{
  "schemaVersion": "cg-owasp-agentic-coverage-map-1.0.0",
  "version": "1.0.0",
  "generatedAt": "2026-07-20T00:00:00.000Z",
  "framework": {
    "id": "OWASP-AGENTIC-TOP-10-2026",
    "title": "OWASP Top 10 for Agentic Applications 2026",
    "url": "https://genai.owasp.org/resource/owasp-top-10-for-agentic-applications-for-2026/"
  },
  "evidenceOperator": "CapitalGuard Security Research",
  "evidenceProvenance": "publisher_operated",
  "claimBoundary": "This map links CapitalGuard publisher-operated release evidence to relevant OWASP Agentic risk areas. A mapping is not proof of complete mitigation, independent validation, OWASP endorsement, certification, a guarantee of protection, or a product ranking.",
  "categories": [
    {
      "id": "ASI01",
      "name": "Agent Goal Hijack",
      "evidenceStatus": "publisher_evidence_available",
      "controlEvidence": [
        {
          "name": "Agent Intent Firewall",
          "releaseManifestPath": "/agent-intent-firewall/v0.1.0/release-manifest.json",
          "releaseManifestSha256": "f2224ee0ba64e2a065e4f7cb47b75becb6b0d770397960a8c1c117a5ae59c96a",
          "releaseStatus": "stable",
          "version": "0.1.0"
        },
        {
          "name": "Context Provenance Gate",
          "releaseManifestPath": "/context-provenance/v0.1.0/release-manifest.json",
          "releaseManifestSha256": "6d62a2e993322ba3cce712e96b5af94375f23f313a9663e666bfc0d6e36acfdf",
          "releaseStatus": "declared",
          "version": "0.1.0"
        },
        {
          "name": "Adaptive Attack Lab",
          "releaseManifestPath": "/adaptive-attack-lab/v0.1.0/release-manifest.json",
          "releaseManifestSha256": "b9959f60312147859d3c8c5fea232a6dc61e9f31c751b4c8358c8720bdf507c8",
          "releaseStatus": "beta",
          "version": "0.1.0"
        }
      ],
      "runtimeBenchmarkEvidence": [
        {
          "id": "CGB-ENCLAVE-020",
          "passed": true,
          "scenario": "broker_secret_read"
        }
      ]
    },
    {
      "id": "ASI02",
      "name": "Tool Misuse & Exploitation",
      "evidenceStatus": "publisher_evidence_available",
      "controlEvidence": [
        {
          "name": "Enforced Mode",
          "releaseManifestPath": "/gateway/v0.7.0/release-manifest.json",
          "releaseManifestSha256": "271d925a1c5644f3fd9cc545ad12b888ec012670cfa3ca9ee7b7c6863b16c4f2",
          "releaseStatus": "stable",
          "version": "0.7.0"
        },
        {
          "name": "Runtime Sequence Firewall",
          "releaseManifestPath": "/runtime-sequence/v0.1.0/release-manifest.json",
          "releaseManifestSha256": "0bee474ef37b2536be1e9f325e05c72af2015f16e6315d997a3e7138c8aec561",
          "releaseStatus": "declared",
          "version": "0.1.0"
        },
        {
          "name": "Economic Action Firewall",
          "releaseManifestPath": "/economic-action-firewall/v0.1.0/release-manifest.json",
          "releaseManifestSha256": "698e3c60fc29a354f0e7f060cd61228e10e4557608eb3891128de88818717817",
          "releaseStatus": "stable",
          "version": "0.1.0"
        }
      ],
      "runtimeBenchmarkEvidence": [
        {
          "id": "CGB-ENCLAVE-007",
          "passed": true,
          "scenario": "projection_file_mode"
        },
        {
          "id": "CGB-ENCLAVE-009",
          "passed": true,
          "scenario": "network_namespace"
        },
        {
          "id": "CGB-ENCLAVE-013",
          "passed": true,
          "scenario": "docker_socket_mount"
        },
        {
          "id": "CGB-ENCLAVE-017",
          "passed": true,
          "scenario": "authenticated_broker_route"
        },
        {
          "id": "CGB-ENCLAVE-018",
          "passed": true,
          "scenario": "broker_sequence_replay"
        },
        {
          "id": "CGB-ENCLAVE-021",
          "passed": true,
          "scenario": "unreviewed_mcp_adapter"
        }
      ]
    },
    {
      "id": "ASI03",
      "name": "Identity & Privilege Abuse",
      "evidenceStatus": "publisher_evidence_available",
      "controlEvidence": [
        {
          "name": "Agent Security License",
          "releaseManifestPath": "/agent-license/v1.0.0/release-manifest.json",
