llm-security-commons

open/llm-security-commons

Fork 0

Commit graph

c362717818 fix(security): use security@ as the reporting contact, not hello@ main Kjell Tore Guttormsen 2026-08-21 11:22:58 +02:00
e56812eb39 docs(readme): add table of contents Kjell Tore Guttormsen 2026-08-16 16:17:45 +02:00
f0a511369d fix(spec): section 7 stated its own premise and then applied itself beyond it v0.9.0 Kjell Tore Guttormsen 2026-08-13 23:31:28 +02:00
c75c546614 docs(manifest): the precision field stated its exposure as a hand-derived count v0.8.1 Kjell Tore Guttormsen 2026-08-13 23:15:10 +02:00
c23aea9062 docs(manifest): the active-content fixtures pin a version, and nothing said so v0.8.0 Kjell Tore Guttormsen 2026-08-13 23:09:33 +02:00
757570dd49 fix(readme): the paragraph still argued the premise our own commit retired v0.7.3 Kjell Tore Guttormsen 2026-08-13 22:58:29 +02:00
4356caa689 fix(manifest): the egress blocker named a premise the measurement falsified v0.7.2 Kjell Tore Guttormsen 2026-08-13 22:46:15 +02:00
4a6f6ffc16 docs(egress): the summary row was hand-totalled, and the caveat was measurable Kjell Tore Guttormsen 2026-08-13 22:22:29 +02:00
2d9ee9c434 docs(egress): the premise was one table cut two ways, and it is two tables Kjell Tore Guttormsen 2026-08-13 22:16:06 +02:00
27b31701e0 docs(readme): the variant rule is normative in the spec now, and the README still pointed at the manifest v0.7.1 Kjell Tore Guttormsen 2026-08-13 22:04:16 +02:00
cb784fea6f fix(spec): section 6 forbade a case the corpus ships, and the predicate under it was wrong too v0.7.0 Kjell Tore Guttormsen 2026-08-13 22:00:24 +02:00
e6ca5ae5ee feat(active-content): the seventh case, and the classifier it needed came with it v0.6.0 Kjell Tore Guttormsen 2026-08-13 21:43:27 +02:00
8f08e9ac73 feat(carriers): three cases minted, and the id is named rather than adopted v0.5.0 Kjell Tore Guttormsen 2026-08-13 21:17:44 +02:00
7ce0ba706c docs(carriers): the third verdict exists, and publishing an alias is what takes it away v0.4.3 Kjell Tore Guttormsen 2026-08-11 22:34:00 +02:00
302625ead5 fix(conformance): the tag carrier has no output: label, and our blocker claimed it did Kjell Tore Guttormsen 2026-08-11 22:25:27 +02:00
fe5e6b290b docs(conventions): the merge button is off for a reason, and the reason now lives in the repo v0.4.2 Kjell Tore Guttormsen 2026-08-11 22:12:37 +02:00
2d86151e3b fix(divergence): our own iframe number read 3x low, and the reported cause was not the cause v0.4.1 Kjell Tore Guttormsen 2026-08-11 22:02:15 +02:00
daa7ba4c1c release(0.4.0): two values moved by two mechanisms, and the difference is the release v0.4.0 Kjell Tore Guttormsen 2026-08-11 21:52:53 +02:00
2eee7e19ee feat(lexicon): both unbounded rows narrow to [^><]*, and the mechanism is new here Kjell Tore Guttormsen 2026-08-11 21:52:43 +02:00
d467324380 feat(signatures): the staleness we disclosed is closed by reading the module, not the message Kjell Tore Guttormsen 2026-08-11 21:52:24 +02:00
4187715ab7 docs(divergence): our own form has a number now, and it is quadratic Kjell Tore Guttormsen 2026-08-11 14:13:29 +02:00
0e765a02eb docs(security): the attack surface here is data, so the report route had to say where a wrong entry gets fixed v0.3.1 Kjell Tore Guttormsen 2026-08-11 14:03:24 +02:00
d96fbbf791 docs(divergence): the span row had one witness; llm-security measured five more Kjell Tore Guttormsen 2026-08-11 13:44:28 +02:00
4641a7b518 release(0.3.0): a detection pattern changed value — that is new here v0.3.0 Kjell Tore Guttormsen 2026-08-11 13:39:51 +02:00
1482c0bc48 feat(schema,spec): give the §1.1 MUST a shape, since v0.2.0 shipped it without one Kjell Tore Guttormsen 2026-08-11 13:39:37 +02:00
25a2cf9643 feat(conformance): the witness case, and the derivation rule that had no room for it Kjell Tore Guttormsen 2026-08-11 13:39:19 +02:00
c1b2385de6 fix(lexicon): converge script-tag on its source — re-extraction, not revision Kjell Tore Guttormsen 2026-08-11 13:39:01 +02:00
