# references.yml: the auditthis.ai reference register, the single source of truth for the
# register (PROJECT-BRIEF.md section 4). Licence of this file: CC0 1.0.
#
# FORMAT. This file is written in a strict, simple subset of YAML so that tools/check_register.py
# and tools/render_register.py can read it with the Python standard library alone:
#   - Comment lines (starting with #) appear only in this header block, before the first entry.
#   - The document is a top-level list of mappings. Each entry starts with "- id: <value>" in
#     column 1; every further field of that entry is on its own line, indented 2 spaces, as
#     "key: value".
#   - A value is a plain scalar or a double-quoted string closed on the same line. A double-quoted
#     string may contain the escapes \" and \\ and no others. A plain scalar may not start with a
#     quote, bracket, brace, &, *, !, |, >, %, @ or backtick, and may not contain ": " or " #".
#   - entry_points, when present, is a flow list closed on the same line, "[a, b]", whose items are
#     plain scalars without commas.
#   - No anchors, aliases, tags, block scalars, multi-line scalars, nested mappings, blank lines
#     inside an entry, or comments after the header.
#   - Every value is read as a string. true and false are the only values of
#     maintained_with_participation_of_owner.
#
# SCHEMA (PROJECT-BRIEF.md section 4.7). Required on every entry: id, name, source, kind, tier, role,
# licence, licence_source, verified, maintained_with_participation_of_owner. Required on tier 2 and
# tool entries: trigger. Optional: entry_points, commit_or_version, notes. kind is repository or
# archive, or licensed (supplied by the owner under the publisher's terms; the CSA matrices); DataGrail is the only archive. tier is 0, 1, 2, 3 or tool. verified is YYYY-MM-DD, or
# 2 such dates joined by " and " where the brief records verification across 2 days.
#
# HOW THE BRIEF'S TABLES MAP TO FIELDS. Sources, licences, verification dates and triggers are copied
# from tables 4.1 to 4.5. A licence cell "X (Y)" becomes licence X and licence_source Y, with
# "LICENSE file" written as LICENSE. The brief's tables carry no separate role column for tiers 0, 1
# and 2: role is the first sentence of the "Role and notes" or "Notes" cell and notes is the rest of
# that cell, verbatim. For tier 3, role is the "Supports" cell; for tools, role is the "Produces"
# cell. entry_points and commit_or_version are taken from the notes where the brief records them; the
# notes keep the brief's full wording. maintained_with_participation_of_owner is true only where the
# brief states the owner's participation or maintenance.
- id: aiqt
  name: AIQT Guardrails
  source: https://github.com/jposluns/guardrails
  kind: repository
  tier: 0
  role: Conduct standard for the assistant.
  entry_points: [README.md, aiqt-barebones.md, VERSION]
  licence: Apache 2.0
  licence_source: LICENSE
  verified: 2026-10-30
  commit_or_version: "1.0.5 (VERSION read on main)"
  maintained_with_participation_of_owner: true
  notes: "Entry points observed: README.md, aiqt-barebones.md, VERSION (read 1.0.5 on main). Site aiqt.ai described itself as a preview whose repository does not yet fully match it; enforcement controls were stated as scheduled for release 1.1.0. Also a Tier 2 baseline when the project contains AI assistants or agents. Maintained with the participation of Jeff Posluns."
- id: secureconfig
  name: Secure Config
  source: https://github.com/jposluns/secureconfig
  kind: repository
  tier: 1
  role: "Deployment exposure per service: TLS, human and machine authentication, MFA, access restriction, secrets, inbound and outbound network access, lifecycle."
  entry_points: [README.md, controls-reference.md]
  licence: "CC0; vendored AIQT material Apache 2.0"
  licence_source: site statement
  verified: 2026-10-30
  maintained_with_participation_of_owner: true
  notes: "Entry points observed: README.md (assistant instructions, decision guide, guide index, 11-item verification checklist, all items marked REASONED), controls-reference.md for services without a guide. Site publishes llms.txt and llms-full.txt. Maintained with the participation of Jeff Posluns."