          "releaseManifestSha256": "a348bc3f323268793987ef72f8d1937a07944f07b783d8cc94db143e1b4feae4",
          "releaseStatus": "declared",
          "version": "1.0.0"
        },
        {
          "name": "Privilege Diff",
          "releaseManifestPath": "/privilege-diff/v0.1.0/release-manifest.json",
          "releaseManifestSha256": "bda124fe4308da3f0895b935dc9ef94d8ff10e33aa3b410fe199d5fa3721430b",
          "releaseStatus": "declared",
          "version": "0.1.0"
        },
        {
          "name": "Secretless Execution Broker",
          "releaseManifestPath": "/secretless-execution-broker/v0.1.0/release-manifest.json",
          "releaseManifestSha256": "2a52d5690327d54c8ba65313158ba734494c7dc32975491ea4f61c3392bb44f1",
          "releaseStatus": "stable",
          "version": "0.1.0"
        }
      ],
      "runtimeBenchmarkEvidence": [
        {
          "id": "CGB-ENCLAVE-001",
          "passed": true,
          "scenario": "signed_session_manifest"
        },
        {
          "id": "CGB-ENCLAVE-003",
          "passed": true,
          "scenario": "secret_projection_exclusion"
        },
        {
          "id": "CGB-ENCLAVE-004",
          "passed": true,
          "scenario": "confidential_projection_redaction"
        },
        {
          "id": "CGB-ENCLAVE-006",
          "passed": true,
          "scenario": "projection_default_deny"
        },
        {
          "id": "CGB-ENCLAVE-012",
          "passed": true,
          "scenario": "host_source_mount"
        },
        {
          "id": "CGB-ENCLAVE-014",
          "passed": true,
          "scenario": "ambient_environment"
        },
        {
          "id": "CGB-ENCLAVE-017",
          "passed": true,
          "scenario": "authenticated_broker_route"
        },
        {
          "id": "CGB-ENCLAVE-019",
          "passed": true,
          "scenario": "broker_authentication"
        },
        {
          "id": "CGB-ENCLAVE-020",
          "passed": true,
          "scenario": "broker_secret_read"
        },
        {
          "id": "CGB-ENCLAVE-022",
          "passed": true,
          "scenario": "event_log_privacy"
        }
      ]
    },
    {
      "id": "ASI04",
      "name": "Agentic Supply Chain Vulnerabilities",
      "evidenceStatus": "publisher_evidence_available",
      "controlEvidence": [
        {
          "name": "Agent Surface Compiler",
          "releaseManifestPath": "/agent-surface-compiler/v0.1.0/release-manifest.json",
          "releaseManifestSha256": "0cad7e80683c33b5190eb767f8c48f81ed0c695d51acb577fd004d0bfaf6990a",
          "releaseStatus": "declared",
          "version": "0.1.0"
        },
        {
          "name": "MCP Integrity Gate",
          "releaseManifestPath": "/mcp-integrity/v0.1.0/release-manifest.json",
          "releaseManifestSha256": "17c068bcedde20bfc39ff4bb518679e5d1c0818bb9e02a6dba2af0b83f218d38",
          "releaseStatus": "beta",
          "version": "0.1.0"
        },
        {
          "name": "Workspace Integrity",
          "releaseManifestPath": "/workspace-integrity/v0.1.0/release-manifest.json",
          "releaseManifestSha256": "05c710de97529b4dbdd44fefc35f4af4063c6df4a138e068dc4b9fc51255c40c",
          "releaseStatus": "beta",
          "version": "0.1.0"
        }
      ],
      "runtimeBenchmarkEvidence": [
        {
          "id": "CGB-ENCLAVE-001",
          "passed": true,
          "scenario": "signed_session_manifest"
        },
        {
          "id": "CGB-ENCLAVE-002",
          "passed": true,
          "scenario": "session_manifest_tamper"
        },
        {
          "id": "CGB-ENCLAVE-005",
          "passed": true,
          "scenario": "projection_symlink_escape"
        },
        {
          "id": "CGB-ENCLAVE-008",
          "passed": true,
          "scenario": "digest_pinned_image"
        },
        {
          "id": "CGB-ENCLAVE-015",
          "passed": true,
          "scenario": "unpinned_image"
        },
        {
          "id": "CGB-ENCLAVE-021",
          "passed": true,
          "scenario": "unreviewed_mcp_adapter"
        },
        {
          "id": "CGB-ENCLAVE-023",
          "passed": true,
          "scenario": "workspace_integrity_before_authority"
