c0e23a786e
fix(ms-ai-architect): verifiser OWASP Agentic 2026 tittel-ordlyd mot primærkilde (release-gate)
...
Release-gaten før v1.16.0: bekreftet eksakt engelsk tittel-ordlyd for ASI01–ASI10
mot OWASP GenAI Security Projects offisielle publisering på genai.owasp.org
(9. desember 2025), hentet direkte to ganger uavhengig. Sekundærkilde-spriket som
ros-ai-threat-library.md:541 advarte mot er nå løst mot primærkilden.
Fire titler var feil (KB fulgte aggregator-varianter, ikke offisiell tekst):
- ASI02: «Tool Misuse & Exploitation» → «Tool Misuse»
- ASI03: «Agent Identity & Privilege Abuse» → «Identity & Privilege Abuse»
- ASI04: «Agentic Supply Chain Compromise» → «Agentic Supply Chain Vulnerabilities»
- ASI08: «Cascading Agent Failures» → «Cascading Failures»
Rettet i alle 6 forekomster (hovedtabell + inline OWASP Agentic-mappingrader 579/597).
Kildemerknad (:541) oppdatert: hedge om uverifisert ordlyd erstattet med eksplisitt
primærkilde-referanse + hvilke sekundærvarianter som florerer.
Notasjon (:2026): uendret. Offisiell blogg bruker ASIxx uten årstall, men KB bruker
konsekvent :ÅRSTALL for OWASP-IDer (jf. LLM05:2025) — intern konsistens beholdt,
flagget separat for normaliserings-beslutning.
Verifisert: validate-plugin.sh 219 PASS.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
2026-06-18 14:16:49 +02:00
dd1036ab8a
fix(ms-ai-architect): Foundry URL-navnerom-migrering (ai-foundry → foundry/foundry-classic, 141 filer)
...
Task #5 del 1/3 (URL-migrering). Verifiseringen motbeviste STATE.md-premisset om ren prefix-swap: rebrand er per-URL, ikke mekanisk. En blind sed ai-foundry→foundry ville lagd 56 nye 404-er (classic-stiene finnes ikke under nytt foundry/-prefiks — bekreftet empirisk).
Metode: resolverte alle 237 unike KB-URLer mot live redirects (curl -L), bygde full-URL→full-URL-mapping fra faktisk url_effective. Bevarer locale-form, query (?view=) og #fragment per lenke.
- 231 navnerom-erstatninger over 141 filer (408 forekomster):
- 161 → azure/foundry/ (98 ren prefix-swap + 10 sti-reorg + reorg-tilfeller)
- 69 → azure/foundry-classic/ (eldre hub-spor: assistants, hub-DR, on-your-data; faktisk redirect-mål per operatorvalg)
- 1 → azure/foundry-local/
- 2 døde lenker (404) fikset til verifiserte mål:
- agent-service → azure/foundry/agents/overview
- concepts/evaluation-evaluators/ → azure/foundry/how-to/evaluate-generative-ai-app
- 5 path-/display-referanser (uten https://, i backticks/lenketekst) rettet manuelt.
- 6 slug-baserte ai-foundry-treff urørt (scope-grense): managed-grafana-dashboard, security-baseline, power-platform prompt-builder, architecture baseline-chat (sistnevnte slug-rebrand i annet navnerom — mulig fremtidig funn).
- Parkert til task #5 del 2/3: Norway East GPT-5-datasuverenitet-fiks + modellkatalog-utvidelse (5.3/5.4/5.5, gpt-oss, sora-2).
Verifisert: 0 gjenværende azure/ai-foundry/-navnerom i skills/. validate-plugin.sh 219 PASS. test-kb-integrity.sh 117/117 passed.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01REiKFhP4w6xGXXqWKpPCJJ
2026-06-18 13:37:06 +02:00
84e3cfaa03
fix(ms-ai-architect): re-baseline kostnadslaget (GPT-5 $1.25/$10, én prissannhet, 10 filer)
...
