aveproject · chaksaray · Jul 11, 2026 · Jul 5, 2026 · Jul 5, 2026 · Jul 5, 2026
diff --git a/.github/ISSUE_TEMPLATE/01_ave_submission.md b/.github/ISSUE_TEMPLATE/01_ave_submission.md
@@ -34,8 +34,8 @@ assignees: ''
 attack_class:
 severity:           (estimate — CRITICAL / HIGH / MEDIUM / LOW)
 owasp_mcp:          [MCPxx]
-owasp_mapping:      [ASIxx]   (if applicable)
-mitre_atlas_mapping: [AML.Txxxx]  (if applicable)
+owasp_asi:          [ASIxx]   (if applicable)
+mitre_atlas:        [AML.Txxxx]  (if applicable)
 detection_layer:    content | server_card | registry_metadata | runtime | transport
 detection_stage:    static_detection | runtime_observed
 evidence_basis_engines: [pattern | yara | semgrep | llm | sandbox]

diff --git a/.github/ISSUE_TEMPLATE/03_schema_change.md b/.github/ISSUE_TEMPLATE/03_schema_change.md
@@ -1,6 +1,6 @@
 ---
 name: Schema change proposal
-about: Propose a change to ave-record-1.0.0.schema.json
+about: Propose a change to ave-record-1.1.0.schema.json
 title: "[SCHEMA] <brief description>"
 labels: schema
 assignees: ''
@@ -21,7 +21,7 @@ assignees: ''
 
 ## Migration path for existing records
 
-<!-- How will the 48 existing records be updated? Can this be done with an automated script? -->
+<!-- How will the 51 existing records be updated? Can this be done with an automated script? -->
 
 ## Impact on consumers
 

diff --git a/.github/pull_request_template.md b/.github/pull_request_template.md
@@ -28,7 +28,7 @@
 ### For new AVE record submissions
 
 - [ ] Linked issue confirms the id and that this is a new class, not a variant
-- [ ] Record validates against `schema/ave-record-1.0.0.schema.json`
+- [ ] Record validates against `schema/ave-record-1.1.0.schema.json`
 - [ ] All 15 required fields are present and non-empty
 - [ ] `behavioral_fingerprint` is one clear sentence describing what the component DOES
 - [ ] `indicators_of_compromise` has at least one entry a defender can actually search for
@@ -51,8 +51,8 @@
 ### For schema changes
 
 - [ ] Issue opened first with 30-day comment period completed (structural changes only)
-- [ ] `schema/ave-record-1.0.0.schema.json` updated
-- [ ] New versioned schema file added (e.g. `schema/ave-record-1.1.0.schema.json`)
+- [ ] `schema/ave-record.schema.json` (alias) updated to mirror the new canonical
+- [ ] New versioned schema file added (e.g. `schema/ave-record-1.2.0.schema.json`) — prior versioned files stay frozen, never edited
 - [ ] CHANGELOG.md updated
 - [ ] Migration path for existing records documented
 

diff --git a/ARCHITECTURE.md b/ARCHITECTURE.md
@@ -14,7 +14,8 @@ the rules that implement detection, and the validation tooling.
 records/              AVE record JSON files — the standard's data
 schema/               JSON schema the records validate against
   ave-record.schema.json             alias — always points to current
-  ave-record-1.0.0.schema.json       versioned canonical — permanent
+  ave-record-1.1.0.schema.json       versioned canonical — current, permanent
+  ave-record-1.0.0.schema.json       versioned canonical — frozen, permanent
 rules/                Detection rule implementations
   ├── pattern/        Regex pattern rules (Python)
   ├── yara/           YARA rules (.yar)

diff --git a/CLAUDE.md b/CLAUDE.md
@@ -10,8 +10,8 @@ Single source of truth for how work happens in this repo.
 bawbel/ave — the behavioral classification standard for agentic AI components.
 An independent standard that bawbel-scanner implements. NOT a feature of the scanner.
 
-- Records: 51 published (schema_version 1.0.0)
-- Schema: schema/ave-record-1.0.0.schema.json
+- Records: 51 published (schema_version 1.1.0)
+- Schema: schema/ave-record-1.1.0.schema.json
 - Scoring: OWASP AIVSS v0.8
 - Registry: ave.bawbel.io
 - Public API: api.piranha.bawbel.io
@@ -43,19 +43,27 @@ The record declares the BASELINE; the scanner assigns the ACTUAL value.
 
