Oliver Kieselbach 9fce499f4c rules: ANALYZE-SEC-002 — warn when Secure Boot is disabled ...

Fires on secureboot_status.uefiSecureBootEnabled=false; legacy BIOS
devices (registry key absent, agent sets note field) are skipped via
precondition. +20 confidence on physical devices. Validated with MCP
validate_rule (0 findings) and test_analyze_rule dry-runs: fired at 90
on a physical SecureBoot:False session, silent on a SecureBoot:True
session.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

2026-08-06 13:27:19 +02:00

..

analyze

rules: ANALYZE-SEC-002 — warn when Secure Boot is disabled

2026-08-06 13:27:19 +02:00

dist

rules: ANALYZE-SEC-002 — warn when Secure Boot is disabled

2026-08-06 13:27:19 +02:00

gather

feat(wu-oobe): detect & surface Windows Update during OOBE + self-maintaining rule sunset

2026-07-08 18:22:41 +02:00

ime-log-patterns

fix(agent): ESP-Apps failure correlation + platform-script stdout/exit contamination

2026-06-22 20:37:44 +02:00

schema

feat(agent,web,shared): phase_exit gather trigger — one-shot collection at a phase's end

2026-07-21 15:37:48 +02:00

scripts

MCP rule authoring: deterministic context, validate_rule, and session dry-run (#124)

2026-08-05 17:24:28 +02:00

guardrails.json

feat(agent): ESP policy-provider stall detector + Autopilot registry guardrail

2026-07-23 15:20:47 +02:00