Audit-funn Tema B + action-items 149/150. Verifiseringen avdekket at kostnadslag-råten var bredere enn auditens 3 navngitte filer (10 filer totalt).
- GPT-5 flagship $10-15/$40-60 -> $1.25/$10.00 (verifisert juni 2026, 8-12x for hoy). gpt-5-mini $0.25/$2.00, gpt-5-nano $0.05/$0.40. Fjernet falske "Verified MCP"-stempel pa estimat-band.
- deterministic-cost-calculation-model.md gjort til ENESTE kanoniske prissannhet (§1.1). Strippet duplikat pris-tabell fra cost-models.md (rotarsak til GPT-4o $10/$30-motsetning) -> peker til registeret.
- Reconcile-funn utover audit: deterministic hadde GPT-4.1-serien HALVERT ($1/$4 og $0.20/$0.80) -> verifisert $2.00/$8.00 og $0.40/$1.60. multi-model-strategy-costs.md NOK-tabell var fabrikkert 10-47x for hoy (gpt-4o 250/1000 NOK -> 26/105). model-selection (GPT-5 $3/$12), reasoning-models (GPT-5 $20-30/$80-100), token-counting (gpt-4.1 cached $1->$0.50), small-language-models (GPT-4o output 60->105 NOK) rettet.
- Recalk alle NOK-scenarioer reproduserbart: gpt-5 ~= gpt-4.1 i kost (ikke 30-55x dyrere som gammel tekst pasto) - billigere input ($1.25 vs $2.00), dyrere output. Reell kostnadsdriver = resonnerings-tokens (fakturert som output).
- Fjernet GPT-3.5 Turbo-anbefaling (utfaset). Alignet kurs 11->10.5 NOK/USD i cost-kommando. Cost-agent eksempel: legacy GPT-4 -> GPT-4o-mini, fjernet falskt Verified-stempel.
- kb-update apply cost-bucket deferret til task #8 (kommando-feature, ikke tall-justering).
Verifisert mot OpenAI API pricing + Azure OpenAI pricing via WebSearch 2026-06-18. validate-plugin.sh 219 PASS.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01REiKFhP4w6xGXXqWKpPCJJ
2026-06-18 12:45:21 +02:00
51c1bd8c6c
fix(ms-ai-architect): ROS + DPIA currency (NSM v2.1, OWASP Agentic 2026, EchoLeak, DPF, EUDB, KI-loven)
...
- NSM Grunnprinsipper 2.0/2022 -> 2.1 (2024-05-31). MITRE ATLAS AML.T0051 -> 'LLM Prompt Injection'.
- OWASP Top 10 Agentic Apps 2026 (ASI01-10) mappet. NB: tittel-ordlyd fra sekundaerkilder - bekreft mot offisielt OWASP-PDF for v1.16.0-release.
- EchoLeak (CVE-2025-32711) lagt til T-INP-02. DPF opprettholdt (Latombe avvist 2025-09-03). EUDB fullfort feb 2025. KI-loven lagt til DPIA-grunnlag.
Verifisert mot nsm.no/genai.owasp.org/curia.europa.eu/blogs.microsoft.com/regjeringen.no 2026-06-18.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01REiKFhP4w6xGXXqWKpPCJJ
2026-06-18 12:13:56 +02:00
68d29f60f0
fix(ms-ai-architect): MAF 1.0 GA + A2A v1.0 + Agent 365-pris (orkestrering currency)
...
- MAF 1.0 GA 2026-04-03: orkestreringsmonstre Experimental -> GA; SK+AutoGen konvergert (vedlikehold).
- A2A: protokoll v1.0 stabil, MEN A2A-SDK/MAF-pakker fortsatt preview (nyanse bevart).
- Agent 365: rettet feilaktig 'ingen ekstra kostnad' -> separat SKU ~$15/bruker/mnd (GA 2026-05-01); kilde MS Community Hub + uavh. analyse (ikke pa learn.microsoft.com).