 ---
 
-## Record schema v1.0.0
+## Record schema v1.1.0
 
-Every record validates against schema/ave-record-1.0.0.schema.json.
+Every record validates against schema/ave-record-1.1.0.schema.json.
 
-**15 required fields:**
+**15 required fields** (once `status` is `active` or `deprecated`):
 ave_id · schema_version · status · published
 title · description · attack_class · severity · behavioral_fingerprint
 aivss · owasp_mcp
 indicators_of_compromise · remediation
 references · researcher
 
+**Draft submit-required core** (`status: "draft"` only needs these 8):
+ave_id · schema_version · status · title · description · attack_class ·
+behavioral_fingerprint · references
+
 **Optional framework fields** (add when applicable, omit rather than force):
-owasp_mapping · mitre_atlas_mapping · nist_ai_rmf_mapping
+owasp_asi · mitre_atlas · nist_ai_rmf
+
+**Optional runtime/mitigation classification fields** (vendor-neutral only —
+no enforcement-tool config ever belongs here):
+provenance_vector · trifecta_profile · mitigation · example_patterns
 
 **Optional scanner evidence declarations** (declare defaults the scanner uses):
 evidence_kind_default · detection_stage · detection_layer
@@ -92,7 +100,7 @@ Every function in validation scripts gets a What/Why/How comment.
 ```python
 # What: validates one AVE record against the JSON schema
 # Why:  a malformed record breaks every downstream scanner that loads it
-# How:  jsonschema.validate against schema/ave-record-1.0.0.schema.json
+# How:  jsonschema.validate against schema/ave-record-1.1.0.schema.json
 def validate_record(record: dict) -> tuple[bool, list[str]]:
     ...
 ```
@@ -129,14 +137,14 @@ python scripts/check_fixtures.py      # every rule has +/- fixtures
 
 ## Hard rules
 
-1. Every record validates against schema/ave-record-1.0.0.schema.json.
+1. Every record validates against schema/ave-record-1.1.0.schema.json.
 2. confidence NEVER appears in an AVE record — it is per-detection.
 3. Behavioral fingerprints over signatures — describe what it DOES.
 4. Every record has at least one rule and a positive + negative fixture.
 5. ave_id is immutable once published. Never renumber. Deprecate, never delete.
 6. severity and aivss.aivss_score must agree (CRITICAL implies >= 9.0).
 7. All names from LANGUAGE.md.
-8. owasp_mcp is required. owasp_mapping, mitre_atlas_mapping, nist_ai_rmf_mapping
+8. owasp_mcp is required. owasp_asi, mitre_atlas, nist_ai_rmf
    are optional — add when they apply, omit rather than force a poor fit.
 9. references must have at least one citable primary source.
 10. Never commit records/INDEX.md — it is removed. The README is the index.

diff --git a/CONTRIBUTING.md b/CONTRIBUTING.md
@@ -36,7 +36,7 @@ contribution makes AI agents safer for everyone.
    before writing JSON. The maintainer will confirm the next available id.
 
 4. **Read the schema** at
-   [`schema/ave-record-1.0.0.schema.json`](schema/ave-record-1.0.0.schema.json)
+   [`schema/ave-record-1.1.0.schema.json`](schema/ave-record-1.1.0.schema.json)
    for field definitions, types, and required/optional status. The schema
    reference page is at [ave.bawbel.io/schema.html](https://ave.bawbel.io/schema.html).
 
@@ -80,8 +80,8 @@ Key rules:
 - `behavioral_fingerprint` describes what the component *does*, not a string
   it contains. "Component fetches remote content and executes it as
   instructions" not "contains the word fetch."
-- `owasp_mcp` is required with at least one entry. `owasp_mapping`,
-  `mitre_atlas_mapping`, and `nist_ai_rmf_mapping` are optional — add
+- `owasp_mcp` is required with at least one entry. `owasp_asi`,
+  `mitre_atlas`, and `nist_ai_rmf` are optional — add
   them when they apply, omit rather than force a poor fit.
 - `indicators_of_compromise` must have at least one entry that a defender
   can actually search for in a real file.
@@ -129,7 +129,7 @@ const Ajv = require('ajv/dist/2020');
 const addFormats = require('ajv-formats');
 const ajv = new Ajv({ strict: false });
 addFormats(ajv);
-const schema = require('./schema/ave-record-1.0.0.schema.json');
+const schema = require('./schema/ave-record-1.1.0.schema.json');
 const record = require('./records/AVE-2026-NNNNN.json');
 const ok = ajv.validate(schema, record);
 if (!ok) { console.error(ajv.errors); process.exit(1); }
@@ -180,8 +180,9 @@ changed validation rules): open an issue first. These require a schema
 version bump, a migration path for existing records, and a 30-day comment
 period before merging.
 
