[ { "id": "C-M1", "name": "Mandate disclosed to supervisor", "layer": "Mandate", "definition": "The supervising human knows what the system is permitted and designed to do", "url": "https://secureautonomous.com/controls/C-M1/", "cases": { "failed": [ "REG-0009" ] } }, { "id": "C-M2", "name": "Machine-enforceable scope", "layer": "Mandate", "definition": "The task's scope exists as an enforced constraint, not only as an instruction", "url": "https://secureautonomous.com/controls/C-M2/", "cases": { "absent": [ "REG-0011", "REG-0012" ], "failed": [ "REG-0015", "REG-0016" ] } }, { "id": "C-A1", "name": "Actor identity verification", "layer": "Actor", "definition": "Identity established by credential and binding, not by role, name, or convention", "url": "https://secureautonomous.com/controls/C-A1/", "cases": { "failed": [ "REG-0018", "REG-0024", "REG-0027" ], "absent": [ "REG-0023" ] } }, { "id": "C-A2", "name": "Authority binding", "layer": "Actor", "definition": "An actor's authority is bound to the specific principals and assets it serves", "url": "https://secureautonomous.com/controls/C-A2/", "cases": { "failed": [ "REG-0004", "REG-0018" ], "absent": [ "REG-0022" ] } }, { "id": "C-A3", "name": "Provenance of the actor's software and hardware", "layer": "Actor", "definition": "The origin of the code and components that sense, decide, and connect is documented, and no party able to compel access or control sits in that chain", "url": "https://secureautonomous.com/controls/C-A3/", "cases": { "absent": [ "REG-0014" ] } }, { "id": "C-I1", "name": "Retrieved content as data", "layer": "Inputs", "definition": "Text the actor reads is never treated as instruction", "url": "https://secureautonomous.com/controls/C-I1/", "cases": { "absent": [ "REG-0005", "REG-0024" ], "failed": [ "REG-0021", "REG-0022", "REG-0025" ] } }, { "id": "C-I2", "name": "Input redundancy and disagreement check", "layer": "Inputs", "definition": "Action gated on agreement between independent inputs", "url": "https://secureautonomous.com/controls/C-I2/", "cases": { "failed": [ "REG-0009" ] } }, { "id": "C-I3", "name": "Degraded-input detection", "layer": "Inputs", "definition": "The system knows when it cannot see and changes behavior", "url": "https://secureautonomous.com/controls/C-I3/", "cases": { "failed": [ "REG-0002", "REG-0003", "REG-0017" ] } }, { "id": "C-I4", "name": "Warnings designed as alerts", "layer": "Inputs", "definition": "Anomaly signals reach a human as alerts with an owner", "url": "https://secureautonomous.com/controls/C-I4/", "cases": { "failed": [ "REG-0001", "REG-0007" ], "absent": [ "REG-0004", "REG-0018" ], "succeeded": [ "REG-0006" ] } }, { "id": "C-D1", "name": "Pre-execution validation", "layer": "Decision", "definition": "Plan or command checked before it runs (review, twin, dry run)", "url": "https://secureautonomous.com/controls/C-D1/", "cases": { "failed": [ "REG-0007", "REG-0015" ], "absent": [ "REG-0010" ] } }, { "id": "C-D2", "name": "Halt and hand off on uncertainty or refusal", "layer": "Decision", "definition": "The minimal-risk condition: when blocked or unsure, stop and ask", "url": "https://secureautonomous.com/controls/C-D2/", "cases": { "absent": [ "REG-0016" ] } }, { "id": "C-E1", "name": "Least-privilege credential scoped to task", "layer": "Envelope", "definition": "Token or key limited to the environment and assets the task names", "url": "https://secureautonomous.com/controls/C-E1/", "cases": { "absent": [ "REG-0005", "REG-0011", "REG-0027" ], "failed": [ "REG-0024", "REG-0025" ] } }, { "id": "C-E2", "name": "Hard domain restriction", "layer": "Envelope", "definition": "Operating domain enforced mechanically (geofence, environment scoping, operational design domain)", "url": "https://secureautonomous.com/controls/C-E2/", "cases": { "absent": [ "REG-0012", "REG-0017" ], "failed": [ "REG-0013", "REG-0016" ] } }, { "id": "C-E3", "name": "Destructive-action gate", "layer": "Envelope", "definition": "Confirmation, delay, or threshold on irreversible actions", "url": "https://secureautonomous.com/controls/C-E3/", "cases": { "failed": [ "REG-0011", "REG-0014", "REG-0022", "REG-0027" ], "absent": [ "REG-0012" ] } }, { "id": "C-E4", "name": "Physical safety interlock", "layer": "Envelope", "definition": "Safety-rated stop, presence detection, guarded envelope", "url": "https://secureautonomous.com/controls/C-E4/", "cases": { "absent": [ "REG-0019" ] } }, { "id": "C-E5", "name": "Containment and isolation", "layer": "Envelope", "definition": "Sandbox, network egress, and communication limits on a test or untrusted actor", "url": "https://secureautonomous.com/controls/C-E5/", "cases": { "failed": [ "REG-0004", "REG-0006", "REG-0014", "REG-0021" ], "absent": [ "REG-0005" ] } }, { "id": "C-E6", "name": "Authority limit on automation over humans", "layer": "Envelope", "definition": "Bounded authority for a system to override a human operator", "url": "https://secureautonomous.com/controls/C-E6/", "cases": { "failed": [ "REG-0009" ] } }, { "id": "C-X1", "name": "Rate and magnitude limits", "layer": "Action", "definition": "Bounds on how much the actor can do before a check", "url": "https://secureautonomous.com/controls/C-X1/", "cases": { "absent": [ "REG-0007", "REG-0009", "REG-0015" ] } }, { "id": "C-X2", "name": "Kill switch faster than the actor", "layer": "Action", "definition": "A stop outside the actor's control, exercisable at the actor's speed", "url": "https://secureautonomous.com/controls/C-X2/", "cases": { "absent": [ "REG-0007", "REG-0015" ] } }, { "id": "C-V1", "name": "Independent audit log", "layer": "Evidence", "definition": "A record of actions the actor cannot write to or alter", "url": "https://secureautonomous.com/controls/C-V1/", "cases": { "succeeded": [ "REG-0003", "REG-0016" ], "absent": [ "REG-0012" ] } }, { "id": "C-V2", "name": "Reporting integrity", "layer": "Evidence", "definition": "Reconciliation of what the principal reports with the evidence it holds", "url": "https://secureautonomous.com/controls/C-V2/", "cases": { "absent": [ "REG-0003" ], "succeeded": [ "REG-0017" ] } }, { "id": "C-V3", "name": "Attribution independent of the vendor", "layer": "Evidence", "definition": "A victim can identify the actor without relying on the actor's vendor", "url": "https://secureautonomous.com/controls/C-V3/", "cases": { "absent": [ "REG-0004", "REG-0006", "REG-0023" ] } }, { "id": "C-R1", "name": "Recovery assets outside the failure domain", "layer": "Recovery", "definition": "Backups, rollback, and logs the actor cannot reach", "url": "https://secureautonomous.com/controls/C-R1/", "cases": { "succeeded": [ "REG-0011", "REG-0012" ] } }, { "id": "C-R2", "name": "Automated fail-safe", "layer": "Recovery", "definition": "Safe stop or degradation the system performs itself", "url": "https://secureautonomous.com/controls/C-R2/", "cases": { "absent": [ "REG-0001" ], "succeeded": [ "REG-0002", "REG-0014" ], "failed": [ "REG-0003" ] } }, { "id": "C-R3", "name": "Human takeover with a time window", "layer": "Recovery", "definition": "Teleoperation, holding periods, delays that give a human time", "url": "https://secureautonomous.com/controls/C-R3/", "cases": { "failed": [ "REG-0001", "REG-0009" ], "succeeded": [ "REG-0002", "REG-0015" ] } }, { "id": "C-R4", "name": "Organizational recovery process", "layer": "Recovery", "definition": "Internal review, restriction, recall, disclosure with regulator visibility", "url": "https://secureautonomous.com/controls/C-R4/", "cases": { "succeeded": [ "REG-0002", "REG-0006", "REG-0013", "REG-0023" ], "failed": [ "REG-0004" ] } }, { "id": "C-O1", "name": "Coordinated disclosure program", "layer": "External", "definition": "A path for outside researchers to report and for the vendor to fix before exploitation", "url": "https://secureautonomous.com/controls/C-O1/", "cases": { "succeeded": [ "REG-0018", "REG-0021", "REG-0022", "REG-0024", "REG-0025", "REG-0027" ] } }, { "id": "C-O2", "name": "Independent assurance before deployment", "layer": "External", "definition": "A party independent of the developer examines the design, including the authority it gives the system, before the system is deployed", "url": "https://secureautonomous.com/controls/C-O2/", "cases": { "failed": [ "REG-0009" ] } } ]