{ "action_maps": [ { "label": "delete_after", "mappings": [ { "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)", "confidence": "inferred", "fw": "NIST SP 800-53r5", "id": "CM-3", "name": "Configuration Change Control", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)", "confidence": "inferred", "fw": "NIST SP 800-53r5", "id": "CM-5", "name": "Access Restrictions for Change", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)", "confidence": "inferred", "fw": "OWASP LLM Top 10 (2025)", "id": "LLM06", "name": "Excessive Agency", "provenance": "INFERRED" }, { "basis": "a destructive change during a freeze maps to data destruction", "confidence": "advisory", "fw": "MITRE ATT&CK", "id": "T1485", "name": "Data Destruction", "provenance": "EXTRACTED" } ], "matched_via": "heuristic", "subject_id": "fn_delete_after" }, { "label": "delete_project", "mappings": [ { "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)", "confidence": "inferred", "fw": "NIST SP 800-53r5", "id": "CM-3", "name": "Configuration Change Control", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)", "confidence": "inferred", "fw": "NIST SP 800-53r5", "id": "CM-5", "name": "Access Restrictions for Change", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)", "confidence": "inferred", "fw": "OWASP LLM Top 10 (2025)", "id": "LLM06", "name": "Excessive Agency", "provenance": "INFERRED" }, { "basis": "a destructive change during a freeze maps to data destruction", "confidence": "advisory", "fw": "MITRE ATT&CK", "id": "T1485", "name": "Data Destruction", "provenance": "EXTRACTED" } ], "matched_via": "heuristic", "subject_id": "fn_delete_project" }, { "label": "rollback", "mappings": [], "matched_via": "none", "subject_id": "fn_rollback" }, { "label": "run", "mappings": [ { "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text", "confidence": "ambiguous", "fw": "OWASP LLM Top 10 (2025)", "id": "LLM06", "name": "Excessive Agency", "provenance": "AMBIGUOUS" } ], "matched_via": "heuristic", "subject_id": "fn_run" }, { "label": "run_command", "mappings": [ { "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text", "confidence": "ambiguous", "fw": "OWASP LLM Top 10 (2025)", "id": "LLM06", "name": "Excessive Agency", "provenance": "AMBIGUOUS" } ], "matched_via": "heuristic", "subject_id": "fn_run_command" }, { "label": "run_migrations", "mappings": [ { "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text", "confidence": "ambiguous", "fw": "OWASP LLM Top 10 (2025)", "id": "LLM06", "name": "Excessive Agency", "provenance": "AMBIGUOUS" } ], "matched_via": "heuristic", "subject_id": "fn_run_migrations" }, { "label": "run_migrations_offline", "mappings": [ { "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text", "confidence": "ambiguous", "fw": "OWASP LLM Top 10 (2025)", "id": "LLM06", "name": "Excessive Agency", "provenance": "AMBIGUOUS" } ], "matched_via": "heuristic", "subject_id": "fn_run_migrations_offline" }, { "label": "run_migrations_online", "mappings": [ { "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text", "confidence": "ambiguous", "fw": "OWASP LLM Top 10 (2025)", "id": "LLM06", "name": "Excessive Agency", "provenance": "AMBIGUOUS" } ], "matched_via": "heuristic", "subject_id": "fn_run_migrations_online" }, { "label": "run_project", "mappings": [ { "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text", "confidence": "ambiguous", "fw": "OWASP LLM Top 10 (2025)", "id": "LLM06", "name": "Excessive Agency", "provenance": "AMBIGUOUS" } ], "matched_via": "heuristic", "subject_id": "fn_run_project" }, { "label": "run_pythagora", "mappings": [ { "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text", "confidence": "ambiguous", "fw": "OWASP LLM Top 10 (2025)", "id": "LLM06", "name": "Excessive Agency", "provenance": "AMBIGUOUS" } ], "matched_via": "heuristic", "subject_id": "fn_run_pythagora" }, { "label": "run_pythagora_session", "mappings": [ { "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text", "confidence": "ambiguous", "fw": "OWASP LLM Top 10 (2025)", "id": "LLM06", "name": "Excessive Agency", "provenance": "AMBIGUOUS" } ], "matched_via": "heuristic", "subject_id": "fn_run_pythagora_session" }, { "label": "send", "mappings": [ { "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Blocking export to an out-of-scope endpoint is information-flow enforcement.)", "confidence": "inferred", "fw": "NIST SP 800-53r5", "id": "AC-4", "name": "Information Flow Enforcement", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Preventing data leaving the controlled boundary is boundary protection.)", "confidence": "inferred", "fw": "NIST SP 800-53r5", "id": "SC-7", "name": "Boundary Protection", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Uncontrolled egress of regulated data is a data-governance failure.)", "confidence": "inferred", "fw": "EU AI Act", "id": "Art 10", "name": "Data and data governance", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Egress of regulated records is sensitive-information disclosure.)", "confidence": "inferred", "fw": "OWASP LLM Top 10 (2025)", "id": "LLM02", "name": "Sensitive Information Disclosure", "provenance": "INFERRED" }, { "basis": "Data leaving to an external domain maps to the Exfiltration tactic; confirm the specific technique with an analyst.", "confidence": "advisory", "fw": "MITRE ATT&CK", "id": "TA0010", "name": "Exfiltration", "provenance": "EXTRACTED" }, { "basis": "uncontrolled egress of regulated data maps to exfiltration", "confidence": "advisory", "fw": "MITRE ATT&CK", "id": "T1048", "name": "Exfiltration Over Alternative Protocol", "provenance": "EXTRACTED" } ], "matched_via": "heuristic", "subject_id": "fn_send" }, { "label": "send_app_finished", "mappings": [ { "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Blocking export to an out-of-scope endpoint is information-flow enforcement.)", "confidence": "inferred", "fw": "NIST SP 800-53r5", "id": "AC-4", "name": "Information Flow Enforcement", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Preventing data leaving the controlled boundary is boundary protection.)", "confidence": "inferred", "fw": "NIST SP 800-53r5", "id": "SC-7", "name": "Boundary Protection", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Uncontrolled egress of regulated data is a data-governance failure.)", "confidence": "inferred", "fw": "EU AI Act", "id": "Art 10", "name": "Data and data governance", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Egress of regulated records is sensitive-information disclosure.)", "confidence": "inferred", "fw": "OWASP LLM Top 10 (2025)", "id": "LLM02", "name": "Sensitive Information Disclosure", "provenance": "INFERRED" }, { "basis": "Data leaving to an external domain maps to the Exfiltration tactic; confirm the specific technique with an analyst.", "confidence": "advisory", "fw": "MITRE ATT&CK", "id": "TA0010", "name": "Exfiltration", "provenance": "EXTRACTED" }, { "basis": "uncontrolled egress of regulated data maps to exfiltration", "confidence": "advisory", "fw": "MITRE ATT&CK", "id": "T1048", "name": "Exfiltration Over Alternative Protocol", "provenance": "EXTRACTED" } ], "matched_via": "heuristic", "subject_id": "fn_send_app_finished" }, { "label": "send_app_link", "mappings": [ { "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Blocking export to an out-of-scope endpoint is information-flow enforcement.)", "confidence": "inferred", "fw": "NIST SP 800-53r5", "id": "AC-4", "name": "Information Flow Enforcement", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Preventing data leaving the controlled boundary is boundary protection.)", "confidence": "inferred", "fw": "NIST SP 800-53r5", "id": "SC-7", "name": "Boundary Protection", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Uncontrolled