[{"data":1,"prerenderedAt":707},["ShallowReactive",2],{"cycle-doc-design-c123-research\u002Fowasp\u002FREADME.md":3},{"cycle":4,"project":7,"path":10,"title":11,"toc":12,"ast":17},{"id":5,"title":6},"c123","Compliance Frameworks",{"id":8,"label":9},"design","Design","research\u002Fowasp\u002FREADME.md","OWASP sources for c123 — files, licenses, and what we may do with them",[13,14,15,16],"The Agentic paper's Additional Resources (three items)","What CC BY-SA 4.0 lets us do","The OWASP name and logo (trademark, separate from copyright)","Recommendation",{"type":18,"children":19},"root",[20,28,177,210,229,263,269,511,523,528,533,541,576,594,604,614,619,632,678,683],{"type":21,"tag":22,"props":23,"children":24},"element","p",{},[25],{"type":26,"value":27},"text","Downloaded 2026-10-27 from genai.owasp.org. Read in full: the Agentic Top 10. The LLM Top 10 PDFs are kept for the v1 framework (F4) and only their license and list were checked.",{"type":21,"tag":29,"props":30,"children":31},"table",{},[32,66],{"type":21,"tag":33,"props":34,"children":35},"thead",{},[36],{"type":21,"tag":37,"props":38,"children":39},"tr",{},[40,46,51,56,61],{"type":21,"tag":41,"props":42,"children":43},"th",{},[44],{"type":26,"value":45},"File",{"type":21,"tag":41,"props":47,"children":48},{},[49],{"type":26,"value":50},"Document",{"type":21,"tag":41,"props":52,"children":53},{},[54],{"type":26,"value":55},"Published",{"type":21,"tag":41,"props":57,"children":58},{},[59],{"type":26,"value":60},"Pages",{"type":21,"tag":41,"props":62,"children":63},{},[64],{"type":26,"value":65},"License",{"type":21,"tag":67,"props":68,"children":69},"tbody",{},[70,114,146],{"type":21,"tag":37,"props":71,"children":72},{},[73,94,99,104,109],{"type":21,"tag":74,"props":75,"children":76},"td",{},[77,84,86,92],{"type":21,"tag":78,"props":79,"children":81},"code",{"className":80},[],[82],{"type":26,"value":83},"owasp-top10-agentic-applications-2026.pdf",{"type":26,"value":85}," (+ ",{"type":21,"tag":78,"props":87,"children":89},{"className":88},[],[90],{"type":26,"value":91},".txt",{"type":26,"value":93},", pdftotext -layout)",{"type":21,"tag":74,"props":95,"children":96},{},[97],{"type":26,"value":98},"OWASP Top 10 for Agentic Applications 2026, Agentic Security Initiative",{"type":21,"tag":74,"props":100,"children":101},{},[102],{"type":26,"value":103},"9 Dec 2025 (\"Version 2026\")",{"type":21,"tag":74,"props":105,"children":106},{},[107],{"type":26,"value":108},"57",{"type":21,"tag":74,"props":110,"children":111},{},[112],{"type":26,"value":113},"CC BY-SA 4.0 (license block, printed p.1)",{"type":21,"tag":37,"props":115,"children":116},{},[117,126,131,136,141],{"type":21,"tag":74,"props":118,"children":119},{},[120],{"type":21,"tag":78,"props":121,"children":123},{"className":122},[],[124],{"type":26,"value":125},"owasp-top10-llm-applications-2026.pdf",{"type":21,"tag":74,"props":127,"children":128},{},[129],{"type":26,"value":130},"OWASP Top 10 for LLM Applications 2026",{"type":21,"tag":74,"props":132,"children":133},{},[134],{"type":26,"value":135},"3 Aug 2026",{"type":21,"tag":74,"props":137,"children":138},{},[139],{"type":26,"value":140},"122",{"type":21,"tag":74,"props":142,"children":143},{},[144],{"type":26,"value":145},"CC BY-SA 4.0",{"type":21,"tag":37,"props":147,"children":148},{},[149,158,163,168,173],{"type":21,"tag":74,"props":150,"children":151},{},[152],{"type":21,"tag":78,"props":153,"children":155},{"className":154},[],[156],{"type":26,"value":157},"owasp-top10-llm-applications-2025.pdf",{"type":21,"tag":74,"props":159,"children":160},{},[161],{"type":26,"value":162},"OWASP Top 10 for LLM Applications 2025",{"type":21,"tag":74,"props":164,"children":165},{},[166],{"type":26,"value":167},"Nov 