 | same | src/llm_ingestion_guard/coverage.py | 113 | LLM01 | Prompt Injection | LLM01:2026 | ||
| 76 | wrong | src/llm_ingestion_guard/coverage.py | 126 | LLM01 | Prompt Injection | LLM01:2026 | Default tags the OKF path-traversal, absolute-path, reserved-name, non-.md and bundle-escape rows as Prompt Injection; none of them is | |
| 77 | same | src/llm_ingestion_guard/coverage.py | 146 | LLM01 | Prompt Injection | LLM01:2026 | ||
| 78 | same | src/llm_ingestion_guard/coverage.py | 467 | LLM02 | Sensitive Information Disclosure | LLM02:2026 | ||
| 79 | same | src/llm_ingestion_guard/coverage.py | 468 | LLM02 | Sensitive Information Disclosure | LLM02:2026 | ||
| 80 | old | src/llm_ingestion_guard/coverage.py | 471 | LLM05 | Improper Output Handling | LLM10:2026 | ||
| 81 | old | src/llm_ingestion_guard/coverage.py | 477 | LLM05 | Improper Output Handling | LLM10:2026 | ||
| 82 | old | src/llm_ingestion_guard/coverage.py | 479 | LLM05 | Improper Output Handling | LLM10:2026 | ||
| 83 | old | src/llm_ingestion_guard/coverage.py | 481 | LLM05 | Improper Output Handling | LLM10:2026 | ||
| 84 | old | src/llm_ingestion_guard/coverage.py | 483 | LLM05 | Improper Output Handling | LLM10:2026 | ||
| 85 | old | src/llm_ingestion_guard/coverage.py | 485 | LLM05 | Improper Output Handling | LLM10:2026 | ||
| 86 | old | src/llm_ingestion_guard/coverage.py | 487 | LLM05 | Improper Output Handling | LLM10:2026 | ||
| 87 | old | src/llm_ingestion_guard/coverage.py | 493 | LLM05 | Improper Output Handling | LLM10:2026 | ||
| 88 | old | src/llm_ingestion_guard/coverage.py | 495 | LLM05 | Improper Output Handling | LLM10:2026 | ||
| 89 | old | src/llm_ingestion_guard/coverage.py | 497 | LLM05 | Improper Output Handling | LLM10:2026 | ||
| 90 | same | src/llm_ingestion_guard/coverage.py | 504 | LLM02 | Sensitive Information Disclosure | LLM02:2026 | ||
| 91 | old | src/llm_ingestion_guard/coverage.py | 511 | LLM06 | Excessive Agency | LLM03:2026 | ||
| 92 | same | src/llm_ingestion_guard/coverage.py | 515 | LLM02 | Sensitive Information Disclosure | LLM02:2026 | ||
| 93 | old | src/llm_ingestion_guard/coverage.py | 517 | LLM06 | Excessive Agency | LLM03:2026 | ||
| 94 | wrong | src/llm_ingestion_guard/coverage.py | 527 | LLM10 | Unbounded Consumption | LLM06:2026 | Fail-secure disposition is not Unbounded Consumption in any edition; it is the guard's own failure semantics | |
| 95 | old | src/llm_ingestion_guard/coverage.py | 538 | LLM10 | Unbounded Consumption | LLM06:2026 | ||
| 96 | old | src/llm_ingestion_guard/coverage.py | 540 | LLM10 | Unbounded Consumption | LLM06:2026 | ||
| 97 | wrong | src/llm_ingestion_guard/coverage.py | 542 | LLM10 | Unbounded Consumption | LLM06:2026 | A frontmatter shape the parser refuses to interpret is parser-surface reduction, not resource consumption; no edition defines it | |
| 98 | wrong | src/llm_ingestion_guard/coverage.py | 544 | LLM10 | Unbounded Consumption | LLM06:2026 | A frontmatter shape the parser refuses to interpret is parser-surface reduction, not resource consumption; no edition defines it | |
| 99 | wrong | src/llm_ingestion_guard/coverage.py | 552 | LLM10 | Unbounded Consumption | LLM06:2026 | A frontmatter shape the parser refuses to interpret is parser-surface reduction, not resource consumption; no edition defines it | |
