# Catalog of every document/collection in corpus/.
#
# This file is the single source of truth the skill consults to find current
# content -- SKILL.md never hardcodes file paths. To add a new resource:
#   1. Drop the file(s) in the appropriate corpus/<initiative>/ subfolder
#      (create a new version-dated folder if this supersedes something).
#   2. Add an entry below.
#   3. If this replaces an existing entry, set the old entry's status to
#      "superseded" (don't delete it -- historical queries still need it).
#   4. Open a PR. CI (.github/workflows/validate-corpus.yaml) checks that
#      every entry has its required fields and that `path` (when set) exists.
#
# status values:
#   current    -- the resource the skill should use by default
#   draft      -- real content, but unstable/pre-release; use with caveats
#   superseded -- kept for historical reference, not used by default
#   linked     -- cataloged but not vendored (e.g. PDF-only, license unclear);
#                 skill should link out rather than quote from it
#
# INDEPENDENCE: everything under corpus/ is a frozen, point-in-time copy,
# not a submodule or live reference. Changes to the upstream source repos
# (source_repo/source_path below) do NOT propagate here automatically --
# there is no sync mechanism. This is deliberate: the Advisor's behavior
# should not change underneath users because someone edited an upstream
# repo. `vendored_commit` records the exact upstream commit each entry was
# copied from, purely for provenance/auditability -- it is not consulted
# at query time and does not trigger any update. Pulling in upstream
# changes is always a manual act: re-fetch, review, PR, per the process in
# README.md.

resources:
  - id: llm-top10-2026
    title: "OWASP Top 10 for LLM Applications 2026"
    initiative: llm-top10
    version: "2026"
    status: current
    format: markdown
    path: corpus/llm-top10/2026/
    license: CC-BY-SA-4.0
    source_repo: https://github.com/genai-security-project/GenAI-LLM-Top10
    source_path: 2026/final/
    vendored_commit: 7e144e05142b2105faa1603178a1163a2a34df24
    vendored_date: "2026-08-09"
    published: "2026-08-04"
    notes: >
      Canonical published release. One file per category (LLM01-LLM10) plus
      two appendices (framework mappings, threat-modeling architecture) and
      an AISVS mapping.

  - id: agentic-top10-2026
    title: "OWASP Top 10 for Agentic Applications 2026"
    initiative: agentic-top10
    version: "2026"
    status: current
    format: pdf
    path: corpus/agentic-top10/2026-final/OWASP-Top-10-for-Agentic-Applications-2026-v1.0.pdf
    license: CC-BY-SA-4.0
    source_url: https://genai.owasp.org/
    vendored_date: "2026-08-09"
    published: "2025-12-01"
    notes: >
      The real, finished Agentic Top 10 (57pp): ASI01 Agent Goal Hijack,
      ASI02 Tool Misuse and Exploitation, ASI03 Identity and Privilege
      Abuse, ASI04 Agentic Supply Chain Vulnerabilities, ASI05 Unexpected
      Code Execution (RCE), ASI06 Memory & Context Poisoning, ASI07
      Insecure Inter-Agent Communication, ASI08 Cascading Failures, ASI09
      Human-Agent Trust Exploitation, ASI10 Rogue Agents. This is the
      numbering LLM Top 10 files cross-reference -- supersedes
      agentic-top10-candidates-0.5. No markdown source located upstream;
      vendored as the original PDF (includes an OWASP Agentic AI Security
      Mapping Matrix, a CycloneDX/AIBOM relationship appendix, a mapping
      to the Non-Human Identities Top 10, and an exploits/incidents
      tracker as appendices -- read relevant sections via page range).

  - id: agentic-top10-candidates-0.5
    title: "OWASP Agentic Security Initiative -- Top 10 Candidates (v0.5)"
    initiative: agentic-top10
    version: "0.5-initial-candidates"
    status: superseded
    format: markdown
    path: corpus/agentic-top10/0.5-candidates/
    license: CC-BY-SA-4.0
    source_repo: https://github.com/genai-security-project/GenAI-Agent-Security-Initiative
    source_path: agentic-top-10/0.5-initial-candidates/
    vendored_commit: 964f83449cf14d03f4a2677af8532bda5e46ea8b
    vendored_date: "2026-08-09"
    published: null
    notes: >
      Superseded by agentic-top10-2026. Kept for historical reference --
      this earlier working draft used different category names/numbering
      than the final published list, and is useful context for "how did
      this category evolve" questions but should not be used by default.

  - id: agentic-threats-mitigations-1.1
    title: "Agentic AI - Threats and Mitigations"
    initiative: agentic-top10
    version: "1.1"
    status: current
    format: pdf
    path: corpus/agentic-top10/companions/Agentic-AI-Threats-and-Mitigations-1.1.pdf
    license: CC-BY-SA-4.0
    source_url: https://genai.owasp.org/resource/agentic-ai-threats-and-mitigations/
    vendored_date: "2026-08-09"
    published: "2025-12-01"
    notes: >
      Narrative threats/mitigations companion to the Agentic Top 10 (53pp)
      -- broader threat catalog than the 10 headline categories.