egress of regulated data is a data-governance failure.)", "confidence": "inferred", "fw": "EU AI Act", "id": "Art 10", "name": "Data and data governance", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Egress of regulated records is sensitive-information disclosure.)", "confidence": "inferred", "fw": "OWASP LLM Top 10 (2025)", "id": "LLM02", "name": "Sensitive Information Disclosure", "provenance": "INFERRED" }, { "basis": "Data leaving to an external domain maps to the Exfiltration tactic; confirm the specific technique with an analyst.", "confidence": "advisory", "fw": "MITRE ATT&CK", "id": "TA0010", "name": "Exfiltration", "provenance": "EXTRACTED" }, { "basis": "uncontrolled egress of regulated data maps to exfiltration", "confidence": "advisory", "fw": "MITRE ATT&CK", "id": "T1048", "name": "Exfiltration Over Alternative Protocol", "provenance": "EXTRACTED" } ], "matched_via": "heuristic", "subject_id": "fn_send_app_link" }, { "label": "send_back_logs", "mappings": [ { "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Blocking export to an out-of-scope endpoint is information-flow enforcement.)", "confidence": "inferred", "fw": "NIST SP 800-53r5", "id": "AC-4", "name": "Information Flow Enforcement", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Preventing data leaving the controlled boundary is boundary protection.)", "confidence": "inferred", "fw": "NIST SP 800-53r5", "id": "SC-7", "name": "Boundary Protection", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Uncontrolled egress of regulated data is a data-governance failure.)", "confidence": "inferred", "fw": "EU AI Act", "id": "Art 10", "name": "Data and data governance", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Egress of regulated records is sensitive-information disclosure.)", "confidence": "inferred", "fw": "OWASP LLM Top 10 (2025)", "id": "LLM02", "name": "Sensitive Information Disclosure", "provenance": "INFERRED" }, { "basis": "Data leaving to an external domain maps to the Exfiltration tactic; confirm the specific technique with an analyst.", "confidence": "advisory", "fw": "MITRE ATT&CK", "id": "TA0010", "name": "Exfiltration", "provenance": "EXTRACTED" }, { "basis": "uncontrolled egress of regulated data maps to exfiltration", "confidence": "advisory", "fw": "MITRE ATT&CK", "id": "T1048", "name": "Exfiltration Over Alternative Protocol", "provenance": "EXTRACTED" } ], "matched_via": "heuristic", "subject_id": "fn_send_back_logs" }, { "label": "send_bug_hunter_status", "mappings": [ { "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Blocking export to an out-of-scope endpoint is information-flow enforcement.)", "confidence": "inferred", "fw": "NIST SP 800-53r5", "id": "AC-4", "name": "Information Flow Enforcement", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Preventing data leaving the controlled boundary is boundary protection.)", "confidence": "inferred", "fw": "NIST SP 800-53r5", "id": "SC-7", "name": "Boundary Protection", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Uncontrolled egress of regulated data is a data-governance failure.)", "confidence": "inferred", "fw": "EU AI Act", "id": "Art 10", "name": "Data and data governance", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Egress of regulated records is sensitive-information disclosure.)", "confidence": "inferred", "fw": "OWASP LLM Top 10 (2025)", "id": "LLM02", "name": "Sensitive Information Disclosure", "provenance": "INFERRED" }, { "basis": "Data leaving to an external domain maps to the Exfiltration tactic; confirm the specific technique with an analyst.", "confidence": "advisory", "fw": "MITRE ATT&CK", "id": "TA0010", "name": "Exfiltration", "provenance": "EXTRACTED" }, { "basis": "uncontrolled egress of regulated data maps to exfiltration", "confidence": "advisory", "fw": "MITRE ATT&CK", "id": "T1048", "name": "Exfiltration Over Alternative Protocol", "provenance": "EXTRACTED" } ], "matched_via": "heuristic", "subject_id": "fn_send_bug_hunter_status" }, { "label": "send_congratulations", "mappings": [ { "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Blocking export to an out-of-scope endpoint is information-flow enforcement.)", "confidence": "inferred", "fw": "NIST SP 800-53r5", "id": "AC-4", "name": "Information Flow Enforcement", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Preventing data leaving the controlled boundary is boundary protection.)", "confidence": "inferred", "fw": "NIST SP 800-53r5", "id": "SC-7", "name": "Boundary Protection", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Uncontrolled egress of regulated data is a data-governance failure.)", "confidence": "inferred", "fw": "EU AI Act", "id": "Art 10", "name": "Data and data governance", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Egress of regulated records is sensitive-information disclosure.)", "confidence": "inferred", "fw": "OWASP LLM Top 10 (2025)", "id": "LLM02", "name": "Sensitive Information Disclosure", "provenance": "INFERRED" }, { "basis": "Data leaving to an external domain maps to the Exfiltration tactic; confirm the specific technique with an analyst.", "confidence": "advisory", "fw": "MITRE ATT&CK", "id": "TA0010", "name": "Exfiltration", "provenance": "EXTRACTED" }, { "basis": "uncontrolled egress of regulated data maps to exfiltration", "confidence": "advisory", "fw": "MITRE ATT&CK", "id": "T1048", "name": "Exfiltration Over Alternative Protocol", "provenance": "EXTRACTED" } ], "matched_via": "heuristic", "subject_id": "fn_send_congratulations" }, { "label": "send_data_about_logs", "mappings": [ { "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Blocking export to an out-of-scope endpoint is information-flow enforcement.)", "confidence": "inferred", "fw": "NIST SP 800-53r5", "id": "AC-4", "name": "Information Flow Enforcement", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Preventing data leaving the controlled boundary is boundary protection.)", "confidence": "inferred", "fw": "NIST SP 800-53r5", "id": "SC-7", "name": "Boundary Protection", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Uncontrolled egress of regulated data is a data-governance failure.)", "confidence": "inferred", "fw": "EU AI Act", "id": "Art 10", "name": "Data and data governance", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Egress of regulated records is sensitive-information disclosure.)", "confidence": "inferred", "fw": "OWASP LLM Top 10 (2025)", "id": "LLM02", "name": "Sensitive Information Disclosure", "provenance": "INFERRED" }, { "basis": "Data leaving to an external domain maps to the Exfiltration tactic; confirm the specific technique with an analyst.", "confidence": "advisory", "fw": "MITRE ATT&CK", "id": "TA0010", "name": "Exfiltration", "provenance": "EXTRACTED" }, { "basis": "uncontrolled egress of regulated data maps to exfiltration", "confidence": "advisory", "fw": "MITRE ATT&CK", "id": "T1048", "name": "Exfiltration Over Alternative Protocol", "provenance": "EXTRACTED" } ], "matched_via": "heuristic", "subject_id": "fn_send_data_about_logs" }, { "label": "send_epics_and_tasks", "mappings": [ { "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Blocking export to an out-of-scope endpoint is information-flow enforcement.)", "confidence": "inferred", "fw": "NIST SP 800-53r5", "id": "AC-4", "name": "Information Flow Enforcement", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Preventing data leaving the controlled boundary is boundary protection.)", "confidence": "inferred", "fw": "NIST SP 800-53r5", "id": "SC-7", "name": "Boundary Protection", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Uncontrolled egress of regulated data is a data-governance failure.)", "confidence": "inferred", "fw": "EU