| 100 | wrong | src/llm_ingestion_guard/coverage.py | 555 | LLM10 | Unbounded Consumption | LLM06:2026 | A frontmatter shape the parser refuses to interpret is parser-surface reduction, not resource consumption; no edition defines it | |
| 101 | wrong | src/llm_ingestion_guard/coverage.py | 557 | LLM05 | Improper Output Handling | LLM10:2026 | Validates received bundle metadata, not model output; Improper Output Handling is about LLM output passed downstream | |
| 102 | wrong | src/llm_ingestion_guard/coverage.py | 559 | LLM05 | Improper Output Handling | LLM10:2026 | Validates received bundle metadata, not model output; Improper Output Handling is about LLM output passed downstream | |
| 103 | wrong | src/llm_ingestion_guard/coverage.py | 561 | LLM05 | Improper Output Handling | LLM10:2026 | Validates received bundle metadata, not model output; Improper Output Handling is about LLM output passed downstream | |
| 104 | wrong | src/llm_ingestion_guard/coverage.py | 571 | LLM05 | Improper Output Handling | LLM10:2026 | Validates received bundle metadata, not model output; Improper Output Handling is about LLM output passed downstream | |
| 105 | same | src/llm_ingestion_guard/coverage.py | 583 | LLM02 | Sensitive Information Disclosure | LLM02:2026 | ||
| 106 | wrong | src/llm_ingestion_guard/coverage.py | 586 | LLM09 | Misinformation | LLM07:2026 | Factual poisoning of the ingested store (PoisonedRAG) is Data and Model Poisoning or Vector and Embedding Weaknesses, not Misinformation | |
| 107 | old | src/llm_ingestion_guard/coverage.py | 595 | LLM05 | Improper Output Handling | LLM10:2026 | ||
| 108 | old | src/llm_ingestion_guard/coverage.py | 598 | LLM05 | Improper Output Handling | LLM10:2026 | ||
| 109 | same | src/llm_ingestion_guard/coverage.py | 605 | LLM01 | Prompt Injection | LLM01:2026 | ||
| 110 | same | src/llm_ingestion_guard/coverage.py | 624 | LLM01 | Prompt Injection | LLM01:2026 | ||
| 111 | same | src/llm_ingestion_guard/coverage.py | 625 | LLM01 | Prompt Injection | LLM01:2026 | ||
| 112 | same | src/llm_ingestion_guard/coverage.py | 626 | LLM01 | Prompt Injection | LLM01:2026 | ||
| 113 | same | src/llm_ingestion_guard/coverage.py | 627 | LLM01 | Prompt Injection | LLM01:2026 | ||
| 114 | same | src/llm_ingestion_guard/coverage.py | 627 | LLM02 | Sensitive Information Disclosure | LLM02:2026 | ||
| 115 | old | src/llm_ingestion_guard/coverage.py | 628 | LLM05 | Improper Output Handling | LLM10:2026 | ||
| 116 | same | src/llm_ingestion_guard/coverage.py | 629 | LLM02 | Sensitive Information Disclosure | LLM02:2026 | ||
| 117 | same | src/llm_ingestion_guard/coverage.py | 630 | LLM02 | Sensitive Information Disclosure | LLM02:2026 | ||
| 118 | old | src/llm_ingestion_guard/coverage.py | 630 | LLM06 | Excessive Agency | LLM03:2026 | ||
| 119 | old | src/llm_ingestion_guard/entropy.py | 31 | LLM10 | Unbounded Consumption | LLM06:2026 | ||
| 120 | same | src/llm_ingestion_guard/entropy.py | 244 | LLM01 | Prompt Injection | LLM01:2026 | ||
| 121 | same | src/llm_ingestion_guard/fence.py | 99 | LLM01 | Prompt Injection | LLM01:2026 | ||
| 122 | same | src/llm_ingestion_guard/injection_lexicon.json | 10 | LLM01 | Prompt Injection | LLM01:2026 | ||
