[uk ai resilience] UK AI Open Code Risk & Resilience Report — 2026-08-05 (recent-changes scope)

[github-actions[bot]]

Executive Summary

Recent-changes-scoped UK AI Open Code Risk & Resilience review (lookback: 7 days, since 2026-07-29T16:06:00Z). 441 commits reviewed, 184 flagged as security-signal (auth/network/secrets-touching). 5 open code scanning alerts, 0 open secret scanning alerts, 68 open security issues (majority already tracked by existing uk-ai-resilience/container-image-scan issues). One genuinely new, untracked finding was identified: two large prebuilt Go binaries (actionlint, gosec, ~78MB combined) committed directly to git in PR #48979, bypassing the documented go install build path and not excluded by .gitignore. No repository-hiding action is recommended; findings are addressed via targeted remediation and issue tracking.

Asset Graph Summary (recent-change scoped)

Surface	Recent Change	Risk Relevance
Agentic engine adapters	Added Cursor (#50451), Kiro network domains + SECRET_ fallbacks (#50573), removed Antigravity (#50460), fixed Crush prompt delivery (#50452)	New third-party engine trust boundaries; auth/secret handling touched
Smoke workflows	Network allowlist minimization (#50462), Cursor auth fixes (#50472/#50455)	Reduces blast radius — improves resilience
MCP integrations	open-ontologies shared MCP server wired into glossary-maintainer (#50450)	New dependency surface, needs pinning/review trail
Build artifacts / repo hygiene	actionlint + gosec binaries committed to git (PR #48979, still present at HEAD)	Out-of-context binary blobs, CI/build reproducibility and supply-chain risk
pkg/cli/project_command.go	No new change this window, but 2 open GraphQL-injection issues remain unresolved	Already tracked, needs consolidation
scripts/ensure-docs-slide-pdf.js	No new change, alert #654/#636 still open	Already tracked
Governance	No .github/CODEOWNERS	Already tracked (#49167), still unresolved — affects review routing for all above surfaces

Tier Classification

Area	Tier	Rationale
Smoke workflow network allowlist minimization	A — Open Safe	Reduces exposure, well-scoped, low risk
New engine adapters (Cursor, Kiro, Crush)	B — Open With Conditions	New trust boundaries; needs secret-handling and network-egress review before wide rollout
open-ontologies MCP server wiring	B — Open With Conditions	New dependency, unclear pinning/version review trail
Committed actionlint/gosec binaries	C — Restricted Pending Review	Bypasses code review of ~78MB opaque executable content; contradicts documented go install build path; not gitignored
pkg/cli/project_command.go GraphQL injection (dup tracked)	C — Restricted Pending Review (pre-existing)	Two duplicate open issues (#47822, #46277) since 2026-07-17, unresolved >2 weeks
Missing CODEOWNERS	C — Restricted Pending Review (pre-existing)	Blocks enforced review routing repo-wide; tracked by #49167, still open

Control Verification Gaps

• Ownership: No .github/CODEOWNERS — confirmed absent on disk. Gap.
• SDLC: Build process documents go install for actionlint/gosec (Makefile lines 649-650) yet binaries are committed directly to git and not in .gitignore — reproducibility/review-bypass gap.
• Dependency controls: New engine/MCP integrations lack visible pinning evidence in this window's changes reviewed; recommend explicit version pins for open-ontologies MCP server and engine adapter versions.
• Secret exposure: SECRET_ fallback pattern for Kiro auth keys appears to follow existing declarative-engine convention (consistent with prior engine additions); no new alert triggered — adequate, but should be confirmed against secret-scanning baseline (0 open alerts, consistent).
• Runtime observability: Malicious Code Scanner (daily-malicious-code-scan.lock.yml) and CodeQL both actively surfaced the two new/relevant findings (#653, [Custom Engine Test] Test Issue Created by Custom Engine #654) — detection loop is functioning.
• Recovery: Removing the two committed binaries and adding .gitignore entries is low-effort and low-risk; no history rewrite required for forward remediation (existing blobs can be purged separately if desired, but not urgent).

Risk-Scoring Table

Area	Exposure Amplification	Patchability	Detectability	Operational Fragility	Ownership Confidence	Tier
Committed actionlint/gosec binaries	Medium (opaque binary trust)	High (easy remove + gitignore)	High (already flagged by scanner)	Low	Low (no CODEOWNERS)	C
GraphQL injection in project_command.go	Medium	High (parameterize query)	High (Semgrep/CodeQL flagged)	Low	Low (duplicate untriaged issues)	B (pre-existing)
Missing CODEOWNERS	High (systemic)	High (add file)	Medium (self-evident gap)	Medium	Low	C (pre-existing)
New engine adapters (Cursor/Kiro/Crush)	Medium (new trust boundary)	Medium	Medium (relies on manual review)	Medium	Medium	B

Remediation Queue

Item	Action	SLA
Committed actionlint/gosec binaries	Remove from tree, add to .gitignore, confirm CI uses go install	High
Duplicate GraphQL injection issues (#47822/#46277)	Consolidate, fix via parameterized GraphQL queries in project_command.go	Critical (unresolved >2 weeks)
Missing CODEOWNERS	Add file covering pkg/cli, .github/workflows, scripts/	High
New engine/MCP dependency pinning	Add explicit version pins + review checklist for engine adapters	Medium

Exception Register

None required this cycle — no temporary hidden-repo or bypass exceptions requested or granted.

Operational Metrics Baseline

• MTTR proxy: GraphQL injection findings open since 2026-07-17 (>19 days), still unresolved — indicates slow remediation velocity for known Tier B findings.
• Ownership coverage: 0% — no CODEOWNERS file exists.
• Unsupported/out-of-context dependency ratio: 2 binaries (actionlint, gosec) out of tracked build tooling — 100% of vendored build binaries are out-of-process.
• Exception aging: N/A (no active exceptions).
• Exposure without recovery capability: Low — all identified issues have clear, low-effort remediation paths (file removal, query parameterization, CODEOWNERS addition).

Generated by UK AI Operational Resilience · auto · 42.1 AIC · ⌖ 2.57 AIC · ⊞ 8.9K · ◷

• expires on Aug 8, 2026, 8:10 AM UTC-08:00