feat(briefs): No.094 Cursor/DuneSlide + No.095 Amazon Q/MCP（Pillar 03・ペア）#619
Merged
Conversation
…CP pair (Pillar 03) A deliberate pair from the 2026-07-03 additional drafts: both are the same Pillar 03 primitive — an AI coding tool connects "input whose origin it cannot choose" to execution without verifying provenance/authorization before acting. 094 (Cursor) is the read-in-instruction entry point; 095 (Amazon Q) is the bundled-config entry point. Numbering: A7A5 already took 093 (PR #618, open), so this pair is renumbered 094/095; 095's cross-references to Cursor and to itself were updated (draft's 093→094, 094→095), and related_briefs use full slugs. Primary-source verified (gh api on both GHSAs, NVD on the CVEs, all source URLs 200-checked), drafts corrected on: - Cursor CVE-2026-50548/50549: 9.8 confirmed on NVD CVSS 3.1 (GHSA GHSA-3v8f-48vw-3mjx → CVE-2026-50549 "sandbox escape via symlink…", critical); dropped the draft's unverified "CVSS 4.0 9.3". - Amazon Q CVE-2026-12957: score is 8.5 on CVSS 4.0 (GHSA cvss_v4) / 7.8 on NVD CVSS 3.1 — written with both versions (draft's bare "8.5" was the v4.0 score); "AWS recommends 1.69.0" dropped (not in the Wiz/AWS source) → "fix in 1.65.0, update to latest". - The Register URL 404 → removed from 095 sources. - Cross-tool CVEs (Claude Code 2025-59536/2026-21852, Cursor 2025-54136, Windsurf 2026-30615) and the "MCP auto-execution" framing confirmed against the Wiz blog; DuneSlide mechanisms/timeline/paths confirmed against the Cato blog. Format: draft frontmatter converted to the content.config schema (pillar 03-agent-authority, published, related_pack C-agent-governance, slug related_briefs), H1/subtitle/Pillar line dropped, headings numbered 1–9, gap module (gap_detected/missing/fix) + og_lead authored for both JA and EN (drafts had neither), full EN bodies written. 検出と証明の落差 + 補完 in §5, version 1.0. astro sync + build green, OG images generated. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_016QjqPGZqYWJhxmcesiNHZn
Deploying web with
|
| Latest commit: |
ec8d007
|
| Status: | ✅ Deploy successful! |
| Preview URL: | https://04c9146b.web-zgj.pages.dev |
| Branch Preview URL: | https://feat-briefs-094-095-agent-mc.web-zgj.pages.dev |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
2026-07-03 追加ドラフト2本（Cursor / Amazon Q）。同じ Pillar 03 の primitive を「読み取り指示の入口（094 Cursor）」と「同梱設定の入口（095 Amazon Q）」の対として提示。1 PR にまとめています。
採番の整理
A7A5 が **093（PR #618・オープン）**を使用中のため、この2本は 094 / 095 に繰り上げ。095 内の相互参照（Cursor を 094、自身を 095）と related_briefs のスラッグ化を修正済み。3本とも別ファイルなので #618 とは競合しません。
No.094 Cursor（DuneSlide）
Web/MCP に注入された一つの指示でサンドボックスが外れ RCE（CVE-2026-50548 / 50549、CVSS 3.1 で 9.8）。Cursor 3.0 で修正済・実環境悪用なし。
No.095 Amazon Q Developer（MCP 自動実行）
リポジトリ同梱の
.amazonq/mcp.jsonが無検証で自動起動し、環境全継承で AWS 認証情報が流出（CVE-2026-12957）。言語サーバー 1.65.0 で修正済。一次照合と、ドラフトからの訂正（gh api / NVD / 200 確認）
整形（ドラフト→公開スキーマ）
pillar: "03"→03-agent-authority/published_date→published/related_pack: C-agent-governance/ related_briefs をフルスラッグ化（037/039/027/048/058・037/062/027/059/094）/ H1・サブタイトル・Pillar 行を削除・見出しを 1〜9 に採番 / gap モジュール（gap_detected/missing/fix）と og_lead を JA・EN 両方で新規執筆（ドラフトに欠落）/ EN 本文を全文執筆 / §5 に「検出と証明の落差」+「補完」/ version 1.0。検証
astro sync（zod）通過・pnpm build成功・094/095 とも JA/EN + OG 画像生成・gap モジュール描画・Sources 200 を dist で確認。マージしない運用のためレビュー後にどうぞ（#618 A7A5 と合わせ、今週は計3本）。
🤖 Generated with Claude Code
https://claude.ai/code/session_016QjqPGZqYWJhxmcesiNHZn