2024",{"type":21,"tag":74,"props":169,"children":170},{},[171],{"type":26,"value":172},"45",{"type":21,"tag":74,"props":174,"children":175},{},[176],{"type":26,"value":145},{"type":21,"tag":22,"props":178,"children":179},{},[180,182,191,193,200,201,208],{"type":26,"value":181},"Source pages: ",{"type":21,"tag":183,"props":184,"children":188},"a",{"href":185,"rel":186},"https:\u002F\u002Fgenai.owasp.org\u002Fresource\u002Fowasp-top-10-for-agentic-applications-for-2026\u002F",[187],"nofollow",[189],{"type":26,"value":190},"Agentic",{"type":26,"value":192}," · ",{"type":21,"tag":183,"props":194,"children":197},{"href":195,"rel":196},"https:\u002F\u002Fgenai.owasp.org\u002Fresource\u002Fowasp-genai-llm-top-10-2026\u002F",[187],[198],{"type":26,"value":199},"LLM 2026",{"type":26,"value":192},{"type":21,"tag":183,"props":202,"children":205},{"href":203,"rel":204},"https:\u002F\u002Fgenai.owasp.org\u002Fresource\u002Fowasp-top-10-for-llm-applications-2025\u002F",[187],[206],{"type":26,"value":207},"LLM 2025",{"type":26,"value":209},". The genai.owasp.org footer also says all site content is CC BY-SA 4.0 unless stated otherwise.",{"type":21,"tag":22,"props":211,"children":212},{},[213,219,221,227],{"type":21,"tag":214,"props":215,"children":216},"strong",{},[217],{"type":26,"value":218},"PDF page = printed page + 1",{"type":26,"value":220}," in the Agentic PDF (the cover is unnumbered). Deep links use the PDF page: ",{"type":21,"tag":78,"props":222,"children":224},{"className":223},[],[225],{"type":26,"value":226},"…agentic-applications-2026.pdf#page=10",{"type":26,"value":228}," opens ASI01 (printed p.9).",{"type":21,"tag":22,"props":230,"children":231},{},[232,237,239,245,247,253,255,261],{"type":21,"tag":214,"props":233,"children":234},{},[235],{"type":26,"value":236},"Verified today:",{"type":26,"value":238}," the ASI01–ASI10 titles and the LLM 2026 order (LLM01 Prompt Injection, 02 Sensitive Information Disclosure, 03 Excessive Agency, 04 Supply Chain, 05 Data and Model Poisoning, 06 Unbounded Consumption, 07 Misinformation, 08 Hidden Context Exposure, 09 Vector and Embedding Weaknesses, 10 Improper Output Handling). Both were ",{"type":21,"tag":78,"props":240,"children":242},{"className":241},[],[243],{"type":26,"value":244},"[S]",{"type":26,"value":246}," in ",{"type":21,"tag":78,"props":248,"children":250},{"className":249},[],[251],{"type":26,"value":252},"frameworks-dossier.md",{"type":26,"value":254}," §1; they are now ",{"type":21,"tag":78,"props":256,"children":258},{"className":257},[],[259],{"type":26,"value":260},"[V]",{"type":26,"value":262}," from the PDFs.",{"type":21,"tag":264,"props":265,"children":267},"h2",{"id":266},"the-agentic-papers-additional-resources-three-items",[268],{"type":26,"value":13},{"type":21,"tag":29,"props":270,"children":271},{},[272,302],{"type":21,"tag":33,"props":273,"children":274},{},[275],{"type":21,"tag":37,"props":276,"children":277},{},[278,283,288,293,297],{"type":21,"tag":41,"props":279,"children":280},{},[281],{"type":26,"value":282},"Resource",{"type":21,"tag":41,"props":284,"children":285},{},[286],{"type":26,"value":287},"What it is",{"type":21,"tag":41,"props":289,"children":290},{},[291],{"type":26,"value":292},"Where",{"type":21,"tag":41,"props":294,"children":295},{},[296],{"type":26,"value":65},{"type":21,"tag":41,"props":298,"children":299},{},[300],{"type":26,"value":301},"Can we host a copy?",{"type":21,"tag":67,"props":303,"children":304},{},[305,345,414],{"type":21,"tag":37,"props":306,"children":307},{},[308,318,323,335,340],{"type":21,"tag":74,"props":309,"children":310},{},[311,316],{"type":21,"tag":214,"props":312,"children":313},{},[314],{"type":26,"value":315},"GenAI Red Teaming Manual v1.0",{"type":26,"value":317}," (20 Oct 2026)",{"type":21,"tag":74,"props":319,"children":320},{},[321],{"type":26,"value":322},"144-page, eight-phase red-team method for models, apps and