schema.json

{
  "$schema": "http://json-schema.org/draft-07/schema#",
  "title": "GenAI Security Crosswalk Entry",
  "description": "Schema for mapping OWASP GenAI vulnerabilities to security frameworks",
  "type": "object",
  "required": [
    "id",
    "name",
    "source_list",
    "severity",
    "mappings"
  ],
  "properties": {
    "id": {
      "type": "string",
      "description": "Vulnerability identifier e.g. LLM01, ASI03, DSGAI07, AST01",
      "pattern": "^(LLM\\d{2}|ASI\\d{2}|DSGAI\\d{2}|AST\\d{2})$"
    },
    "name": {
      "type": "string",
      "description": "Short human-readable name e.g. Prompt Injection"
    },
    "source_list": {
      "type": "string",
      "enum": [
        "LLM-Top10-2026",
        "Agentic-Top10-2026",
        "DSGAI-2026",
        "AST-Top10-2026"
      ],
      "description": "Which OWASP list this entry belongs to"
    },
    "version": {
      "type": "string",
      "description": "Mapping version e.g. 2026-Q1"
    },
    "severity": {
      "type": "string",
      "enum": [
        "Critical",
        "High",
        "Medium",
        "Low"
      ],
      "description": "Standardised severity aligned to AIVSS"
    },
    "aivss_score": {
      "type": [
        "number",
        "null"
      ],
      "minimum": 0,
      "maximum": 10,
      "description": "OWASP AIVSS score where available"
    },
    "audience": {
      "type": "array",
      "items": {
        "type": "string",
        "enum": [
          "developer",
          "security-engineer",
          "auditor",
          "ciso",
          "red-teamer",
          "data-engineer",
          "ml-engineer",
          "ot-engineer",
          "compliance"
        ]
      }
    },
    "mappings": {
      "type": "array",
      "description": "One entry per framework control",
      "items": {
        "type": "object",
        "required": [
          "framework",
          "control_id",
          "control_name",
          "tier",
          "scope"
        ],
        "properties": {
          "framework": {
            "type": "string",
            "description": "Framework identifier e.g. MITRE-ATLAS, ISO-42001, AIUC-1"
          },
          "control_id": {
            "type": "string",
            "description": "Control or clause ID within the framework"
          },
          "control_name": {
            "type": "string",
            "description": "Human-readable control name"
          },
          "url": {
            "type": "string",
            "format": "uri",
            "description": "Direct link to the control"
          },
          "tier": {
            "type": "string",
            "enum": [
              "Foundational",
              "Hardening",
              "Advanced"
            ],
            "description": "Implementation maturity tier"
          },
          "scope": {
            "type": "string",
            "enum": [
              "Buy",
              "Build",
              "Both"
            ],
            "description": "Whether this is addressed by vendor capability, internal engineering, or both"
          },
          "notes": {
            "type": "string",
            "description": "Optional implementation notes"
          },
          "relationship": {
            "type": "string",
            "enum": [
              "equal",
              "subset-of",
              "superset-of",
              "intersects-with",
              "not-related-to"
            ],
            "description": "OLIR Relationship: the logical comparison asserted between this control (Reference Document Element) and the risk entry (Focal Document Element). Hyphenated form of the spec vocabulary \"equal, subset of, superset of, intersects with, not related to\" (NIST IR 8278A Rev. 1 §3.1)."
          },
          "rationale_type": {
            "type": "string",
            "enum": [
              "syntactic",
              "semantic",
              "functional"
            ],
            "description": "OLIR Rationale: the KIND of reasoning behind the relationship. This is an enum in the OLIR spec, not free text — the prose justification lives in `rationale`, which exports to the OLIR Comments field."
          },
          "rationale": {
            "type": "string",
            "description": "Prose justification citing the specific framework clause. Exports to the OLIR Comments field, not to OLIR Rationale (which is `rationale_type`)."
          },
          "broad_applicability": {
            "type": "boolean",
            "description": "Set true to assert that this control genuinely applies across most of the list — an ISMS clause or a risk-management article, say. Requires a `rationale`. Without it, a control mapped to more than 40% of entries is flagged by scripts/density-report.js as discriminating nothing."
          },
          "confidence": {
            "type": "string",
            "enum": [
              "high",
              "medium",
              "low",
              "unreviewed"
            ],
            "description": "How strongly the relationship is asserted; maps to the optional OLIR \"Strength of Relationship\". Rows predating schema v2 carry `unreviewed`, which is an honest label rather than a quality claim."
          },
          "framework_version": {
            "type": "string",
            "description": "The framework release this row was authored against, e.g. \"ISO 27001:2022\". Pinning it is what makes version rot detectable instead of silent."
          },
          "reviewed_by": {
            "type": "array",
            "items": {
              "type": "string"
            },
            "description": "Named human reviewers who confirmed this row. Empty means unreviewed; an agent never adds itself here."
          },
          "review_date": {
            "type": "string",
            "format": "date",
            "description": "Date of the most recent human review."
          },
          "evidence_count": {
            "type": "integer",
            "minimum": 0,
            "description": "GENERATED by scripts/generate.js from data/incidents.json — do not author. Number of distinct incidents that exemplify this entry and record a CONFIRMED control_failures[] item for this framework + control_id. Drafted failures are never counted. Present only on rows with at least one linked failure; absent means no incident evidence. Method: docs/EVIDENCE_METHODOLOGY.md."
          },
          "evidence": {
            "type": "object",
            "description": "GENERATED — the incident ids behind evidence_count. `confirmed` are counted; `drafted` await human confirmation and are not.",
            "additionalProperties": false,
            "required": ["confirmed", "drafted"],
            "properties": {
              "confirmed": { "type": "array", "items": { "type": "string", "pattern": "^INC-\\d{3}$" } },
              "drafted": { "type": "array", "items": { "type": "string", "pattern": "^INC-\\d{3}$" } }
            }
          }
        }
      }
    },
    "tools": {
      "type": "array",
      "items": {
        "type": "object",
        "properties": {
          "name": {
            "type": "string"
          },
          "url": {
            "type": "string",
            "format": "uri"
          },
          "type": {
            "type": "string",
            "enum": [
              "open-source",
              "commercial",
              "both"
            ]
          }
        }
      }
    },
    "incidents": {
      "type": "array",
      "description": "Known real-world incidents referencing this vulnerability",
      "items": {
        "type": "object",
        "properties": {
          "name": {
            "type": "string"
          },
          "url": {
            "type": "string",
            "format": "uri"
          },
          "year": {
            "type": "integer"
          }
        }
      }
    },
    "crossrefs": {
      "type": "object",
      "description": "Links to related entries in other OWASP lists",
      "properties": {
        "llm_top10": {
          "type": "array",
          "items": {
            "type": "string"
          }
        },
        "agentic_top10": {
          "type": "array",
          "items": {
            "type": "string"
          }
        },
        "dsgai_2026": {
          "type": "array",
          "items": {
            "type": "string"
          }
        },
        "ast_top10": {
          "type": "array",
          "items": {
            "type": "string"
          }
        }
      }
    },
    "changelog": {
      "type": "array",
      "items": {
        "type": "object",
        "properties": {
          "date": {
            "type": "string",
            "format": "date"
          },
          "version": {
            "type": "string"
          },
          "change": {
            "type": "string"
          },
          "author": {
            "type": "string"
          }
        }
      }
    }
  }
}