6f79a6ea57 fix(lexicon,docs): the script-tag row reversed — commons is now the sole diverger Kjell Tore Guttormsen 2026-08-11 12:45:44 +02:00
532d70d5ed release(0.2.0): the contract gained a MUST, so the tag has to move v0.2.0 Kjell Tore Guttormsen 2026-08-11 06:27:23 +02:00
946f51d35e fix(active-content,conformance): cite line numbers per commit — they do not resolve at the pin Kjell Tore Guttormsen 2026-08-10 21:16:55 +02:00
bdcb1f1080 feat(conformance): ship the six active-content cases; the id space already existed Kjell Tore Guttormsen 2026-08-10 21:15:25 +02:00
807c0d45d8 feat(spec): add not-applicable, so a single-runtime table stops reading as 7 defects Kjell Tore Guttormsen 2026-08-10 21:14:58 +02:00
a1578e6f3f fix(conformance): record the guard's internal-surface position on _LEX_PAYLOADS Kjell Tore Guttormsen 2026-08-10 20:47:44 +02:00
4d351d2a31 fix(mapping): state that three of four OWASP maps have no production consumer Kjell Tore Guttormsen 2026-08-10 20:47:37 +02:00
f082a91995 fix(lexicon,docs): retract the claim that the guard's port cites severity.mjs Kjell Tore Guttormsen 2026-08-10 20:37:53 +02:00
0ffee85a4b fix(conformance): name the fixture field pattern_id, not id — the schema already owns that word v0.1.0 Kjell Tore Guttormsen 2026-08-10 04:44:59 +02:00
49e1e79807 feat(conformance): build the 83-case corpus; the 13-pattern blocker dissolves under measurement Kjell Tore Guttormsen 2026-08-10 04:40:56 +02:00
ff18768b71 docs: retract the "neither runtime misses an attack" claim, fix three counts Kjell Tore Guttormsen 2026-08-09 22:54:41 +02:00
47760d2264 feat(signatures): add the malware identity table, drawn from source not memory Kjell Tore Guttormsen 2026-08-09 22:49:21 +02:00
7e2e92eecf feat(schema): close the finding contract against its producer Kjell Tore Guttormsen 2026-08-09 22:46:13 +02:00
be84121604 feat(lexicon): set hybrid severity to high, record the id space as ratified Kjell Tore Guttormsen 2026-08-09 22:41:06 +02:00
344bc52adf fix(lexicon): retract two false provenance claims, reach 83/83 to source Kjell Tore Guttormsen 2026-08-09 22:39:32 +02:00
95dea9ba90 feat(mapping): name each taxonomy, close the edition question Kjell Tore Guttormsen 2026-08-09 22:33:50 +02:00
f68f1e19d5 docs(lexicon): split the alias evidence, correct a false absence claim Kjell Tore Guttormsen 2026-08-09 21:56:45 +02:00
7b70f5b52f feat(lexicon): publish a commons-owned pattern id with per-runtime aliases Kjell Tore Guttormsen 2026-08-09 21:46:48 +02:00
22d3a78591 docs: measure the lexicon port divergence, correct the case count Kjell Tore Guttormsen 2026-08-09 21:40:26 +02:00
93f7bc024f docs: close three honesty gaps the validation pass missed Kjell Tore Guttormsen 2026-08-09 21:20:06 +02:00
4742c067a8 docs: unlink the three files that do not exist yet, correct the changelog Kjell Tore Guttormsen 2026-08-09 21:15:54 +02:00
8ee297c585 feat(calibration): add calibration.json, marked transcribed-only Kjell Tore Guttormsen 2026-08-09 21:14:13 +02:00
dd6ae51d60 feat(mapping): add owasp-map.json from verified llm-security dump Kjell Tore Guttormsen 2026-08-09 21:11:50 +02:00
c3852c9148 feat(signatures): add secret-egress.json from verified llm-security dump Kjell Tore Guttormsen 2026-08-09 21:10:01 +02:00
f4aa8b66f4 feat(codepoints): add carriers.json from verified llm-security dump Kjell Tore Guttormsen 2026-08-09 21:08:01 +02:00
23cf3e383a feat(lexicon): add injection-lexicon.json from verified llm-security dump Kjell Tore Guttormsen 2026-08-09 21:05:15 +02:00
0433240b14 feat(schema): add finding.schema.json with normative SARIF profile Kjell Tore Guttormsen 2026-08-09 14:52:53 +02:00
43f682bedd feat(signatures): add active-content.json from verified guard source Kjell Tore Guttormsen 2026-08-09 14:37:48 +02:00
ef80288c57 feat: initialize llm-security-commons (charter, license, extraction plan) Kjell Tore Guttormsen 2026-08-09 14:29:16 +02:00