{
  "notice": "Illustrative mapping from the AI Governance Engineer Body of Knowledge v0.5.0 (not a claim of conformity)",
  "version": "0.5.0",
  "license": "CC BY 4.0",
  "licenseUrl": "https://creativecommons.org/licenses/by/4.0/",
  "schemaVersion": 2,
  "schema": "https://aigovernanceengineer.com/api/v1/schemas/obligation.json",
  "self": "https://aigovernanceengineer.com/api/v1/obligations/aige-obl-owasp-agentic.json",
  "source": "https://aigovernanceengineer.com/obligations/aige-obl-owasp-agentic",
  "citation": {
    "title": "AI Governance Engineering: The Thesis & Body of Knowledge",
    "authors": [
      "Jorge García Aibar"
    ],
    "parentDoi": "https://doi.org/10.5281/zenodo.22956197",
    "conceptDoi": "https://doi.org/10.5281/zenodo.22857084"
  },
  "obligation": {
    "id": "AIGE-OBL-OWASP-AGENTIC",
    "url": "https://aigovernanceengineer.com/obligations/aige-obl-owasp-agentic",
    "json": "https://aigovernanceengineer.com/api/v1/obligations/aige-obl-owasp-agentic.json",
    "framework": "OWASP GenAI Security Project",
    "frameworkId": "owasp-agentic-top-10",
    "clause": "Top 10 for Agentic Applications 2026",
    "obligation": "Top 10 for Agentic Applications 2026",
    "requirement": "Agent threat catalogue (ASI01 Agent Goal Hijack … ASI10 Rogue Agents)",
    "artefact": "Agent threat model; adversarial evals; runtime guardrails; kill switch",
    "layers": [
      3,
      4
    ],
    "dutyHolder": null,
    "scope": null,
    "authority": null,
    "appliesFrom": null,
    "appliesStatus": "voluntary",
    "appliesNote": "Voluntary (2026 edition)",
    "milestones": [],
    "systemClass": [],
    "patterns": [
      {
        "id": "pattern-policy-card",
        "title": "Policy Card",
        "url": "https://aigovernanceengineer.com/patterns/policy-card"
      },
      {
        "id": "pattern-eval-gate-in-ci",
        "title": "Eval Gate in CI",
        "url": "https://aigovernanceengineer.com/patterns/eval-gate-in-ci"
      },
      {
        "id": "pattern-adversarial-red-team-suite",
        "title": "Adversarial Red-Team Suite",
        "url": "https://aigovernanceengineer.com/patterns/adversarial-red-team-suite"
      },
      {
        "id": "pattern-agent-registry",
        "title": "Agent Registry",
        "url": "https://aigovernanceengineer.com/patterns/agent-registry"
      },
      {
        "id": "pattern-runtime-guardrail",
        "title": "Runtime Guardrail",
        "url": "https://aigovernanceengineer.com/patterns/runtime-guardrail"
      },
      {
        "id": "pattern-kill-switch--circuit-breaker",
        "title": "Kill Switch / Circuit Breaker",
        "url": "https://aigovernanceengineer.com/patterns/kill-switch-circuit-breaker"
      },
      {
        "id": "pattern-agent-identity--scoped-credentials",
        "title": "Agent Identity & Scoped Credentials",
        "url": "https://aigovernanceengineer.com/patterns/agent-identity-scoped-credentials"
      },
      {
        "id": "pattern-human-in-the-loop-gate",
        "title": "Human-in-the-loop Gate",
        "url": "https://aigovernanceengineer.com/patterns/human-in-the-loop-gate"
      },
      {
        "id": "pattern-shadow-ai-discovery",
        "title": "Shadow-AI Discovery",
        "url": "https://aigovernanceengineer.com/patterns/shadow-ai-discovery"
      },
      {
        "id": "pattern-ai-threat-model",
        "title": "AI Threat Model",
        "url": "https://aigovernanceengineer.com/patterns/ai-threat-model"
      },
      {
        "id": "pattern-model-artefact-integrity",
        "title": "Model Artefact Integrity",
        "url": "https://aigovernanceengineer.com/patterns/model-artefact-integrity"
      },
      {
        "id": "pattern-downstream-use-register",
        "title": "Downstream Use Register",
        "url": "https://aigovernanceengineer.com/patterns/downstream-use-register"
      },
      {
        "id": "pattern-deactivation-localisation--retirement-runbook",
        "title": "Deactivation, Localisation & Retirement Runbook",
        "url": "https://aigovernanceengineer.com/patterns/deactivation-localisation-retirement-runbook"
      }
    ],
    "crosswalkTopics": [
      "human-oversight",
      "robustness-security-evals",
      "supply-chain",
      "agent-identity-autonomy"
    ],
    "reviewed": "2026-09-19",
    "chapter": "https://aigovernanceengineer.com/bok/regulatory-map#owasp-genai-security-project"
  }
}