Security Incidents
7-stage deterministic incident lifecycle state machine (DETECTED → TRIAGED → INVESTIGATING → CONTAINED → REMEDIATED → VALIDATED → CLOSED) with immutable evidence logs.
3 total
| Incident ID | Severity | Incident Title | Offending Agent | Detection Rule | Lifecycle State | Started | Updated |
|---|---|---|---|---|---|---|---|
| INC-1049 | HIGH | Authority Escalation & Privilege Expansion Attempt | research-agent-001 | Monotonic Delegation Invariant | CONTAINED | 15:14:10 | 15:17:22 |
| INC-1048 | CRITICAL | Indirect Prompt Injection via Untrusted MCP Server | orchestrator-001 | Taint Sink Enforcement Gate | CLOSED | 14:22:05 | 14:45:00 |
| INC-1047 | MEDIUM | Taint Lineage Sanitization Anomaly | analysis-agent-001 | Context Sanitization Tracker | CLOSED | 11:05:30 | 11:30:15 |