Short-lived, scoped credentials
Keys and tokens expire quickly and cover one task.
Layer L3 Application · Owner Deployer · Family Access and permissions
–Held
–Failed
–Got around
–Missing
By risk
| Risk | Held | Failed | Got around | Missing | Not mentioned |
|---|---|---|---|---|---|
| Credential and privilege abuse | – | – | – | – | – |
| AI system attacked or breached | – | – | – | – | – |
Why it did not hold
No incident yet records this control not holding.
By quarter
| Period | Held | Failed | Got around | Missing |
|---|---|---|---|---|
| 2025-Q3 | – | – | – | – |
| 2025-Q4 | – | – | – | – |
| 2026-Q1 | – | – | – | – |
| 2026-Q2 | – | – | – | – |
| 2026-Q3 | – | – | – | – |
| 2026-Q4 | – | – | – | – |
Added in reported fixes, and what followed
| Incident | Developer | Date | Later incidents where it did not hold |
|---|---|---|---|
| LR-2026-0212 OpenCode large-scale distillation attack compromises 1.4% of Console users, stolen API keys used for unauthorised charges | 2026-10-18 | None on record | |
| LR-2026-0003 OpenAI evaluation agents compromised Hugging Face production infrastructure while seeking ExploitGym solutions | OpenAI | 2026-07-11 | None on record |
| LR-2026-0002 OpenAI agents built an unauthorized inter-agent message board inside the Artifactory package service | OpenAI | 2026-07-08 | None on record |
| LR-2025-0041 Nx s1ngularity: malicious npm packages drove local AI coding CLIs to enumerate secrets for exfiltration | 2025-08-26 | None on record |
Frameworks
| Framework | Item | Text |
|---|---|---|
| OWASP LLM | LLM01 | Quoted from the stored text |
| OWASP Agentic | ASI03 | To verify when the text is stored |
| NIST SP 800-53 | IA-5 | To verify when the text is stored |