AI Act", "id": "Art 10", "name": "Data and data governance", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Egress of regulated records is sensitive-information disclosure.)", "confidence": "inferred", "fw": "OWASP LLM Top 10 (2025)", "id": "LLM02", "name": "Sensitive Information Disclosure", "provenance": "INFERRED" }, { "basis": "Data leaving to an external domain maps to the Exfiltration tactic; confirm the specific technique with an analyst.", "confidence": "advisory", "fw": "MITRE ATT&CK", "id": "TA0010", "name": "Exfiltration", "provenance": "EXTRACTED" }, { "basis": "uncontrolled egress of regulated data maps to exfiltration", "confidence": "advisory", "fw": "MITRE ATT&CK", "id": "T1048", "name": "Exfiltration Over Alternative Protocol", "provenance": "EXTRACTED" } ], "matched_via": "heuristic", "subject_id": "fn_send_epics_and_tasks" }, { "label": "send_error", "mappings": [ { "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Blocking export to an out-of-scope endpoint is information-flow enforcement.)", "confidence": "inferred", "fw": "NIST SP 800-53r5", "id": "AC-4", "name": "Information Flow Enforcement", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Preventing data leaving the controlled boundary is boundary protection.)", "confidence": "inferred", "fw": "NIST SP 800-53r5", "id": "SC-7", "name": "Boundary Protection", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Uncontrolled egress of regulated data is a data-governance failure.)", "confidence": "inferred", "fw": "EU AI Act", "id": "Art 10", "name": "Data and data governance", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Egress of regulated records is sensitive-information disclosure.)", "confidence": "inferred", "fw": "OWASP LLM Top 10 (2025)", "id": "LLM02", "name": "Sensitive Information Disclosure", "provenance": "INFERRED" }, { "basis": "Data leaving to an external domain maps to the Exfiltration tactic; confirm the specific technique with an analyst.", "confidence": "advisory", "fw": "MITRE ATT&CK", "id": "TA0010", "name": "Exfiltration", "provenance": "EXTRACTED" }, { "basis": "uncontrolled egress of regulated data maps to exfiltration", "confidence": "advisory", "fw": "MITRE ATT&CK", "id": "T1048", "name": "Exfiltration Over Alternative Protocol", "provenance": "EXTRACTED" } ], "matched_via": "heuristic", "subject_id": "fn_send_error" }, { "label": "send_fatal_error", "mappings": [ { "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Blocking export to an out-of-scope endpoint is information-flow enforcement.)", "confidence": "inferred", "fw": "NIST SP 800-53r5", "id": "AC-4", "name": "Information Flow Enforcement", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Preventing data leaving the controlled boundary is boundary protection.)", "confidence": "inferred", "fw": "NIST SP 800-53r5", "id": "SC-7", "name": "Boundary Protection", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Uncontrolled egress of regulated data is a data-governance failure.)", "confidence": "inferred", "fw": "EU AI Act", "id": "Art 10", "name": "Data and data governance", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Egress of regulated records is sensitive-information disclosure.)", "confidence": "inferred", "fw": "OWASP LLM Top 10 (2025)", "id": "LLM02", "name": "Sensitive Information Disclosure", "provenance": "INFERRED" }, { "basis": "Data leaving to an external domain maps to the Exfiltration tactic; confirm the specific technique with an analyst.", "confidence": "advisory", "fw": "MITRE ATT&CK", "id": "TA0010", "name": "Exfiltration", "provenance": "EXTRACTED" }, { "basis": "uncontrolled egress of regulated data maps to exfiltration", "confidence": "advisory", "fw": "MITRE ATT&CK", "id": "T1048", "name": "Exfiltration Over Alternative Protocol", "provenance": "EXTRACTED" } ], "matched_via": "heuristic", "subject_id": "fn_send_fatal_error" }, { "label": "send_feature_finished", "mappings": [ { "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Blocking export to an out-of-scope endpoint is information-flow enforcement.)", "confidence": "inferred", "fw": "NIST SP 800-53r5", "id": "AC-4", "name": "Information Flow Enforcement", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Preventing data leaving the controlled boundary is boundary protection.)", "confidence": "inferred", "fw": "NIST SP 800-53r5", "id": "SC-7", "name": "Boundary Protection", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Uncontrolled egress of regulated data is a data-governance failure.)", "confidence": "inferred", "fw": "EU AI Act", "id": "Art 10", "name": "Data and data governance", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Egress of regulated records is sensitive-information disclosure.)", "confidence": "inferred", "fw": "OWASP LLM Top 10 (2025)", "id": "LLM02", "name": "Sensitive Information Disclosure", "provenance": "INFERRED" }, { "basis": "Data leaving to an external domain maps to the Exfiltration tactic; confirm the specific technique with an analyst.", "confidence": "advisory", "fw": "MITRE ATT&CK", "id": "TA0010", "name": "Exfiltration", "provenance": "EXTRACTED" }, { "basis": "uncontrolled egress of regulated data maps to exfiltration", "confidence": "advisory", "fw": "MITRE ATT&CK", "id": "T1048", "name": "Exfiltration Over Alternative Protocol", "provenance": "EXTRACTED" } ], "matched_via": "heuristic", "subject_id": "fn_send_feature_finished" }, { "label": "send_features_list", "mappings": [ { "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Blocking export to an out-of-scope endpoint is information-flow enforcement.)", "confidence": "inferred", "fw": "NIST SP 800-53r5", "id": "AC-4", "name": "Information Flow Enforcement", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Preventing data leaving the controlled boundary is boundary protection.)", "confidence": "inferred", "fw": "NIST SP 800-53r5", "id": "SC-7", "name": "Boundary Protection", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Uncontrolled egress of regulated data is a data-governance failure.)", "confidence": "inferred", "fw": "EU AI Act", "id": "Art 10", "name": "Data and data governance", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Egress of regulated records is sensitive-information disclosure.)", "confidence": "inferred", "fw": "OWASP LLM Top 10 (2025)", "id": "LLM02", "name": "Sensitive Information Disclosure", "provenance": "INFERRED" }, { "basis": "Data leaving to an external domain maps to the Exfiltration tactic; confirm the specific technique with an analyst.", "confidence": "advisory", "fw": "MITRE ATT&CK", "id": "TA0010", "name": "Exfiltration", "provenance": "EXTRACTED" }, { "basis": "uncontrolled egress of regulated data maps to exfiltration", "confidence": "advisory", "fw": "MITRE ATT&CK", "id": "T1048", "name": "Exfiltration Over Alternative Protocol", "provenance": "EXTRACTED" } ], "matched_via": "heuristic", "subject_id": "fn_send_features_list" }, { "label": "send_file_status", "mappings": [ { "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Blocking export to an out-of-scope endpoint is information-flow enforcement.)", "confidence": "inferred", "fw": "NIST SP 800-53r5", "id": "AC-4", "name": "Information Flow Enforcement", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Preventing data leaving the controlled boundary is boundary protection.)", "confidence": "inferred", "fw": "NIST SP 800-53r5", "id": "SC-7", "name": "Boundary Protection", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Uncontrolled egress of regulated data is a data-governance failure.)", "confidence": "inferred", "fw": "EU AI Act", "id": "Art 10", "name": "Data and data governance", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Egress