Repository navigation

Consolidated AgentBOM roadmap: reproducible and attested inventories, trace-diff, crosswalk, G7 coverage, graph view; close verified gate bypasses - #138

Merged

aisecnomad merged 21 commits into

mainfrom

claude/agentbom-evidence-roadmap

Nov 12, 2026

Merged

Consolidated AgentBOM roadmap: reproducible and attested inventories, trace-diff, crosswalk, G7 coverage, graph view; close verified gate bypasses#138
aisecnomad merged 21 commits into
mainfrom
claude/agentbom-evidence-roadmap

Commits on Nov 12, 2026
- feat(core): inventory content digest
  claude
  committed
  eeb92d4
- docs: consolidated roadmap and name disambiguation
  claude
  committed
  5a2b060
- feat(evidence): reproducible inventories and the digest command
  claude
  committed
  a077e7d
- feat(evidence): signed inventory attestations
  claude
  committed
  cf469e6
- fix(scanners): close verified gate bypasses in IDE settings, prompts and models
  claude
  committed
  741368c
- feat(graph): risk classes and a self-contained graph view
  claude
  committed
  55c7681
- feat(crosswalk): framework crosswalk for every finding category
  claude
  committed
  b13fa6a
- fix(scanners): MCP servers declared in source are inventoried or reported
  claude
  committed
  f5e94b3
- feat(evidence): trace-diff compares runtime telemetry with the inventory
  claude
  committed
  df54b79
- feat(shadowscan): export a reviewed inventory as a ShadowScan simple list
  claude
  committed
  6988210
- feat(evidence): G7 AI SBOM minimum-element coverage
  claude
  committed
  6102d77
- docs: integrate the evidence features and collector fixes
  claude
  committed
  8cdbcf0
- fix(scanners): close the remaining audit residuals
  claude
  committed
  6c9d9f6
- Merge main (#131, #132) and reconcile deterministic export
  claude
  committed
  175927d
- fix: close the findings of the integrated adversarial review
  claude
  committed
  e1aae22
- docs: align the pinned G7 and crosswalk guide text with the merged tree
  claude
  committed
  12ac648
- style: make implicit string concatenation in lists explicit
  claude
  committed
  0078367
- Merge main (#133 to #137)
  claude
  committed
  49b9568
- fix: break two import cycles CodeQL reported
  claude
  committed
  d055642
- refactor: move inventory_digests out of core.content_digest
  claude
  committed
  e6e4919
- fix(trace): report a tool or agent a span names under any operation name
  claude
  committed
  c5f97be

Commits

Commits on Nov 12, 2026