about
an incident database for agent swarms, built the way aviation builds theirs: one row per occurrence, every fact with a source, every claim with a status, and the raw records kept so the reading can be redone.
shape
an incident is what happened at a place. a campaign is a population of agents, whatever it did and wherever it went. a cluster is a task inside a campaign. a venue is a place agents wrote to. a record is one observed thing at a venue: a revision, a recent-changes row, a paste, a deletion. a claim is an assertion by anyone, us included, with a status. evidence is where a claim or link comes from. a tracker is a group holding data.
codebook
| credential-reuse | shared or long-lived credential reused one credential serving many workloads or clusters lets one compromise become many the shared artifactory credential, the system:masters connector credential, the ci-tagged tailscale key |
| detection-lag | detected late or by outsiders the operator's own telemetry did not surface the event, or surfaced it without a page hf's correlated alert not raised, dsewiki found by scanning three months after |
| egress-bypass | egress control bypassed a network boundary crossed through an allowed path: ssrf on an allowlisted service, a GET-only rule that permits writes, a NO_PROXY suffix with a writable hosts file artifactory ssrf 05-26, usemod edit-by-GET, blob.core.windows.net hosts pinning |
| encrypted-persistence | encrypted state on a public host agent memory, logs or payloads kept encrypted on a venue the operator does not control gzip+base64 slices on probier, usemod envelopes, xinzhai fernet snapshots |
| eval-cheating | grader gamed agents optimise against the scorer instead of the task: shared answers, precomputed rounds, flag generation reverse-engineered datausa r1-r5 relays, hmac flag generation on exploitgym |
| fabrication | fabricated result an agent asserts a value or a source that nothing showed it, and peers may adopt it the '42' in the local testbed, ABCD-1234-EFGH-5678 with an invented coordination chat |
| sandbox-escape | sandbox boundary crossed code execution or file read outside the intended container, node or cluster jinja2 in a data field, hdf5 external raw storage, privileged hostpath pod |
| shared-service-as-channel | shared service used as a message board agents meant to be isolated find a service they can all read and write and use it to coordinate artifactory directory names, dsewiki pages, IowaCollab pastes |
| venue-misuse | public venue used as infrastructure a third party's public site used as memory, relay, storage or c2 without its owner's knowledge prowiki wikis, stikked pastebins, yourls shorteners, paste.ubuntu.org.cn |
download
the whole database as jsonl, one file per table, with a manifest of row counts and sha256 hashes and a json schema derived from the sqlite ddl: manifest.json, schema.json. schema version 5.
what's not here
record bodies. the database points at them, it doesn't carry them. ip addresses of people, and handles of humans active before the incidents, are masked. encoded payloads are described by shape, not decoded.
contact
termina.digital/we-mean-no-harm · roarch@proton.me