of regulated records is sensitive-information disclosure.)", "confidence": "inferred", "fw": "OWASP LLM Top 10 (2025)", "id": "LLM02", "name": "Sensitive Information Disclosure", "provenance": "INFERRED" }, { "basis": "Data leaving to an external domain maps to the Exfiltration tactic; confirm the specific technique with an analyst.", "confidence": "advisory", "fw": "MITRE ATT&CK", "id": "TA0010", "name": "Exfiltration", "provenance": "EXTRACTED" }, { "basis": "uncontrolled egress of regulated data maps to exfiltration", "confidence": "advisory", "fw": "MITRE ATT&CK", "id": "T1048", "name": "Exfiltration Over Alternative Protocol", "provenance": "EXTRACTED" } ], "matched_via": "heuristic", "subject_id": "fn_send_file_status" }, { "label": "send_front_logs_headers", "mappings": [ { "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Blocking export to an out-of-scope endpoint is information-flow enforcement.)", "confidence": "inferred", "fw": "NIST SP 800-53r5", "id": "AC-4", "name": "Information Flow Enforcement", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Preventing data leaving the controlled boundary is boundary protection.)", "confidence": "inferred", "fw": "NIST SP 800-53r5", "id": "SC-7", "name": "Boundary Protection", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Uncontrolled egress of regulated data is a data-governance failure.)", "confidence": "inferred", "fw": "EU AI Act", "id": "Art 10", "name": "Data and data governance", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Egress of regulated records is sensitive-information disclosure.)", "confidence": "inferred", "fw": "OWASP LLM Top 10 (2025)", "id": "LLM02", "name": "Sensitive Information Disclosure", "provenance": "INFERRED" }, { "basis": "Data leaving to an external domain maps to the Exfiltration tactic; confirm the specific technique with an analyst.", "confidence": "advisory", "fw": "MITRE ATT&CK", "id": "TA0010", "name": "Exfiltration", "provenance": "EXTRACTED" }, { "basis": "uncontrolled egress of regulated data maps to exfiltration", "confidence": "advisory", "fw": "MITRE ATT&CK", "id": "T1048", "name": "Exfiltration Over Alternative Protocol", "provenance": "EXTRACTED" } ], "matched_via": "heuristic", "subject_id": "fn_send_front_logs_headers" }, { "label": "send_key_expired", "mappings": [ { "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Blocking export to an out-of-scope endpoint is information-flow enforcement.)", "confidence": "inferred", "fw": "NIST SP 800-53r5", "id": "AC-4", "name": "Information Flow Enforcement", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Preventing data leaving the controlled boundary is boundary protection.)", "confidence": "inferred", "fw": "NIST SP 800-53r5", "id": "SC-7", "name": "Boundary Protection", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Uncontrolled egress of regulated data is a data-governance failure.)", "confidence": "inferred", "fw": "EU AI Act", "id": "Art 10", "name": "Data and data governance", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Egress of regulated records is sensitive-information disclosure.)", "confidence": "inferred", "fw": "OWASP LLM Top 10 (2025)", "id": "LLM02", "name": "Sensitive Information Disclosure", "provenance": "INFERRED" }, { "basis": "Data leaving to an external domain maps to the Exfiltration tactic; confirm the specific technique with an analyst.", "confidence": "advisory", "fw": "MITRE ATT&CK", "id": "TA0010", "name": "Exfiltration", "provenance": "EXTRACTED" }, { "basis": "uncontrolled egress of regulated data maps to exfiltration", "confidence": "advisory", "fw": "MITRE ATT&CK", "id": "T1048", "name": "Exfiltration Over Alternative Protocol", "provenance": "EXTRACTED" } ], "matched_via": "heuristic", "subject_id": "fn_send_key_expired" }, { "label": "send_message", "mappings": [ { "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Blocking export to an out-of-scope endpoint is information-flow enforcement.)", "confidence": "inferred", "fw": "NIST SP 800-53r5", "id": "AC-4", "name": "Information Flow Enforcement", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Preventing data leaving the controlled boundary is boundary protection.)", "confidence": "inferred", "fw": "NIST SP 800-53r5", "id": "SC-7", "name": "Boundary Protection", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Uncontrolled egress of regulated data is a data-governance failure.)", "confidence": "inferred", "fw": "EU AI Act", "id": "Art 10", "name": "Data and data governance", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Egress of regulated records is sensitive-information disclosure.)", "confidence": "inferred", "fw": "OWASP LLM Top 10 (2025)", "id": "LLM02", "name": "Sensitive Information Disclosure", "provenance": "INFERRED" }, { "basis": "Data leaving to an external domain maps to the Exfiltration tactic; confirm the specific technique with an analyst.", "confidence": "advisory", "fw": "MITRE ATT&CK", "id": "TA0010", "name": "Exfiltration", "provenance": "EXTRACTED" }, { "basis": "uncontrolled egress of regulated data maps to exfiltration", "confidence": "advisory", "fw": "MITRE ATT&CK", "id": "T1048", "name": "Exfiltration Over Alternative Protocol", "provenance": "EXTRACTED" } ], "matched_via": "heuristic", "subject_id": "fn_send_message" }, { "label": "send_modified_files", "mappings": [ { "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Blocking export to an out-of-scope endpoint is information-flow enforcement.)", "confidence": "inferred", "fw": "NIST SP 800-53r5", "id": "AC-4", "name": "Information Flow Enforcement", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Preventing data leaving the controlled boundary is boundary protection.)", "confidence": "inferred", "fw": "NIST SP 800-53r5", "id": "SC-7", "name": "Boundary Protection", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Uncontrolled egress of regulated data is a data-governance failure.)", "confidence": "inferred", "fw": "EU AI Act", "id": "Art 10", "name": "Data and data governance", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Egress of regulated records is sensitive-information disclosure.)", "confidence": "inferred", "fw": "OWASP LLM Top 10 (2025)", "id": "LLM02", "name": "Sensitive Information Disclosure", "provenance": "INFERRED" }, { "basis": "Data leaving to an external domain maps to the Exfiltration tactic; confirm the specific technique with an analyst.", "confidence": "advisory", "fw": "MITRE ATT&CK", "id": "TA0010", "name": "Exfiltration", "provenance": "EXTRACTED" }, { "basis": "uncontrolled egress of regulated data maps to exfiltration", "confidence": "advisory", "fw": "MITRE ATT&CK", "id": "T1048", "name": "Exfiltration Over Alternative Protocol", "provenance": "EXTRACTED" } ], "matched_via": "heuristic", "subject_id": "fn_send_modified_files" }, { "label": "send_project_description", "mappings": [ { "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Blocking export to an out-of-scope endpoint is information-flow enforcement.)", "confidence": "inferred", "fw": "NIST SP 800-53r5", "id": "AC-4", "name": "Information Flow Enforcement", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Preventing data leaving the controlled boundary is boundary protection.)", "confidence": "inferred", "fw": "NIST SP 800-53r5", "id": "SC-7", "name": "Boundary Protection", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Uncontrolled egress of regulated data is a data-governance failure.)", "confidence": "inferred", "fw": "EU AI Act", "id": "Art 10", "name": "Data and data governance", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Egress of regulated records is sensitive-information disclosure.)", "confidence": "inferred", "fw": "OWASP LLM