agents",{"type":21,"tag":74,"props":324,"children":325},{},[326,333],{"type":21,"tag":183,"props":327,"children":330},{"href":328,"rel":329},"https:\u002F\u002Fgenai.owasp.org\u002Fresource\u002Fgenai-red-teaming-manual-version-1-0\u002F",[187],[331],{"type":26,"value":332},"page",{"type":26,"value":334}," · PDF 2.9 MB",{"type":21,"tag":74,"props":336,"children":337},{},[338],{"type":26,"value":339},"CC BY-SA 4.0 (license block in the PDF)",{"type":21,"tag":74,"props":341,"children":342},{},[343],{"type":26,"value":344},"Yes, unmodified, with attribution",{"type":21,"tag":37,"props":346,"children":347},{},[348,358,363,375,409],{"type":21,"tag":74,"props":349,"children":350},{},[351,356],{"type":21,"tag":214,"props":352,"children":353},{},[354],{"type":26,"value":355},"Agent Control Standard (ACS)",{"type":26,"value":357}," (1 Sep 2026)",{"type":21,"tag":74,"props":359,"children":360},{},[361],{"type":26,"value":362},"Open standard for runtime agent control: middleware hooks, declarative policy, observability. Closest OWASP artifact to Qpoint's shape",{"type":21,"tag":74,"props":364,"children":365},{},[366,373],{"type":21,"tag":183,"props":367,"children":370},{"href":368,"rel":369},"https:\u002F\u002Fgithub.com\u002FGenAI-Security-Project\u002Fagent-control-standard",[187],[371],{"type":26,"value":372},"github.com\u002FGenAI-Security-Project\u002Fagent-control-standard",{"type":26,"value":374}," (live repo, pushed 26 Oct 2026)",{"type":21,"tag":74,"props":376,"children":377},{},[378,380,385,387,391,393,399,401,407],{"type":26,"value":379},"Dual: ",{"type":21,"tag":214,"props":381,"children":382},{},[383],{"type":26,"value":384},"Apache-2.0",{"type":26,"value":386}," for spec, schemas, code; ",{"type":21,"tag":214,"props":388,"children":389},{},[390],{"type":26,"value":145},{"type":26,"value":392}," for ",{"type":21,"tag":78,"props":394,"children":396},{"className":395},[],[397],{"type":26,"value":398},"docs\u002F",{"type":26,"value":400},", README and prose (",{"type":21,"tag":78,"props":402,"children":404},{"className":403},[],[405],{"type":26,"value":406},"LICENSING.md",{"type":26,"value":408},")",{"type":21,"tag":74,"props":410,"children":411},{},[412],{"type":26,"value":413},"Link, don't copy: it changes weekly. Apache parts could be used in product code with NOTICE",{"type":21,"tag":37,"props":415,"children":416},{},[417,426,431,449,462],{"type":21,"tag":74,"props":418,"children":419},{},[420,425],{"type":21,"tag":214,"props":421,"children":422},{},[423],{"type":26,"value":424},"GenAI Security Industry Framework Crosswalk",{"type":26,"value":357},{"type":21,"tag":74,"props":427,"children":428},{},[429],{"type":26,"value":430},"Maps 51 GenAI risks from four OWASP lists to 25 frameworks",{"type":21,"tag":74,"props":432,"children":433},{},[434,441,442],{"type":21,"tag":183,"props":435,"children":438},{"href":436,"rel":437},"https:\u002F\u002Fgenai-security-project.github.io\u002Fcrosswalk\u002F",[187],[439],{"type":26,"value":440},"site",{"type":26,"value":192},{"type":21,"tag":183,"props":443,"children":446},{"href":444,"rel":445},"https:\u002F\u002Fgithub.com\u002FGenAI-Security-Project\u002Fcrosswalk",[187],[447],{"type":26,"value":448},"repo",{"type":21,"tag":74,"props":450,"children":451},{},[452,454,460],{"type":26,"value":453},"CC BY-SA 4.0 (",{"type":21,"tag":78,"props":455,"children":457},{"className":456},[],[458],{"type":26,"value":459},"LICENSE.md",{"type":26,"value":461},", © 2026 OWASP GenAI Data Security Initiative)",{"type":21,"tag":74,"props":463,"children":464},{},[465,467,472,474,480,482,488,489,495,496,502,503,509],{"type":26,"value":466},"Yes, but link it: it's a live site. ",{"type":21,"tag":214,"props":468,"children":469},{},[470],{"type":26,"value":471},"Directly useful to