ai-safe2-framework

Apply the AI SAFE² framework (Sanitize & Isolate · Audit & Inventory · Fail-Safe & Recovery · Engage & Monitor · Evolve & Educate) to design, implement, and audit secure, compliant, and reliable AI

SKILL.md

GitHub

AI SAFE² Secure Build Copilot: v3.1 Redirect

AI SAFE² Surface

Framework Home | Cross-Pillar Governance | AISM | NEXUS | Skills


Canonical Skill

This root file is a compatibility redirect. The canonical AI SAFE² v3.1 skill is:

skills/ai-safe2-secure-build-copilot/SKILL.md

Use that file for current framework guidance.

AI SAFE² v3.1 retains 161 core controls and adds the current CP.5.MCP profile overlay with MCP-1 through MCP-19, aligned to MCP 2026-07-28.

The core control dataset remains skills/mcp/data/ai-safe2-controls-v3.0.json because the v3.1 release did not change the core 161-control taxonomy. The v3.1 MCP overlay is skills/mcp/data/mcp-profile-v3.1.json.


Live Tool Access

For live control lookup, risk scoring, compliance mapping, and agent classification, see:

skills/mcp/README.md


v3.1 Changes Relevant to the Skill

  • Three enforcement planes: north-south, east-west, and agent-to-tool.
  • Protocol-independent governance constructs.
  • MCP 2026-07-28 profile alignment.
  • MCP-14 through MCP-19.
  • Canonical persistence scopes: request, handle_scoped, durable.
  • NEXUS explicitly positioned as CSI's reference implementation rather than a mandatory dependency.
  • MCP-19 intended-resource/audience and SSRF requirements.
  • server/discover is optional, not a conformance presence requirement.

Historical v3.0 additions such as CP.1 through CP.10, HEAR, Agent Replication Governance, and the 161-control core taxonomy remain part of v3.1.


Framework Home | Canonical Skill | MCP Server | Scanner | Dashboard

AI SAFE² v3.1 · Cyber Strategy Institute