open/ms-ai-architect
1
0
Fork 0
Code Issues Releases 4 Activity
124 commits 1 branch 11 tags 172 MiB
Commit graph

3 commits

Author SHA1 Message Date
Kjell Tore Guttormsen
c0e23a786e fix(ms-ai-architect): verifiser OWASP Agentic 2026 tittel-ordlyd mot primærkilde (release-gate) 
Release-gaten før v1.16.0: bekreftet eksakt engelsk tittel-ordlyd for ASI01–ASI10
mot OWASP GenAI Security Projects offisielle publisering på genai.owasp.org
(9. desember 2025), hentet direkte to ganger uavhengig. Sekundærkilde-spriket som
ros-ai-threat-library.md:541 advarte mot er nå løst mot primærkilden.

Fire titler var feil (KB fulgte aggregator-varianter, ikke offisiell tekst):
- ASI02: «Tool Misuse & Exploitation» → «Tool Misuse»
- ASI03: «Agent Identity & Privilege Abuse» → «Identity & Privilege Abuse»
- ASI04: «Agentic Supply Chain Compromise» → «Agentic Supply Chain Vulnerabilities»
- ASI08: «Cascading Agent Failures» → «Cascading Failures»

Rettet i alle 6 forekomster (hovedtabell + inline OWASP Agentic-mappingrader 579/597).
Kildemerknad (:541) oppdatert: hedge om uverifisert ordlyd erstattet med eksplisitt
primærkilde-referanse + hvilke sekundærvarianter som florerer.

Notasjon (:2026): uendret. Offisiell blogg bruker ASIxx uten årstall, men KB bruker
konsekvent :ÅRSTALL for OWASP-IDer (jf. LLM05:2025) — intern konsistens beholdt,
flagget separat for normaliserings-beslutning.

Verifisert: validate-plugin.sh 219 PASS.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
 2026-06-18 14:16:49 +02:00
Kjell Tore Guttormsen
51c1bd8c6c fix(ms-ai-architect): ROS + DPIA currency (NSM v2.1, OWASP Agentic 2026, EchoLeak, DPF, EUDB, KI-loven) 
- NSM Grunnprinsipper 2.0/2022 -> 2.1 (2024-05-31). MITRE ATLAS AML.T0051 -> 'LLM Prompt Injection'.

- OWASP Top 10 Agentic Apps 2026 (ASI01-10) mappet. NB: tittel-ordlyd fra sekundaerkilder - bekreft mot offisielt OWASP-PDF for v1.16.0-release.

- EchoLeak (CVE-2025-32711) lagt til T-INP-02. DPF opprettholdt (Latombe avvist 2025-09-03). EUDB fullfort feb 2025. KI-loven lagt til DPIA-grunnlag.

Verifisert mot nsm.no/genai.owasp.org/curia.europa.eu/blogs.microsoft.com/regjeringen.no 2026-06-18.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

Claude-Session: https://claude.ai/code/session_01REiKFhP4w6xGXXqWKpPCJJ
 2026-06-18 12:13:56 +02:00
Kjell Tore Guttormsen
baa2d0220b feat(ultraplan-local): v1.6.0 — /ultraresearch-local deep research command 
Add /ultraresearch-local for structured research combining local codebase
analysis with external knowledge via parallel agent swarms. Produces research
briefs with triangulation, confidence ratings, and source quality assessment.

New command: /ultraresearch-local with modes --quick, --local, --external, --fg.
New agents: research-orchestrator (opus), docs-researcher, community-researcher,
security-researcher, contrarian-researcher, gemini-bridge (all sonnet).
New template: research-brief-template.md.

Integration: --research flag in /ultraplan-local accepts pre-built research
briefs (up to 3), enriches the interview and exploration phases. Planning
orchestrator cross-references brief findings during synthesis.

Design principle: Context Engineering — right information to right agent at
right time. Research briefs are structured artifacts in the pipeline:
ultraresearch → brief → ultraplan --research → plan → ultraexecute.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
 2026-04-08 08:58:35 +02:00