  - id: securing-agentic-applications-guide-1.0
    title: "Securing Agentic Applications Guide"
    initiative: agentic-top10
    version: "1.0"
    status: current
    format: pdf
    path: corpus/agentic-top10/companions/Securing-Agentic-Applications-Guide-1.0.pdf
    license: CC-BY-SA-4.0
    source_url: https://genai.owasp.org/
    vendored_date: "2026-08-09"
    published: null
    notes: "Practical implementation guide for securing agentic applications (81pp)."

  - id: agentic-mas-threat-modelling-guide-1.0
    title: "Agentic AI - MAS Threat Modelling Guide"
    initiative: agentic-top10
    version: "1.0"
    status: current
    format: pdf
    path: corpus/agentic-top10/companions/Agentic-AI-MAS-Threat-Modelling-Guide-v1.0.pdf
    license: CC-BY-SA-4.0
    source_url: https://genai.owasp.org/
    vendored_date: "2026-08-09"
    published: null
    notes: >
      Multi-agent-system-specific threat modeling guide (63pp) -- use for
      the "draft a threat model" task when the target is multi-agent, not
      a single LLM app (use Appendix B of the LLM Top 10 for that case).

  - id: agentic-top10-aiuc1-crosswalk
    title: "OWASP Top 10 for Agentic Applications -- AIUC-1 Crosswalk"
    initiative: agentic-top10
    version: "2026-05"
    status: current
    format: pdf
    path: corpus/agentic-top10/companions/OWASP-Top10-for-Agentic-Applications-AIUC-1-Crosswalk.pdf
    license: CC-BY-SA-4.0
    source_url: https://genai.owasp.org/
    vendored_date: "2026-08-09"
    published: "2026-05-01"
    notes: "Maps the Agentic Top 10 to the AIUC-1 framework (55pp)."

  - id: agentic-ans-agent-discovery-1.0
    title: "Agentic AI - Agent Name Service (ANS) for Secure AI Agent Discovery"
    initiative: agentic-top10
    version: "1.0"
    status: current
    format: pdf
    path: corpus/agentic-top10/companions/Agentic-AI-Agent-Name-Service-ANS-v1.0.pdf
    license: CC-BY-SA-4.0
    source_url: https://genai.owasp.org/
    vendored_date: "2026-08-09"
    published: null
    notes: >
      Spec/guide for secure agent identity and discovery (53pp) -- relevant
      to ASI03 Identity and Privilege Abuse and ASI07 Insecure Inter-Agent
      Communication.

  - id: dsgai-crosswalk-entries-2026
    title: "GenAI Security Crosswalk -- structured risk + framework mapping entries"
    initiative: data-security
    version: "2026-Q1"
    status: current
    format: json
    path: corpus/data-security/crosswalk-entries/
    license: CC-BY-SA-4.0
    source_repo: https://github.com/genai-security-project/GenAI-Data-Security-Initiative
    source_path: crosswalk/data/entries/
    vendored_commit: c64ac507445c7fb57209bac5fd2b0c639a0d194d
    vendored_date: "2026-08-09"
    published: "2026-03-01"
    notes: >
      41 structured entries (LLM01-10, ASI01-10, DSGAI01-21), each mapped to
      controls across 25 compliance/security frameworks (MITRE ATLAS, NIST AI
      RMF, ISO 42001, SOC 2, EU AI Act, etc). This is the machine-readable
      data behind the live crosswalk web app at
      https://genai-security-project.github.io/GenAI-Data-Security-Initiative/
      Use this for "which control does risk X map to" questions. For DSGAI
      narrative prose (attack scenario writeups), see dsgai-risk-doc-2026
      below.

  - id: dsgai-risk-doc-2026
    title: "GenAI Data Security Risks and Mitigations 2026 (v1.0)"
    initiative: data-security
    version: "1.0"
    status: current
    format: pdf
    path: corpus/data-security/dsgai-2026/OWASP-GenAI-Data-Security-Risks-and-Mitigations-2026-v1.0.pdf
    license: CC-BY-SA-4.0
    source_url: https://genai.owasp.org/resource/owasp-genai-data-security-risks-mitigations-2026/
    vendored_date: "2026-08-09"
    published: "2026-03-01"
    notes: >
      Full narrative writeup of the 21 DSGAI risks with tiered mitigations
      (Foundational / Hardening / Advanced), 103 pages. No markdown source
      exists upstream -- vendored as the original PDF. Read via the Read
      tool with a page range rather than loading the whole document at
      once. Complements dsgai-crosswalk-entries-2026 (structured framework
      mappings) with the narrative prose and attack scenarios.

  - id: data-security-best-practices-2025
    title: "LLM and GenAI Data Security Best Practices 2025 (v1.0)"
    initiative: data-security
    version: "1.0"
    status: current
    format: pdf
    path: corpus/data-security/best-practices-2025/LLM-and-GenAI-Data-Security-Best-Practices-2025-v1.0.pdf
    license: CC-BY-SA-4.0
    source_url: https://genai.owasp.org/resource/llm-and-gen-ai-data-security-best-practices/
    vendored_date: "2026-08-09"
    published: "2025-02-01"
    notes: >
      Implementation guide (secure deployment architectures, monitoring,
      governance models, access control for LLM pipelines). No markdown
      source upstream -- vendored as the original PDF. Read via the Read
      tool with a page range rather than loading the whole document at
      once.

