open/ms-ai-architect
1
0
Fork 0
Code Issues Releases 1 Activity

fix(ms-ai-architect): RX-KB1 strip stale plain-Verified pipe-tails (87) + audit-deteksjon [skip-docs]

Browse source 
De 87 referansefilene bar en plain-text `| Verified: <dato>`-hale på **Last updated:**-linjen
i 500B-header-vinduet — usynlig for den bold-only kontrakt-stacken (kb-headers.mjs / audit
RE_VERIFIED), og claimet en verifisering judgen aldri gjorde (samme poison-klasse som de 14
bold **Verified:** MCP Spor 1 fjernet). Uhåndtert springer den også dual-Verified-fellen: R7s
insertVerifiedFields ville stemplet en bold-verdi ved siden av den plain → to motstridende
provenance-claims per fil.

- ny driver strip-stale-verified-pipe.mjs: frosset 87-manifest (18 advisor + 45 eng + 8 gov +
  16 sec), pure verdi-bevarende strip (kun ` | Verified: …`-halen; **Last updated:**-dato
  byte-eksakt), hard per-fil-invariant (linjeantall uendret, body byte-identisk, dato bevart),
  idempotent, atomicWriteSync (RX-OPS2 recovery-kontrakt).
- audit-corpus-headers.mjs: ny plain-Verified-deteksjon (RE_PLAIN_VERIFIED + plainVerifiedPipe)
  — gjør M4-blindheten synlig så en stale plain-hale ikke kan gjenoppstå stille (non-advisor scope).
- 87 filer strippet; plain Verified i vinduet 0/389; live-audit plainVerifiedPipe 0.

Mekanisme: +15 tester (12 strip + 3 audit). Suite 875→890 exit 0. validate-plugin.sh 250/0.

Utsatt → RX-KB1b: footer-dato-avvik + label-whitelist (annen dialekt, flag-to-human).
This commit is contained in:
Kjell Tore Guttormsen 2026-07-16 20:04:52 +02:00
commit 712a143e58
91 changed files with 478 additions and 87 deletions
Download patch file Download diff file Expand all files Collapse all files

2
skills/ms-ai-security/references/ai-security-engineering/ai-incident-response-procedures.md
View file

@ -1,6 +1,6 @@
# AI Incident Response and Breach Handling Procedures
**Last updated:** 2026-05 | Verified: MCP 2026-05
**Last updated:** 2026-05
**Status:** Established Practice
**Category:** AI Security Engineering
**Type:** reference

2
skills/ms-ai-security/references/ai-security-engineering/ai-threat-modeling-stride.md
View file

@ -1,6 +1,6 @@
# AI Threat Modeling Using STRIDE Framework
**Last updated:** 2026-05 | Verified: MCP 2026-05
**Last updated:** 2026-05
**Status:** Established Practice
**Category:** AI Security Engineering
**Type:** reference

2
skills/ms-ai-security/references/ai-security-engineering/data-leakage-prevention-ai.md
View file

@ -1,7 +1,7 @@
# Data Leakage Prevention in AI Contexts
**Category:** AI Security Engineering
**Last updated:** 2026-06-19 | Verified: MCP 2026-06-19
**Last updated:** 2026-06-19
**Målgruppe:** Enterprise AI architects og security teams
**Type:** reference
**Source:** https://learn.microsoft.com/security/benchmark/azure/mcsb-v2-artificial-intelligence-security

2
skills/ms-ai-security/references/ai-security-engineering/defender-threat-protection-ai-services.md
View file

@ -1,6 +1,6 @@
# Defender for Cloud — AI threat protection
**Last updated:** 2026-06-24 | Verified: MCP 2026-06-24
**Last updated:** 2026-06-24
**Status:** GA (AI applications) · Preview (AI agents, fra 2026-02-02)
**Category:** AI Security Engineering — Threat Detection & Monitoring
**Type:** reference

2
skills/ms-ai-security/references/ai-security-engineering/entra-agent-id-zero-trust.md
View file

@ -1,7 +1,7 @@
# Microsoft Entra Agent ID — Zero Trust for AI-agentidentiteter
**Category:** AI Security Engineering
**Last updated:** 2026-06-19 | Verified: MCP 2026-06
**Last updated:** 2026-06-19
**Status:** Public Preview, utvidet etter Ignite 2025 (50+ nye/oppdaterte artikler i Entra Agent ID-portføljen; opt-out er midlertidig — vil bli obligatorisk for nye agenter) *(Verified MCP 2026-06)*
**Målgruppe:** Arkitekter som skal sikre AI-agenter med dedikerte identiteter og Zero Trust-prinsipper
**Type:** reference

2
skills/ms-ai-security/references/ai-security-engineering/output-validation-grounding-verification.md
View file

@ -1,6 +1,6 @@
# Output Validation, Grounding Verification, and Fact-Checking
**Last updated:** 2026-06-24 | Verified: MCP 2026-06-24
**Last updated:** 2026-06-24
**Status:** GA
**Category:** AI Security Engineering
**Type:** reference

2
skills/ms-ai-security/references/ai-security-engineering/owasp-llm-top10-azure-mitigations.md
View file

@ -1,6 +1,6 @@
# OWASP LLM Top 10 (2025) — Azure-tiltak for LLM04/06/08/09
**Last updated:** 2026-06-24 | Verified: MCP 2026-06-24
**Last updated:** 2026-06-24
**Status:** Referanse (OWASP 2025 + Azure-tiltak)
**Category:** AI Security Engineering — Threat Modeling & Controls
**Type:** reference

2
skills/ms-ai-security/references/ai-security-engineering/security-copilot-integration.md
View file

@ -1,7 +1,7 @@
# Microsoft Security Copilot — AI-drevet sikkerhetsoperasjonsplattform
**Category:** AI Security Engineering
**Last updated:** 2026-06-19 | Verified: MCP 2026-06
**Last updated:** 2026-06-19
**Målgruppe:** Sikkerhetsarkitekter og SOC-ledere som vurderer AI-assistert sikkerhetsoperasjon
**Type:** reference
**Source:** https://learn.microsoft.com/copilot/security/agents-overview