Skip to content

v0.6.2 - Action Chain Amplification Detection

Choose a tag to compare

View all tags
@dockfixlabs dockfixlabs released this 05 Jul 02:33
v0.6.2
14ab2c2

v0.6.2 - Action Chain Amplification Detection

NEW: ASI-CHAIN-AMPLIFY

Third novel rule beyond OWASP ASI Top 10: Action Chain Amplification.

The most dangerous failure mode in autonomous agents is not a single bad action but an amplification cascade where one misstep triggers dozens of irreversible operations.

What It Detects

  • For-loop batch destruction: for f in files: os.remove(f) with unbounded source
  • While-true broadcasts: while True: channel.send(msg) from agent output
  • ThreadPool mass operations: ThreadPoolExecutor.map(lambda x: db.delete(x))
  • Agent-result-triggered cascades: for r in agent_result.get("resources"): cloud.delete(r)

Safety Patterns Recognized

  • batch_size=, max_items=, limit=N, sleep(), rate limiting
  • human_in_the_loop, approval, confirmation, checkpoint
  • dry_run, preview, sandbox, test_mode
  • if len(items), if count >, if size >

Numbers

  • 83 tests (7 new)
  • 16 detection rules (3 beyond OWASP ASI)
  • 36 benchmark samples

Full Changelog: v0.6.1...v0.6.2

Assets 2
Loading