v4.0.0 — 22 Domains: Agentic AI, PQC, Identity, Web3
What's New
4 New Domains (+4,862 lines)
- Domain 19: Agentic AI Security (1,108 lines) — OWASP Agentic Top 10 2026, agent permission models, memory & context security, multi-agent orchestration, MITRE ATLAS 2025 agent techniques
- Domain 20: Post-Quantum Cryptography Migration (1,326 lines) — NIST FIPS 203/204/205, CNSA 2.0 timeline (2025-2035), crypto-agility assessment, hybrid cryptography patterns, TLS/PKI migration
- Domain 21: Identity & Access Security (1,243 lines) — NIST 800-63B Rev 4, FIDO2/Passkeys, non-human identity management, ITDR, SPIFFE/SPIRE, NIST IR 8587 token protection
- Domain 22: Web3 & Blockchain Security (1,185 lines) — OWASP Smart Contract Top 10 2026, smart contract audit methodology, DeFi security patterns, wallet & key management, bridge security
11 Enhancements
- NIST Cyber AI Profile (NISTIR 8596) in D12
- MITRE ATLAS 2025 agent techniques (14 new) in D12
- NIST LEV metric (CSWP 41) in D14
- CWE Top 25 (2025) in D6
- Claude Code Security reference in D6
- Cyber resilience metrics in D17
- Workforce development templates in D17
- Compliance cross-walk matrix in D9
- Guided decision tree fallback
- Template variables for all outputs
- frameworks.json expanded to 69 entries
Impact
| Metric | v3.7.0 | v4.0.0 | Delta |
|---|---|---|---|
| Domains | 18 | 22 | +4 |
| Reference file lines | ~11,247 | ~16,109 | +4,862 |
| Framework entries | 54 | 69 | +15 |
| Validation checks | 60 | 68 | +8 |
Validation: 68 PASS, 0 FAIL