v4.0.2 — D19-D22 Enhancements (Issue #6)

What's New

Addresses all 6 recommendations from Issue #6 — D19-D22 test results and improvement items.

frameworks.json (69 → 73 entries)

• 4 new entries: FIDO2/WebAuthn, SPIFFE, OAuth 2.1, Ethereum Security Best Practices
• 3 used_in updates: owasp-llm-top10, nist-ai-rmf, nist-800-207 now reference new domain files

Quick Reference Summaries (All 4 domains)

• Front-loaded key frameworks, risk tables, essential controls, and Thai context for faster skill response

D19 Agentic AI Security

• 4 real-world attack scenarios: Plugin Hijacking, MCP Tool Misuse, Multi-Agent Cascade, Memory Poisoning
• MITRE ATLAS + OWASP Agentic mapping per scenario
• Defense-in-depth architecture diagram + Splunk SPL / KQL anomaly detection templates

D20 Post-Quantum Cryptography ↔ D22 Web3 Cross-Domain

• D22: "Post-Quantum Impact on Blockchain" — ECDSA/EdDSA quantum vulnerability, 4-phase migration path
• D20: Reciprocal blockchain subsection + CNSA 2.0 timeline for 6 Thai CII sectors

D21 Identity & Access Security

• Entra ID Conditional Access policy JSON, Okta FIDO2 policy (Terraform), AWS IAM Identity Center SCIM config
• PromptPay identity binding architecture with SIM swap security considerations
• NDID protocol details (Tendermint, DID format, assertion signing)

Thai Context Deepening (D20, D21, D22)

• D20: CII sector-specific PQC migration timeline, BAHTNET/PromptPay PQC feasibility
• D21: PromptPay + NDID integration roadmap
• D22: ก.ล.ต. 2025-2026 regulatory updates, ICO Portal security requirements, Digital Asset Custodian standards

Validation

• 68 PASS / 0 FAIL / 1 SKIP
• 6 commits, 4 files changed (reference files), 3 doc files updated