Top 10 (2025)", "id": "LLM02", "name": "Sensitive Information Disclosure", "provenance": "INFERRED" }, { "basis": "Data leaving to an external domain maps to the Exfiltration tactic; confirm the specific technique with an analyst.", "confidence": "advisory", "fw": "MITRE ATT&CK", "id": "TA0010", "name": "Exfiltration", "provenance": "EXTRACTED" }, { "basis": "uncontrolled egress of regulated data maps to exfiltration", "confidence": "advisory", "fw": "MITRE ATT&CK", "id": "T1048", "name": "Exfiltration Over Alternative Protocol", "provenance": "EXTRACTED" } ], "matched_via": "heuristic", "subject_id": "fn_send_project_description" }, { "label": "send_project_info", "mappings": [ { "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Blocking export to an out-of-scope endpoint is information-flow enforcement.)", "confidence": "inferred", "fw": "NIST SP 800-53r5", "id": "AC-4", "name": "Information Flow Enforcement", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Preventing data leaving the controlled boundary is boundary protection.)", "confidence": "inferred", "fw": "NIST SP 800-53r5", "id": "SC-7", "name": "Boundary Protection", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Uncontrolled egress of regulated data is a data-governance failure.)", "confidence": "inferred", "fw": "EU AI Act", "id": "Art 10", "name": "Data and data governance", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Egress of regulated records is sensitive-information disclosure.)", "confidence": "inferred", "fw": "OWASP LLM Top 10 (2025)", "id": "LLM02", "name": "Sensitive Information Disclosure", "provenance": "INFERRED" }, { "basis": "Data leaving to an external domain maps to the Exfiltration tactic; confirm the specific technique with an analyst.", "confidence": "advisory", "fw": "MITRE ATT&CK", "id": "TA0010", "name": "Exfiltration", "provenance": "EXTRACTED" }, { "basis": "uncontrolled egress of regulated data maps to exfiltration", "confidence": "advisory", "fw": "MITRE ATT&CK", "id": "T1048", "name": "Exfiltration Over Alternative Protocol", "provenance": "EXTRACTED" } ], "matched_via": "heuristic", "subject_id": "fn_send_project_info" }, { "label": "send_project_stage", "mappings": [ { "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Blocking export to an out-of-scope endpoint is information-flow enforcement.)", "confidence": "inferred", "fw": "NIST SP 800-53r5", "id": "AC-4", "name": "Information Flow Enforcement", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Preventing data leaving the controlled boundary is boundary protection.)", "confidence": "inferred", "fw": "NIST SP 800-53r5", "id": "SC-7", "name": "Boundary Protection", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Uncontrolled egress of regulated data is a data-governance failure.)", "confidence": "inferred", "fw": "EU AI Act", "id": "Art 10", "name": "Data and data governance", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Egress of regulated records is sensitive-information disclosure.)", "confidence": "inferred", "fw": "OWASP LLM Top 10 (2025)", "id": "LLM02", "name": "Sensitive Information Disclosure", "provenance": "INFERRED" }, { "basis": "Data leaving to an external domain maps to the Exfiltration tactic; confirm the specific technique with an analyst.", "confidence": "advisory", "fw": "MITRE ATT&CK", "id": "TA0010", "name": "Exfiltration", "provenance": "EXTRACTED" }, { "basis": "uncontrolled egress of regulated data maps to exfiltration", "confidence": "advisory", "fw": "MITRE ATT&CK", "id": "T1048", "name": "Exfiltration Over Alternative Protocol", "provenance": "EXTRACTED" } ], "matched_via": "heuristic", "subject_id": "fn_send_project_stage" }, { "label": "send_project_stats", "mappings": [ { "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Blocking export to an out-of-scope endpoint is information-flow enforcement.)", "confidence": "inferred", "fw": "NIST SP 800-53r5", "id": "AC-4", "name": "Information Flow Enforcement", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Preventing data leaving the controlled boundary is boundary protection.)", "confidence": "inferred", "fw": "NIST SP 800-53r5", "id": "SC-7", "name": "Boundary Protection", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Uncontrolled egress of regulated data is a data-governance failure.)", "confidence": "inferred", "fw": "EU AI Act", "id": "Art 10", "name": "Data and data governance", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Egress of regulated records is sensitive-information disclosure.)", "confidence": "inferred", "fw": "OWASP LLM Top 10 (2025)", "id": "LLM02", "name": "Sensitive Information Disclosure", "provenance": "INFERRED" }, { "basis": "Data leaving to an external domain maps to the Exfiltration tactic; confirm the specific technique with an analyst.", "confidence": "advisory", "fw": "MITRE ATT&CK", "id": "TA0010", "name": "Exfiltration", "provenance": "EXTRACTED" }, { "basis": "uncontrolled egress of regulated data maps to exfiltration", "confidence": "advisory", "fw": "MITRE ATT&CK", "id": "T1048", "name": "Exfiltration Over Alternative Protocol", "provenance": "EXTRACTED" } ], "matched_via": "heuristic", "subject_id": "fn_send_project_stats" }, { "label": "send_run_command", "mappings": [ { "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Blocking export to an out-of-scope endpoint is information-flow enforcement.)", "confidence": "inferred", "fw": "NIST SP 800-53r5", "id": "AC-4", "name": "Information Flow Enforcement", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Preventing data leaving the controlled boundary is boundary protection.)", "confidence": "inferred", "fw": "NIST SP 800-53r5", "id": "SC-7", "name": "Boundary Protection", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Uncontrolled egress of regulated data is a data-governance failure.)", "confidence": "inferred", "fw": "EU AI Act", "id": "Art 10", "name": "Data and data governance", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Egress of regulated records is sensitive-information disclosure.)", "confidence": "inferred", "fw": "OWASP LLM Top 10 (2025)", "id": "LLM02", "name": "Sensitive Information Disclosure", "provenance": "INFERRED" }, { "basis": "Data leaving to an external domain maps to the Exfiltration tactic; confirm the specific technique with an analyst.", "confidence": "advisory", "fw": "MITRE ATT&CK", "id": "TA0010", "name": "Exfiltration", "provenance": "EXTRACTED" }, { "basis": "uncontrolled egress of regulated data maps to exfiltration", "confidence": "advisory", "fw": "MITRE ATT&CK", "id": "T1048", "name": "Exfiltration Over Alternative Protocol", "provenance": "EXTRACTED" } ], "matched_via": "heuristic", "subject_id": "fn_send_run_command" }, { "label": "send_step_progress", "mappings": [ { "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Blocking export to an out-of-scope endpoint is information-flow enforcement.)", "confidence": "inferred", "fw": "NIST SP 800-53r5", "id": "AC-4", "name": "Information Flow Enforcement", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Preventing data leaving the controlled boundary is boundary protection.)", "confidence": "inferred", "fw": "NIST SP 800-53r5", "id": "SC-7", "name": "Boundary Protection", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Uncontrolled egress of regulated data is a data-governance failure.)", "confidence": "inferred", "fw": "EU AI Act", "id": "Art 10", "name": "Data and data governance", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Egress of regulated records is sensitive-information disclosure.)", "confidence": "inferred", "fw": "OWASP LLM Top 10 (2025)", "id": "LLM02", "name": "Sensitive Information Disclosure", "provenance": "INFERRED" }, { "basis": "Data