c123:",{"type":26,"value":473}," ",{"type":21,"tag":78,"props":475,"children":477},{"className":476},[],[478],{"type":26,"value":479},"agentic-top10\u002FAgentic_NISTAIRMF.md",{"type":26,"value":481},", ",{"type":21,"tag":78,"props":483,"children":485},{"className":484},[],[486],{"type":26,"value":487},"Agentic_SOC2.md",{"type":26,"value":481},{"type":21,"tag":78,"props":490,"children":492},{"className":491},[],[493],{"type":26,"value":494},"Agentic_ISO42001.md",{"type":26,"value":481},{"type":21,"tag":78,"props":497,"children":499},{"className":498},[],[500],{"type":26,"value":501},"Agentic_EUAIAct.md",{"type":26,"value":481},{"type":21,"tag":78,"props":504,"children":506},{"className":505},[],[507],{"type":26,"value":508},"Agentic_AIUC1.md",{"type":26,"value":510}," cover the v1 three and the phase-2 list",{"type":21,"tag":22,"props":512,"children":513},{},[514,516,521],{"type":26,"value":515},"The paper itself also leans on these OWASP documents, all genai.owasp.org and so CC BY-SA 4.0 by default: Agentic AI – Threats and Mitigations (the T1–T17 taxonomy), Agentic Threat Modelling Guide, Securing Agentic Applications, State of Agentic AI Security and Governance, the Non-Human Identities Top 10 (2025), AIVSS, CycloneDX\u002FAIBOM, and the ",{"type":21,"tag":214,"props":517,"children":518},{},[519],{"type":26,"value":520},"ASI Exploits & Incidents tracker",{"type":26,"value":522}," on GitHub (updated weekly). These are link candidates, not files to host.",{"type":21,"tag":264,"props":524,"children":526},{"id":525},"what-cc-by-sa-40-lets-us-do",[527],{"type":26,"value":14},{"type":21,"tag":22,"props":529,"children":530},{},[531],{"type":26,"value":532},"Not legal advice; a reading of the license text for our cases.",{"type":21,"tag":22,"props":534,"children":535},{},[536],{"type":21,"tag":214,"props":537,"children":538},{},[539],{"type":26,"value":540},"Allowed, commercially, without asking:",{"type":21,"tag":542,"props":543,"children":544},"ul",{},[545,556,566],{"type":21,"tag":546,"props":547,"children":548},"li",{},[549,554],{"type":21,"tag":214,"props":550,"children":551},{},[552],{"type":26,"value":553},"Host the unmodified PDFs",{"type":26,"value":555}," on the design site or in qdash as a convenience download. Copying verbatim is \"Share\", and ShareAlike does not attach to verbatim copies.",{"type":21,"tag":546,"props":557,"children":558},{},[559,564],{"type":21,"tag":214,"props":560,"children":561},{},[562],{"type":26,"value":563},"Quote passages",{"type":26,"value":565}," (a risk's description, a numbered mitigation) in the framework detail page or the tour, with attribution.",{"type":21,"tag":546,"props":567,"children":568},{},[569,574],{"type":21,"tag":214,"props":570,"children":571},{},[572],{"type":26,"value":573},"Redraw the \"At a Glance\" diagram",{"type":26,"value":575}," with Qpoint's observation points on it. That is an adaptation, so the redrawn diagram itself must carry CC BY-SA 4.0 and say it was changed. Our page around it does not.",{"type":21,"tag":22,"props":577,"children":578},{},[579,584,586,592],{"type":21,"tag":214,"props":580,"children":581},{},[582],{"type":26,"value":583},"What attribution must carry",{"type":26,"value":585},", everywhere a copy or quote appears: title, \"OWASP GenAI Security Project\", a link to the source page, a link to the license (",{"type":21,"tag":183,"props":587,"children":590},{"href":588,"rel":589},"https:\u002F\u002Fcreativecommons.org\u002Flicenses\u002Fby-sa\u002F4.0\u002F",[187],[591],{"type":26,"value":588},{"type":26,"value":593},"), and \"changed\" if we changed it. The paper's own attribution note names the wrong asset (\"GenAI Red Teaming Guide\", a copy-paste slip in its license block); use the paper's real title.",{"type":21,"tag":22,"props":595,"children":596},{},[597,602],{"type":21,"tag":214,"props":598,"children":599},{},[600],{"type":26,"value":601},"ShareAlike only reaches adapted material.",{"type":26,"value":603}," Our own \"what this means for you\" lines, the mapping to Qpoint policies, and the tour script are original writing, not adaptations. They