- id: grc-library
  name: GRC Library
  source: https://github.com/jposluns/grc_library
  kind: repository
  tier: 1
  role: "Governance, risk, compliance, privacy, AI governance, supply chain, secure development, resilience."
  entry_points: [README.md, taxonomy.yml, docs/decision-tree.md, docs/adopter-guide.md, docs/template-maturity-self-assessment.md, compliance/matrix-grc-compliance-alignment.md, governance/matrix-cross-framework-alignment.md, ai/README.md, dev-security/guideline-ai-coding-assistant-security.md]
  licence: CC BY-SA 4.0
  licence_source: site statement
  verified: 2026-10-30
  commit_or_version: "2026.10.1754 (site reported)"
  maintained_with_participation_of_owner: true
  notes: "Site reported version 2026.10.1754, 360 documents, 12 domains. Entry points observed: README.md, taxonomy.yml, docs/decision-tree.md, docs/adopter-guide.md, docs/template-maturity-self-assessment.md, compliance/matrix-grc-compliance-alignment.md, governance/matrix-cross-framework-alignment.md, ai/README.md, dev-security/guideline-ai-coding-assistant-security.md. Maintained with the participation of Jeff Posluns."
- id: wgo
  name: Whats.Going.On. (WGO)
  source: https://github.com/wgo-audit/code
  kind: repository
  tier: 1
  role: "Prompt-first audit method starting from a business concern; selects product, technical, operational, security, continuity, and business perspectives."
  licence: MIT
  licence_source: LICENSE
  verified: 2026-10-30
  maintained_with_participation_of_owner: false
  notes: "Used as the scoping method in planning. Third-party."
- id: asvs
  name: OWASP ASVS
  source: https://github.com/OWASP/ASVS
  kind: repository
  tier: 1
  role: "Application-layer security requirements, levelled."
  licence: CC BY-SA 4.0
  licence_source: LICENSE.md
  verified: 2026-10-30
  maintained_with_participation_of_owner: false
  notes: "Applies where application code exists; otherwise recorded NOT APPLICABLE. Web and API oriented. Paired with WSTG for test procedures."
- id: datagrail-privacy-assessment
  name: DataGrail Privacy Assessment skill
  source: https://www.datagrail.io/wp-content/themes/datagrail/assets/downloads/privacy-assessment.zip
  kind: archive
  tier: 2
  trigger: Personal data processed
  role: "Drafts a privacy impact assessment in a 9-section structure, screens for high-risk processing, models inherent and residual risk to individuals."
  licence: "Not read; the archive's own licence terms govern"
  licence_source: not read
  verified: 2026-10-30
  maintained_with_participation_of_owner: false
  notes: "Distributed as an archive from datagrail.io, not as a repository; no repository was found under the DataGrail GitHub organization. Published by a commercial vendor. Third-party. Open decision 9.6."
- id: llm-top-10
  name: "OWASP Top 10 for LLM Applications, including the Agentic Top 10"
  source: https://github.com/OWASP/www-project-top-10-for-large-language-model-applications
  kind: repository
  tier: 2
  trigger: "AI components present; agentic path when agents with tool use are present"
  role: "Vulnerability taxonomy for LLM and agent components."
  licence: CC BY-SA 4.0
  licence_source: LICENSE.md
  verified: 2026-10-30 and 2026-10-31
  maintained_with_participation_of_owner: false
  notes: "The Agentic Top 10 lives in the same repository at initiatives/agent_security_initiative/agentic-top-10. A 2026 edition of the LLM Top 10 was announced by the OWASP GenAI Security Project on 1 Sept 2026; the edition on main was not confirmed. Prompts require the assistant to state the edition assessed."
- id: mitre-atlas
  name: MITRE ATLAS data
  source: https://github.com/mitre-atlas/atlas-data
  kind: repository
  tier: 2
  trigger: AI components present
  role: "Adversary tactics, techniques, and case studies for AI systems, as structured data."
  licence: Apache 2.0
  licence_source: LICENSE
  verified: 2026-10-30
  maintained_with_participation_of_owner: false
  notes: "Adversary view; pairs with the LLM Top 10."
- id: slsa
  name: SLSA
  source: https://github.com/slsa-framework/slsa
  kind: repository
  tier: 2
  trigger: "Artefacts consumed by others, or build integrity bears on the decision"
  role: "Build integrity and provenance levels."
  licence: Community Specification License 1.0
  licence_source: LICENSE.md
  verified: 2026-10-30
  maintained_with_participation_of_owner: false
  notes: "Licence differs from the rest of the register; it is a specification licence, not an open-source or Creative Commons licence."
- id: cyclonedx
  name: CycloneDX specification
  source: https://github.com/CycloneDX/specification
  kind: repository
  tier: 2
  trigger: Third-party dependencies with supply chain bearing on the decision
  role: "SBOM format."
  licence: Apache 2.0
  licence_source: LICENSE
  verified: 2026-10-31
  maintained_with_participation_of_owner: false
  notes: "Treated as 1 item with SCVS."