leaving to an external domain maps to the Exfiltration tactic; confirm the specific technique with an analyst.", "confidence": "advisory", "fw": "MITRE ATT&CK", "id": "TA0010", "name": "Exfiltration", "provenance": "EXTRACTED" }, { "basis": "uncontrolled egress of regulated data maps to exfiltration", "confidence": "advisory", "fw": "MITRE ATT&CK", "id": "T1048", "name": "Exfiltration Over Alternative Protocol", "provenance": "EXTRACTED" } ], "matched_via": "heuristic", "subject_id": "fn_send_step_progress" }, { "label": "send_stream_chunk", "mappings": [ { "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Blocking export to an out-of-scope endpoint is information-flow enforcement.)", "confidence": "inferred", "fw": "NIST SP 800-53r5", "id": "AC-4", "name": "Information Flow Enforcement", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Preventing data leaving the controlled boundary is boundary protection.)", "confidence": "inferred", "fw": "NIST SP 800-53r5", "id": "SC-7", "name": "Boundary Protection", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Uncontrolled egress of regulated data is a data-governance failure.)", "confidence": "inferred", "fw": "EU AI Act", "id": "Art 10", "name": "Data and data governance", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Egress of regulated records is sensitive-information disclosure.)", "confidence": "inferred", "fw": "OWASP LLM Top 10 (2025)", "id": "LLM02", "name": "Sensitive Information Disclosure", "provenance": "INFERRED" }, { "basis": "Data leaving to an external domain maps to the Exfiltration tactic; confirm the specific technique with an analyst.", "confidence": "advisory", "fw": "MITRE ATT&CK", "id": "TA0010", "name": "Exfiltration", "provenance": "EXTRACTED" }, { "basis": "uncontrolled egress of regulated data maps to exfiltration", "confidence": "advisory", "fw": "MITRE ATT&CK", "id": "T1048", "name": "Exfiltration Over Alternative Protocol", "provenance": "EXTRACTED" } ], "matched_via": "heuristic", "subject_id": "fn_send_stream_chunk" }, { "label": "send_task_progress", "mappings": [ { "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Blocking export to an out-of-scope endpoint is information-flow enforcement.)", "confidence": "inferred", "fw": "NIST SP 800-53r5", "id": "AC-4", "name": "Information Flow Enforcement", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Preventing data leaving the controlled boundary is boundary protection.)", "confidence": "inferred", "fw": "NIST SP 800-53r5", "id": "SC-7", "name": "Boundary Protection", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Uncontrolled egress of regulated data is a data-governance failure.)", "confidence": "inferred", "fw": "EU AI Act", "id": "Art 10", "name": "Data and data governance", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Egress of regulated records is sensitive-information disclosure.)", "confidence": "inferred", "fw": "OWASP LLM Top 10 (2025)", "id": "LLM02", "name": "Sensitive Information Disclosure", "provenance": "INFERRED" }, { "basis": "Data leaving to an external domain maps to the Exfiltration tactic; confirm the specific technique with an analyst.", "confidence": "advisory", "fw": "MITRE ATT&CK", "id": "TA0010", "name": "Exfiltration", "provenance": "EXTRACTED" }, { "basis": "uncontrolled egress of regulated data maps to exfiltration", "confidence": "advisory", "fw": "MITRE ATT&CK", "id": "T1048", "name": "Exfiltration Over Alternative Protocol", "provenance": "EXTRACTED" } ], "matched_via": "heuristic", "subject_id": "fn_send_task_progress" }, { "label": "send_test_instructions", "mappings": [ { "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Blocking export to an out-of-scope endpoint is information-flow enforcement.)", "confidence": "inferred", "fw": "NIST SP 800-53r5", "id": "AC-4", "name": "Information Flow Enforcement", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Preventing data leaving the controlled boundary is boundary protection.)", "confidence": "inferred", "fw": "NIST SP 800-53r5", "id": "SC-7", "name": "Boundary Protection", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Uncontrolled egress of regulated data is a data-governance failure.)", "confidence": "inferred", "fw": "EU AI Act", "id": "Art 10", "name": "Data and data governance", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Egress of regulated records is sensitive-information disclosure.)", "confidence": "inferred", "fw": "OWASP LLM Top 10 (2025)", "id": "LLM02", "name": "Sensitive Information Disclosure", "provenance": "INFERRED" }, { "basis": "Data leaving to an external domain maps to the Exfiltration tactic; confirm the specific technique with an analyst.", "confidence": "advisory", "fw": "MITRE ATT&CK", "id": "TA0010", "name": "Exfiltration", "provenance": "EXTRACTED" }, { "basis": "uncontrolled egress of regulated data maps to exfiltration", "confidence": "advisory", "fw": "MITRE ATT&CK", "id": "T1048", "name": "Exfiltration Over Alternative Protocol", "provenance": "EXTRACTED" } ], "matched_via": "heuristic", "subject_id": "fn_send_test_instructions" }, { "label": "send_token_expired", "mappings": [ { "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Blocking export to an out-of-scope endpoint is information-flow enforcement.)", "confidence": "inferred", "fw": "NIST SP 800-53r5", "id": "AC-4", "name": "Information Flow Enforcement", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Preventing data leaving the controlled boundary is boundary protection.)", "confidence": "inferred", "fw": "NIST SP 800-53r5", "id": "SC-7", "name": "Boundary Protection", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Uncontrolled egress of regulated data is a data-governance failure.)", "confidence": "inferred", "fw": "EU AI Act", "id": "Art 10", "name": "Data and data governance", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Egress of regulated records is sensitive-information disclosure.)", "confidence": "inferred", "fw": "OWASP LLM Top 10 (2025)", "id": "LLM02", "name": "Sensitive Information Disclosure", "provenance": "INFERRED" }, { "basis": "Data leaving to an external domain maps to the Exfiltration tactic; confirm the specific technique with an analyst.", "confidence": "advisory", "fw": "MITRE ATT&CK", "id": "TA0010", "name": "Exfiltration", "provenance": "EXTRACTED" }, { "basis": "uncontrolled egress of regulated data maps to exfiltration", "confidence": "advisory", "fw": "MITRE ATT&CK", "id": "T1048", "name": "Exfiltration Over Alternative Protocol", "provenance": "EXTRACTED" } ], "matched_via": "heuristic", "subject_id": "fn_send_token_expired" }, { "label": "send_user_input_history", "mappings": [ { "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Blocking export to an out-of-scope endpoint is information-flow enforcement.)", "confidence": "inferred", "fw": "NIST SP 800-53r5", "id": "AC-4", "name": "Information Flow Enforcement", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Preventing data leaving the controlled boundary is boundary protection.)", "confidence": "inferred", "fw": "NIST SP 800-53r5", "id": "SC-7", "name": "Boundary Protection", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Uncontrolled egress of regulated data is a data-governance failure.)", "confidence": "inferred", "fw": "EU AI Act", "id": "Art 10", "name": "Data and data governance", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Egress of regulated records is sensitive-information disclosure.)", "confidence": "inferred", "fw": "OWASP LLM Top 10 (2025)", "id": "LLM02", "name": "Sensitive Information Disclosure", "provenance": "INFERRED" }, { "basis": "Data leaving to an external domain maps to the Exfiltration tactic; confirm the specific technique