aisvs

⚕️ the world's first unified, lifecycle-centric regulatory framework specifically designed for autonomous AI agents in medical environments (270+ requirements, 3 risk categories).

AppSec harness resources for threat modeling and attesting AI clients, agents, and LLM applications.

Blast radius modeling framework for agentic systems — 5 axes (action class, chain depth, external reach, reversibility window, identity scope), OSI cross-walk, and standards alignment.

Empirical evidence that OWASP AISVS C9.2 has no accountability axis: an action an AI agent cannot be answerable for reaches human-owned execution only through a false input. By K. Lunina.

Reference implementation of OWASP AISVS C9.2.3, C9.2.4 and C9.2.10: manifest-declared action class, deterministic gate, worst-case chain rule. JSON schema + Python.