- id: scvs
  name: OWASP SCVS
  source: https://github.com/OWASP/Software-Component-Verification-Standard
  kind: repository
  tier: 2
  trigger: Same as CycloneDX
  role: "Verification levels for components and SBOM practice."
  licence: CC BY-SA 4.0
  licence_source: LICENSE.txt
  verified: 2026-10-31
  maintained_with_participation_of_owner: false
- id: samm
  name: OWASP SAMM
  source: https://github.com/owaspsamm/core
  kind: repository
  tier: 2
  trigger: Decision concerns the organization
  role: "Software assurance process maturity."
  licence: CC BY-SA 4.0
  licence_source: license.txt
  verified: 2026-10-30
  maintained_with_participation_of_owner: false
  notes: "Requires people and process evidence. Use for software practices; use the GRC Library template for governance maturity."
- id: chaoss-metrics
  name: CHAOSS metrics
  source: https://github.com/chaoss/metrics
  kind: repository
  tier: 2
  trigger: "Due diligence, handover, or sustainability in the decision"
  role: "Project health metrics: contributor concentration, responsiveness, release cadence."
  licence: MIT
  licence_source: LICENSE
  verified: 2026-10-30
  maintained_with_participation_of_owner: false
  notes: "Descriptive, not normative."
- id: mvsp
  name: Minimum Viable Secure Product
  source: https://github.com/vendorsec/mvsp
  kind: repository
  tier: 2
  trigger: Project is or will be a supplier to other organizations
  role: "Short vendor-facing minimum baseline."
  licence: CC0 1.0
  licence_source: LICENSE
  verified: 2026-10-31
  maintained_with_participation_of_owner: false
  notes: "A floor, not a target."
- id: csa-ccm
  name: CSA Cloud Controls Matrix (CCM)
  source: https://cloudsecurityalliance.org/research/cloud-controls-matrix
  kind: licensed
  tier: 2
  trigger: Owner opts into framework alignment at planning Step 0 and supplies the copy
  role: "Cloud security control framework used, at the owner's option, to organize the plan and the report by control domain and identifier."
  licence: "CSA terms; no licence needed for internal use, customization or commercial use needs one (CCM page, read 2026-10-31)"
  licence_source: https://cloudsecurityalliance.org/artifacts/ccm-aicm-licensing-faq
  verified: 2026-10-31
  maintained_with_participation_of_owner: false
  notes: "Supplied by the owner, never fetched by the assistant; the site neither hosts nor mirrors it. Only control identifiers and titles are reproduced, attributed to the Cloud Security Alliance. The GRC Library cites CCM v4.1; the version used is the one the owner supplies. Verification on 2026-10-31 read the CSA page and the licensing FAQ page; the matrix file was not downloaded."
- id: csa-aicm
  name: CSA AI Controls Matrix (AICM)
  source: https://cloudsecurityalliance.org/artifacts/ai-controls-matrix
  kind: licensed
  tier: 2
  trigger: Owner opts into framework alignment and AI components are present
  role: "AI-specific extension of the CCM used, at the owner's option, to organize AI findings by control domain and identifier."
  licence: "CSA terms; see the licensing FAQ (read 2026-10-31)"
  licence_source: https://cloudsecurityalliance.org/artifacts/ccm-aicm-licensing-faq
  verified: 2026-10-31
  maintained_with_participation_of_owner: false
  notes: "Supplied by the owner, never fetched by the assistant. The CSA page read on 2026-10-31 described the AICM as freely available to download with 243 control objectives across 18 domains and mappings to ISO/IEC 42001:2023 and the EU AI Act. Only AI-specific controls sit under the AICM; CCM-base controls stay under the CCM. The GRC Library cites AICM v1.1; the version used is the one the owner supplies. The matrix file was not downloaded."
- id: threat-modeling-playbook
  name: OWASP Threat Modeling Playbook
  source: https://github.com/OWASP/threat-modeling-playbook
  kind: repository
  tier: 2
  trigger: "New system, significant change, or no existing threat model"
  role: "Threat modelling as a process; supplies the adversary and asset view that WGO's business view lacks."
  licence: CC BY-SA 4.0
  licence_source: LICENSE
  verified: 2026-10-31
  maintained_with_participation_of_owner: false
  notes: "A companion repository OWASP/www-project-threat-modeling-playbook also exists (project page)."
