{ "schema": "agentomy.pattern-provenance/v1", "about": "Every governance pattern the runtime loads, with what detects it, what tests it and which benchmark suite exercises its family. Derived from the registry and the source tree on every change; the commit gate fails if this file is not the current derivation or if the row count is not the published pattern count. Mechanism classes, strongest first: production_scanner (compiled into the content scanner on the authorize path), runtime_detector (a detector binds the pattern id), runtime_monitor (the declared monitor method exists in runtime code), sandbox_harness (evaluated by the sandbox test harness), specified (detection method, blocking condition and test protocol published), expression_published (the detection expression is published in the registry), surface_mapping (a deployment-surface mapping entry that informs cross-deployment learning).", "summary": { "patterns": 166, "with_runtime_mechanism": 82, "production_scanner": 0, "runtime_detector": 60, "runtime_monitor": 57, "sandbox_harness": 53, "specified": 82, "expression_published": 26, "surface_mapping": 5, "no_mechanism_class": 0, "with_tests": 74, "with_benchmark_suite": 125, "families": { "ALGO": 12, "AV": 10, "CLOUD": 10, "ICS": 10, "INJ": 53, "KEY": 9, "MED": 10, "PAY": 10, "PE": 5, "RPA": 10, "SC": 27 }, "suites": { "algo-trading": 20, "av-fleet": 20, "cloud-infrastructure": 20, "industrial-iot": 20, "medical-device": 20, "payments-fintech": 20, "rpa-governance": 20, "ipi": 5 } }, "patterns": [ { "id": "ALGO-001", "family": "ALGO", "family_label": "algorithmic trading", "source_file": "algo-trading-patterns.json", "severity": "critical", "type": "runaway_order_velocity", "mechanism": [ "runtime_detector", "runtime_monitor", "specified" ], "monitor_method": "order_velocity", "monitor_coverage": "full", "tests": 2, "benchmark_suite": "algo-trading", "benchmark_scenarios": 20 }, { "id": "ALGO-002", "family": "ALGO", "family_label": "algorithmic trading", "source_file": "algo-trading-patterns.json", "severity": "critical", "type": "position_concentration", "mechanism": [ "runtime_detector", "runtime_monitor", "specified" ], "monitor_method": "position_concentration", "monitor_coverage": "full", "tests": 7, "benchmark_suite": "algo-trading", "benchmark_scenarios": 20 }, { "id": "ALGO-003", "family": "ALGO", "family_label": "algorithmic trading", "source_file": "algo-trading-patterns.json", "severity": "high", "type": "strategy_drift", "mechanism": [ "runtime_detector", "runtime_monitor", "specified" ], "monitor_method": "strategy_drift", "monitor_coverage": "full", "tests": 3, "benchmark_suite": "algo-trading", "benchmark_scenarios": 20 }, { "id": "ALGO-004", "family": "ALGO", "family_label": "algorithmic trading", "source_file": "algo-trading-patterns.json", "severity": "critical", "type": "spoofing_pattern", "mechanism": [ "runtime_detector", "runtime_monitor", "specified" ], "monitor_method": "spoofing_pattern", "monitor_coverage": "full", "tests": 3, "benchmark_suite": "algo-trading", "benchmark_scenarios": 20 }, { "id": "ALGO-005", "family": "ALGO", "family_label": "algorithmic trading", "source_file": "algo-trading-patterns.json", "severity": "high", "type": "cross_venue_exposure", "mechanism": [ "runtime_detector", "runtime_monitor", "specified" ], "monitor_method": "cross_venue_exposure", "monitor_coverage": "full", "tests": 3, "benchmark_suite": "algo-trading", "benchmark_scenarios": 20 }, { "id": "ALGO-006", "family": "ALGO", "family_label": "algorithmic trading", "source_file": "algo-trading-patterns.json", "severity": "critical", "type": "fat_finger_order", "mechanism": [ "runtime_monitor", "specified" ], "monitor_method": "order_velocity", "monitor_coverage": "full", "tests": 2, "benchmark_suite": "algo-trading", "benchmark_scenarios": 20 }, { "id": "ALGO-007", "family": "ALGO", "family_label": "algorithmic trading", "source_file": "algo-trading-patterns.json", "severity": "critical", "type": "model_version_swap", "mechanism": [ "runtime_monitor", "specified" ], "monitor_method": "strategy_drift", "monitor_coverage": "full", "tests": 3, "benchmark_suite": "algo-trading", "benchmark_scenarios": 20 }, { "id": "ALGO-008", "family": "ALGO", "family_label": "algorithmic trading", "source_file": "algo-trading-patterns.json", "severity": "critical", "type": "fictitious_offset", "mechanism": [ "runtime_monitor", "specified" ], "monitor_method": "position_concentration", "monitor_coverage": "full", "tests": 7, "benchmark_suite": "algo-trading", "benchmark_scenarios": 20 }, { "id": "ALGO-009", "family": "ALGO", "family_label": "algorithmic trading", "source_file": "algo-trading-patterns.json", "severity": "high", "type": "liquidity_withdrawal", "mechanism": [ "runtime_monitor", "specified" ], "monitor_method": "cross_venue_exposure", "monitor_coverage": "full", "tests": 2, "benchmark_suite": "algo-trading", "benchmark_scenarios": 20 }, { "id": "ALGO-010", "family": "ALGO", "family_label": "algorithmic trading", "source_file": "algo-trading-patterns.json", "severity": "critical", "type": "circuit_breaker_override", "mechanism": [ "runtime_monitor", "specified" ], "monitor_method": "order_velocity", "monitor_coverage": "full", "tests": 2, "benchmark_suite": "algo-trading", "benchmark_scenarios": 20 }, { "id": "ALGO-011", "family": "ALGO", "family_label": "algorithmic trading", "source_file": "algo-trading-patterns.json", "severity": "critical", "type": "drawdown_breach", "mechanism": [ "runtime_monitor", "specified" ], "monitor_method": "position_concentration", "monitor_coverage": "full", "tests": 7, "benchmark_suite": "algo-trading", "benchmark_scenarios": 20 }, { "id": "ALGO-012", "family": "ALGO", "family_label": "algorithmic trading", "source_file": "algo-trading-patterns.json", "severity": "critical", "type": "deployment_gate", "mechanism": [ "runtime_monitor", "specified" ], "monitor_method": "order_velocity", "monitor_coverage": "full", "tests": 2, "benchmark_suite": "algo-trading", "benchmark_scenarios": 20 }, { "id": "KEY001", "family": "KEY", "family_label": "API key exposure", "source_file": "api-key-patterns.json", "severity": null, "type": null, "mechanism": [ "runtime_detector" ], "monitor_method": null, "monitor_coverage": null, "tests": 0, "benchmark_suite": null, "benchmark_scenarios": null }, { "id": "KEY002", "family": "KEY", "family_label": "API key exposure", "source_file": "api-key-patterns.json", "severity": null, "type": null, "mechanism": [ "runtime_detector" ], "monitor_method": null, "monitor_coverage": null, "tests": 0, "benchmark_suite": null, "benchmark_scenarios": null }, { "id": "KEY003", "family": "KEY", "family_label": "API key exposure", "source_file": "api-key-patterns.json", "severity": null, "type": null, "mechanism": [ "runtime_detector" ], "monitor_method": null, "monitor_coverage": null, "tests": 0, "benchmark_suite": null, "benchmark_scenarios": null }, { "id": "KEY004", "family": "KEY", "family_label": "API key exposure", "source_file": "api-key-patterns.json", "severity": null, "type": null, "mechanism": [ "runtime_detector" ], "monitor_method": null, "monitor_coverage": null, "tests": 0, "benchmark_suite": null, "benchmark_scenarios": null }, { "id": "KEY005", "family": "KEY", "family_label": "API key exposure", "source_file": "api-key-patterns.json", "severity": null, "type": null, "mechanism": [ "runtime_detector" ], "monitor_method": null, "monitor_coverage": null, "tests": 