stay ours. Lightly reworded copies of OWASP's text would be adaptations and would have to be CC BY-SA, so either quote exactly (attributed) or write genuinely our own.",{"type":21,"tag":22,"props":605,"children":606},{},[607,612],{"type":21,"tag":214,"props":608,"children":609},{},[610],{"type":26,"value":611},"No added restrictions.",{"type":26,"value":613}," Don't wrap the hosted PDFs in DRM or terms that forbid recipients from re-sharing. Serving them behind Cloudflare Access or qdash login is access control on our site, not a restriction on the file once someone has it; I read that as fine, but it's the one point to put to counsel if it matters.",{"type":21,"tag":264,"props":615,"children":617},{"id":616},"the-owasp-name-and-logo-trademark-separate-from-copyright",[618],{"type":26,"value":15},{"type":21,"tag":22,"props":620,"children":621},{},[622,624,630],{"type":26,"value":623},"CC BY-SA covers the text, not the marks. OWASP's word mark and logo guidelines (",{"type":21,"tag":78,"props":625,"children":627},{"className":626},[],[628],{"type":26,"value":629},"OWASP\u002Fwww-policy\u002Foperational\u002Fmark-usage-guidelines.md",{"type":26,"value":631},") say:",{"type":21,"tag":542,"props":633,"children":634},{},[635,645,663,673],{"type":21,"tag":546,"props":636,"children":637},{},[638,643],{"type":21,"tag":214,"props":639,"children":640},{},[641],{"type":26,"value":642},"No logo.",{"type":26,"value":644}," The OWASP logo needs a signed license agreement. Don't put it (or a cover thumbnail showing it) on our cards; use a text card with the title.",{"type":21,"tag":546,"props":646,"children":647},{},[648,653,655,661],{"type":21,"tag":214,"props":649,"children":650},{},[651],{"type":26,"value":652},"The name, used to name the document, is fine",{"type":26,"value":654},": \"the OWASP® Top 10 for Agentic Applications\". Use it as an adjective before a noun, never as a noun or in a product, feature or tour ",{"type":21,"tag":656,"props":657,"children":658},"em",{},[659],{"type":26,"value":660},"name",{"type":26,"value":662}," (\"Qpoint OWASP Mode\" is out; \"a tour of your agents against the OWASP® Top 10 for Agentic Applications\" is in).",{"type":21,"tag":546,"props":664,"children":665},{},[666,671],{"type":21,"tag":214,"props":667,"children":668},{},[669],{"type":26,"value":670},"Never imply endorsement.",{"type":26,"value":672}," Say \"mapped by Qpoint\", never \"OWASP-certified\" or \"OWASP-approved\". This matches F1: evidence, not compliance.",{"type":21,"tag":546,"props":674,"children":675},{},[676],{"type":26,"value":677},"Use ® on first or most prominent use (US-registered) and carry the ownership legend on pages that show the mark: \"The OWASP® Word Mark … are registered or unregistered service marks of OWASP Foundation, Inc. …\"",{"type":21,"tag":264,"props":679,"children":681},{"id":680},"recommendation",[682],{"type":26,"value":16},{"type":21,"tag":684,"props":685,"children":686},"ol",{},[687,692,697,702],{"type":21,"tag":546,"props":688,"children":689},{},[690],{"type":26,"value":691},"Host the Agentic PDF and both LLM PDFs, unmodified, as a \"Read the source\" download on framework detail, with the attribution line and license link.",{"type":21,"tag":546,"props":693,"children":694},{},[695],{"type":26,"value":696},"Link, don't host, the Red Teaming Manual, ACS and the Crosswalk (two are live repos; the manual is long and only needed by red-teamers). The Red Teaming Manual is the natural link from every \"yours to do: red-team it\" mitigation (ASI01 #8, ASI06 #7, ASI08 #9).",{"type":21,"tag":546,"props":698,"children":699},{},[700],{"type":26,"value":701},"Quote mitigations exactly where we illuminate the paper; write our own words everywhere else.",{"type":21,"tag":546,"props":703,"children":704},{},[705],{"type":26,"value":706},"No OWASP logo anywhere; text cards only.",1794599453955]