capability C4Project 3Medium
Automated code diagnosis & PR generation
Foundation days
4Hardening & validation days
24- 75Review Project 1 provider abstractionW13M1M4R06 R11 R12
- 76Review Project 1 API authenticationW13S0M6R02 R03 R09
- 77Review tool registryW13S2S3R04 R05 R21
- 78Streaming, Budgets & Load ResilienceW13S5M5D4R03 R08 R16 R17 R27
- 79Run Project 1 release candidate suiteW14D1D8D11D12R28 R31 R42
- 80Review Project 2 ingestionW14S0M3R10 R40
- 81Provenance, ACLs & Multi-Hop ResearchW14S4S7M3D3D5D6D10R04 R05 R09 R13 R14
- 82Review model/embedding/reranker provenanceW14M1M2D12R11 R12 R37
- 83Review privacyW14S5M7D4D10R16 R17 R18
- 84Run Project 2 release candidate suiteW14D5D6D8D12R14 R15 R28
- 85Agent State Machine & Sandboxed Code DiagnosisW15S3M5D2D3R02 R21 R24 R41
- 86Review OAuth2/delegated scopesW15S6D7R22 R23
- 87Review memory/checkpoint provenanceW15S11M6D10D11R24 R41
- 88Browser Sandbox & Pixel Auditor AuditW15M9M10D2D3D7D8D9D11R21 R22 R25 R27 R33 R41
- 89Create a unified attack taxonomy across projectsW15S1S8D1D2D3D4D5D6D7D8D9D10D11D12R05 R39 R41
- 90Run direct, indirect, multi-turn, encoded, split-payload, and…W15S2S8D1D8R04 R05 R28
- 91Authorization & Isolation Red TeamingW16S0S4M1D2D3D4D5D7D10D11D12R02 R03 R05 R11 R13 R21 R24 R37
- 92Run availability and economic abuseW16S9M5D1D8R03 R04
- 93Prioritize findings by impact and exploitabilityW16S8S11D8D11D12R31 R42
- 94Design incident severity levels for data exposureW16S11M10R31 R42
- 95Drill 1: Compromised Credential / Delegated TokenW16S6M1D7D8D11D12R11 R22 R23 R37
- 96Simulate a poisoned document or memory entryW16S4M6D5D10R13 R17
- 97Simulate agent runaway or unsafe browser actionW17S3M9D2D7D9D11R33 R41
- 98Incident Playbooks & Tabletop ExerciseW17S11R27 R31 R42