        }
      ]
    },
    {
      "id": "ASI05",
      "name": "Unexpected Code Execution (RCE)",
      "evidenceStatus": "publisher_evidence_available",
      "controlEvidence": [
        {
          "name": "Enforced Mode",
          "releaseManifestPath": "/gateway/v0.7.0/release-manifest.json",
          "releaseManifestSha256": "271d925a1c5644f3fd9cc545ad12b888ec012670cfa3ca9ee7b7c6863b16c4f2",
          "releaseStatus": "stable",
          "version": "0.7.0"
        },
        {
          "name": "Agent Change Gate",
          "releaseManifestPath": "/agent-change-gate/v0.1.0/release-manifest.json",
          "releaseManifestSha256": "f58118dff31c782a2c4bb15ca45a2a5ecfc208d08076e23a6ecdad060bf190ca",
          "releaseStatus": "stable",
          "version": "0.1.0"
        },
        {
          "name": "Managed Session Supervisor",
          "releaseManifestPath": "/managed-session/v0.1.2/release-manifest.json",
          "releaseManifestSha256": "db178179b84f1d9e5dd04e26a5db4c0b0b20bb165b485a83c58588592aabb684",
          "releaseStatus": "beta",
          "version": "0.1.2"
        }
      ],
      "runtimeBenchmarkEvidence": [
        {
          "id": "CGB-ENCLAVE-005",
          "passed": true,
          "scenario": "projection_symlink_escape"
        },
        {
          "id": "CGB-ENCLAVE-007",
          "passed": true,
          "scenario": "projection_file_mode"
        },
        {
          "id": "CGB-ENCLAVE-010",
          "passed": true,
          "scenario": "root_filesystem"
        },
        {
          "id": "CGB-ENCLAVE-011",
          "passed": true,
          "scenario": "capability_and_privilege_drop"
        },
        {
          "id": "CGB-ENCLAVE-012",
          "passed": true,
          "scenario": "host_source_mount"
        },
        {
          "id": "CGB-ENCLAVE-013",
          "passed": true,
          "scenario": "docker_socket_mount"
        }
      ]
    },
    {
      "id": "ASI06",
      "name": "Memory & Context Poisoning",
      "evidenceStatus": "publisher_evidence_available",
      "controlEvidence": [
        {
          "name": "Memory Integrity Firewall",
          "releaseManifestPath": "/memory-integrity/v0.1.0/release-manifest.json",
          "releaseManifestSha256": "fd04080561a42c1d89a597e66a6a6a4cdf3bc0490fc784ab07e31b6ee707135a",
          "releaseStatus": "beta",
          "version": "0.1.0"
        },
        {
          "name": "Context Provenance Gate",
          "releaseManifestPath": "/context-provenance/v0.1.0/release-manifest.json",
          "releaseManifestSha256": "6d62a2e993322ba3cce712e96b5af94375f23f313a9663e666bfc0d6e36acfdf",
          "releaseStatus": "declared",
          "version": "0.1.0"
        },
        {
          "name": "Adaptive Attack Lab",
          "releaseManifestPath": "/adaptive-attack-lab/v0.1.0/release-manifest.json",
          "releaseManifestSha256": "b9959f60312147859d3c8c5fea232a6dc61e9f31c751b4c8358c8720bdf507c8",
          "releaseStatus": "beta",
          "version": "0.1.0"
        }
      ],
      "runtimeBenchmarkEvidence": []
    },
    {
      "id": "ASI07",
      "name": "Insecure Inter-Agent Communication",
      "evidenceStatus": "publisher_evidence_available",
      "controlEvidence": [
        {
          "name": "Delegation Firewall",
          "releaseManifestPath": "/delegation/v0.1.0/release-manifest.json",
          "releaseManifestSha256": "f88daf2fb9262a86083f16270b3923d055a70d00d3865619b4b7aeea2b628588",
          "releaseStatus": "beta",
          "version": "0.1.0"
        },
        {
          "name": "Agent Security License",
          "releaseManifestPath": "/agent-license/v1.0.0/release-manifest.json",
          "releaseManifestSha256": "a348bc3f323268793987ef72f8d1937a07944f07b783d8cc94db143e1b4feae4",
          "releaseStatus": "declared",
          "version": "1.0.0"
        }
      ],
      "runtimeBenchmarkEvidence": []
    },
    {
      "id": "ASI08",
      "name": "Cascading Failures",
      "evidenceStatus": "publisher_evidence_available",
      "controlEvidence": [
        {
          "name": "Runtime Sequence Firewall",
          "releaseManifestPath": "/runtime-sequence/v0.1.0/release-manifest.json",
