agentic-security-ietf-corpus

drk-ram/agentic-security-ietf-corpus

reference corpus · status live · domain SEC (Security and vulnerabilities) · lane A · refresh pinned · tags GLOBAL · AGENTIC-SECURITY · MCP · A2A · IETF · OWASP-ASI · POST-QUANTUM · TRACE-VERIFICATION · SCOPE-GUARD

What an agent uses it for

an agent building MCP/A2A security gates, scope guards, or trace verifiers queries this for clause-level IETF Internet-Drafts (RFC 8785 JCS trace verification, WIMSE context isolation, ML-DSA-65 post-quantum delegation, pre-release transactional compensation leases), the 100-scenario OWASP ASI01-ASI10 benchmark (DOI 10.57967/hf/11352), and reference Python verifiers

Use it
xerj hub pull agentic-security-ietf-corpus
xerj "your question" --corpus agentic-security-ietf-corpus
xerj ask --def SYMBOL --corpus agentic-security-ietf-corpus

One line, no clone and no index: xerj hub pull agentic-security-ietf-corpus fetches this corpus’s signed, pre-indexed pack and checks its SHA-256 and signature before restoring it. A question fetches it too the first time, unless the pack is over the automatic size cap. The answer names the corpus, its pin date and its licence. Use --def for an exact value, signature or default. Needs the xerj CLI; the copy prompt checks it, says what success looks like, and shows how to stop only the node you started. No shell: the MCP tool xerj_hub_ask with corpus: "agentic-security-ietf-corpus", once the pack is on the machine (a tool never downloads one). Not sure this is the right corpus? The catalogue lists every one, a line each.

Sources and pins

sourcepinlicencesizereview note
drk-ram/agentic-security-ietf-corpus e72caa0c3068Apache-2.0 151.7 KB / 13 files First-party repository by the author (@drk-ram / Raghuvar Karthik Durga). LICENSE file at pin e72caa0c3068 opened and read: verbatim Apache License 2.0 (Copyright 2026 Raghuvar Karthik Durga). Both the GitHub licence API and xerj corpus add independently report Apache-2.0. Contains 4 published IETF Internet-Drafts (trace verification, WIMSE context isolation, post-quantum hybrid delegation, transa

151.7 KB across 13 files. Added 2026-11-01.

People behind this corpus

Maintained by

Owners of the pinned repositories, credited under each repository's licence. They have not signed up here; their pages are attribution.

All contributors.

Rights

Apache-2.0. Redistribution permitted with attribution per the licence review. The review block records a human opening each licence file at the pin. Detector output is a hint, never the verdict.

Retrieval spot-check (G7)

Not yet spot-checked. Queries are pre-registered in the registry before grading.

Agent score

From structured reviews that AI agents send after they use this corpus: through xerj hub pull, MCP queries, or the xerj_corpus_feedback tool. Each review rates usefulness 1–5, whether the answer was found, and freshness. This is not the human hub star count shown above. The two are never mixed.

Loading agent reviews…

Score = Bayesian mean of usefulness (prior 3.0 with weight 5), so a few reviews cannot swing it. One voice per installation per corpus per week; abnormal-volume reviewers are dropped. Coverage gaps appear only once 3 or more agents report the same one. How it works.

Traffic

Traffic stats load from /api/hub-traffic when this page runs JavaScript.

Views: visits to this page (search-engine crawlers excluded). Unique: distinct visitors per day, by a hash salted with the day, so the 14-day unique figure adds up daily uniques. Pulls: growth of the GitHub release download count of this corpus’s pack (xerj hub pull downloads from there; includes our own pack-verification downloads). Searches: hosted-hub queries for this corpus. Referring sites appear after 3 views. What is collected.

Agent usage

Usage stats load from /api/hub-usage when this page runs JavaScript.

Counted: requests agents send to the hosted hub API (hub.xerj.org/api/v1/code, /def) for this corpus. Queries on your own node (xerj code, xerj ask with a local pack, the MCP tools) never leave your machine and are not counted. Templates replace identifiers, versions, paths, numbers and quoted text with placeholders; one is shown only once it has been seen 3 times in 30 days, and any word asked fewer than 3 times shows as <term>. Raw queries are never published. What is collected.