Issues

• 8.3.1 is slightly misleading and can be clarified

  OWASP/AISVS#1226 · Filter by author sydseter opened on Nov 12, 2026

• Add in guidance for skills

  OWASP/AISVS#1220 · Filter by author stan-yuen-wd opened on Nov 9, 2026
  7

• [1.02] C3.3: rollback can reinstate an authority that was revoked as a containment action

  OWASP/AISVS#1217 · Filter by author Mayur021 opened on Nov 9, 2026
  2

• [1.02] C9.6: a kill-switch that stops new invocations but not queued or in-flight work

  OWASP/AISVS#1216 · Filter by author Mayur021 opened on Nov 9, 2026
  2

• [1.02] C9.6: the control objective requires mechanisms "exercised over time" and no requirement delivers it

  OWASP/AISVS#1215 · Filter by author Mayur021 opened on Nov 9, 2026
  2

• [1.02] C12: records of an agent's own actions are not protected from the agent

  OWASP/AISVS#1214 · Filter by author Mayur021 opened on Nov 9, 2026
  2

• 5.1.1 and 5.1.2 Levels from L3 -> L1 question

  1.02
  OWASP/AISVS#1195 · Filter by author csfreak92 opened on Oct 14, 2026
  18

  

• [1.02] Scope: AI systems whose output is physical actuation

  1.02
  OWASP/AISVS#1187 · Filter by author sattyamjjain opened on Oct 3, 2026
  8

• C2.1: locale-dependent lowercasing is conformant yet bypassable — add locale-independent case folding, confusable-skeleton, and per-language measurement

  1.02
  OWASP/AISVS#1122 · Filter by author fevziegeyurtsevenler opened on Jul 30, 2026
  7