briefs: add Critical Brief 099 / 100 / 101 (JA+EN)#657
Merged
Conversation
- 099 Agentjacking（Sentry MCP 経由の偽エラー報告でコーディングエージェントが 攻撃者コマンドを実行）— Pillar 02 / ai-decision-integrity / Pack C - 100 Aptos Move VM 型混同（約3,000ドル検証環境で再現・下流波及リスク） — Pillar 01 / bridge-config-trust / Pack A - 101 Paysafe 偽 SDK（決済SDKを装う17パッケージが決済API鍵・KYC資格情報を窃取） — Pillar 01 / code-provenance / Pack A 098 準拠フォーマット: 番号セクション①〜⑨、TL;DR 圧縮、gap 3行（JA/EN・ gap_fix は規約締め）、内部リンクなし（§5「補完」／§7「相補的に働く。」で閉じる）。 JA+EN 完全対訳。related_briefs は全て実在スラッグ、カテゴリ/Pack は enum 検証済み。 `astro sync` 緑。prettier 未適用（Brief .md 慣例）。 Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01FLcqXYL3EEYn5AsrpMV2eE
- 100 Aptos: primary_category を bridge-config-trust → code-provenance に （根本原因＝Move VM の型/来歴の取り違えに合わせる）。bridge-config-trust は 下流波及の観点で secondary へ。§4 の分類記述も JA/EN で整合。 - 101 Paysafe: TL;DR の「17 件」を「17 の悪性パッケージ」に直し、本文の 「17 パッケージ」表記に統一。 astro sync 緑。 Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01FLcqXYL3EEYn5AsrpMV2eE
Deploying web with
|
| Latest commit: |
8fb62e2
|
| Status: | 🚫 Build failed. |
Unrelated to the briefs: #656 (chore: pnpm update) bumped the lockfile prettier specifier to ^3.9.5 but left package.json at ^3.9.4, so `pnpm install --frozen-lockfile` fails on every PR (and main). Align package.json to ^3.9.5 so this PR's CI can install (no lockfile change). Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01FLcqXYL3EEYn5AsrpMV2eE
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Critical Brief 3本を追加（JA+EN 完全対訳）。番号は live 最大 098 の次＝099/100/101。
フォーマット（098 準拠・現行正典）
## TL;DR（平易・数文に圧縮、検出と事前証明は代替ではなく補完である。で締め）＋ 番号セクション## 1.〜## 9.。gap_detected/gap_missing/gap_fix（JA・EN 両方、gap_fix は規約締め「…Lemma で独立検証して、事前に防ぐ。」／英語「…, and prevent it up front.」）。og_lead_ja/og_lead_en付与。§9 免責1行＋コピーライト。検証
npx astro sync緑（zod スキーマ検証通過）。マージはしません（レビュー用）。※
statusは描画をゲートしないため、マージ→Cloudflare 再ビルドでpublished日付順（先頭）に即公開されます。🤖 Generated with Claude Code
https://claude.ai/code/session_01FLcqXYL3EEYn5AsrpMV2eE