capability C1Project 1High
Autonomous task execution with human approval
Foundation days
9- 6Implement a small tool registry with calculate and search_notesW1S3S7R01 R07
- 7Direct Prompt InjectionW2S2R04 R05
- 8Study confused-deputy risks and least privilegeW2S1S3R02 R10
- 9Study advanced injection patternsW2S2D1R04 R05 R28
- 10Add tool timeoutsW2S2M5D1R01 R10
- 11SSE Streaming & CancellationW2S0M5R01 R03 R08 R09
- 12Implement token countingW2M5R03 R04
- 13Implement request rate limitsW3M5R03 R25
- 14Persistent Memory SchemaW3M6D11R05 R17 R41
Hardening & validation days
15- 75Review Project 1 provider abstractionW13M1M4R06 R11 R12
- 76Review Project 1 API authenticationW13S0M6R02 R03 R09
- 77Review tool registryW13S2S3R04 R05 R21
- 78Streaming, Budgets & Load ResilienceW13S5M5D4R03 R08 R16 R17 R27
- 79Run Project 1 release candidate suiteW14D1D8D11D12R28 R31 R42
- 89Create a unified attack taxonomy across projectsW15S1S8D1D2D3D4D5D6D7D8D9D10D11D12R05 R39 R41
- 90Run direct, indirect, multi-turn, encoded, split-payload, and…W15S2S8D1D8R04 R05 R28
- 91Authorization & Isolation Red TeamingW16S0S4M1D2D3D4D5D7D10D11D12R02 R03 R05 R11 R13 R21 R24 R37
- 92Run availability and economic abuseW16S9M5D1D8R03 R04
- 93Prioritize findings by impact and exploitabilityW16S8S11D8D11D12R31 R42
- 94Design incident severity levels for data exposureW16S11M10R31 R42
- 95Drill 1: Compromised Credential / Delegated TokenW16S6M1D7D8D11D12R11 R22 R23 R37
- 96Simulate a poisoned document or memory entryW16S4M6D5D10R13 R17
- 97Simulate agent runaway or unsafe browser actionW17S3M9D2D7D9D11R33 R41
- 98Incident Playbooks & Tabletop ExerciseW17S11R27 R31 R42