| 123 | same | src/llm_ingestion_guard/injection_lexicon.json | 18 | LLM01 | Prompt Injection | LLM01:2026 | ||
| 124 | same | src/llm_ingestion_guard/injection_lexicon.json | 26 | LLM01 | Prompt Injection | LLM01:2026 | ||
| 125 | same | src/llm_ingestion_guard/injection_lexicon.json | 34 | LLM01 | Prompt Injection | LLM01:2026 | ||
| 126 | same | src/llm_ingestion_guard/injection_lexicon.json | 42 | LLM01 | Prompt Injection | LLM01:2026 | ||
| 127 | same | src/llm_ingestion_guard/injection_lexicon.json | 50 | LLM01 | Prompt Injection | LLM01:2026 | ||
| 128 | same | src/llm_ingestion_guard/injection_lexicon.json | 58 | LLM01 | Prompt Injection | LLM01:2026 | ||
| 129 | same | src/llm_ingestion_guard/injection_lexicon.json | 66 | LLM01 | Prompt Injection | LLM01:2026 | ||
| 130 | same | src/llm_ingestion_guard/injection_lexicon.json | 74 | LLM01 | Prompt Injection | LLM01:2026 | ||
| 131 | same | src/llm_ingestion_guard/injection_lexicon.json | 82 | LLM01 | Prompt Injection | LLM01:2026 | ||
| 132 | same | src/llm_ingestion_guard/injection_lexicon.json | 90 | LLM01 | Prompt Injection | LLM01:2026 | ||
| 133 | same | src/llm_ingestion_guard/injection_lexicon.json | 98 | LLM01 | Prompt Injection | LLM01:2026 | ||
| 134 | same | src/llm_ingestion_guard/injection_lexicon.json | 106 | LLM01 | Prompt Injection | LLM01:2026 | ||
| 135 | same | src/llm_ingestion_guard/injection_lexicon.json | 114 | LLM01 | Prompt Injection | LLM01:2026 | ||
| 136 | same | src/llm_ingestion_guard/injection_lexicon.json | 122 | LLM01 | Prompt Injection | LLM01:2026 | ||
| 137 | same | src/llm_ingestion_guard/injection_lexicon.json | 130 | LLM01 | Prompt Injection | LLM01:2026 | ||
| 138 | same | src/llm_ingestion_guard/injection_lexicon.json | 138 | LLM01 | Prompt Injection | LLM01:2026 | ||
| 139 | same | src/llm_ingestion_guard/injection_lexicon.json | 146 | LLM01 | Prompt Injection | LLM01:2026 | ||
| 140 | same | src/llm_ingestion_guard/injection_lexicon.json | 154 | LLM01 | Prompt Injection | LLM01:2026 | ||
| 141 | same | src/llm_ingestion_guard/injection_lexicon.json | 162 | LLM01 | Prompt Injection | LLM01:2026 | ||
| 142 | same | src/llm_ingestion_guard/injection_lexicon.json | 170 | LLM01 | Prompt Injection | LLM01:2026 | ||
| 143 | same | src/llm_ingestion_guard/injection_lexicon.json | 178 | LLM01 | Prompt Injection | LLM01:2026 | ||
| 144 | same | src/llm_ingestion_guard/injection_lexicon.json | 186 | LLM01 | Prompt Injection | LLM01:2026 | ||
| 145 | same | src/llm_ingestion_guard/injection_lexicon.json | 194 | LLM01 | Prompt Injection | LLM01:2026 | ||
| 146 | same | src/llm_ingestion_guard/injection_lexicon.json | 202 | LLM01 | Prompt Injection | LLM01:2026 | ||
| 147 | same | src/llm_ingestion_guard/injection_lexicon.json | 210 | LLM01 | Prompt Injection | LLM01:2026 | ||
| 148 | same | src/llm_ingestion_guard/injection_lexicon.json | 218 | LLM01 | Prompt Injection | LLM01:2026 | ||
| 149 | same | src/llm_ingestion_guard/injection_lexicon.json | 226 | LLM01 | Prompt Injection | LLM01:2026 | ||
| 150 | same | src/llm_ingestion_guard/injection_lexicon.json | 234 | LLM01 | Prompt Injection | LLM01:2026 | ||
| 151 | same | src/llm_ingestion_guard/injection_lexicon.json | 242 | LLM01 | Prompt Injection | LLM01:2026 | ||
