# 🛡️ Sovereign Security: Beyond Traditional Scanners

The **AgentOps Cockpit (v2.0.4)** incorporates specialized security logic inspired by the leading edge of agentic research (including **OWASP Agentic Top 10**, `agent-audit`, and `agentic-radar`). 

Unlike traditional security tools (Bandit, Snyk), the Cockpit is **Agent-Aware**—it understands the relationship between user prompts, autonomous tool choice, and system-level execution.

## 🏛️ OWASP Agentic Top 10 (ASI) Alignment

We map every security finding to the **ASI Taxonomy**:

| Category | Description | Cockpit Enforcement |
| :--- | :--- | :--- |
| **ASI-01** | Prompt Injection | **Indirect Injection Scanner**: Detects un-sanitized Web/RAG retrieval. |
| **ASI-02** | Broken Tool Auth | **Ungated Tool Gate**: Detects destructive operations lacking HITL. |
| **ASI-03** | Insecure Output | **RCE Traps**: Flags `eval`, `exec`, and unsafe GENUI rendering. |
| **ASI-04** | Tool Over-Privilege | **Lateral Movement Guard**: Scans for un-sandboxed shell/MCP tools. |
| **ASI-05** | Data Leakage | **PII Osmosis**: Detects CRM/DB flows without scrubbing logic. |
| **ASI-07** | Supply Chain | **Vulnerability Radar**: Maps dependencies to agent-specific CVEs. |
| **ASI-10** | RAG Poisoning | **Integrity Guard**: Detects ungated ingestion into vector stores. |

## 🧪 Advanced Taint Analysis
The Cockpit uses **Intra-procedural Taint Tracking** to trace variables from entry points (e.g., `prompt`, `query`, `input()`) to sensitive sinks (e.g., `subprocess`, `db.execute()`). 

If a direct flow is detected without a `sanitize` or `validate` call in the immediate context, the Auditor generates a **CRITICAL** finding.

## 📡 Vulnerability Radar
Inspired by `agentic-radar`, the **Manifest Auditor** scans `package.json`, `pyproject.toml`, and `requirements.txt` for:
1.  **Legacy Intelligence**: Models (like GPT-3.5) that are susceptible to known prompt-leaking techniques.
2.  **Vulnerable SDKs**: Specific versions of LangChain, Requests, or YAML parsers that have known agent-to-agent SSRF or RCE vulnerabilities.

## 🕹️ Autonomous Fixes
The Cockpit doesn't just find these issues—it fixes them. Using `make apply-fixes`, you can automatically:
- Wrap high-risk tools in a `governance_gate` decorator.
- Inject sanitization logic into data ingestion pipelines.
- Update vulnerable dependencies to their safest Sovereign equivalents.

---
*Generated by the Sovereign Security SME. (v2.0.4 Evolution).*
