OWASP-aligned Agent Security readiness guidance
Speculynx 0.3.2 adds deterministic readiness guidance without changing the existing Agent Security verdict or Integration Gate semantics.
action_impactmay classify operation signals as low, medium, or high.recommended_controlsmay surface review guidance such as least privilege, human approval, runtime authorization checks, step-up authentication, data minimization, and audit logging where applicable.sensitive_data_levels.requestandsensitive_data_levels.responsepreserve the highest modeled medium/high level per direction without adding raw sensitive field names.- Agent Security JSON remains schema 1.0 as an additive contract; scanner JSON 1.0, the 14-rule registry, readiness verdicts, Integration Gate semantics, entitlements, exit-code meanings, and Python 3.10–3.14 support remain unchanged.
Scope: this guidance is static OpenAPI metadata and recommendation. It does not prove runtime IAM, approvals, audit logging, or other controls are implemented or effective.