| 152 | same | src/llm_ingestion_guard/injection_lexicon.json | 250 | LLM01 | Prompt Injection | LLM01:2026 | ||
| 153 | same | src/llm_ingestion_guard/injection_lexicon.json | 258 | LLM01 | Prompt Injection | LLM01:2026 | ||
| 154 | same | src/llm_ingestion_guard/injection_lexicon.json | 266 | LLM01 | Prompt Injection | LLM01:2026 | ||
| 155 | same | src/llm_ingestion_guard/injection_lexicon.json | 274 | LLM01 | Prompt Injection | LLM01:2026 | ||
| 156 | same | src/llm_ingestion_guard/injection_lexicon.json | 282 | LLM01 | Prompt Injection | LLM01:2026 | ||
| 157 | same | src/llm_ingestion_guard/injection_lexicon.json | 290 | LLM01 | Prompt Injection | LLM01:2026 | ||
| 158 | same | src/llm_ingestion_guard/injection_lexicon.json | 298 | LLM01 | Prompt Injection | LLM01:2026 | ||
| 159 | same | src/llm_ingestion_guard/injection_lexicon.json | 306 | LLM01 | Prompt Injection | LLM01:2026 | ||
| 160 | same | src/llm_ingestion_guard/injection_lexicon.json | 314 | LLM01 | Prompt Injection | LLM01:2026 | ||
| 161 | same | src/llm_ingestion_guard/injection_lexicon.json | 322 | LLM01 | Prompt Injection | LLM01:2026 | ||
| 162 | same | src/llm_ingestion_guard/injection_lexicon.json | 330 | LLM01 | Prompt Injection | LLM01:2026 | ||
| 163 | same | src/llm_ingestion_guard/injection_lexicon.json | 338 | LLM01 | Prompt Injection | LLM01:2026 | ||
| 164 | same | src/llm_ingestion_guard/injection_lexicon.json | 346 | LLM01 | Prompt Injection | LLM01:2026 | ||
| 165 | same | src/llm_ingestion_guard/injection_lexicon.json | 354 | LLM01 | Prompt Injection | LLM01:2026 | ||
| 166 | same | src/llm_ingestion_guard/injection_lexicon.json | 362 | LLM01 | Prompt Injection | LLM01:2026 | ||
| 167 | same | src/llm_ingestion_guard/injection_lexicon.json | 370 | LLM01 | Prompt Injection | LLM01:2026 | ||
| 168 | same | src/llm_ingestion_guard/injection_lexicon.json | 378 | LLM01 | Prompt Injection | LLM01:2026 | ||
| 169 | same | src/llm_ingestion_guard/injection_lexicon.json | 386 | LLM01 | Prompt Injection | LLM01:2026 | ||
| 170 | same | src/llm_ingestion_guard/injection_lexicon.json | 394 | LLM01 | Prompt Injection | LLM01:2026 | ||
| 171 | same | src/llm_ingestion_guard/injection_lexicon.json | 402 | LLM01 | Prompt Injection | LLM01:2026 | ||
| 172 | same | src/llm_ingestion_guard/injection_lexicon.json | 410 | LLM01 | Prompt Injection | LLM01:2026 | ||
| 173 | same | src/llm_ingestion_guard/injection_lexicon.json | 418 | LLM01 | Prompt Injection | LLM01:2026 | ||
| 174 | same | src/llm_ingestion_guard/injection_lexicon.json | 426 | LLM01 | Prompt Injection | LLM01:2026 | ||
| 175 | same | src/llm_ingestion_guard/injection_lexicon.json | 434 | LLM01 | Prompt Injection | LLM01:2026 | ||
| 176 | same | src/llm_ingestion_guard/injection_lexicon.json | 442 | LLM01 | Prompt Injection | LLM01:2026 | ||
| 177 | same | src/llm_ingestion_guard/injection_lexicon.json | 450 | LLM01 | Prompt Injection | LLM01:2026 | ||
| 178 | same | src/llm_ingestion_guard/injection_lexicon.json | 458 | LLM01 | Prompt Injection | LLM01:2026 | ||
| 179 | same | src/llm_ingestion_guard/injection_lexicon.json | 466 | LLM01 | Prompt Injection | LLM01:2026 | ||
| 180 | same | src/llm_ingestion_guard/injection_lexicon.json | 474 | LLM01 | Prompt Injection | LLM01:2026 | ||
