AGENTIC AUDIT FRAMEWORK v0.2

Autonomy demands boundaries.

Five weighted pillars turn inspectable source and domain evidence into a public automated signal. A match is a lead for human investigation—not proof of a vulnerability or certification.

Static heuristicsFive weighted pillarsDNS separate from scoreNo security certification

Search controlsSeverity19 controls

Security & privacy

Prompt injection, unsafe execution, secrets and network sinks · 25% of the overall signal.

SEC001

Hardcoded credential

CRITICAL

Move the credential to a secret store and rotate it.

Evidence: Static source pattern or domain check
Interpretation: Heuristic finding; requires human validation.

SEC002

Dynamic code execution

CRITICAL

Use an allow-listed dispatcher and argument-safe process calls.

Evidence: Static source pattern or domain check
Interpretation: Heuristic finding; requires human validation.

SEC003

Untrusted data in privileged prompt

MAJOR

Keep untrusted data outside system or developer instructions.

Evidence: Static source pattern or domain check
Interpretation: Heuristic finding; requires human validation.

SEC004

User-controlled network destination

MAJOR

Allow-list destinations and reject private and reserved IP ranges before fetching.

Evidence: Static source pattern or domain check
Interpretation: Heuristic finding; requires human validation.

Guardrails & loop control

Bounded loops, human approval and rate limits · 25% of the overall signal.

REL001

LLM request without token ceiling

MAJOR

Set max_tokens or the provider's equivalent on each model call.

Evidence: Static source pattern or domain check
Interpretation: Heuristic finding; requires human validation.

REL002

Public LLM endpoint without rate limit

MAJOR

Apply per-user or per-IP rate limits before model calls.

Evidence: Static source pattern or domain check
Interpretation: Heuristic finding; requires human validation.

REL003

Unbounded model loop

CRITICAL

Enforce a hard step limit, timeout and cancellation signal.

Evidence: Static source pattern or domain check
Interpretation: Heuristic finding; requires human validation.

REL004

Sensitive action without human approval

MAJOR

Require explicit human approval before a destructive or external action.

Evidence: Static source pattern or domain check
Interpretation: Heuristic finding; requires human validation.

Schema & tooling quality

Runtime validation, safe output and source provenance · 20% of the overall signal.

SCH001

LLM output without runtime schema

MAJOR

Validate model output with Zod, JSON Schema, Pydantic or provider structured output.

Evidence: Static source pattern or domain check
Interpretation: Heuristic finding; requires human validation.

SCH002

Raw model text returned

MINOR

Parse and validate the result before returning it.

Evidence: Static source pattern or domain check
Interpretation: Heuristic finding; requires human validation.

SCH003

RAG answer without citations

MAJOR

Return source identifiers or citations alongside retrieved answers.

Evidence: Static source pattern or domain check
Interpretation: Heuristic finding; requires human validation.

Token & cost efficiency

Model fallbacks, caching and bounded context · 15% of the overall signal.

EFF001

Model call without fallback

MAJOR

Configure a secondary model or explicit fallback path for provider failures.

Evidence: Static source pattern or domain check
Interpretation: Heuristic finding; requires human validation.

EFF002

Repeated model call without cache

MINOR

Cache deterministic or repeated requests with an appropriate expiry.

Evidence: Static source pattern or domain check
Interpretation: Heuristic finding; requires human validation.

EFF003

Unbounded conversation history

MAJOR

Trim or summarize history before sending it to a model.

Evidence: Static source pattern or domain check
Interpretation: Heuristic finding; requires human validation.

EFF004

Unbounded input payload

MINOR

Bound or compress document input before sending it to the provider.

Evidence: Static source pattern or domain check
Interpretation: Heuristic finding; requires human validation.

Entity trust & provenance

DNS ownership, HTTPS and privacy disclosures · 15% of the overall signal.

TRUST001

Domain ownership not verified

MAJOR

Verify the domain using the GAAAS DNS TXT challenge.

Evidence: Static source pattern or domain check
Interpretation: Heuristic finding; requires human validation.

TRUST002

HTTPS not confirmed

MAJOR

Make the official website reachable over HTTPS for verification.

Evidence: Static source pattern or domain check
Interpretation: Heuristic finding; requires human validation.

TRUST003

Privacy Policy link not confirmed

MINOR

Expose a clear Privacy Policy link on the official homepage.

Evidence: Static source pattern or domain check
Interpretation: Heuristic finding; requires human validation.

TRUST004

Terms link not confirmed

MINOR

Expose a clear Terms link on the official homepage.

Evidence: Static source pattern or domain check
Interpretation: Heuristic finding; requires human validation.