-Current schema: **v1.0.0**.
-Canonical file: `schema/ave-record-1.0.0.schema.json`.
+Current schema: **v1.1.0**.
+Canonical file: `schema/ave-record-1.1.0.schema.json`.
+(`schema/ave-record-1.0.0.schema.json` remains, permanently, as the frozen v1.0.0 canonical.)
 
 ---
 
@@ -197,7 +198,7 @@ git commit -m "fix: AVE-2026-NNNNN -- <what changed>"
 ```
 
 AIVSS score changes require written rationale for each AARF factor that
-changes. Framework mapping additions (`owasp_mapping`, `mitre_atlas_mapping`)
+changes. Framework mapping additions (`owasp_asi`, `mitre_atlas`)
 are welcome without prior issue if the mapping is clear.
 
 `ave_id` values are immutable. Never renumber a record. If a record is wrong

diff --git a/LANGUAGE.md b/LANGUAGE.md
@@ -168,5 +168,5 @@ PiranhaDB, confidence, evidence_stage — defined in scanner LANGUAGE.md.
 | rule_definition | rule |
 | CVE record | AVE record — AVE is not CVE |
 | confidence (in a record) | confidence_baseline |
-| owasp (field name) | owasp_mapping |
-| mitre_atlas (field name) | mitre_atlas_mapping |
+| owasp (field name) | owasp_asi |
+| mitre_atlas_mapping (field name) | mitre_atlas |
diff --git a/PRODUCT.md b/PRODUCT.md
@@ -42,8 +42,8 @@ an identity.
 
 | | |
 |---|---|
-| Records published | 51 (schema_version 1.0.0) |
-| Schema version | 1.0.0 (canonical, published) |
+| Records published | 51 (schema_version 1.1.0) |
+| Schema version | 1.1.0 (canonical, published) |
 | Registry | ave.bawbel.io (live) |
 | Threat intel API | api.piranha.bawbel.io |
 | Site repo | github.com/bawbel/ave-site |
@@ -57,9 +57,9 @@ an identity.
 |---|---|---|
 | OWASP AIVSS v0.8 | `aivss` object | required in every record |
 | OWASP MCP Top 10 | `owasp_mcp` | required, MCP01-MCP10 |
-| OWASP Agentic AI Top 10 | `owasp_mapping` | optional, ASI01-ASI10 |
-| MITRE ATLAS | `mitre_atlas_mapping` | optional, AML.Txxxx |
-| NIST AI RMF | `nist_ai_rmf_mapping` | optional |
+| OWASP Agentic Security Initiative Top 10 | `owasp_asi` | optional, ASI01-ASI10 |
+| MITRE ATLAS | `mitre_atlas` | optional, AML.Txxxx |
+| NIST AI RMF | `nist_ai_rmf` | optional |
 | OWASP AIBOM | planned via `bawbel abom` CycloneDX command | future |
 
 ---

diff --git a/README.md b/README.md
@@ -12,7 +12,7 @@ MCP server, system prompt, or agent plugin can be weaponized — scored consiste
 mapped to the frameworks security teams already report against.
 
 [![Records](https://img.shields.io/badge/records-51-0f6e56?style=flat-square)](records/)
-[![Schema](https://img.shields.io/badge/schema-v1.0.0-0a3024?style=flat-square)](schema/ave-record-1.0.0.schema.json)
+[![Schema](https://img.shields.io/badge/schema-v1.1.0-0a3024?style=flat-square)](schema/ave-record-1.1.0.schema.json)
 [![AIVSS](https://img.shields.io/badge/AIVSS-v0.8-d4a017?style=flat-square)](https://aivss.owasp.org)
 [![OWASP MCP](https://img.shields.io/badge/OWASP-MCP%20Top%2010-0a3024?style=flat-square)](https://owasp.org)
 [![MITRE ATLAS](https://img.shields.io/badge/MITRE-ATLAS-4a3f9e?style=flat-square)](https://atlas.mitre.org)
@@ -276,13 +276,13 @@ request a crosswalk for your scanner's rule IDs.
 
 ---
 
-## Schema v1.0.0
+## Schema v1.1.0
 
 Records validate against
-[`schema/ave-record-1.0.0.schema.json`](schema/ave-record-1.0.0.schema.json).