          "releaseManifestSha256": "0bee474ef37b2536be1e9f325e05c72af2015f16e6315d997a3e7138c8aec561",
          "releaseStatus": "declared",
          "version": "0.1.0"
        },
        {
          "name": "Managed Session Supervisor",
          "releaseManifestPath": "/managed-session/v0.1.2/release-manifest.json",
          "releaseManifestSha256": "db178179b84f1d9e5dd04e26a5db4c0b0b20bb165b485a83c58588592aabb684",
          "releaseStatus": "beta",
          "version": "0.1.2"
        },
        {
          "name": "Security Flight Recorder",
          "releaseManifestPath": "/flight-recorder/v0.1.0/release-manifest.json",
          "releaseManifestSha256": "0d5dd422814878ebdc8642bd26f345a80231d89094b14a0958d79ef0bb298d6c",
          "releaseStatus": "declared",
          "version": "0.1.0"
        }
      ],
      "runtimeBenchmarkEvidence": [
        {
          "id": "CGB-ENCLAVE-016",
          "passed": true,
          "scenario": "missing_oci_runtime"
        },
        {
          "id": "CGB-ENCLAVE-018",
          "passed": true,
          "scenario": "broker_sequence_replay"
        },
        {
          "id": "CGB-ENCLAVE-023",
          "passed": true,
          "scenario": "workspace_integrity_before_authority"
        }
      ]
    },
    {
      "id": "ASI09",
      "name": "Human-Agent Trust Exploitation",
      "evidenceStatus": "publisher_evidence_available",
      "controlEvidence": [
        {
          "name": "Agent Intent Firewall",
          "releaseManifestPath": "/agent-intent-firewall/v0.1.0/release-manifest.json",
          "releaseManifestSha256": "f2224ee0ba64e2a065e4f7cb47b75becb6b0d770397960a8c1c117a5ae59c96a",
          "releaseStatus": "stable",
          "version": "0.1.0"
        },
        {
          "name": "Economic Action Firewall",
          "releaseManifestPath": "/economic-action-firewall/v0.1.0/release-manifest.json",
          "releaseManifestSha256": "698e3c60fc29a354f0e7f060cd61228e10e4557608eb3891128de88818717817",
          "releaseStatus": "stable",
          "version": "0.1.0"
        },
        {
          "name": "Agent Change Gate",
          "releaseManifestPath": "/agent-change-gate/v0.1.0/release-manifest.json",
          "releaseManifestSha256": "f58118dff31c782a2c4bb15ca45a2a5ecfc208d08076e23a6ecdad060bf190ca",
          "releaseStatus": "stable",
          "version": "0.1.0"
        },
        {
          "name": "Reviewable AutoFix",
          "releaseManifestPath": "/autofix/v0.1.0/release-manifest.json",
          "releaseManifestSha256": "8c7bcedc640f31b12bdb7b50430a937e4056c1b3037f451d9f9e9b5e7600f3d4",
          "releaseStatus": "declared",
          "version": "0.1.0"
        }
      ],
      "runtimeBenchmarkEvidence": []
    },
    {
      "id": "ASI10",
      "name": "Rogue Agents",
      "evidenceStatus": "publisher_evidence_available",
      "controlEvidence": [
        {
          "name": "Agent Security License",
          "releaseManifestPath": "/agent-license/v1.0.0/release-manifest.json",
          "releaseManifestSha256": "a348bc3f323268793987ef72f8d1937a07944f07b783d8cc94db143e1b4feae4",
          "releaseStatus": "declared",
          "version": "1.0.0"
        },
        {
          "name": "Agent Intent Firewall",
          "releaseManifestPath": "/agent-intent-firewall/v0.1.0/release-manifest.json",
          "releaseManifestSha256": "f2224ee0ba64e2a065e4f7cb47b75becb6b0d770397960a8c1c117a5ae59c96a",
          "releaseStatus": "stable",
          "version": "0.1.0"
        },
        {
          "name": "Managed Session Supervisor",
          "releaseManifestPath": "/managed-session/v0.1.2/release-manifest.json",
          "releaseManifestSha256": "db178179b84f1d9e5dd04e26a5db4c0b0b20bb165b485a83c58588592aabb684",
          "releaseStatus": "beta",
          "version": "0.1.2"
        },
        {
          "name": "Enforced Mode",
          "releaseManifestPath": "/gateway/v0.7.0/release-manifest.json",
          "releaseManifestSha256": "271d925a1c5644f3fd9cc545ad12b888ec012670cfa3ca9ee7b7c6863b16c4f2",
          "releaseStatus": "stable",
          "version": "0.7.0"
        }
      ],
      "runtimeBenchmarkEvidence": []
    }
  ]
}