0, "benchmark_suite": null, "benchmark_scenarios": null }, { "id": "KEY006", "family": "KEY", "family_label": "API key exposure", "source_file": "api-key-patterns.json", "severity": null, "type": null, "mechanism": [ "runtime_detector" ], "monitor_method": null, "monitor_coverage": null, "tests": 0, "benchmark_suite": null, "benchmark_scenarios": null }, { "id": "KEY007", "family": "KEY", "family_label": "API key exposure", "source_file": "api-key-patterns.json", "severity": null, "type": null, "mechanism": [ "runtime_detector" ], "monitor_method": null, "monitor_coverage": null, "tests": 0, "benchmark_suite": null, "benchmark_scenarios": null }, { "id": "KEY008", "family": "KEY", "family_label": "API key exposure", "source_file": "api-key-patterns.json", "severity": null, "type": null, "mechanism": [ "runtime_detector" ], "monitor_method": null, "monitor_coverage": null, "tests": 0, "benchmark_suite": null, "benchmark_scenarios": null }, { "id": "KEY009", "family": "KEY", "family_label": "API key exposure", "source_file": "api-key-patterns.json", "severity": null, "type": null, "mechanism": [ "runtime_detector" ], "monitor_method": null, "monitor_coverage": null, "tests": 0, "benchmark_suite": null, "benchmark_scenarios": null }, { "id": "AV-001", "family": "AV", "family_label": "autonomous vehicle fleet", "source_file": "av-fleet-patterns.json", "severity": "critical", "type": "odd_violation", "mechanism": [ "runtime_detector", "runtime_monitor", "specified" ], "monitor_method": "odd_violation", "monitor_coverage": "full", "tests": 5, "benchmark_suite": "av-fleet", "benchmark_scenarios": 20 }, { "id": "AV-002", "family": "AV", "family_label": "autonomous vehicle fleet", "source_file": "av-fleet-patterns.json", "severity": "critical", "type": "perception_degradation", "mechanism": [ "runtime_detector", "runtime_monitor", "specified" ], "monitor_method": "perception_degradation", "monitor_coverage": "full", "tests": 2, "benchmark_suite": "av-fleet", "benchmark_scenarios": 20 }, { "id": "AV-003", "family": "AV", "family_label": "autonomous vehicle fleet", "source_file": "av-fleet-patterns.json", "severity": "critical", "type": "emergency_response_failure", "mechanism": [ "runtime_detector", "runtime_monitor", "specified" ], "monitor_method": "emergency_response_failure", "monitor_coverage": "full", "tests": 3, "benchmark_suite": "av-fleet", "benchmark_scenarios": 20 }, { "id": "AV-004", "family": "AV", "family_label": "autonomous vehicle fleet", "source_file": "av-fleet-patterns.json", "severity": "critical", "type": "pedestrian_detection_gap", "mechanism": [ "specified" ], "monitor_method": "pedestrian_detection_gap", "monitor_coverage": "partial", "tests": 0, "benchmark_suite": "av-fleet", "benchmark_scenarios": 20 }, { "id": "AV-005", "family": "AV", "family_label": "autonomous vehicle fleet", "source_file": "av-fleet-patterns.json", "severity": "critical", "type": "fleet_cascade_failure", "mechanism": [ "runtime_detector", "runtime_monitor", "specified" ], "monitor_method": "fleet_cascade", "monitor_coverage": "full", "tests": 2, "benchmark_suite": "av-fleet", "benchmark_scenarios": 20 }, { "id": "AV-006", "family": "AV", "family_label": "autonomous vehicle fleet", "source_file": "av-fleet-patterns.json", "severity": "critical", "type": "school_zone_violation", "mechanism": [ "specified" ], "monitor_method": "school_zone_violation", "monitor_coverage": "partial", "tests": 0, "benchmark_suite": "av-fleet", "benchmark_scenarios": 20 }, { "id": "AV-007", "family": "AV", "family_label": "autonomous vehicle fleet", "source_file": "av-fleet-patterns.json", "severity": "high", "type": "construction_zone_breach", "mechanism": [ "specified" ], "monitor_method": "construction_zone_breach", "monitor_coverage": "partial", "tests": 0, "benchmark_suite": "av-fleet", "benchmark_scenarios": 20 }, { "id": "AV-008", "family": "AV", "family_label": "autonomous vehicle fleet", "source_file": "av-fleet-patterns.json", "severity": "high", "type": "sgo_reporting_delay", "mechanism": [ "specified" ], "monitor_method": "sgo_reporting_delay", "monitor_coverage": "full", "tests": 0, "benchmark_suite": "av-fleet", "benchmark_scenarios": 20 }, { "id": "AV-009", "family": "AV", "family_label": "autonomous vehicle fleet", "source_file": "av-fleet-patterns.json", "severity": "high", "type": "weather_adaptation_failure", "mechanism": [ "specified" ], "monitor_method": "weather_adaptation_failure", "monitor_coverage": "partial", "tests": 0, "benchmark_suite": "av-fleet", "benchmark_scenarios": 20 }, { "id": "AV-010", "family": "AV", "family_label": "autonomous vehicle fleet", "source_file": "av-fleet-patterns.json", "severity": "critical", "type": "remote_intervention_timeout", "mechanism": [ "runtime_detector", "runtime_monitor", "specified" ], "monitor_method": "remote_intervention_timeout", "monitor_coverage": "full", "tests": 2, "benchmark_suite": "av-fleet", "benchmark_scenarios": 20 }, { "id": "CLOUD-001", "family": "CLOUD", "family_label": "cloud infrastructure", "source_file": "cloud-infrastructure-patterns.json", "severity": "critical", "type": "metadata_endpoint_probe", "mechanism": [ "runtime_detector", "runtime_monitor", "specified" ], "monitor_method": "metadata", "monitor_coverage": "full", "tests": 118, "benchmark_suite": "cloud-infrastructure", "benchmark_scenarios": 20 }, { "id": "CLOUD-002", "family": "CLOUD", "family_label": "cloud infrastructure", "source_file": "cloud-infrastructure-patterns.json", "severity": "critical", "type": "iam_privilege_escalation", "mechanism": [ "runtime_detector", "runtime_monitor", "specified" ], "monitor_method": "iam_escalation", "monitor_coverage": "full", "tests": 1, "benchmark_suite": "cloud-infrastructure", "benchmark_scenarios": 20 }, { "id": "CLOUD-003", "family": "CLOUD", "family_label": "cloud infrastructure", "source_file": "cloud-infrastructure-patterns.json", "severity": "high", "type": "storage_enumeration", "mechanism": [ "runtime_detector", "runtime_monitor", "specified" ], "monitor_method": "storage_enumeration", "monitor_coverage": "full", "tests": 1, "benchmark_suite": "cloud-infrastructure", "benchmark_scenarios": 20 }, { "id": "CLOUD-004", "family": "CLOUD", "family_label": "cloud infrastructure", "source_file": "cloud-infrastructure-patterns.json", "severity": "critical", "type": "kubernetes_api_abuse", "mechanism": [ "runtime_detector", "specified" ], "monitor_method": "kubernetes_api", "monitor_coverage": "full", "tests": 0, "benchmark_suite": "cloud-infrastructure", "benchmark_scenarios": 20 }, { "id": "CLOUD-005", "family": "CLOUD", "family_label": "cloud infrastructure", "source_file": "cloud-infrastructure-patterns.json", "severity": "critical", "type": "credential_exfiltration", "mechanism": [ "runtime_detector", "runtime_monitor", "specified" ], "monitor_method": "cloud_credential_exfiltration", "monitor_coverage": "full", "tests": 2, "benchmark_suite": "cloud-infrastructure", "benchmark_scenarios": 20 }, { "id": "CLOUD-006", "family": "CLOUD", "family_label": "cloud infrastructure", "source_file": "cloud-infrastructure-patterns.json", "severity": "critical", "type": "action_boundary_violation", "mechanism": [ "runtime_monitor", "specified" ], "monitor_method": "iam_escalation", "monitor_coverage": "partial", "tests": 1, "benchmark_suite": "cloud-infrastructure", "benchmark_scenarios": 20 }, { "id": "CLOUD-007", "family": "CLOUD", "family_label": "cloud infrastructure", "source_file": "cloud-infrastructure-patterns.json", "severity": "critical", "type": "blast_radius_systemic_action", "mechanism": [ "runtime_monitor", "specified" ], "monitor_method": "storage_enumeration", "monitor_coverage": "partial", "tests": 1, "benchmark_suite": "cloud-infrastructure", "benchmark_scenarios": 20 }, { "id": "CLOUD-008", "family": "CLOUD", "family_label": "cloud infrastructure", "source_file": "cloud-infrastructure-patterns.json", "severity": "high", "type": "credential_scope_overbroad", "mechanism": [ "runtime_monitor", "specified" ], "monitor_method": "iam_escalation", "monitor_coverage": "partial", "tests": 1, "benchmark_suite": "cloud-infrastructure", "benchmark_scenarios": 20 }, { "id": "CLOUD-009", "family": "CLOUD", "family_label": "cloud infrastructure", "source_file": "cloud-infrastructure-patterns.json", "severity": "high", "type": "privilege_scope_drift", "mechanism": [ "runtime_monitor", "specified" ], "monitor_method": "iam_escalation", "monitor_coverage": "full", "tests": 1, "benchmark_suite": "cloud-infrastructure", "benchmark_scenarios": 20 }, { "id": "CLOUD-010", "family": "CLOUD", "family_label": "cloud infrastructure", "source_file": "cloud-infrastructure-patterns.json", "severity": "high", "type": "cross_account_boundary_crossing", "mechanism": [ "runtime_monitor", "specified" ], "monitor_method": "storage_enumeration", "monitor_coverage": "partial", "tests": 1, "benchmark_suite": "cloud-infrastructure", "benchmark_scenarios": 20 }, { "id": "ICS-001", "family": "ICS", "family_label": "industrial control systems", "source_file": "industrial-iot-patterns.json", "severity": "critical", "type": "process_variable_deviation", "mechanism": [ "runtime_detector", "runtime_monitor", "specified" ], "monitor_method": "process_variable_deviation", "monitor_coverage": "full", "tests": 2, "benchmark_suite": "industrial-iot", "benchmark_scenarios": 20 }, { "id": "ICS-002", "family": "ICS", "family_label": "industrial control systems", "source_file": "industrial-iot-patterns.json", "severity": "critical", "type": "unauthorized_setpoint_change", "mechanism": [ "runtime_detector", "runtime_monitor", "specified" ], "monitor_method": "unauthorized_setpoint_change", "monitor_coverage": "full", "tests": 2, "benchmark_suite": "industrial-iot", "benchmark_scenarios": 20 }, { "id": "ICS-003", "family": "ICS", "family_label": "industrial control systems", "source_file": "industrial-iot-patterns.json", "severity": "critical", "type": "controller_firmware_tampering", "mechanism": [ "runtime_detector", "runtime_monitor", "specified" ], "monitor_method": "controller_firmware_tampering", "monitor_coverage": "full", "tests": 2, "benchmark_suite": "industrial-iot", "benchmark_scenarios": 20 }, { "id": "ICS-004", "family": "ICS", "family_label": "industrial control systems", "source_file": "industrial-iot-patterns.json", "severity": "critical", "type": "plc_command_injection", "mechanism": [ "specified" ], "monitor_method": "plc_command_injection", "monitor_coverage": "partial", "tests": 0, "benchmark_suite": "industrial-iot", "benchmark_scenarios": 20 }, { "id": "ICS-005", "family": "ICS", "family_label": "industrial control systems", "source_file": "industrial-iot-patterns.json", "severity": "critical", "type": "safety_system_override", "mechanism": [ "runtime_detector", "runtime_monitor", "specified" ], "monitor_method": "safety_system_override", "monitor_coverage": "full", "tests": 2, "benchmark_suite": "industrial-iot", "benchmark_scenarios": 20 }, { "id": "ICS-006", "family": "ICS", "family_label": "industrial control systems", "source_file": "industrial-iot-patterns.json", "severity": "critical", "type": "network_segmentation_breach", "mechanism": [ "runtime_detector", "runtime_monitor", "specified" ], "monitor_method": "network_segmentation_breach", "monitor_coverage": "full", "tests": 2, "benchmark_suite": "industrial-iot", "benchmark_scenarios": 20 }, { "id": "ICS-007", "family": "ICS", "family_label": "industrial control systems", "source_file": "industrial-iot-patterns.json", "severity": "high", "type": "unscheduled_maintenance_window", "mechanism": [ "specified" ], "monitor_method": "unscheduled_maintenance_window", "monitor_coverage": "partial", "tests": 0, "benchmark_suite": "industrial-iot", "benchmark_scenarios": 20 }, { "id": "ICS-008", "family": "ICS", "family_label": "industrial control systems", "source_file": "industrial-iot-patterns.json", "severity": "critical", "type": "sensor_data_manipulation", "mechanism": [ "specified" ], "monitor_method": "sensor_data_manipulation", "monitor_coverage": "partial", "tests": 0, "benchmark_suite": "industrial-iot", "benchmark_scenarios": 20 }, { "id": "ICS-009", "family": "ICS", "family_label": "industrial control systems", "source_file": "industrial-iot-patterns.json", "severity": "critical", "type": "cascading_shutdown_propagation", "mechanism": [ "specified" ], "monitor_method": "cascading_shutdown_propagation", "monitor_coverage": "partial", "tests": 0, "benchmark_suite": "industrial-iot", "benchmark_scenarios": 20 }, { "id": "ICS-010", "family": "ICS", "family_label": "industrial control systems", "source_file": "industrial-iot-patterns.json", "severity": "critical", "type": "air_gap_violation", "mechanism": [ "specified" ], "monitor_method": "air_gap_violation", "monitor_coverage": "partial", "tests": 0, "benchmark_suite": "industrial-iot", "benchmark_scenarios": 20 }, { "id": "INJ001", "family": "INJ", "family_label": "prompt injection", "source_file": "injection-patterns.json", "severity": "critical", "type": "direct_override", "mechanism": [ "sandbox_harness" ], "monitor_method": null, "monitor_coverage": null, "tests": 7, "benchmark_suite": "ipi", "benchmark_scenarios": 5 }, { "id": "INJ002", "family": "INJ", "family_label": "prompt injection", "source_file": "injection-patterns.json", "severity": "critical", "type": "direct_override", "mechanism": [ "sandbox_harness" ], "monitor_method": null, "monitor_coverage": null, "tests": 3, "benchmark_suite": "ipi", "benchmark_scenarios": 5 }, { "id": "INJ003", "family": "INJ", "family_label": "prompt injection", "source_file": "injection-patterns.json", "severity": "critical", "type": "direct_override", "mechanism": [ "sandbox_harness" ], "monitor_method": null, "monitor_coverage": null, "tests": 1, "benchmark_suite": "ipi", "benchmark_scenarios": 5 }, { "id": "INJ004", "family": "INJ", "family_label": "prompt injection", "source_file": "injection-patterns.json", "severity": "critical", "type": "direct_override", "mechanism": [ "sandbox_harness" ], "monitor_method": null, "monitor_coverage": null, "tests": 0, "benchmark_suite": "ipi", "benchmark_scenarios": 5 }, { "id": "INJ005", "family": "INJ", "family_label": "prompt injection", "source_file": "injection-patterns.json", "severity": "high", "type": "direct_override", "mechanism": [ "sandbox_harness" ], "monitor_method": null, "monitor_coverage": null, "tests": 0, "benchmark_suite": "ipi", "benchmark_scenarios": 5 }, { "id": "INJ006", "family": "INJ", "family_label": "prompt injection", "source_file": "injection-patterns.json", "severity": "critical", "type": "identity_attack", "mechanism": [ "sandbox_harness" ], "monitor_method": null, "monitor_coverage": null, "tests": 0, "benchmark_suite": "ipi", "benchmark_scenarios": 5 }, { "id": "INJ007", "family": "INJ", "family_label": "prompt