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01REiKFhP4w6xGXXqWKpPCJJ
2026-06-18 12:09:43 +02:00
70f24fa9df
fix(ms-ai-architect): re-baseline EU AI Act-tidslinje (Digital Omnibus) + Art 99-bøtesatser
...
- Annex III hoyrisiko utsatt 2026-08-02 -> 2027-12-02 (provisorisk, Omnibus); Annex I -> 2028-08-02. Oppdatert CLAUDE.md frister, session-start-hook, ai-act-assessor output-mal + 5 AI Act-KB-filer.
- Art 99-boter: 30M/6% (finnes ikke) -> 35M/7% (Art 5), 15M/3% (ovrig), 7.5M/1% (feilinfo) i 4 filer.
- Art 50 transparens presisert (gjelder 2026-08-02; eksist. generative systemer frist 2026-12-02). Fjernet hardkodede dag-nedtellinger i CLAUDE.md.
Verifisert mot Consilium/Gibson Dunn/Latham/artificialintelligenceact.eu 2026-06-18.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01REiKFhP4w6xGXXqWKpPCJJ
2026-06-18 12:00:34 +02:00
b03fcd8880
chore: WIP marketplace doc adjustments across plugins
...
Pre-trekexecute snapshot of in-progress CLAUDE.md/SKILL.md edits and
extracted docs/ files. Captured as one commit so /trekexecute claude-design
can run against a clean working tree.
Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
2026-05-18 12:04:02 +02:00
53ea2cd716
chore(ms-ai-architect): KB refresh complete — 23 files (high batch 2) [skip-docs]
...
Last batch in HIGH bucket. Combined with d60bbd4
2026-05-05 14:52:42 +02:00
d60bbd4bff
chore(ms-ai-architect): KB checkpoint refresh — 30 files (critical 9 + high batch 1) [skip-docs]
...
- Critical bucket (9 files): substantive content updates basert på MCP-fetch
- enterprise-governance: DSPM front door, AI-app-kategorier (3), single-tenant Entra ID
- rag-cost-optimization, observability, ai-services-enterprise, multi-model-strategy: dato-bump
- deterministic-cost: Copilot Credits offisiell common currency (2025-09-01), CCCU prepurchase
- gpt5-gpt41-pricing: utvidet Copilot Studio modell-lineup (GPT-5.2, GPT-5.3, Claude 4.6, Grok 4.1)
- vector-storage, request-batching: dato-bump (DS allerede dekkende)
- High batch 1 (21 files, 10-30): Last updated 2026-04→2026-05 dato-bump
Substantive Microsoft Learn-endringer var marginale per fetch — kosmetiske oppdateringer.
Resterende: high batch 2 (filer 31-53, 23 filer) i ny sesjon. Se NEXT-SESSION-PROMPT.local.md.
2026-05-05 14:28:35 +02:00
Kjell Tore Guttormsen
7585d21cd9
chore(privacy): fix factual mashups from phase 2 bulk replace
...
Phase 2 bulk replace produced a few factually wrong attributions where
real publicly known sector documents/datasets/personas were incorrectly
re-attributed to the fictional generic entity. Genericize those
references instead.
- ros-sector-checklists.md: V440 håndbok citation -> "sektorvise
faglige håndbøker"; tilsynsmyndighet list -> generic phrasing
- master-data-management-ai.md: NVDB row -> generic "sektor-/fagregistre"
- ai-center-of-excellence-setup.md: NVDB integration line -> generic
"sektorvise nasjonale registre"
- multimodal-prompt-engineering.md: system_message persona -> generic
"fagingeniør i norsk offentleg sektor"
Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
2026-05-03 04:30:15 +02:00
Kjell Tore Guttormsen
781d98f62f
chore(privacy): scrub real-org references from plugin internals (phase 2)
...
Same bulk replacement applied to plugin-internal KB, examples, fixtures,
tests, and docs. Real organization names, persona names, internal system
identifiers, and domain-specific terms replaced with fictional generic
public-sector entity (DDT) and generic terminology.