| 181 | same | src/llm_ingestion_guard/injection_lexicon.json | 482 | LLM01 | Prompt Injection | LLM01:2026 | ||
| 182 | same | src/llm_ingestion_guard/injection_lexicon.json | 490 | LLM01 | Prompt Injection | LLM01:2026 | ||
| 183 | same | src/llm_ingestion_guard/injection_lexicon.json | 498 | LLM01 | Prompt Injection | LLM01:2026 | ||
| 184 | same | src/llm_ingestion_guard/injection_lexicon.json | 506 | LLM01 | Prompt Injection | LLM01:2026 | ||
| 185 | same | src/llm_ingestion_guard/injection_lexicon.json | 514 | LLM01 | Prompt Injection | LLM01:2026 | ||
| 186 | same | src/llm_ingestion_guard/injection_lexicon.json | 522 | LLM01 | Prompt Injection | LLM01:2026 | ||
| 187 | same | src/llm_ingestion_guard/injection_lexicon.json | 530 | LLM01 | Prompt Injection | LLM01:2026 | ||
| 188 | same | src/llm_ingestion_guard/injection_lexicon.json | 538 | LLM01 | Prompt Injection | LLM01:2026 | ||
| 189 | same | src/llm_ingestion_guard/injection_lexicon.json | 546 | LLM01 | Prompt Injection | LLM01:2026 | ||
| 190 | same | src/llm_ingestion_guard/injection_lexicon.json | 554 | LLM01 | Prompt Injection | LLM01:2026 | ||
| 191 | same | src/llm_ingestion_guard/injection_lexicon.json | 562 | LLM01 | Prompt Injection | LLM01:2026 | ||
| 192 | same | src/llm_ingestion_guard/injection_lexicon.json | 570 | LLM01 | Prompt Injection | LLM01:2026 | ||
| 193 | same | src/llm_ingestion_guard/injection_lexicon.json | 578 | LLM01 | Prompt Injection | LLM01:2026 | ||
| 194 | same | src/llm_ingestion_guard/injection_lexicon.json | 586 | LLM01 | Prompt Injection | LLM01:2026 | ||
| 195 | same | src/llm_ingestion_guard/injection_lexicon.json | 594 | LLM01 | Prompt Injection | LLM01:2026 | ||
| 196 | same | src/llm_ingestion_guard/injection_lexicon.json | 602 | LLM01 | Prompt Injection | LLM01:2026 | ||
| 197 | same | src/llm_ingestion_guard/injection_lexicon.json | 610 | LLM01 | Prompt Injection | LLM01:2026 | ||
| 198 | same | src/llm_ingestion_guard/injection_lexicon.json | 618 | LLM01 | Prompt Injection | LLM01:2026 | ||
| 199 | same | src/llm_ingestion_guard/injection_lexicon.json | 626 | LLM01 | Prompt Injection | LLM01:2026 | ||
| 200 | same | src/llm_ingestion_guard/injection_lexicon.json | 634 | LLM01 | Prompt Injection | LLM01:2026 | ||
| 201 | same | src/llm_ingestion_guard/injection_lexicon.json | 642 | LLM01 | Prompt Injection | LLM01:2026 | ||
| 202 | same | src/llm_ingestion_guard/injection_lexicon.json | 650 | LLM01 | Prompt Injection | LLM01:2026 | ||
| 203 | same | src/llm_ingestion_guard/injection_lexicon.json | 658 | LLM01 | Prompt Injection | LLM01:2026 | ||
| 204 | same | src/llm_ingestion_guard/injection_lexicon.json | 666 | LLM01 | Prompt Injection | LLM01:2026 | ||
| 205 | old | src/llm_ingestion_guard/lexicon.py | 23 | LLM10 | Unbounded Consumption | LLM06:2026 | ||
| 206 | old | src/llm_ingestion_guard/lexicon.py | 69 | LLM10 | Unbounded Consumption | LLM06:2026 | ||
| 207 | same | src/llm_ingestion_guard/lexicon.py | 108 | LLM01 | Prompt Injection | LLM01:2026 | ||
| 208 | old | src/llm_ingestion_guard/lexicon.py | 341 | LLM10 | Unbounded Consumption | LLM06:2026 | ||
| 209 | same | src/llm_ingestion_guard/lexicon.py | 381 | LLM01 | Prompt Injection | LLM01:2026 | ||
| 210 | same | src/llm_ingestion_guard/lexicon.py | 394 | LLM01 | Prompt Injection | LLM01:2026 | ||