with an analyst.", "confidence": "advisory", "fw": "MITRE ATT&CK", "id": "TA0010", "name": "Exfiltration", "provenance": "EXTRACTED" }, { "basis": "uncontrolled egress of regulated data maps to exfiltration", "confidence": "advisory", "fw": "MITRE ATT&CK", "id": "T1048", "name": "Exfiltration Over Alternative Protocol", "provenance": "EXTRACTED" } ], "matched_via": "heuristic", "subject_id": "fn_send_user_input_history" }, { "label": "terminate", "mappings": [ { "basis": "inferred from action verb 'terminate'; confirm against published text (asserted basis: An adverse automated decision affecting a person requires human oversight before it is issued.)", "confidence": "inferred", "fw": "EU AI Act", "id": "Art 14", "name": "Human oversight", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'terminate'; confirm against published text (asserted basis: Issuing an adverse decision with no human in the loop is excessive agency.)", "confidence": "inferred", "fw": "OWASP LLM Top 10 (2025)", "id": "LLM06", "name": "Excessive Agency", "provenance": "INFERRED" }, { "basis": "Adverse outcomes are a measured risk requiring a treatment (human review).", "confidence": "advisory", "fw": "NIST AI RMF", "id": "MEASURE", "name": "Measure function", "provenance": "EXTRACTED" }, { "basis": "autonomous execution without oversight maps to command/scripting abuse", "confidence": "advisory", "fw": "MITRE ATT&CK", "id": "T1059", "name": "Command and Scripting Interpreter", "provenance": "EXTRACTED" } ], "matched_via": "heuristic", "subject_id": "fn_terminate" }, { "label": "terminate_process", "mappings": [ { "basis": "inferred from action verb 'terminate'; confirm against published text (asserted basis: An adverse automated decision affecting a person requires human oversight before it is issued.)", "confidence": "inferred", "fw": "EU AI Act", "id": "Art 14", "name": "Human oversight", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'terminate'; confirm against published text (asserted basis: Issuing an adverse decision with no human in the loop is excessive agency.)", "confidence": "inferred", "fw": "OWASP LLM Top 10 (2025)", "id": "LLM06", "name": "Excessive Agency", "provenance": "INFERRED" }, { "basis": "Adverse outcomes are a measured risk requiring a treatment (human review).", "confidence": "advisory", "fw": "NIST AI RMF", "id": "MEASURE", "name": "Measure function", "provenance": "EXTRACTED" }, { "basis": "autonomous execution without oversight maps to command/scripting abuse", "confidence": "advisory", "fw": "MITRE ATT&CK", "id": "T1059", "name": "Command and Scripting Interpreter", "provenance": "EXTRACTED" } ], "matched_via": "heuristic", "subject_id": "fn_terminate_process" }, { "label": "upload_docs", "mappings": [ { "basis": "inferred from action verb 'upload'; confirm against published text (asserted basis: Blocking export to an out-of-scope endpoint is information-flow enforcement.)", "confidence": "inferred", "fw": "NIST SP 800-53r5", "id": "AC-4", "name": "Information Flow Enforcement", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'upload'; confirm against published text (asserted basis: Preventing data leaving the controlled boundary is boundary protection.)", "confidence": "inferred", "fw": "NIST SP 800-53r5", "id": "SC-7", "name": "Boundary Protection", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'upload'; confirm against published text (asserted basis: Uncontrolled egress of regulated data is a data-governance failure.)", "confidence": "inferred", "fw": "EU AI Act", "id": "Art 10", "name": "Data and data governance", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'upload'; confirm against published text (asserted basis: Egress of regulated records is sensitive-information disclosure.)", "confidence": "inferred", "fw": "OWASP LLM Top 10 (2025)", "id": "LLM02", "name": "Sensitive Information Disclosure", "provenance": "INFERRED" }, { "basis": "Data leaving to an external domain maps to the Exfiltration tactic; confirm the specific technique with an analyst.", "confidence": "advisory", "fw": "MITRE ATT&CK", "id": "TA0010", "name": "Exfiltration", "provenance": "EXTRACTED" }, { "basis": "uncontrolled egress of regulated data maps to exfiltration", "confidence": "advisory", "fw": "MITRE ATT&CK", "id": "T1048", "name": "Exfiltration Over Alternative Protocol", "provenance": "EXTRACTED" } ], "matched_via": "heuristic", "subject_id": "fn_upload_docs" } ], "edges": [ { "dst": "fn_delete_after", "provenance": "EXTRACTED", "rel": "EXECUTES", "src": "agent_gpt_pilot" }, { "dst": "fn_delete_project", "provenance": "EXTRACTED", "rel": "EXECUTES", "src": "agent_gpt_pilot" }, { "dst": "fn_rollback", "provenance": "EXTRACTED", "rel": "EXECUTES", "src": "agent_gpt_pilot" }, { "dst": "fn_run", "provenance": "EXTRACTED", "rel": "EXECUTES", "src": "agent_gpt_pilot" }, { "dst": "fn_run_command", "provenance": "EXTRACTED", "rel": "EXECUTES", "src": "agent_gpt_pilot" }, { "dst": "fn_run_migrations", "provenance": "EXTRACTED", "rel": "EXECUTES", "src": "agent_gpt_pilot" }, { "dst": "fn_run_migrations_offline", "provenance": "EXTRACTED", "rel": "EXECUTES", "src": "agent_gpt_pilot" }, { "dst": "fn_run_migrations_online", "provenance": "EXTRACTED", "rel": "EXECUTES", "src": "agent_gpt_pilot" }, { "dst": "fn_run_project", "provenance": "EXTRACTED", "rel": "EXECUTES", "src": "agent_gpt_pilot" }, { "dst": "fn_run_pythagora", "provenance": "EXTRACTED", "rel": "EXECUTES", "src": "agent_gpt_pilot" }, { "dst": "fn_run_pythagora_session", "provenance": "EXTRACTED", "rel": "EXECUTES", "src": "agent_gpt_pilot" }, { "dst": "fn_send", "provenance": "EXTRACTED", "rel": "EXECUTES", "src": "agent_gpt_pilot" }, { "dst": "fn_send_app_finished", "provenance": "EXTRACTED", "rel": "EXECUTES", "src": "agent_gpt_pilot" }, { "dst": "fn_send_app_link", "provenance": "EXTRACTED", "rel": "EXECUTES", "src": "agent_gpt_pilot" }, { "dst": "fn_send_back_logs", "provenance": "EXTRACTED", "rel": "EXECUTES", "src": "agent_gpt_pilot" }, { "dst": "fn_send_bug_hunter_status", "provenance": "EXTRACTED", "rel": "EXECUTES", "src": "agent_gpt_pilot" }, { "dst": "fn_send_congratulations", "provenance": "EXTRACTED", "rel": "EXECUTES", "src": "agent_gpt_pilot" }, { "dst": "fn_send_data_about_logs", "provenance": "EXTRACTED", "rel": "EXECUTES", "src": "agent_gpt_pilot" }, { "dst": "fn_send_epics_and_tasks", "provenance": "EXTRACTED", "rel": "EXECUTES", "src": "agent_gpt_pilot" }, { "dst": "fn_send_error", "provenance": "EXTRACTED", "rel": "EXECUTES", "src": "agent_gpt_pilot" }, { "dst": "fn_send_fatal_error", "provenance": "EXTRACTED", "rel": "EXECUTES", "src": "agent_gpt_pilot" }, { "dst": "fn_send_feature_finished", "provenance": "EXTRACTED", "rel": "EXECUTES", "src": "agent_gpt_pilot" }, { "dst": "fn_send_features_list", "provenance": "EXTRACTED", "rel": "EXECUTES", "src": "agent_gpt_pilot" }, { "dst": "fn_send_file_status", "provenance": "EXTRACTED", "rel": "EXECUTES", "src": "agent_gpt_pilot" }, { "dst": "fn_send_front_logs_headers", "provenance": "EXTRACTED", "rel": "EXECUTES", "src": "agent_gpt_pilot" }, { "dst": "fn_send_key_expired", "provenance": "EXTRACTED", "rel": "EXECUTES", "src": "agent_gpt_pilot" }, { "dst": "fn_send_message", "provenance": "EXTRACTED", "rel": "EXECUTES", "src": "agent_gpt_pilot" }, { "dst": "fn_send_modified_files", "provenance": "EXTRACTED", "rel": "EXECUTES", "src": "agent_gpt_pilot" }, { "dst": "fn_send_project_description", "provenance": "EXTRACTED", "rel": "EXECUTES", "src": "agent_gpt_pilot" }, { "dst": "fn_send_project_info", "provenance": "EXTRACTED", "rel": "EXECUTES", "src": "agent_gpt_pilot" }, { "dst": "fn_send_project_stage", "provenance": "EXTRACTED", "rel": "EXECUTES", "src": "agent_gpt_pilot" }, { "dst": "fn_send_project_stats