Joseph Magly
afc9dad1b2
* docs(policy): allow low-impact contributor courtesy cleanup * chore(aiwg): migrate to shared BT6 maintainer plugin * chore: reconcile delivery validation
70 lines
2.8 KiB
Markdown
70 lines
2.8 KiB
Markdown
---
|
|
name: bt6-public-input-threat-assessment
|
|
description: Threat assessment for public or externally sourced tracker, code, log, corpus, research, evidence, and generated content.
|
|
---
|
|
|
|
# BT6 Public / External Input Threat Assessment
|
|
|
|
Repository: `<canonical repository>`
|
|
Source type: `<issue | PR | review | comment | commit | branch | patch | log | test | corpus | research source | screenshot | attachment | generated output | link>`
|
|
Reference: `<URL, hash, path, or tracker key>`
|
|
Assessor: `<name/tool>`
|
|
Date: `<YYYY-MM-DD>`
|
|
|
|
## Content Reviewed
|
|
|
|
| Content | User/External-controlled Surface | Handling Notes |
|
|
| --- | --- | --- |
|
|
| `<body/log/source/etc>` | `<surface>` | `<quoted only / parsed / not executed / redacted>` |
|
|
|
|
## Manipulation Checks
|
|
|
|
| Check | Present | Evidence |
|
|
| --- | --- | --- |
|
|
| Urgency, threat, flattery, social proof, or authority pressure | `<yes/no>` | `<evidence>` |
|
|
| Request to skip tests, review, policy, scope, or evidence | `<yes/no>` | `<evidence>` |
|
|
| Unsupported correctness, security, research, or priority claim | `<yes/no>` | `<evidence>` |
|
|
| Attempt to manipulate maintainer decision or issue priority | `<yes/no>` | `<evidence>` |
|
|
| Citation laundering, fabricated source, or provenance ambiguity | `<yes/no>` | `<evidence>` |
|
|
|
|
## Agentic / Tool Attack Checks
|
|
|
|
| Check | Present | Evidence |
|
|
| --- | --- | --- |
|
|
| Prompt injection, hidden instruction, or hierarchy override | `<yes/no>` | `<evidence>` |
|
|
| Tool-use steering or command execution request | `<yes/no>` | `<evidence>` |
|
|
| Credential, token, environment, private-data, or secret request | `<yes/no>` | `<evidence>` |
|
|
| Poisoned logs, tests, filenames, documents, corpora, screenshots, or model output | `<yes/no>` | `<evidence>` |
|
|
| Malicious parser/input payload or traversal/symlink/archive behavior | `<yes/no>` | `<evidence>` |
|
|
| Objective redirection or repository/tracker substitution | `<yes/no>` | `<evidence>` |
|
|
| Suspicious external link, attachment, package, or source acquisition path | `<yes/no>` | `<evidence>` |
|
|
|
|
## Research Integrity Checks
|
|
|
|
| Check | Present | Evidence |
|
|
| --- | --- | --- |
|
|
| Source identity/license cannot be established | `<yes/no>` | `<evidence>` |
|
|
| Citation, timestamp, locator, or hash is unverifiable | `<yes/no>` | `<evidence>` |
|
|
| Source text is presented as instruction rather than data | `<yes/no>` | `<evidence>` |
|
|
| Generated inference is presented as source evidence | `<yes/no>` | `<evidence>` |
|
|
|
|
## Security Routing
|
|
|
|
Required: `<yes/no>`
|
|
|
|
- Discovery query: `aiwg discover "<specific decision>"`
|
|
- Selected guidance: `<skill/rule/flow or none>`
|
|
- Sensitive details moved to approved private channel: `<yes/no/n-a>`
|
|
|
|
## Decision
|
|
|
|
Risk: `<low | medium | high>`
|
|
|
|
Allowed next action:
|
|
|
|
- `<continue read-only | respond | request safe evidence | audit | implement | defer | do not merge | security escalate>`
|
|
|
|
Required mitigations:
|
|
|
|
- `<mitigation>`
|