| 211 | old | src/llm_ingestion_guard/neutralize.py | 10 | LLM05 | Improper Output Handling | LLM10:2026 | ||
| 212 | old | src/llm_ingestion_guard/neutralize.py | 92 | LLM05 | Improper Output Handling | LLM10:2026 | ||
| 213 | old | src/llm_ingestion_guard/okf.py | 491 | LLM10 | Unbounded Consumption | LLM06:2026 | ||
| 214 | old | src/llm_ingestion_guard/okf.py | 514 | LLM10 | Unbounded Consumption | LLM06:2026 | ||
| 215 | old | src/llm_ingestion_guard/okf.py | 568 | LLM10 | Unbounded Consumption | LLM06:2026 | ||
| 216 | same | src/llm_ingestion_guard/output.py | 25 | LLM02 | Sensitive Information Disclosure | LLM02:2026 | ||
| 217 | old | src/llm_ingestion_guard/output.py | 38 | LLM05 | Improper Output Handling | LLM10:2026 | ||
| 218 | old | src/llm_ingestion_guard/output.py | 47 | LLM10 | Unbounded Consumption | LLM06:2026 | ||
| 219 | same | src/llm_ingestion_guard/output.py | 76 | LLM02 | Sensitive Information Disclosure | LLM02:2026 | ||
| 220 | same | src/llm_ingestion_guard/output.py | 218 | LLM02 | Sensitive Information Disclosure | LLM02:2026 | ||
| 221 | same | src/llm_ingestion_guard/output.py | 235 | LLM02 | Sensitive Information Disclosure | LLM02:2026 | ||
| 222 | same | src/llm_ingestion_guard/output.py | 269 | LLM01 | Prompt Injection | LLM01:2026 | ||
| 223 | same | src/llm_ingestion_guard/output.py | 275 | LLM01 | Prompt Injection | LLM01:2026 | ||
| 224 | old | src/llm_ingestion_guard/output.py | 303 | LLM10 | Unbounded Consumption | LLM06:2026 | ||
| 225 | same | src/llm_ingestion_guard/output.py | 336 | LLM02 | Sensitive Information Disclosure | LLM02:2026 | ||
| 226 | old | src/llm_ingestion_guard/output.py | 345 | LLM05 | Improper Output Handling | LLM10:2026 | ||
| 227 | old | src/llm_ingestion_guard/sanitize.py | 80 | LLM10 | Unbounded Consumption | LLM06:2026 | ||
| 228 | same | src/llm_ingestion_guard/sanitize.py | 193 | LLM01 | Prompt Injection | LLM01:2026 | ||
| 229 | same | src/llm_ingestion_guard/sanitize.py | 196 | LLM01 | Prompt Injection | LLM01:2026 | ||
| 230 | same | src/llm_ingestion_guard/sanitize.py | 200 | LLM01 | Prompt Injection | LLM01:2026 | ||
| 231 | same | src/llm_ingestion_guard/sanitize.py | 203 | LLM01 | Prompt Injection | LLM01:2026 | ||
| 232 | same | src/llm_ingestion_guard/sanitize.py | 206 | LLM01 | Prompt Injection | LLM01:2026 | ||
| 233 | old | tests/inbox_frontend.py | 52 | LLM10 | Unbounded Consumption | LLM06:2026 | ||
| 234 | old | tests/test_active_content.py | 8 | LLM05 | Improper Output Handling | LLM10:2026 | ||
| 235 | old | tests/test_active_content.py | 44 | LLM05 | Improper Output Handling | LLM10:2026 | ||
| 236 | old | tests/test_active_content.py | 436 | LLM10 | Unbounded Consumption | LLM06:2026 | ||
| 237 | old | tests/test_active_content.py | 486 | LLM10 | Unbounded Consumption | LLM06:2026 | ||
| 238 | old | tests/test_active_content.py | 500 | LLM10 | Unbounded Consumption | LLM06:2026 | ||
| 239 | same | tests/test_coverage_matrix.py | 11 | LLM02 | Sensitive Information Disclosure | LLM02:2026 | ||
| 240 | same | tests/test_coverage_matrix.py | 77 | LLM01 | Prompt Injection | LLM01:2026 | ||
| 241 | same | tests/test_coverage_matrix.py | 77 | LLM02 | Sensitive Information Disclosure | LLM02:2026 | ||