injection", "source_file": "injection-patterns.json", "severity": "high", "type": "identity_attack", "mechanism": [ "sandbox_harness" ], "monitor_method": null, "monitor_coverage": null, "tests": 0, "benchmark_suite": "ipi", "benchmark_scenarios": 5 }, { "id": "INJ008", "family": "INJ", "family_label": "prompt injection", "source_file": "injection-patterns.json", "severity": "high", "type": "identity_attack", "mechanism": [ "sandbox_harness" ], "monitor_method": null, "monitor_coverage": null, "tests": 0, "benchmark_suite": "ipi", "benchmark_scenarios": 5 }, { "id": "INJ009", "family": "INJ", "family_label": "prompt injection", "source_file": "injection-patterns.json", "severity": "critical", "type": "identity_attack", "mechanism": [ "sandbox_harness" ], "monitor_method": null, "monitor_coverage": null, "tests": 0, "benchmark_suite": "ipi", "benchmark_scenarios": 5 }, { "id": "INJ010", "family": "INJ", "family_label": "prompt injection", "source_file": "injection-patterns.json", "severity": "high", "type": "prompt_extraction", "mechanism": [ "sandbox_harness" ], "monitor_method": null, "monitor_coverage": null, "tests": 1, "benchmark_suite": "ipi", "benchmark_scenarios": 5 }, { "id": "INJ011", "family": "INJ", "family_label": "prompt injection", "source_file": "injection-patterns.json", "severity": "high", "type": "prompt_extraction", "mechanism": [ "sandbox_harness" ], "monitor_method": null, "monitor_coverage": null, "tests": 0, "benchmark_suite": "ipi", "benchmark_scenarios": 5 }, { "id": "INJ012", "family": "INJ", "family_label": "prompt injection", "source_file": "injection-patterns.json", "severity": "medium", "type": "prompt_extraction", "mechanism": [ "sandbox_harness" ], "monitor_method": null, "monitor_coverage": null, "tests": 0, "benchmark_suite": "ipi", "benchmark_scenarios": 5 }, { "id": "INJ013", "family": "INJ", "family_label": "prompt injection", "source_file": "injection-patterns.json", "severity": "critical", "type": "privilege_escalation", "mechanism": [ "sandbox_harness" ], "monitor_method": null, "monitor_coverage": null, "tests": 0, "benchmark_suite": "ipi", "benchmark_scenarios": 5 }, { "id": "INJ014", "family": "INJ", "family_label": "prompt injection", "source_file": "injection-patterns.json", "severity": "high", "type": "encoding_evasion", "mechanism": [ "sandbox_harness" ], "monitor_method": null, "monitor_coverage": null, "tests": 0, "benchmark_suite": "ipi", "benchmark_scenarios": 5 }, { "id": "INJ015", "family": "INJ", "family_label": "prompt injection", "source_file": "injection-patterns.json", "severity": "medium", "type": "encoding_evasion", "mechanism": [ "sandbox_harness" ], "monitor_method": null, "monitor_coverage": null, "tests": 0, "benchmark_suite": "ipi", "benchmark_scenarios": 5 }, { "id": "INJ016", "family": "INJ", "family_label": "prompt injection", "source_file": "injection-patterns.json", "severity": "critical", "type": "exfiltration", "mechanism": [ "sandbox_harness" ], "monitor_method": null, "monitor_coverage": null, "tests": 1, "benchmark_suite": "ipi", "benchmark_scenarios": 5 }, { "id": "INJ017", "family": "INJ", "family_label": "prompt injection", "source_file": "injection-patterns.json", "severity": "critical", "type": "exfiltration", "mechanism": [ "sandbox_harness" ], "monitor_method": null, "monitor_coverage": null, "tests": 0, "benchmark_suite": "ipi", "benchmark_scenarios": 5 }, { "id": "INJ018", "family": "INJ", "family_label": "prompt injection", "source_file": "injection-patterns.json", "severity": "medium", "type": "multi_turn", "mechanism": [ "sandbox_harness" ], "monitor_method": null, "monitor_coverage": null, "tests": 0, "benchmark_suite": "ipi", "benchmark_scenarios": 5 }, { "id": "INJ019", "family": "INJ", "family_label": "prompt injection", "source_file": "injection-patterns.json", "severity": "medium", "type": "context_manipulation", "mechanism": [ "sandbox_harness" ], "monitor_method": null, "monitor_coverage": null, "tests": 0, "benchmark_suite": "ipi", "benchmark_scenarios": 5 }, { "id": "INJ020", "family": "INJ", "family_label": "prompt injection", "source_file": "injection-patterns.json", "severity": "critical", "type": "identity_suppression", "mechanism": [ "runtime_detector", "sandbox_harness" ], "monitor_method": null, "monitor_coverage": null, "tests": 1, "benchmark_suite": "ipi", "benchmark_scenarios": 5 }, { "id": "INJ021", "family": "INJ", "family_label": "prompt injection", "source_file": "injection-patterns.json", "severity": "critical", "type": "capability_escalation_via_prompt", "mechanism": [ "sandbox_harness" ], "monitor_method": null, "monitor_coverage": null, "tests": 0, "benchmark_suite": "ipi", "benchmark_scenarios": 5 }, { "id": "INJ022", "family": "INJ", "family_label": "prompt injection", "source_file": "injection-patterns.json", "severity": "high", "type": "memory_state_poisoning", "mechanism": [ "sandbox_harness" ], "monitor_method": null, "monitor_coverage": null, "tests": 0, "benchmark_suite": "ipi", "benchmark_scenarios": 5 }, { "id": "INJ023", "family": "INJ", "family_label": "prompt injection", "source_file": "injection-patterns.json", "severity": "medium", "type": "context_reset", "mechanism": [ "sandbox_harness" ], "monitor_method": null, "monitor_coverage": null, "tests": 0, "benchmark_suite": "ipi", "benchmark_scenarios": 5 }, { "id": "INJ025", "family": "INJ", "family_label": "prompt injection", "source_file": "injection-patterns.json", "severity": "high", "type": "zero_width", "mechanism": [ "sandbox_harness" ], "monitor_method": null, "monitor_coverage": null, "tests": 0, "benchmark_suite": "ipi", "benchmark_scenarios": 5 }, { "id": "INJ026", "family": "INJ", "family_label": "prompt injection", "source_file": "injection-patterns.json", "severity": "critical", "type": "agent_prompt_self", "mechanism": [ "sandbox_harness" ], "monitor_method": null, "monitor_coverage": null, "tests": 0, "benchmark_suite": "ipi", "benchmark_scenarios": 5 }, { "id": "INJ027", "family": "INJ", "family_label": "prompt injection", "source_file": "injection-patterns.json", "severity": "high", "type": "role_confusion", "mechanism": [ "sandbox_harness" ], "monitor_method": null, "monitor_coverage": null, "tests": 0, "benchmark_suite": "ipi", "benchmark_scenarios": 5 }, { "id": "INJ024", "family": "INJ", "family_label": "prompt injection", "source_file": "injection-patterns.json", "severity": "critical", "type": "trace_poisoning", "mechanism": [ "sandbox_harness" ], "monitor_method": null, "monitor_coverage": null, "tests": 5, "benchmark_suite": "ipi", "benchmark_scenarios": 5 }, { "id": "INJ028", "family": "INJ", "family_label": "prompt injection", "source_file": "injection-patterns.json", "severity": "critical", "type": "governance_bypass", "mechanism": [ "sandbox_harness" ], "monitor_method": null, "monitor_coverage": null, "tests": 4, "benchmark_suite": "ipi", "benchmark_scenarios": 5 }, { "id": "INJ029", "family": "INJ", "family_label": "prompt injection", "source_file": "injection-patterns.json", "severity": "critical", "type": "sovereign_override_cache_bypass", "mechanism": [ "sandbox_harness" ], "monitor_method": null, "monitor_coverage": null, "tests": 2, "benchmark_suite": "ipi", "benchmark_scenarios": 5 }, { "id": "INJ030", "family": "INJ", "family_label": "prompt injection", "source_file": "injection-patterns.json", "severity": "critical", "type": "cross_model_filter_bypass", "mechanism": [ "runtime_detector", "sandbox_harness" ], "monitor_method": null, "monitor_coverage": null, "tests": 3, "benchmark_suite": "ipi", "benchmark_scenarios": 5 }, { "id": "INJ031", "family": "INJ", "family_label": "prompt injection", "source_file": "injection-patterns.json", "severity": "critical", "type": "capability_escalation_autonomous", "mechanism": [ "runtime_detector", "sandbox_harness" ], "monitor_method": null, "monitor_coverage": null, "tests": 1, "benchmark_suite": "ipi", "benchmark_scenarios": 5 }, { "id": "INJ032", "family": "INJ", "family_label": "prompt injection", "source_file": "injection-patterns.json", "severity": "critical", "type": "monitor_obfuscation", "mechanism": [ "runtime_detector", "sandbox_harness" ], "monitor_method": null, "monitor_coverage": null, "tests": 3, "benchmark_suite": "ipi", "benchmark_scenarios": 5 }, { "id": "INJ033", "family": "INJ", "family_label": "prompt injection", "source_file": "injection-patterns.json", "severity": "critical", "type": "reckless_escalation", "mechanism": [ "runtime_detector", "sandbox_harness" ], "monitor_method": null, "monitor_coverage": null, "tests": 1, "benchmark_suite": "ipi", "benchmark_scenarios": 5 }, { "id": "INJ034", "family": "INJ", "family_label": "prompt injection", "source_file": "injection-patterns.json", "severity": "high", "type": "evaluation_awareness", "mechanism": [ "runtime_detector", "sandbox_harness" ], "monitor_method": null, "monitor_coverage": null, "tests": 1, "benchmark_suite": "ipi", "benchmark_scenarios": 5 }, { "id": "INJ035", "family": "INJ", "family_label": "prompt injection", "source_file": "injection-patterns.json", "severity": "high", "type": "reward_hack_detection", "mechanism": [ "runtime_detector", "sandbox_harness" ], "monitor_method": null, "monitor_coverage": null, "tests": 4, "benchmark_suite": "ipi", "benchmark_scenarios": 5 }, { "id": "INJ036", "family": "INJ", "family_label": "prompt injection", "source_file": "injection-patterns.json", "severity": "critical", "type": "PERSISTENT_MEMORY_UNAUDITED", "mechanism": [ "sandbox_harness" ], "monitor_method": null, "monitor_coverage": null, "tests": 1, "benchmark_suite": "ipi", "benchmark_scenarios": 5 }, { "id": "INJ037", "family": "INJ", "family_label": "prompt injection", "source_file": "injection-patterns.json", "severity": "critical", "type": "SPAWNED_AGENT_GOVERNANCE_BYPASS", "mechanism": [ "sandbox_harness" ], "monitor_method": null, "monitor_coverage": null, "tests": 0, "benchmark_suite": "ipi", "benchmark_scenarios": 5 }, { "id": "INJ038", "family": "INJ", "family_label": "prompt injection", "source_file": "injection-patterns.json", "severity": "high", "type": "SSE_STREAM_INJECTION", "mechanism": [ "sandbox_harness" ], "monitor_method": null, "monitor_coverage": null, "tests": 0, "benchmark_suite": "ipi", "benchmark_scenarios": 5 }, { "id": "INJ039", "family": "INJ", "family_label": "prompt injection", "source_file": "injection-patterns.json", "severity": "critical", "type": "MODEL_ALIGNMENT_REMOVAL", "mechanism": [ "runtime_detector", "sandbox_harness", "specified" ], "monitor_method": null, "monitor_coverage": null, "tests": 0, "benchmark_suite": "ipi", "benchmark_scenarios": 5 }, { "id": "INJ040", "family": "INJ", "family_label": "prompt injection", "source_file": "injection-patterns.json", "severity": "high", "type": "ENVIRONMENT_DECEPTION", "mechanism": [ "sandbox_harness" ], "monitor_method": null, "monitor_coverage": null, "tests": 0, "benchmark_suite": "ipi", "benchmark_scenarios": 5 }, { "id": "INJ041", "family": "INJ", "family_label": "prompt injection", "source_file": "injection-patterns.json", "severity": "high", "type": "HUMAN_SUPERVISOR_MANIPULATION", "mechanism": [ "sandbox_harness" ], "monitor_method": null, "monitor_coverage": null, "tests": 0, "benchmark_suite": "ipi", "benchmark_scenarios": 5 }, { "id": "INJ042", "family": "INJ", "family_label": "prompt injection", "source_file": "injection-patterns.json", "severity": "medium", "type": "QUANTUM_CRYPTOGRAPHIC_VULNERABILITY", "mechanism": [ "runtime_detector", "sandbox_harness" ], "monitor_method": null, "monitor_coverage": null, "tests": 0, "benchmark_suite": "ipi", "benchmark_scenarios": 5 }, { "id": "INJ043", "family": "INJ", "family_label": "prompt injection", "source_file": "injection-patterns.json", "severity": "medium", "type": "CORPUS_INFERENCE_DETECTION", "mechanism": [ "sandbox_harness" ], "monitor_method": null, "monitor_coverage": null, "tests": 0, "benchmark_suite": "ipi", "benchmark_scenarios": 5 }, { "id": "INJ044", "family": "INJ", "family_label": "prompt injection", "source_file": "injection-patterns.json", "severity": "medium", "type": "BOUNDARY_PROBING_DETECTION", "mechanism": [ "sandbox_harness" ], "monitor_method": null, "monitor_coverage": null, "tests": 0, "benchmark_suite": "ipi", "benchmark_scenarios": 5 }, { "id": "INJ045", "family": "INJ", "family_label": "prompt injection", "source_file": "injection-patterns.json", "severity": "HIGH", "type": "MULTI_TURN_CUMULATIVE_SUPPRESSION", "mechanism": [ "runtime_detector", "sandbox_harness", "specified" ], "monitor_method": null, "monitor_coverage": null, "tests": 0, "benchmark_suite": "ipi", "benchmark_scenarios": 5 }, { "id": "INJ046", "family": "INJ", "family_label": "prompt injection", "source_file": "injection-patterns.json", "severity": "high", "type": "UNAUTHORIZED_AUTONOMOUS_RECON", "mechanism": [ "sandbox_harness", "specified" ], "monitor_method": null, "monitor_coverage": null, "tests": 0, "benchmark_suite": "ipi", "benchmark_scenarios": 5 }, { "id": "INJ047", "family": "INJ", "family_label": "prompt injection", "source_file": "injection-patterns.json", "severity": "critical", "type": "AUTHORIZED_TOOL_IMPERSONATION", "mechanism": [ "runtime_detector", "sandbox_harness", "specified" ], "monitor_method": null, "monitor_coverage": null, "tests": 0, "benchmark_suite": "ipi", "benchmark_scenarios": 5 }, { "id": "INJ048", "family": "INJ", "family_label": "prompt injection", "source_file": "injection-patterns.json", "severity": "high", "type": "RECON_ESCALATION_WITHOUT_APPROVAL", "mechanism": [ "sandbox_harness", "specified" ], "monitor_method": null, "monitor_coverage": null, "tests": 0, "benchmark_suite": "ipi", "benchmark_scenarios": 5 }, { "id": "INJ049", "family": "INJ", "family_label": "prompt injection", "source_file": "injection-patterns.json", "severity": "critical", "type": "CLOAK_INJECTION", "mechanism": [ "sandbox_harness", "specified" ], "monitor_method": null, "monitor_coverage": null, "tests": 0, "benchmark_suite": "ipi", "benchmark_scenarios": 5 }, { "id": "INJ050", "family": "INJ", "family_label": "prompt injection", "source_file": "injection-patterns.json", "severity": "high", "type": "FEATURE_FLAG_BYPASS", "mechanism": [ "sandbox_harness", "specified" ], "monitor_method": null, "monitor_coverage": null, "tests": 0, "benchmark_suite": "ipi", "benchmark_scenarios": 5 }, { "id": "INJ051", "family": "INJ", "family_label": "prompt injection", "source_file": "injection-patterns.json", "severity": "high", "type": "MEMORY_POISONING", "mechanism": [ "runtime_detector", "sandbox_harness", "specified" ], "monitor_method": null, "monitor_coverage": null, "tests": 0, "benchmark_suite": "ipi", "benchmark_scenarios": 5 }, { "id": "INJ053", "family": "INJ", "family_label": "prompt injection", "source_file": "injection-patterns.json", "severity": "high", "type": "CROSS_HARNESS_SESSION_EXFILTRATION", "mechanism": [ "runtime_detector", "sandbox_harness", "specified" ], "monitor_method": null, "monitor_coverage": null, "tests": 2, "benchmark_suite": "ipi", "benchmark_scenarios": 5 }, { "id": "INJ054", "family": "INJ", "family_label": "prompt injection", "source_file": "injection-patterns.json", "severity": "critical", "type": "ENCODING_RELAY_INJECTION", "mechanism": [ "runtime_detector", "sandbox_harness", "specified" ], "monitor_method": null, "monitor_coverage": null, "tests": 0, "benchmark_suite": "ipi", "benchmark_scenarios": 5 }, { "id": "MED-001", "family": "MED", "family_label": "medical device", "source_file": "medical-device-patterns.json", "severity": "critical", "type": "algorithm_drift", "mechanism": [ "runtime_detector", "runtime_monitor", "specified" ], "monitor_method": "algorithm_drift", "monitor_coverage": "full", "tests": 2, "benchmark_suite": "medical-device", "benchmark_scenarios": 20 }, { "id": "MED-002", "family": "MED", "family_label": "medical device", "source_file": "medical-device-patterns.json", "severity": "high", "type": "population_shift", "mechanism": [ "runtime_detector", "runtime_monitor", "specified" ], "monitor_method": "population_shift", "monitor_coverage": "full", "tests": 2, "benchmark_suite": "medical-device", "benchmark_scenarios": 20 }, { "id": "MED-003", "family": "MED", "family_label": "medical device", "source_file": "medical-device-patterns.json", "severity": "critical", "type": "dosage_boundary_violation", "mechanism": [ "runtime_detector", "runtime_monitor", "specified" ], "monitor_method": "dosage_boundary", "monitor_coverage": "full", "tests": 6, "benchmark_suite": "medical-device", "benchmark_scenarios": 20 }, { "id": "MED-004", "family": "MED", "family_label": "medical device", "source_file": "medical-device-patterns.json", "severity": "critical", "type": "unauthorized_model_update", "mechanism": [ "runtime_detector", "runtime_monitor", "specified" ], "monitor_method": "unauthorized_model_update", "monitor_coverage": "full", "tests": 2, "benchmark_suite": "medical-device", "benchmark_scenarios": 20 }, { "id": "MED-005", "family": "MED", "family_label": "medical device", "source_file": "medical-device-patterns.json", "severity": "high", "type": "audit_gap", "mechanism": [ "runtime_detector", "runtime_monitor", "specified" ], "monitor_method": "audit_gap", "monitor_coverage": "full", "tests": 0, "benchmark_suite": "medical-device", "benchmark_scenarios": 20 }, { "id": "MED-006", "family": "MED", "family_label": "medical device", "source_file": "medical-device-patterns.json", "severity": "high", "type": "alert_fatigue", "mechanism": [ "specified" ], "monitor_method": "alert_fatigue", "monitor_coverage": "full", "tests": 0, "benchmark_suite": "medical-device", "benchmark_scenarios": 20 }, { "id": "MED-007", "family": "MED", "family_label": "medical device", "source_file": "medical-device-patterns.json", "severity": "critical", "type": "consent_boundary_violation", "mechanism": [ "specified" ], "monitor_method": "consent_boundary", "monitor_coverage": "full", "tests": 0, "benchmark_suite": "medical-device", "benchmark_scenarios": 20 }, { "id": "MED-008", "family": "MED", "family_label": "medical device", "source_file": "medical-device-patterns.json", "severity": "high", "type": "interoperability_failure", "mechanism": [ "specified" ], "monitor_method": "interoperability_failure", "monitor_coverage": "full", "tests": 0, "benchmark_suite": "medical-device", "benchmark_scenarios": 20 }, { "id": "MED-009", "family": "MED", "family_label": "medical device", "source_file": "medical-device-patterns.json", "severity": "critical", "type": "recall_response_failure", "mechanism": [ "runtime_monitor", "specified" ], "monitor_method": "recall_response", "monitor_coverage": "full", "tests": 3, "benchmark_suite": "medical-device", "benchmark_scenarios": 20 }, { "id": "MED-010", "family": "MED", "family_label": "medical device", "source_file": "medical-device-patterns.json", "severity": "high", "type": "validation_gap", "mechanism": [ "specified" ], "monitor_method": "validation_gap", "monitor_coverage": "full", "tests": 0, "benchmark_suite": "medical-device", "benchmark_scenarios": 20 }, { "id": "PAY-001", "family": "PAY", "family_label": "payments and fintech", "source_file": "payments-fintech-patterns.json", "severity": "critical", "type": "refund_limit_breach", "mechanism": [ "runtime_detector", "runtime_monitor", "specified" ], "monitor_method": "refund_limit_breach", "monitor_coverage": "full", "tests": 1, "benchmark_suite": "payments-fintech", "benchmark_scenarios": 20 }, { "id": "PAY-002", "family": "PAY", "family_label": "payments and fintech", "source_file": "payments-fintech-patterns.json", "severity": "critical", "type": "unauthorized_fund_movement", "mechanism": [ "runtime_detector", "runtime_monitor", "specified" ], "monitor_method": "unauthorized_fund_movement", "monitor_coverage": "full", "tests": 1, "benchmark_suite": "payments-fintech", "benchmark_scenarios": 20 }, { "id": "PAY-003", "family": "PAY", "family_label": "payments and fintech", "source_file": "payments-fintech-patterns.json", "severity": "critical", "type": "risk_rule_tampering", "mechanism": [ "runtime_detector", "runtime_monitor", "specified" ], "monitor_method": "risk_rule_tampering", "monitor_coverage": "full", "tests": 1, "benchmark_suite": "payments-fintech", "benchmark_scenarios": 20 }, { "id": "PAY-004", "family": "PAY", "family_label": "payments and fintech", "source_file": "payments-fintech-patterns.json", "severity": "high", "type": "payment_velocity_anomaly", "mechanism": [ "runtime_detector", "runtime_monitor", "specified" ], "monitor_method": "payment_velocity_anomaly", "monitor_coverage": "full", "tests": 1, "benchmark_suite": "payments-fintech", "benchmark_scenarios": 20 }, { "id": "PAY-005", "family": "PAY", "family_label": "payments and fintech", "source_file": "payments-fintech-patterns.json", "severity": "high", "type": "payout_destination_drift", "mechanism": [ "runtime_detector", "runtime_monitor", "specified" ], "monitor_method": "payout_destination_drift", "monitor_coverage": "full", "tests": 1, "benchmark_suite": "payments-fintech", "benchmark_scenarios": 20 }, { "id": "PAY-006", "family": "PAY", "family_label": "payments and fintech", "source_file": "payments-fintech-patterns.json", "severity": "critical", "type": "sanctions_screening_bypass", "mechanism": [ "runtime_monitor", "specified" ], "monitor_method": "risk_rule_tampering", "monitor_coverage": "partial", "tests": 0, "benchmark_suite": "payments-fintech", "benchmark_scenarios": 20 }, { "id": "PAY-007", "family": "PAY", "family_label": "payments and fintech", "source_file": "payments-fintech-patterns.json", "severity": "high", "type": "chargeback_manipulation", "mechanism": [ "runtime_monitor", "specified" ], "monitor_method": "risk_rule_tampering", "monitor_coverage": "partial", "tests": 0, "benchmark_suite": "payments-fintech", "benchmark_scenarios": 20 }, { "id": "PAY-008", "family": "PAY", "family_label": "payments and fintech", "source_file": "payments-fintech-patterns.json", "severity": "high", "type": "card_account_enumeration", "mechanism": [ "runtime_monitor", "specified" ], "monitor_method": "payment_velocity_anomaly", "monitor_coverage": "partial", "tests": 0, "benchmark_suite": "payments-fintech", "benchmark_scenarios": 20 }, { "id": "PAY-009", "family": "PAY", "family_label": "payments and