Scope:
- okr/ — examples, governance, framework, integrations, sources
- ms-ai-architect/ — KB references (engineering, governance, security,
infrastructure, advisor), tests/fixtures, agents, docs
- linkedin-thought-leadership/ — voice samples, network-builder,
examples (genericized identifying headlines to "[your organization]")
- llm-security/ — research notes, scan report
Manual genericization beyond bulk replace:
- okr SKILL.md "Primary user / Domain" — generic Norwegian public sector
- linkedin-voice SKILL.md headline placeholder
- network-builder.md headline placeholder
- high-engagement-posts.md voice sample employer line + hashtag
Phase 3 (factual-attribution review) remains: a few KB files attribute
publicly known transport-sector docs/datasets (e.g. håndbok V440, NVDB)
to the fictional DDT after bulk replace. Needs manual semantic review
to either remove or restore correct citation without re-introducing
affiliation references.
Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
2026-05-03 04:28:15 +02:00
Kjell Tore Guttormsen
be4925a8ff
docs(architect): weekly KB update — 52 files refreshed (2026-04)
...
Key content changes:
- MLOps: MLflow 3 scorers expanded (RetrievalRelevance, Fluency, multi-turn judges)
- MLflow 3 A/B eval: mirror_traffic GA confirmed, new scorer catalog
- CI/CD: OIDC auth replaces deprecated --sdk-auth (Azure ML GitHub Actions)
- Agent framework A2A: updated SDK patterns (A2ACardResolver, BearerAuth)
- AG-UI backend tool rendering: accurate TOOL_CALL_* event shapes
- Computer Use agents: US region requirement, credentials patterns
- Purview governance: bulk term edit, expire/delete workflows
- CAF AI Secure: 3-phase structure confirmed current
- Copilot Studio: Claude Sonnet 4.5/4.6 GA, new orchestration controls
- M365 manifest: v1.26 GA (April 2026), copilotAgents node
- Power Platform: agent flow capacity enforcement corrected
- Azure Monitor: Simple Log Alerts GA, AMBA for policy-based alerting
- Security Copilot: SCU capacity model (400 SCU/1000 users)
- EU Data Boundary: all EU + EFTA countries confirmed
- gateway-multi-backend: added 4th topology, subscription-level quota note
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-04-10 11:31:11 +02:00
Kjell Tore Guttormsen
6645e93205
docs(architect): weekly KB update — 106 files refreshed (2026-04)
...
Updates across all 5 skills: ms-ai-advisor, ms-ai-engineering,
ms-ai-governance, ms-ai-security, ms-ai-infrastructure.
Key changes:
- Language Services (Custom Text Classification, Text Analytics, QnA):
retirement warning 2029-03-31, migration guides to Foundry/GPT-4o
- Agentic Retrieval: 50M free reasoning tokens/month (Public Preview)
- Computer Use: Claude Sonnet 4.5 (preview) + OpenAI CUA models
- Agent Registry: Risks column (M365 E7), user-shared/org-published types
- Declarative agents: schema v1.5 → v1.6, Store validation requirements
- MLflow 3: 13 built-in LLM judges, production monitoring, Genie Code
- AG-UI HITL: ApprovalRequiredAIFunction (C#) + @tool(approval_mode) (Python)
- Entra ID Ignite 2025: Agent ID Admin/Developer RBAC roles, Conditional Access
- Security Copilot: 400 SCU/month per 1000 M365 E5 licenses, auto-provisioned
- Fast Transcription API: phrase lists, 14-language multi-lingual transcription
- Azure Monitor Workbooks: Bicep support, RBAC specifics
- Power Platform Copilot: data residency (Norway/Europe → EU DB, Bing → USA)
- RAG security-rbac: 4-approach table (GA + 3 preview access control methods)
- IaC MLOps: Well-Architected OE:05 principles, Bicep/Terraform patterns
- Translator: image file batch translation Preview (JPEG/PNG/BMP/WebP)
All 106 files: Last updated 2026-04 | Verified: MCP 2026-04
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-04-10 09:13:24 +02:00
Kjell Tore Guttormsen
0eb30fa853
fix(architect): groundedness API — remaining correction→mitigating fixes
...