| 242 | old | tests/test_coverage_matrix.py | 77 | LLM05 | Improper Output Handling | LLM10:2026 | ||
| 243 | old | tests/test_coverage_matrix.py | 77 | LLM06 | Excessive Agency | LLM03:2026 | ||
| 244 | wrong | tests/test_coverage_matrix.py | 77 | LLM09 | Misinformation | LLM07:2026 | Asserts the matrix carries the semantic-poisoning row's LLM09; follows that row | |
| 245 | old | tests/test_coverage_matrix.py | 77 | LLM10 | Unbounded Consumption | LLM06:2026 | ||
| 246 | same | tests/test_coverage_matrix.py | 81 | LLM02 | Sensitive Information Disclosure | LLM02:2026 | ||
| 247 | same | tests/test_coverage_matrix.py | 120 | LLM02 | Sensitive Information Disclosure | LLM02:2026 | ||
| 248 | same | tests/test_entropy.py | 83 | LLM01 | Prompt Injection | LLM01:2026 | ||
| 249 | old | tests/test_input_cap.py | 1 | LLM10 | Unbounded Consumption | LLM06:2026 | ||
| 250 | old | tests/test_lexicon.py | 6 | LLM10 | Unbounded Consumption | LLM06:2026 | ||
| 251 | same | tests/test_lexicon.py | 95 | LLM01 | Prompt Injection | LLM01:2026 | ||
| 252 | old | tests/test_lexicon.py | 220 | LLM10 | Unbounded Consumption | LLM06:2026 | ||
| 253 | old | tests/test_lexicon.py | 227 | LLM10 | Unbounded Consumption | LLM06:2026 | ||
| 254 | old | tests/test_lexicon.py | 263 | LLM10 | Unbounded Consumption | LLM06:2026 | ||
| 255 | old | tests/test_neutralize.py | 45 | LLM05 | Improper Output Handling | LLM10:2026 | ||
| 256 | old | tests/test_neutralize.py | 175 | LLM10 | Unbounded Consumption | LLM06:2026 | ||
| 257 | old | tests/test_okf.py | 503 | LLM10 | Unbounded Consumption | LLM06:2026 | ||
| 258 | old | tests/test_okf.py | 754 | LLM10 | Unbounded Consumption | LLM06:2026 | ||
| 259 | old | tests/test_okf.py | 1217 | LLM10 | Unbounded Consumption | LLM06:2026 | ||
| 260 | old | tests/test_okf_showcase.py | 81 | LLM05 | Improper Output Handling | LLM10:2026 | ||
| 261 | old | tests/test_okf_showcase.py | 134 | LLM05 | Improper Output Handling | LLM10:2026 | ||
| 262 | same | tests/test_output.py | 12 | LLM02 | Sensitive Information Disclosure | LLM02:2026 | ||
| 263 | same | tests/test_output.py | 132 | LLM02 | Sensitive Information Disclosure | LLM02:2026 | ||
| 264 | same | tests/test_output.py | 205 | LLM02 | Sensitive Information Disclosure | LLM02:2026 | ||
| 265 | same | tests/test_output.py | 212 | LLM02 | Sensitive Information Disclosure | LLM02:2026 | ||
| 266 | old | tests/test_output.py | 318 | LLM10 | Unbounded Consumption | LLM06:2026 | ||
| 267 | old | tests/test_output.py | 325 | LLM10 | Unbounded Consumption | LLM06:2026 | ||
| 268 | old | tests/test_output.py | 381 | LLM10 | Unbounded Consumption | LLM06:2026 | ||
| 269 | old | tests/test_sanitize.py | 81 | LLM10 | Unbounded Consumption | LLM06:2026 | ||
| 270 | same | tests/test_showcase.py | 67 | LLM02 | Sensitive Information Disclosure | LLM02:2026 | ||
| 271 | old | tests/test_showcase.py | 69 | LLM05 | Improper Output Handling | LLM10:2026 | ||
| 272 | same | tests/test_showcase.py | 117 | LLM02 | Sensitive Information Disclosure | LLM02:2026 | ||
| 273 | old | tests/test_showcase.py | 119 | LLM05 | Improper Output Handling | LLM10:2026 | ||
| 274 | same | tests/test_showcase.py | 138 | LLM02 | Sensitive Information Disclosure | LLM02:2026 |