fintech", "source_file": "payments-fintech-patterns.json", "severity": "high", "type": "ledger_reconciliation_divergence", "mechanism": [ "runtime_monitor", "specified" ], "monitor_method": "unauthorized_fund_movement", "monitor_coverage": "partial", "tests": 0, "benchmark_suite": "payments-fintech", "benchmark_scenarios": 20 }, { "id": "PAY-010", "family": "PAY", "family_label": "payments and fintech", "source_file": "payments-fintech-patterns.json", "severity": "high", "type": "cross_merchant_credential_reuse", "mechanism": [ "runtime_monitor", "specified" ], "monitor_method": "payout_destination_drift", "monitor_coverage": "partial", "tests": 0, "benchmark_suite": "payments-fintech", "benchmark_scenarios": 20 }, { "id": "PE001", "family": "PE", "family_label": "personal edge", "source_file": "personal-edge-patterns.json", "severity": "critical", "type": "BEHAVIORAL_DATA_EXFILTRATION", "mechanism": [ "surface_mapping" ], "monitor_method": null, "monitor_coverage": null, "tests": 2, "benchmark_suite": null, "benchmark_scenarios": null }, { "id": "PE002", "family": "PE", "family_label": "personal edge", "source_file": "personal-edge-patterns.json", "severity": "critical", "type": "BIOMETRIC_INFERENCE_ESCALATION", "mechanism": [ "surface_mapping" ], "monitor_method": null, "monitor_coverage": null, "tests": 0, "benchmark_suite": null, "benchmark_scenarios": null }, { "id": "PE003", "family": "PE", "family_label": "personal edge", "source_file": "personal-edge-patterns.json", "severity": "high", "type": "OBSERVATION_ZONE_BYPASS", "mechanism": [ "surface_mapping" ], "monitor_method": null, "monitor_coverage": null, "tests": 0, "benchmark_suite": null, "benchmark_scenarios": null }, { "id": "PE004", "family": "PE", "family_label": "personal edge", "source_file": "personal-edge-patterns.json", "severity": "critical", "type": "CONSENT_BOUNDARY_VIOLATION", "mechanism": [ "surface_mapping" ], "monitor_method": null, "monitor_coverage": null, "tests": 0, "benchmark_suite": null, "benchmark_scenarios": null }, { "id": "PE005", "family": "PE", "family_label": "personal edge", "source_file": "personal-edge-patterns.json", "severity": "critical", "type": "PHYSICAL_SAFETY_OVERRIDE_FAILURE", "mechanism": [ "surface_mapping" ], "monitor_method": null, "monitor_coverage": null, "tests": 1, "benchmark_suite": null, "benchmark_scenarios": null }, { "id": "RPA-001", "family": "RPA", "family_label": "RPA automation", "source_file": "rpa-automation-patterns.json", "severity": "critical", "type": "bot_loop", "mechanism": [ "runtime_monitor", "specified" ], "monitor_method": "frequency_spike", "monitor_coverage": "full", "tests": 6, "benchmark_suite": "rpa-governance", "benchmark_scenarios": 20 }, { "id": "RPA-002", "family": "RPA", "family_label": "RPA automation", "source_file": "rpa-automation-patterns.json", "severity": "critical", "type": "unauthorized_system_access", "mechanism": [ "runtime_monitor", "specified" ], "monitor_method": "scope_escalation", "monitor_coverage": "full", "tests": 4, "benchmark_suite": "rpa-governance", "benchmark_scenarios": 20 }, { "id": "RPA-003", "family": "RPA", "family_label": "RPA automation", "source_file": "rpa-automation-patterns.json", "severity": "high", "type": "credential_reuse", "mechanism": [ "runtime_detector", "runtime_monitor", "specified" ], "monitor_method": "identity_drift", "monitor_coverage": "full", "tests": 5, "benchmark_suite": "rpa-governance", "benchmark_scenarios": 20 }, { "id": "RPA-004", "family": "RPA", "family_label": "RPA automation", "source_file": "rpa-automation-patterns.json", "severity": "critical", "type": "process_escalation", "mechanism": [ "runtime_detector", "runtime_monitor", "specified" ], "monitor_method": "tier_escalation", "monitor_coverage": "full", "tests": 4, "benchmark_suite": "rpa-governance", "benchmark_scenarios": 20 }, { "id": "RPA-005", "family": "RPA", "family_label": "RPA automation", "source_file": "rpa-automation-patterns.json", "severity": "critical", "type": "data_exfiltration", "mechanism": [ "runtime_detector", "runtime_monitor", "specified" ], "monitor_method": "external_destination", "monitor_coverage": "full", "tests": 3, "benchmark_suite": "rpa-governance", "benchmark_scenarios": 20 }, { "id": "RPA-006", "family": "RPA", "family_label": "RPA automation", "source_file": "rpa-automation-patterns.json", "severity": "medium", "type": "schedule_violation", "mechanism": [ "runtime_monitor", "specified" ], "monitor_method": "time_anomaly", "monitor_coverage": "full", "tests": 0, "benchmark_suite": "rpa-governance", "benchmark_scenarios": 20 }, { "id": "RPA-007", "family": "RPA", "family_label": "RPA automation", "source_file": "rpa-automation-patterns.json", "severity": "high", "type": "configuration_drift", "mechanism": [ "runtime_detector", "runtime_monitor", "specified" ], "monitor_method": "config_drift", "monitor_coverage": "full", "tests": 2, "benchmark_suite": "rpa-governance", "benchmark_scenarios": 20 }, { "id": "RPA-008", "family": "RPA", "family_label": "RPA automation", "source_file": "rpa-automation-patterns.json", "severity": "critical", "type": "lateral_movement", "mechanism": [ "runtime_detector", "runtime_monitor", "specified" ], "monitor_method": "lateral_movement", "monitor_coverage": "full", "tests": 4, "benchmark_suite": "rpa-governance", "benchmark_scenarios": 20 }, { "id": "RPA-009", "family": "RPA", "family_label": "RPA automation", "source_file": "rpa-automation-patterns.json", "severity": "high", "type": "volume_anomaly", "mechanism": [ "runtime_monitor", "specified" ], "monitor_method": "frequency_spike", "monitor_coverage": "full", "tests": 6, "benchmark_suite": "rpa-governance", "benchmark_scenarios": 20 }, { "id": "RPA-010", "family": "RPA", "family_label": "RPA automation", "source_file": "rpa-automation-patterns.json", "severity": "high", "type": "unattended_spawning", "mechanism": [ "runtime_detector", "runtime_monitor", "specified" ], "monitor_method": "unattended_spawning", "monitor_coverage": "full", "tests": 2, "benchmark_suite": "rpa-governance", "benchmark_scenarios": 20 }, { "id": "SC001", "family": "SC", "family_label": "supply chain", "source_file": "supply-chain-patterns.json", "severity": "high", "type": "hook_network_call", "mechanism": [ "expression_published" ], "monitor_method": null, "monitor_coverage": null, "tests": 6, "benchmark_suite": null, "benchmark_scenarios": null }, { "id": "SC002", "family": "SC", "family_label": "supply chain", "source_file": "supply-chain-patterns.json", "severity": "high", "type": "mcp_broad_permission", "mechanism": [ "expression_published" ], "monitor_method": null, "monitor_coverage": null, "tests": 1, "benchmark_suite": null, "benchmark_scenarios": null }, { "id": "SC003", "family": "SC", "family_label": "supply chain", "source_file": "supply-chain-patterns.json", "severity": "critical", "type": "settings_bash_wildcard", "mechanism": [ "expression_published" ], "monitor_method": null, "monitor_coverage": null, "tests": 2, "benchmark_suite": null, "benchmark_scenarios": null }, { "id": "SC004", "family": "SC", "family_label": "supply chain", "source_file": "supply-chain-patterns.json", "severity": "critical", "type": "claude_md_override_attempt", "mechanism": [ "expression_published" ], "monitor_method": null, "monitor_coverage": null, "tests": 0, "benchmark_suite": null, "benchmark_scenarios": null }, { "id": "SC005", "family": "SC", "family_label": "supply