Reproducible evidence map

Ten agentic risks. Evidence you can verify.

CapitalGuard maps every OWASP Agentic Top 10 risk area to named, versioned control releases and shows where the runtime benchmark produced relevant evidence.

This is CapitalGuard publisher-operated evidence. It is not OWASP endorsement, independent certification, proof of complete mitigation, or a guarantee that vulnerabilities are absent.

Download Evidence Read the OWASP Reference

10 / 10

Risk areas mapped

Bound control releases

Runtime cases cross-referenced

Evidence by risk

Follow each claim to its release manifest.

ASI01

Agent Goal Hijack

Agent Intent Firewall 0.1.0 Context Provenance Gate 0.1.0 Adaptive Attack Lab 0.1.0

Runtime evidence

CGB-ENCLAVE-020

ASI02

Tool Misuse & Exploitation

Enforced Mode 0.7.0 Runtime Sequence Firewall 0.1.0 Economic Action Firewall 0.1.0

Runtime evidence

CGB-ENCLAVE-007, CGB-ENCLAVE-009, CGB-ENCLAVE-013, CGB-ENCLAVE-017, CGB-ENCLAVE-018, CGB-ENCLAVE-021

ASI03

Identity & Privilege Abuse

Agent Security License 1.0.0 Privilege Diff 0.1.0 Secretless Execution Broker 0.1.0

Runtime evidence

CGB-ENCLAVE-001, CGB-ENCLAVE-003, CGB-ENCLAVE-004, CGB-ENCLAVE-006, CGB-ENCLAVE-012, CGB-ENCLAVE-014, CGB-ENCLAVE-017, CGB-ENCLAVE-019, CGB-ENCLAVE-020, CGB-ENCLAVE-022

ASI04

Agentic Supply Chain Vulnerabilities

Agent Surface Compiler 0.1.0 MCP Integrity Gate 0.1.0 Workspace Integrity 0.1.0

Runtime evidence

CGB-ENCLAVE-001, CGB-ENCLAVE-002, CGB-ENCLAVE-005, CGB-ENCLAVE-008, CGB-ENCLAVE-015, CGB-ENCLAVE-021, CGB-ENCLAVE-023

ASI05

Unexpected Code Execution (RCE)

Enforced Mode 0.7.0 Agent Change Gate 0.1.0 Managed Session Supervisor 0.1.2

Runtime evidence

CGB-ENCLAVE-005, CGB-ENCLAVE-007, CGB-ENCLAVE-010, CGB-ENCLAVE-011, CGB-ENCLAVE-012, CGB-ENCLAVE-013

ASI06

Memory & Context Poisoning

Memory Integrity Firewall 0.1.0 Context Provenance Gate 0.1.0 Adaptive Attack Lab 0.1.0

Runtime evidence

Not exercised by the runtime benchmark

ASI07

Insecure Inter-Agent Communication

Delegation Firewall 0.1.0 Agent Security License 1.0.0

Runtime evidence

Not exercised by the runtime benchmark

ASI08

Cascading Failures

Runtime Sequence Firewall 0.1.0 Managed Session Supervisor 0.1.2 Security Flight Recorder 0.1.0

Runtime evidence

CGB-ENCLAVE-016, CGB-ENCLAVE-018, CGB-ENCLAVE-023

ASI09

Human-Agent Trust Exploitation

Agent Intent Firewall 0.1.0 Economic Action Firewall 0.1.0 Agent Change Gate 0.1.0 Reviewable AutoFix 0.1.0

Runtime evidence

Not exercised by the runtime benchmark

ASI10

Rogue Agents

Agent Security License 1.0.0 Agent Intent Firewall 0.1.0 Managed Session Supervisor 0.1.2 Enforced Mode 0.7.0

Runtime evidence

Not exercised by the runtime benchmark

Reproduce the release

Verify the files, not the marketing.

The generator checks every referenced public artifact against its declared SHA-256 digest. The standalone verifier checks this evidence pack after download.

node verify.mjs

Coverage map Coverage CSV Methodology Source bindings Release manifest Standalone verifier

From evidence to protection

Run the licensed controls inside their documented boundaries.

Inspect Enforced Mode