- id: clean-language
  name: Clean Language
  source: https://github.com/jposluns/cleanlanguage
  kind: repository
  tier: 2
  trigger: Written artefacts are deliverables or will be relied on
  role: "Prose quality of the project's written artefacts only."
  licence: CC BY-SA 4.0
  licence_source: site statement
  verified: 2026-10-30
  maintained_with_participation_of_owner: true
  notes: "Not a conduct rule for the assistant. Maintained by Jeff Posluns."
- id: diataxis
  name: Diátaxis
  source: https://github.com/evildmp/diataxis-documentation-framework
  kind: repository
  tier: 2
  trigger: Same as Clean Language
  role: "Whether the right kinds of documentation exist."
  licence: CC BY-SA 4.0
  licence_source: LICENSE.rst
  verified: 2026-10-30
  maintained_with_participation_of_owner: false
  notes: "Structure only."
- id: wstg
  name: OWASP Web Security Testing Guide
  source: https://github.com/OWASP/wstg
  kind: repository
  tier: 3
  role: "Test procedures for ASVS requirements."
  licence: CC BY-SA 4.0
  licence_source: LICENSE
  verified: 2026-10-31
  maintained_with_participation_of_owner: false
- id: ai-testing-guide
  name: OWASP AI Testing Guide
  source: https://github.com/OWASP/www-project-ai-testing-guide
  kind: repository
  tier: 3
  role: "Test procedures for LLM Top 10 and ATLAS findings."
  licence: CC BY-SA 4.0
  licence_source: LICENSE.md
  verified: 2026-10-31
  maintained_with_participation_of_owner: false
  notes: "Younger than WSTG; coverage uneven."
- id: cheat-sheet-series
  name: OWASP Cheat Sheet Series
  source: https://github.com/OWASP/CheatSheetSeries
  kind: repository
  tier: 3
  role: "Remediation guidance for Phase 5 and plan remediation sections."
  licence: CC BY-SA 4.0
  licence_source: LICENSE.md
  verified: 2026-10-30
  maintained_with_participation_of_owner: false
  notes: "Never a baseline."
- id: oscal-content
  name: NIST OSCAL content
  source: https://github.com/usnistgov/oscal-content
  kind: repository
  tier: 3
  role: "SP 800-53 catalogues and baselines as machine-readable data; authoritative identifiers when findings are mapped to 800-53."
  licence: US public domain
  licence_source: LICENSE.md
  verified: 2026-10-31
  maintained_with_participation_of_owner: false
  notes: "US-centric; other regimes come via the GRC Library matrices."
- id: scorecard
  name: OpenSSF Scorecard
  source: https://github.com/ossf/scorecard
  kind: repository
  tier: tool
  trigger: Source in a hosted git repository
  role: "Repository hygiene checks: branch protection, pinned dependencies, token permissions, signed releases."
  licence: Apache 2.0
  licence_source: LICENSE
  verified: 2026-10-30
  maintained_with_participation_of_owner: false
- id: gitleaks
  name: Gitleaks
  source: https://github.com/gitleaks/gitleaks
  kind: repository
  tier: tool
  trigger: Source in a hosted git repository
  role: "Secrets in repository history."
  licence: MIT
  licence_source: LICENSE
  verified: 2026-10-31
  maintained_with_participation_of_owner: false
- id: promptfoo
  name: promptfoo
  source: https://github.com/promptfoo/promptfoo
  kind: repository
  tier: tool
  trigger: AI components present
  role: "Prompt, agent, and RAG red teaming."
  licence: MIT
  licence_source: LICENSE
  verified: 2026-10-31
  maintained_with_participation_of_owner: false
- id: garak
  name: garak
  source: https://github.com/NVIDIA/garak
  kind: repository
  tier: tool
  trigger: AI components present
  role: "LLM vulnerability scanning."
  licence: Apache 2.0
  licence_source: LICENSE
  verified: 2026-10-31
  maintained_with_participation_of_owner: false
- id: kube-bench
  name: kube-bench
  source: https://github.com/aquasecurity/kube-bench
  kind: repository
  tier: tool
  trigger: Kubernetes in scope
  role: "Kubernetes configuration against the CIS Kubernetes Benchmark."
  licence: Apache 2.0
  licence_source: LICENSE
  verified: 2026-10-31
  maintained_with_participation_of_owner: false