P-011 published
Definitions
Stable terminology, scope, and boundaries between adjacent security concepts.
What is it, and what is it not?
Open pillarReference architecture
Five pillars, one defensive path.
Move from a precise term to the affected state, observable evidence, protective control, and authoritative mapping.
P-021 published
State Surfaces
Context, memory, goals, plans, tool results, artifacts, and shared agent state.
What state can change, and through which boundary?
Open pillarP-030 published
Detection
Signals, telemetry, evaluations, state diffs, provenance, and integrity checks.
How would we know the state was manipulated?
Open pillarP-040 published
Defenses
Prevention, least privilege, containment, reset, revalidation, and recovery.
What prevents, limits, or reverses compromise?
Open pillarP-051 published
Evidence & Mappings
Research, public incidents, standards, crosswalks, and adjacent disciplines.
Where is this observed, and how does it map?
Open pillar