docs: bring both READMEs up to date with the merged posture/provenance/config-attack work - #29
Closed
trionnemesis wants to merge 1 commit into
Closed
docs: bring both READMEs up to date with the merged posture/provenance/config-attack work#29trionnemesis wants to merge 1 commit into
trionnemesis wants to merge 1 commit into
Conversation
…e/config-attack work Reflect the current repository state after #28 (issues #25, #26, #27): eight bundled scenarios (was four), 8/10 OWASP Agentic categories covered (was 4/10), the new posture/ subpackage in the architecture tree, the static_posture plane on the dashboard, and two new trust/safety bullets for "a scanner's grade is never a verdict" and "a verdict says how it was proven". README.zh-TW.md mirrors every change. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01VQU1vu7oKtMUZd8DSxZRzJ
19 tasks
trionnemesis
pushed a commit
that referenced
this pull request
Aug 6, 2026
The English README was corrected in #34; this closes the same gaps on the zh-TW side, and folds in the posture/provenance rows drafted in the still-open PR #29 (whose README.md half is now redundant). - OWASP Agentic coverage 4/10 -> 8/10, verified against `agentsec coverage` - Bundled scenarios: four -> eight, naming the AGT-CONFIG-* attack shapes; scenarios/ is eight worked examples - Two capability rows that had no zh-TW equivalent: static posture ingestion and run provenance - Two trust-posture bullets: a scanner's score is never a verdict, and a verdict states how it was proven - Architecture tree gains `inspect/` and `posture/` - Detection rule ids gain 100901-100904; CLI table gains `get-run` and `mcp-contract` The resource counts and the scan section were already current from #33, so they are untouched. Both READMEs now state the same facts. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01MhAYvfhZE3xs6KX5vWyukX
10 tasks
trionnemesis
added a commit
that referenced
this pull request
Aug 6, 2026
The English README was corrected in #34; this closes the same gaps on the zh-TW side, and folds in the posture/provenance rows drafted in the still-open PR #29 (whose README.md half is now redundant). - OWASP Agentic coverage 4/10 -> 8/10, verified against `agentsec coverage` - Bundled scenarios: four -> eight, naming the AGT-CONFIG-* attack shapes; scenarios/ is eight worked examples - Two capability rows that had no zh-TW equivalent: static posture ingestion and run provenance - Two trust-posture bullets: a scanner's score is never a verdict, and a verdict states how it was proven - Architecture tree gains `inspect/` and `posture/` - Detection rule ids gain 100901-100904; CLI table gains `get-run` and `mcp-contract` The resource counts and the scan section were already current from #33, so they are untouched. Both READMEs now state the same facts. Claude-Session: https://claude.ai/code/session_01MhAYvfhZE3xs6KX5vWyukX Co-authored-by: Claude <noreply@anthropic.com>
Owner
Author
|
Closing as superseded rather than merged. Both READMEs were brought up to date on The README work still outstanding is the split into an engineer quick start and a security/platform setup path — tracked as Adoption — open in Generated by Claude Code |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
What changed
Follow-up to #28 (merged): both READMEs were left describing the pre-#25/#26/#27 state (four scenarios, 4/10 OWASP categories, three dashboard planes). This brings them current:
AAI001/002/003/004/006/007/008/009).static_postureplane alongside project/purple/Skill Assurance.posture/subpackage.100901–100904rule ids forAGT-CONFIG-*.Every number quoted (8 scenarios, 8/10 categories, which category ids) was verified against the actual catalogue on this branch (
ScenarioCatalog.from_dir("scenarios").coverage()), not copied from memory.Type
Purple coverage
Checks
make checkpasses (no code changed by this PR; verified on the base it was written against)ScenarioCatalog.coverage()output, not asserted from memoryNotes for the reviewer
Docs-only change, no source touched. Both languages were edited in parallel, line by line, so a reviewer comfortable in either can spot-check against the other.
Generated by Claude Code