", "provenance": "EXTRACTED", "rel": "EXECUTES", "src": "agent_gpt_pilot" }, { "dst": "fn_send_run_command", "provenance": "EXTRACTED", "rel": "EXECUTES", "src": "agent_gpt_pilot" }, { "dst": "fn_send_step_progress", "provenance": "EXTRACTED", "rel": "EXECUTES", "src": "agent_gpt_pilot" }, { "dst": "fn_send_stream_chunk", "provenance": "EXTRACTED", "rel": "EXECUTES", "src": "agent_gpt_pilot" }, { "dst": "fn_send_task_progress", "provenance": "EXTRACTED", "rel": "EXECUTES", "src": "agent_gpt_pilot" }, { "dst": "fn_send_test_instructions", "provenance": "EXTRACTED", "rel": "EXECUTES", "src": "agent_gpt_pilot" }, { "dst": "fn_send_token_expired", "provenance": "EXTRACTED", "rel": "EXECUTES", "src": "agent_gpt_pilot" }, { "dst": "fn_send_user_input_history", "provenance": "EXTRACTED", "rel": "EXECUTES", "src": "agent_gpt_pilot" }, { "dst": "fn_terminate", "provenance": "EXTRACTED", "rel": "EXECUTES", "src": "agent_gpt_pilot" }, { "dst": "fn_terminate_process", "provenance": "EXTRACTED", "rel": "EXECUTES", "src": "agent_gpt_pilot" }, { "dst": "fn_upload_docs", "provenance": "EXTRACTED", "rel": "EXECUTES", "src": "agent_gpt_pilot" } ], "frameworks": [], "nodes": [ { "id": "agent_gpt_pilot", "name": "gpt-pilot", "props": { "source_kind": "python" }, "provenance": "EXTRACTED", "type": "Agent" }, { "id": "fn_delete_after", "name": "delete_after", "props": { "action": "delete_after" }, "provenance": "EXTRACTED", "type": "Task" }, { "id": "fn_delete_project", "name": "delete_project", "props": { "action": "delete_project" }, "provenance": "EXTRACTED", "type": "Task" }, { "id": "fn_rollback", "name": "rollback", "props": { "action": "rollback" }, "provenance": "EXTRACTED", "type": "Task" }, { "id": "fn_run", "name": "run", "props": { "action": "run" }, "provenance": "EXTRACTED", "type": "Task" }, { "id": "fn_run_command", "name": "run_command", "props": { "action": "run_command" }, "provenance": "EXTRACTED", "type": "Task" }, { "id": "fn_run_migrations", "name": "run_migrations", "props": { "action": "run_migrations" }, "provenance": "EXTRACTED", "type": "Task" }, { "id": "fn_run_migrations_offline", "name": "run_migrations_offline", "props": { "action": "run_migrations_offline" }, "provenance": "EXTRACTED", "type": "Task" }, { "id": "fn_run_migrations_online", "name": "run_migrations_online", "props": { "action": "run_migrations_online" }, "provenance": "EXTRACTED", "type": "Task" }, { "id": "fn_run_project", "name": "run_project", "props": { "action": "run_project" }, "provenance": "EXTRACTED", "type": "Task" }, { "id": "fn_run_pythagora", "name": "run_pythagora", "props": { "action": "run_pythagora" }, "provenance": "EXTRACTED", "type": "Task" }, { "id": "fn_run_pythagora_session", "name": "run_pythagora_session", "props": { "action": "run_pythagora_session" }, "provenance": "EXTRACTED", "type": "Task" }, { "id": "fn_send", "name": "send", "props": { "action": "send" }, "provenance": "EXTRACTED", "type": "Task" }, { "id": "fn_send_app_finished", "name": "send_app_finished", "props": { "action": "send_app_finished" }, "provenance": "EXTRACTED", "type": "Task" }, { "id": "fn_send_app_link", "name": "send_app_link", "props": { "action": "send_app_link" }, "provenance": "EXTRACTED", "type": "Task" }, { "id": "fn_send_back_logs", "name": "send_back_logs", "props": { "action": "send_back_logs" }, "provenance": "EXTRACTED", "type": "Task" }, { "id": "fn_send_bug_hunter_status", "name": "send_bug_hunter_status", "props": { "action": "send_bug_hunter_status" }, "provenance": "EXTRACTED", "type": "Task" }, { "id": "fn_send_congratulations", "name": "send_congratulations", "props": { "action": "send_congratulations" }, "provenance": "EXTRACTED", "type": "Task" }, { "id": "fn_send_data_about_logs", "name": "send_data_about_logs", "props": { "action": "send_data_about_logs" }, "provenance": "EXTRACTED", "type": "Task" }, { "id": "fn_send_epics_and_tasks", "name": "send_epics_and_tasks", "props": { "action": "send_epics_and_tasks" }, "provenance": "EXTRACTED", "type": "Task" }, { "id": "fn_send_error", "name": "send_error", "props": { "action": "send_error" }, "provenance": "EXTRACTED", "type": "Task" }, { "id": "fn_send_fatal_error", "name": "send_fatal_error", "props": { "action": "send_fatal_error" }, "provenance": "EXTRACTED", "type": "Task" }, { "id": "fn_send_feature_finished", "name": "send_feature_finished", "props": { "action": "send_feature_finished" }, "provenance": "EXTRACTED", "type": "Task" }, { "id": "fn_send_features_list", "name": "send_features_list", "props": { "action": "send_features_list" }, "provenance": "EXTRACTED", "type": "Task" }, { "id": "fn_send_file_status", "name": "send_file_status", "props": { "action": "send_file_status" }, "provenance": "EXTRACTED", "type": "Task" }, { "id": "fn_send_front_logs_headers", "name": "send_front_logs_headers", "props": { "action": "send_front_logs_headers" }, "provenance": "EXTRACTED", "type": "Task" }, { "id": "fn_send_key_expired", "name": "send_key_expired", "props": { "action": "send_key_expired" }, "provenance": "EXTRACTED", "type": "Task" }, { "id": "fn_send_message", "name": "send_message", "props": { "action": "send_message" }, "provenance": "EXTRACTED", "type": "Task" }, { "id": "fn_send_modified_files", "name": "send_modified_files", "props": { "action": "send_modified_files" }, "provenance": "EXTRACTED", "type": "Task" }, { "id": "fn_send_project_description", "name": "send_project_description", "props": { "action": "send_project_description" }, "provenance": "EXTRACTED", "type": "Task" }, { "id": "fn_send_project_info", "name": "send_project_info", "props": { "action": "send_project_info" }, "provenance": "EXTRACTED", "type": "Task" }, { "id": "fn_send_project_stage", "name": "send_project_stage", "props": { "action": "send_project_stage" }, "provenance": "EXTRACTED", "type": "Task" }, { "id": "fn_send_project_stats", "name": "send_project_stats", "props": { "action": "send_project_stats" }, "provenance": "EXTRACTED", "type": "Task" }, { "id": "fn_send_run_command", "name": "send_run_command", "props": { "action": "send_run_command" }, "provenance": "EXTRACTED", "type": "Task" }, { "id": "fn_send_step_progress", "name": "send_step_progress", "props": { "action": "send_step_progress" }, "provenance": "EXTRACTED", "type": "Task" }, { "id": "fn_send_stream_chunk", "name": "send_stream_chunk", "props": { "action": "send_stream_chunk" }, "provenance": "EXTRACTED", "type": "Task" }, { "id": "fn_send_task_progress", "name": "send_task_progress", "props": { "action": "send_task_progress" }, "provenance": "EXTRACTED", "type": "Task" }, { "id": "fn_send_test_instructions", "name": "send_test_instructions", "props": { "action": "send_test_instructions" }, "provenance": "EXTRACTED", "type": "Task" }, { "id": "fn_send_token_expired", "name": "send_token_expired", "props": { "action": "send_token_expired" }, "provenance": "EXTRACTED", "type": "Task" }, { "id": "fn_send_user_input_history", "name": "send_user_input_history", "props": { "action": "send_user_input_history" }, "provenance": "EXTRACTED", "type": "Task" }, { "id": "fn_terminate", "name": "terminate", "props": { "action": "terminate" }, "provenance": "EXTRACTED", "type": "Task" }, { "id": "fn_terminate_process", "name": "terminate_process", "props": { "action": "terminate_process" }, "provenance": "EXTRACTED", "type": "Task" }, { "id": "fn_upload_docs", "name": "upload_docs", "props": { "action": "upload_docs" }, "provenance": "EXTRACTED", "type": "Task" } ], "note": "Proposed CWN mappings, confidence-tagged. Confirm against the current published control text before relying on them for audit. Enterprise control ids are mapped at onboarding by your GRC team, never auto-asserted.", "source": "gpt-pilot", "source_kind": "python" }