Issues

• AVE-2026-00063 and AVE-2026-00064 cite no external primary source and credit the maintainer

  aveproject/ave#339 · Filter by author chaksaray opened on Oct 20, 2026

• Crosswalk: AVE to OWASP AI Exchange (pilot)

  aveproject/ave#337 · Filter by author chaksaray opened on Oct 20, 2026

• Proposed record: Sandbox boundary taken from a model-supplied value: a tool parameter the model sets defines or widens the sandbox's writable scope

  ave-recordnew-classresearch-sourced
  aveproject/ave#335 · Filter by author chaksaray opened on Oct 19, 2026

• Three record rules the schema and docs state that no CI step checks

  aveproject/ave#334 · Filter by author avp9-nexus opened on Oct 19, 2026

• Enforce that revisions entries are never rewritten or removed, against the base commit

  aveproject/ave#333 · Filter by author chaksaray opened on Oct 18, 2026

• Proposed record: Sandbox side-effect trust handoff: a file an agent writes inside the workspace is later executed by a trusted component outside the sandbox

  ave-recordnew-classresearch-sourced
  aveproject/ave#330 · Filter by author chaksaray opened on Oct 18, 2026

• Backfill framework_sources for the 61 records still missing a pin entry, and enforce it in CI

  aveproject/ave#326 · Filter by author chaksaray opened on Oct 16, 2026

• Add an optional revisions array to records, with a closed reason_code

  enhancement
  aveproject/ave#317 · Filter by author chaksaray opened on Oct 8, 2026 · v1.2.0

• Crosswalk pilot: AVE → OWASP GenAI Crosswalk (Agentic Top 10), PR open, awaiting review

  blocked-external
  aveproject/ave#240 · Filter by author chaksaray opened on Aug 30, 2026

• [SCHEMA] Add telemetry to evidence_basis_engines

  enhancement
  aveproject/ave#221 · Filter by author narko4u opened on Aug 28, 2026 · v1.2.0
  8

• Should check_confidence_signal.py read verification_basis where present?

  design
  aveproject/ave#219 · Filter by author chaksaray opened on Aug 27, 2026
  16

• Schema v1.2.0: require owasp_asi, mitre_atlas, nist_ai_rmf keys to always exist (empty array allowed)

  governance
  aveproject/ave#178 · Filter by author chaksaray opened on Aug 14, 2026 · v1.2.0

• Crosswalk staleness audit: zero files fully clean, three questions for source_commit sequencing

  aveproject/ave#160 · Filter by author chaksaray opened on Aug 9, 2026
  2

• v1.2.0 roadmap

  governance
  aveproject/ave#105 · Filter by author chaksaray opened on Jul 31, 2026 · v1.2.0

• v1.2.0: implement deprecation policy schema fields

  enhancement
  aveproject/ave#104 · Filter by author chaksaray opened on Jul 31, 2026 · v1.2.0

• v1.2.0: add owasp_ast schema field

  enhancement
  aveproject/ave#103 · Filter by author chaksaray opened on Jul 31, 2026 · v1.2.0

• Crosswalk contribution: mapping an execution-evidence predicate onto AVE's evidence fields

  blocked-external
  aveproject/ave#94 · Filter by author astrogilda opened on Jul 28, 2026
  22

• Define an explicit record abstraction policy: class vs. variant (credit: endor_sarah, Endor Labs)

  enhancement
  aveproject/ave#72 · Filter by author chaksaray opened on Jul 23, 2026