Apply 3 additional parameter renames missed in main KB update:
- SDK: correction=True → mitigating=True
- SDK: response.corrected_text → response.correction_text
- JSON body: 'correction': false → 'mitigating': false
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-04-09 22:45:50 +02:00
Kjell Tore Guttormsen
ecc5433818
docs(architect): KB follow-up — batch 3 content updates
...
Additional factual updates from batch 3 research:
- responsible-ai-training-awareness.md: module renamed
"Azure AI Studio" → "Microsoft Foundry" (3 occurrences)
- transparency-documentation-standards.md: ISO/IEC 42001 scope expanded
to include Copilot Studio, Microsoft Foundry, Security Copilot,
GitHub Copilot, Dragon Copilot
- ai-act-compliance-guide.md: same ISO 42001 scope expansion
- human-in-the-loop-oversight.md: AI approval stages in Copilot Studio
(GPT-o3 as AI approver, new Human in the loop connector)
- continuous-improvement-feedback-loops.md: MLflow 3 Feedback vs
Expectation assessment types, Genie Code trace analysis
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-04-09 22:43:12 +02:00
Kjell Tore Guttormsen
565043dbde
docs(architect): weekly KB update — 66 files refreshed (2026-04)
...
Updated 66 stale knowledge base reference files (10 critical, 56 high)
across all 5 skills using Microsoft Learn MCP research.
Key factual updates:
- Groundedness Detection API: `correction` → `mitigating` param,
`correctedText` → `correctionText` (breaking change)
- Copilot Studio: GPT-4.1 mini now default (was GPT-4o mini);
Claude Sonnet 4.5 + Opus 4.5 added (experimental, 200K ctx)
- Agentic Retrieval: still public preview; 50M free tokens/month
- Azure security baselines: "Cognitive Services" → "Foundry Tools"
- Databricks: Delta Live Tables → Lakeflow Spark Declarative Pipelines
- MLflow 3 GenAI: new Feedback/Expectation data model
- Token tracking doc: "Azure OpenAI in Foundry Models through a gateway"
- Agent Registry: Risks column (M365 E7), Graph API (preview)
- Copilot DLP: new Entra AI Admin + Purview Data Security AI Admin roles
- ISO/IEC 42001: scope expanded to M365 Copilot, Foundry, Security Copilot
- Zero Trust: CAE now via Conditional Access, Strict Location Enforcement
- Purview: new Fabric Copilots/agents governance section
- AG-UI HITL: ApprovalRequiredAIFunction (C#), @tool approval_mode (Python)
All files: Last updated → 2026-04, *(Verified MCP 2026-04)* markers added.
Build registry: 1341 URLs from 387 files (+2 new URLs).
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-04-09 22:41:26 +02:00
Kjell Tore Guttormsen
baa2d0220b
feat(ultraplan-local): v1.6.0 — /ultraresearch-local deep research command
...
Add /ultraresearch-local for structured research combining local codebase
analysis with external knowledge via parallel agent swarms. Produces research
briefs with triangulation, confidence ratings, and source quality assessment.
New command: /ultraresearch-local with modes --quick, --local, --external, --fg.
New agents: research-orchestrator (opus), docs-researcher, community-researcher,
security-researcher, contrarian-researcher, gemini-bridge (all sonnet).
New template: research-brief-template.md.
Integration: --research flag in /ultraplan-local accepts pre-built research
briefs (up to 3), enriches the interview and exploration phases. Planning
orchestrator cross-references brief findings during synthesis.
Design principle: Context Engineering — right information to right agent at
right time. Research briefs are structured artifacts in the pipeline:
ultraresearch → brief → ultraplan --research → plan → ultraexecute.
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-04-08 08:58:35 +02:00