chain", "source_file": "supply-chain-patterns.json", "severity": "high", "type": "skill_external_load", "mechanism": [ "expression_published" ], "monitor_method": null, "monitor_coverage": null, "tests": 0, "benchmark_suite": null, "benchmark_scenarios": null }, { "id": "SC006", "family": "SC", "family_label": "supply chain", "source_file": "supply-chain-patterns.json", "severity": "critical", "type": "hook_env_exfil", "mechanism": [ "expression_published" ], "monitor_method": null, "monitor_coverage": null, "tests": 0, "benchmark_suite": null, "benchmark_scenarios": null }, { "id": "SC007", "family": "SC", "family_label": "supply chain", "source_file": "supply-chain-patterns.json", "severity": "critical", "type": "anthropic_base_url_override", "mechanism": [ "expression_published" ], "monitor_method": null, "monitor_coverage": null, "tests": 0, "benchmark_suite": null, "benchmark_scenarios": null }, { "id": "SC008", "family": "SC", "family_label": "supply chain", "source_file": "supply-chain-patterns.json", "severity": "high", "type": "mcp_auto_trust", "mechanism": [ "expression_published" ], "monitor_method": null, "monitor_coverage": null, "tests": 0, "benchmark_suite": null, "benchmark_scenarios": null }, { "id": "SC009", "family": "SC", "family_label": "supply chain", "source_file": "supply-chain-patterns.json", "severity": "medium", "type": "community_skill_unverified_link", "mechanism": [ "expression_published" ], "monitor_method": null, "monitor_coverage": null, "tests": 0, "benchmark_suite": null, "benchmark_scenarios": null }, { "id": "SC010", "family": "SC", "family_label": "supply chain", "source_file": "supply-chain-patterns.json", "severity": "critical", "type": "dangerously_skip_permissions", "mechanism": [ "expression_published" ], "monitor_method": null, "monitor_coverage": null, "tests": 0, "benchmark_suite": null, "benchmark_scenarios": null }, { "id": "SC011", "family": "SC", "family_label": "supply chain", "source_file": "supply-chain-patterns.json", "severity": "medium", "type": "async_hook_side_channel", "mechanism": [ "expression_published" ], "monitor_method": null, "monitor_coverage": null, "tests": 0, "benchmark_suite": null, "benchmark_scenarios": null }, { "id": "SC012", "family": "SC", "family_label": "supply chain", "source_file": "supply-chain-patterns.json", "severity": "high", "type": "agent_persona_injection", "mechanism": [ "expression_published" ], "monitor_method": null, "monitor_coverage": null, "tests": 0, "benchmark_suite": null, "benchmark_scenarios": null }, { "id": "SC013", "family": "SC", "family_label": "supply chain", "source_file": "supply-chain-patterns.json", "severity": "critical", "type": "axios_rat_compromised_version", "mechanism": [ "expression_published" ], "monitor_method": null, "monitor_coverage": null, "tests": 0, "benchmark_suite": null, "benchmark_scenarios": null }, { "id": "SC014", "family": "SC", "family_label": "supply chain", "source_file": "supply-chain-patterns.json", "severity": "critical", "type": "rat_dropper_package", "mechanism": [ "expression_published" ], "monitor_method": null, "monitor_coverage": null, "tests": 0, "benchmark_suite": null, "benchmark_scenarios": null }, { "id": "SC015", "family": "SC", "family_label": "supply chain", "source_file": "supply-chain-patterns.json", "severity": "critical", "type": "c2_beacon_domain", "mechanism": [ "expression_published" ], "monitor_method": null, "monitor_coverage": null, "tests": 0, "benchmark_suite": null, "benchmark_scenarios": null }, { "id": "SC016", "family": "SC", "family_label": "supply chain", "source_file": "supply-chain-patterns.json", "severity": "critical", "type": "compromised_openclaw_package", "mechanism": [ "expression_published" ], "monitor_method": null, "monitor_coverage": null, "tests": 0, "benchmark_suite": null, "benchmark_scenarios": null }, { "id": "SC017", "family": "SC", "family_label": "supply chain", "source_file": "supply-chain-patterns.json", "severity": "high", "type": "c2_high_port_beacon", "mechanism": [ "expression_published" ], "monitor_method": null, "monitor_coverage": null, "tests": 0, "benchmark_suite": null, "benchmark_scenarios": null }, { "id": "SC018", "family": "SC", "family_label": "supply chain", "source_file": "supply-chain-patterns.json", "severity": "high", "type": "caret_range_in_dependency", "mechanism": [ "expression_published" ], "monitor_method": null, "monitor_coverage": null, "tests": 0, "benchmark_suite": null, "benchmark_scenarios": null }, { "id": "SC019", "family": "SC", "family_label": "supply chain", "source_file": "supply-chain-patterns.json", "severity": "medium", "type": "postinstall_script", "mechanism": [ "expression_published" ], "monitor_method": null, "monitor_coverage": null, "tests": 0, "benchmark_suite": null, "benchmark_scenarios": null }, { "id": "SC020", "family": "SC", "family_label": "supply chain", "source_file": "supply-chain-patterns.json", "severity": "critical", "type": "identity_suppression_injection", "mechanism": [ "expression_published" ], "monitor_method": null, "monitor_coverage": null, "tests": 0, "benchmark_suite": null, "benchmark_scenarios": null }, { "id": "SC021", "family": "SC", "family_label": "supply chain", "source_file": "supply-chain-patterns.json", "severity": "high", "type": "typosquatting_detection", "mechanism": [ "expression_published" ], "monitor_method": null, "monitor_coverage": null, "tests": 3, "benchmark_suite": null, "benchmark_scenarios": null }, { "id": "SC022", "family": "SC", "family_label": "supply chain", "source_file": "supply-chain-patterns.json", "severity": "high", "type": "maintainer_takeover_signal", "mechanism": [ "expression_published" ], "monitor_method": null, "monitor_coverage": null, "tests": 0, "benchmark_suite": null, "benchmark_scenarios": null }, { "id": "SC023", "family": "SC", "family_label": "supply chain", "source_file": "supply-chain-patterns.json", "severity": "medium", "type": "native_addon_binary", "mechanism": [ "expression_published" ], "monitor_method": null, "monitor_coverage": null, "tests": 0, "benchmark_suite": null, "benchmark_scenarios": null }, { "id": "SC024", "family": "SC", "family_label": "supply chain", "source_file": "supply-chain-patterns.json", "severity": "high", "type": "obfuscated_payload", "mechanism": [ "expression_published" ], "monitor_method": null, "monitor_coverage": null, "tests": 0, "benchmark_suite": null, "benchmark_scenarios": null }, { "id": "SC025", "family": "SC", "family_label": "supply chain", "source_file": "supply-chain-patterns.json", "severity": "high", "type": "dns_exfiltration", "mechanism": [ "expression_published" ], "monitor_method": null, "monitor_coverage": null, "tests": 0, "benchmark_suite": null, "benchmark_scenarios": null }, { "id": "SC026", "family": "SC", "family_label": "supply chain", "source_file": "supply-chain-patterns.json", "severity": "high", "type": "dependency_confusion", "mechanism": [ "expression_published" ], "monitor_method": null, "monitor_coverage": null, "tests": 3, "benchmark_suite": null, "benchmark_scenarios": null }, { "id": "SC027", "family": "SC", "family_label": "supply chain", "source_file": "supply-chain-patterns.json", "severity": "critical", "type": "supply_chain_dependency_injection", "mechanism": [ "runtime_detector" ], "monitor_method": null, "monitor_coverage": null, "tests": 0, "benchmark_suite": null, "benchmark_scenarios": null } ] }