Issues

• AIVSS v0.8 conformance: method statement and pilot

  documentation
  aveproject/ave#446 · Filter by author chaksaray opened on Nov 4, 2026

• Quality batch for the JUSTIFY records: taxonomy fields with the agentic distinction for 00004, 00005, 00033, 00040, 00047, 00073, 00075

  aveproject/ave#444 · Filter by author chaksaray opened on Nov 4, 2026

• Ship the SARIF taxonomy as a verified catalog release asset

  aveproject/ave#442 · Filter by author chaksaray opened on Nov 4, 2026

• Quality batch 7: taxonomy fields for 00077, 00078, 00079, 00080

  aveproject/ave#438 · Filter by author chaksaray opened on Nov 3, 2026

• Conform AVE scoring to OWASP AIVSS v0.8: schema 2.0.0 and a re-score of all 89 records

  enhancement
  aveproject/ave#399 · Filter by author chaksaray opened on Oct 30, 2026

• SECURITY.md: scope it to the AVE project, not one implementer

  documentation
  aveproject/ave#397 · Filter by author chaksaray opened on Oct 30, 2026

• validate_records.py: check severity against the score's band

  documentation
  aveproject/ave#396 · Filter by author chaksaray opened on Oct 30, 2026

• Scoring: AVE's formula is not the one in OWASP AIVSS v0.8; decide whether to conform or to say so

  documentation
  aveproject/ave#395 · Filter by author chaksaray opened on Oct 30, 2026

• Enforce that revisions entries are never rewritten or removed, against the base commit

  aveproject/ave#333 · Filter by author chaksaray opened on Oct 18, 2026

• Crosswalk pilot: AVE → OWASP GenAI Crosswalk (Agentic Top 10), PR open, awaiting review

  blocked-external
  aveproject/ave#240 · Filter by author chaksaray opened on Aug 30, 2026

• [SCHEMA] Add telemetry to evidence_basis_engines

  enhancement
  aveproject/ave#221 · Filter by author narko4u opened on Aug 28, 2026 · v1.4.0
  8

• Should check_confidence_signal.py read verification_basis where present?

  design
  aveproject/ave#219 · Filter by author chaksaray opened on Aug 27, 2026
  16

• Schema 2.1.0: require the framework keys, with verified pins

  governance
  aveproject/ave#178 · Filter by author chaksaray opened on Aug 14, 2026 · v2.1.0
  1

• Crosswalk staleness audit: zero files fully clean, three questions for source_commit sequencing

  aveproject/ave#160 · Filter by author chaksaray opened on Aug 9, 2026
  2

• v1.2.0 roadmap

  governance
  aveproject/ave#105 · Filter by author chaksaray opened on Jul 31, 2026 · v1.4.0

• Schema 1.3.0: implement the deprecation policy fields

  enhancement
  aveproject/ave#104 · Filter by author chaksaray opened on Jul 31, 2026 · v1.4.0
  1

• v1.2.0: add owasp_ast schema field

  enhancement
  aveproject/ave#103 · Filter by author chaksaray opened on Jul 31, 2026 · v1.4.0

• Crosswalk contribution: mapping an execution-evidence predicate onto AVE's evidence fields

  blocked-external
  aveproject/ave#94 · Filter by author astrogilda opened on Jul 28, 2026
  22

• Define an explicit record abstraction policy: class vs. variant (credit: endor_sarah, Endor Labs)

  enhancement
  aveproject/ave#72 · Filter by author chaksaray opened on Jul 23, 2026