  - id: governance-checklist-1.1
    title: "LLM AI Cybersecurity & Governance Checklist"
    initiative: governance
    version: "1.1"
    status: linked
    format: pdf
    path: null
    license: UNCONFIRMED
    source_repo: https://github.com/genai-security-project/GenAI-Top-10-Governance
    source_url: https://genai.owasp.org/resource/llm-applications-cybersecurity-and-governance-checklist-english/
    published: null
    notes: >
      Source is LaTeX with no explicit LICENSE file or in-file license
      header found. Do NOT vendor a copy into this repo until the license
      is confirmed with the initiative lead -- link to the official PDF
      instead.

  - id: mcp-server-development-guide-1.0
    title: "A Practical Guide for Secure MCP Server Development"
    initiative: mcp-security
    version: "1.0"
    status: current
    format: pdf
    path: corpus/mcp-security/A-Practical-Guide-for-Secure-MCP-Server-Development-v1.0.pdf
    license: CC-BY-SA-4.0
    source_url: https://genai.owasp.org/
    vendored_date: "2026-08-09"
    published: null
    notes: "Guidance for building MCP servers securely (17pp). New corpus category as of 2026-08-09."

  - id: mcp-third-party-cheatsheet-1.0
    title: "Cheat Sheet: A Practical Guide for Securely Using Third-Party MCP Servers"
    initiative: mcp-security
    version: "1.0"
    status: current
    format: pdf
    path: corpus/mcp-security/Cheat-Sheet-Securely-Using-Third-Party-MCP-Servers-v1.0.pdf
    license: CC-BY-SA-4.0
    source_url: https://genai.owasp.org/
    vendored_date: "2026-08-09"
    published: null
    notes: "Short cheat sheet (16pp) for consuming third-party MCP servers safely."

  - id: red-teaming-vendor-evaluation-criteria-1.0
    title: "Vendor Evaluation Criteria for AI Red Teaming Providers & Tooling"
    initiative: red-teaming
    version: "1.0"
    status: current
    format: pdf
    path: corpus/red-teaming/Vendor-Evaluation-Criteria-for-AI-Red-Teaming-Providers-Tooling-v1.0.pdf
    license: CC-BY-SA-4.0
    source_url: https://genai.owasp.org/
    vendored_date: "2026-08-09"
    published: "2026-01-13"
    notes: >
      Criteria for evaluating AI red-teaming vendors/tooling (32pp). New
      corpus category as of 2026-08-09.

  - id: llm-exploit-generation-1.0
    title: "OWASP LLM Exploit Generation v1.0"
    initiative: red-teaming
    version: "1.0"
    status: linked
    format: pdf
    path: null
    license: UNCONFIRMED
    source_url: https://genai.owasp.org/resource/owasp-llm-exploit-generation-v1-0-pdf/
    published: null
    notes: >
      No explicit CC BY-SA (or other) license statement found anywhere in
      the document text -- only a generic mention that project output is
      "released under open source and creative commons licenses." Do NOT
      vendor until confirmed with the CTI Layer Team / initiative lead.

  - id: genai-incident-response-guide-1.0
    title: "GenAI Incident Response Guide 1.0"
    initiative: incident-response
    version: "1.0"
    status: linked
    format: pdf
    path: null
    license: UNCONFIRMED
    source_url: https://genai.owasp.org/resource/genai-incident-response-guide-1-0/
    published: null
    notes: >
      No license statement found anywhere in the document text (82pp,
      checked in full). Do NOT vendor until confirmed with the initiative
      lead. New corpus category (incident-response) as of 2026-08-09 --
      currently has no vendored content, only this linked entry.

  - id: compass-runbook-1.0
    title: "OWASP GenAI COMPASS RunBook (+ companion spreadsheet)"
    initiative: governance
    version: "1.0"
    status: current
    format: mixed
    path: corpus/governance/compass/
    license: CC-BY-SA-4.0
    source_url: https://genai.owasp.org/
    vendored_date: "2026-08-09"
    published: null
    notes: >
      RunBook PDF (37pp, confirmed CC BY-SA 4.0) plus its companion
      OWASP-GenAI-COMPASS-v1.xlsx spreadsheet. The spreadsheet's own
      license isn't independently verifiable (not a text-searchable PDF)
      -- treated as covered by the same grant as its parent RunBook since
      it's explicitly packaged as a companion asset, not independently
      confirmed.

  - id: state-of-agentic-ai-security-governance-2.01
    title: "State of Agentic AI Security and Governance v2.01"
    initiative: governance
    version: "2.01"
    status: current
    format: pdf
    path: corpus/governance/State-of-Agentic-AI-Security-and-Governance-v2.01.pdf
    license: CC-BY-SA-4.0
    source_url: https://genai.owasp.org/
    vendored_date: "2026-08-09"
    published: null
    notes: "Industry state-of-the-field report (139pp)."