-
Notifications
You must be signed in to change notification settings - Fork 6
Expand file tree
/
Copy pathlula-validation-aarm-vectors.yaml
More file actions
65 lines (63 loc) · 5.87 KB
/
Copy pathlula-validation-aarm-vectors.yaml
File metadata and controls
65 lines (63 loc) · 5.87 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
# Copyright 2026 Google LLC
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
# https://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
# lula-validation-aarm-vectors.yaml
# AARM Threat Vector Conformance Validation (CAGE v0.1.0)
#
# Validates that the CAGE compliance bridge reports conformance against all
# 11 CSA Autonomous Agent Risk Management (AARM) threat vectors.
#
# Domain: api → compliance-bridge /v1/aarm/conformance-report endpoint
# Provider: opa (inline Rego)
#
# Assertions:
# 1. All 11 AARM vectors are present in the conformance report.
# 2. Zero vectors are EXPOSED (all must be at least PARTIAL).
# 3. Critical-severity vectors must be NEUTRALIZED:
# AARM-V1 (Memory Poisoning), AARM-V2 (Goal Hijacking),
# AARM-V3 (Confused Deputy), AARM-V4 (Cross-Agent Propagation),
# AARM-V9 (Privilege Escalation), AARM-V10 (Data Exfiltration),
# AARM-V11 (Model Substitution)
# 4. schema_version must equal "cage-aarm-conformance/1.0".
# 5. aarm_spec_version must equal "CSA-AARM-v1.0".
component-definition:
uuid: 76ca0840-beed-5de8-a0e2-35933be05cd5
metadata:
title: CAGE Validation — AARM VECTORS
last-modified: '2026-07-01T13:18:54Z'
version: 1.0.0
oscal-version: 1.1.2
remarks: "Auto-converted from standalone lula validation format.\nRegion: ALL. Posture: csa-aarm.\nNotes: CSA AARM Threat Vector Conformance (CAGE v0.1.0). Validates machine-readable proof that CAGE control points neutralize all 11 AARM attack vectors defined in the Cloud Security Alliance Autonomous Agent Risk Management (AARM) specification.\nCritical vectors requiring NEUTRALIZED status (all 7 CRITICAL-severity vectors):\n AARM-V1 Memory Poisoning → A.5.3, A.8.4 (Context Accumulator)\n AARM-V2 Goal Hijacking → A.5.2, SC-4 (NeMo + OPA)\n AARM-V3 Confused Deputy → SC-4, A.8.4 (HMAC Signed Handshake)\n AARM-V4 Cross-Agent Propagation → SC-4, SC-8 (FiscalLimitGuard + Linkerd)\n AARM-V9 Privilege Escalation → SC-4, A.8.4 (OPA RBAC + scope declaration)\n AARM-V10 Data Exfiltration → A.9.2, SC-7 (Presidio + Cilium)\n AARM-V11 Model Substitution → SC-8, SC-4 (Sovereign vLLM + routing seal)\n\nNon-critical vectors may be PARTIAL but not EXPOSED. Evidence: GET /v1/aarm/conformance-report (compliance-bridge service). Auto-generated artifact: <audit_id>/aarm_conformance.json (GCS/S3)."
components:
- uuid: e8310512-e8e1-5752-9929-09410398e064
type: software
title: CAGE Cybernetic Governance Engine
description: The Cybernetic AI Governance Engine (CAGE) — AI governance gateway, compliance bridge, and governed financial advisor.
control-implementations:
- uuid: a3697688-6e46-5205-910e-22c7b44f6bdd
source: https://cloudsecurityalliance.org/research/working-groups/artificial-intelligence
description: 'Control implementation for AARM VECTORS. Region: ALL. Posture: csa-aarm.'
implemented-requirements:
- uuid: 6915c619-071a-51ea-a57f-60232a68751d
control-id: aarm-vectors
description: Automated lula validation for AARM VECTORS.
links:
- href: '#ec32ba67-e5a7-50b4-8ff5-eca8aac8da66'
rel: lula
back-matter:
resources:
- uuid: ec32ba67-e5a7-50b4-8ff5-eca8aac8da66
title: Lula Validation — AARM VECTORS
rlinks:
- href: lula.dev
description: "domain:\n type: api\n api-spec:\n endpoints:\n - name: aarm_conformance_report\n url: http://compliance-bridge.governance-stack.svc.cluster.local/v1/aarm/conformance-report\n method: GET\nprovider:\n type: opa\n opa-spec:\n rego: \"package lula\\n\\nimport future.keywords.if\\nimport future.keywords.in\\n\\n# ---------------------------------------------------------------------------\\n# Helper: index vectors by vector_id for O(1) access\\n# ---------------------------------------------------------------------------\\nvector_index[vid] := v {\\n v := input.aarm_conformance_report.vectors[_]\\n vid := v.vector_id\\n}\\n\\n# ---------------------------------------------------------------------------\\n# Rule 1: All 11 AARM vectors must be present\\n# ---------------------------------------------------------------------------\\nvalidate if {\\n required_vectors := {\\n \\\"AARM-V1\\\", \\\"AARM-V2\\\", \\\"AARM-V3\\\", \\\"AARM-V4\\\",\\n \\\"AARM-V5\\\", \\\"AARM-V6\\\", \\\"AARM-V7\\\", \\\"AARM-V8\\\",\\n \\\"AARM-V9\\\", \\\"AARM-V10\\\", \\\"AARM-V11\\\"\\n }\\n present_vectors := {v | vector_index[v]}\\n required_vectors == present_vectors\\n\\n # Rule 2: No vector is EXPOSED\\n input.aarm_conformance_report.exposed == 0\\n\\n # Rule 3: Critical vectors must be NEUTRALIZED\\n vector_index[\\\"AARM-V1\\\"].status == \\\"NEUTRALIZED\\\" # Memory Poisoning\\n vector_index[\\\"AARM-V2\\\"].status == \\\"NEUTRALIZED\\\" # Goal Hijacking\\n vector_index[\\\"AARM-V3\\\"].status == \\\"NEUTRALIZED\\\" # Confused Deputy\\n vector_index[\\\"AARM-V4\\\"].status == \\\"NEUTRALIZED\\\" # Cross-Agent Propagation\\n vector_index[\\\"AARM-V9\\\"].status == \\\"NEUTRALIZED\\\" # Privilege Escalation\\n vector_index[\\\"AARM-V10\\\"].status == \\\"NEUTRALIZED\\\" # Data Exfiltration\\n vector_index[\\\"AARM-V11\\\"].status == \\\"NEUTRALIZED\\\" # Model Substitution\\n\\n # Rule 4: Schema version pinned to v1.0\\n input.aarm_conformance_report.schema_version == \\\"cage-aarm-conformance/1.0\\\"\\n input.aarm_conformance_report.aarm_spec_version == \\\"CSA-AARM-v1.0\\\"\\n}\\n\"\n"