OWASP Agentic Top 10 Mapping

Audience

Security reviewers checking which OWASP Agentic AI Top 10 risks are covered by current HELM AI Kernel evidence.

Outcome

After this page you should know what this surface is for, which source files own the behavior, which public route or adjacent page to use next, and which validation command to run before changing the claim.

Source Truth

• Public route: helm-ai-kernel/security/owasp-agentic-top10-mapping
• Source document: helm-ai-kernel/docs/security/owasp-agentic-top10-coverage.md
• Public manifest: helm-ai-kernel/docs/public-docs.manifest.json
• Source inventory: helm-ai-kernel/docs/source-inventory.manifest.json
• Validation: make docs-coverage, make docs-truth, and npm run coverage:inventory from docs-platform

Do not expand this page with unsupported product, SDK, deployment, compliance, or integration claims unless the inventory manifest points to code, schemas, tests, examples, or an owner doc that proves the claim.

Troubleshooting

Diagram

This scheme maps the main sections of OWASP Agentic Top 10 Mapping in reading order.

flowchart TD
    subgraph Ingestion["1. Ingestion & Context Plane"]
        Page["OWASP Agentic Top 10 Mapping"]
        A["Source truth"]
        C["Validation"]
    end

    subgraph Execution["3. Execution & Verdict Plane"]
        B["Reader action"]
    end

    %% Operational Flow Edges
    Page --> A
    A --> B
    B --> C

    %% Premium Styling Rules
    style B fill:#3182ce,stroke:#2b6cb0,stroke-width:2px,color:#fff

flowchart TD
    subgraph Ingestion["1. Ingestion & Context Plane"]
        Page["OWASP Agentic Top 10 Mapping"]
        A["Source truth"]
        C["Validation"]
    end

    subgraph Execution["3. Execution & Verdict Plane"]
        B["Reader action"]
    end

    %% Operational Flow Edges
    Page --> A
    A --> B
    B --> C

    %% Premium Styling Rules
    style B fill:#3182ce,stroke:#2b6cb0,stroke-width:2px,color:#fff

This file is a code-oriented inventory of retained control points in the OSS kernel.

Use this page as an implementation map. Validation still depends on the code, tests, and verification commands in the repository.

Coverage Discipline

OWASP Agentic Top 10 coverage must stay evidence-backed. For each risk, name the HELM AI Kernel control, the code or schema that implements it, the public example or fixture that exercises it, and the residual risk that remains outside the OSS boundary. Do not imply that policy evaluation replaces app authorization, secrets management, sandboxing, or network egress controls. The strongest public page shows both prevention and observability: how a risky action is blocked, how the receipt records it, how the verifier checks it, and what an operator should inspect when the action is allowed under policy.

Link every mitigation to a concrete evidence artifact so evaluators can check the claim without reading unrelated implementation internals.