Skip to content

v0.3.0 — AI red-team test-plan generator

Choose a tag to compare

View all tags
@JKasteele JKasteele released this 15 Jun 17:59
· 74 commits to main since this release
v0.3.0
ddf336e

Turns the architecture-aware AI security lens into an actionable, purple-team artifact.

Added

  • AI red-team test plan generator (redteam report, app/redteam.py) — a prioritised, system-specific adversarial test plan to scope an authorized purple-team exercise. Each test case carries an objective, the MITRE ATLAS technique(s), preconditions, methodology (no exploit payloads), success criteria, expected detection & logging, and the EU AI Act / NIST control it validates.
  • Architecture-aware prioritisation. A test case's priority is the architecture-aware severity of its parent OWASP risk, and conditional tests are gated on the architecture (e.g. a Critical cross-tenant data-access test only when the LLM is the access-control boundary over all-users data). Free-text cannot add, drop or re-prioritise a test — the same invariant as the classifier.
  • New MCP tool generate_red_team_plan (structured); redteam added to generate_report, the CLI (--type redteam) and the web UI (Red-team plan tab).
  • Demo refreshed: hero GIF + new redteam.png screenshot.

It is a planning aid, not an attack tool — it executes nothing and does not replace a real red-team or penetration test.

Tests: tests/test_redteam_plan.py (10) — 60 pass, ruff/bandit clean.

Full changelog: https://github.com/JKasteele/ai-act-companion/blob/main/CHANGELOG.md

Assets 2
Loading