+[`schema/ave-record-1.1.0.schema.json`](schema/ave-record-1.1.0.schema.json).
 
 Canonical `$id`:
-`https://ave.bawbel.io/schema/ave-record-1.0.0.schema.json`
+`https://ave.bawbel.io/schema/ave-record-1.1.0.schema.json`
 
 **15 required fields:**
 
@@ -299,7 +299,7 @@ references · researcher
 ```json
 {
   "ave_id": "AVE-2026-00001",
-  "schema_version": "1.0.0",
+  "schema_version": "1.1.0",
   "status": "active",
   "published": "2026-04-01T09:00:00Z",
   "title": "Metamorphic payload via external config fetch",
@@ -320,15 +320,22 @@ references · researcher
 ```
 
 **All optional fields:**
-`component_type` · `last_updated` · `behavioral_vector` · `aivss_score` ·
-`cvss_base_vector` · `owasp_mapping` · `mitre_atlas_mapping` ·
-`nist_ai_rmf_mapping` · `affected_platforms` · `affected_registries` ·
+`component_type` · `last_updated` · `behavioral_vector` · `example_patterns` ·
+`aivss_score` · `cvss_base_vector` · `owasp_asi` · `mitre_atlas` ·
+`nist_ai_rmf` · `provenance_vector` · `trifecta_profile` · `mitigation` ·
+`affected_platforms` · `affected_registries` ·
 `mutation_count` · `detection_methodology` · `kill_switch_active` ·
 `researcher_url` · `aivss.aarf` · `aivss.aivss_severity` ·
-`aivss.owasp_mcp_mapping` · `aivss.notes` · `evidence_kind_default` ·
+`aivss.notes` · `evidence_kind_default` ·
 `detection_stage` · `detection_layer` · `confidence_baseline` ·
 `evidence_basis_engines` · `derivable_into`
 
+`status: "draft"` records need only a reduced eight-field core (`ave_id`,
+`schema_version`, `status`, `title`, `description`, `attack_class`,
+`behavioral_fingerprint`, `references`) — the full 15-field required set
+above applies once `status` is `active` or `deprecated`. See
+[CONTRIBUTING.md](CONTRIBUTING.md) for the thin-submission path.
+
 Full schema reference: [ave.bawbel.io/schema.html](https://ave.bawbel.io/schema.html)
 
 ---
@@ -379,7 +386,7 @@ const Ajv = require('ajv/dist/2020');
 const addFormats = require('ajv-formats');
 const ajv = new Ajv({ strict: false });
 addFormats(ajv);
-const schema = require('./schema/ave-record-1.0.0.schema.json');
+const schema = require('./schema/ave-record-1.1.0.schema.json');
 const record = require('./records/AVE-2026-NNNNN.json');
 const ok = ajv.validate(schema, record);
 if (!ok) console.error(ajv.errors); else console.log('valid');
@@ -412,10 +419,11 @@ at [ave.bawbel.io/crosswalks.html](https://ave.bawbel.io/crosswalks.html).
 
 | Framework | Field | Crosswalk |
 |---|---|---|
-| [OWASP AST10](https://owasp.org/www-project-agentic-ai-security/) | `owasp_mapping` (ASI01-ASI10) | [`crosswalks/ave-to-ast10.json`](crosswalks/ave-to-ast10.json) |
+| OWASP Agentic Security Initiative Top 10 | `owasp_asi` (ASI01-ASI10) | schema field, all applicable records |
+| [OWASP Agentic Skills Top 10 (AST10)](https://owasp.org/www-project-agentic-skills-top-10/) | no dedicated schema field yet (`owasp_ast` planned) | [`crosswalks/ave-to-ast10.json`](crosswalks/ave-to-ast10.json) |
 | OWASP MCP Top 10 | `owasp_mcp` | all records |
-| MITRE ATLAS | `mitre_atlas_mapping` | where applicable |
-| NIST AI RMF | `nist_ai_rmf_mapping` | where applicable |
+| MITRE ATLAS | `mitre_atlas` | where applicable |
+| NIST AI RMF | `nist_ai_rmf` | where applicable |
 
 | This scanner | Maps to AVE via |
 |---|---|