---
document: MVAP-SPECIFICATION
version: 1.1-draft
status: superseded
superseded_by: mvap/MVAP-SPECIFICATION-v1.1.md
adopted_date: 2026-12-20
prior_version: mvap/MVAP-SPECIFICATION-v1.0.md
board_vote: 15/27 scope approval (2026-09-20)
---

# MVAP Specification v1.1 (Draft)

Extends v1.0 per 90-day L2 maturity review. **L2 operational** as of 2026-09-21.

## New Controls

| ID | Control | Source |
|----|---------|--------|
| P2-07 | Binary/metadata scrub on RAG ingest (PDF EXIF, DOCX objects) | Pass 1 remediation gap |
| P2-08 | Membership inference screening for tier-1 models (annual) | Jordan Taylor dissent reconciliation |
| P4-03.1 | Ingest-path anomaly detection (pre-retrieval) | Pass 2 backlog |
| P4-05-L2 | IR-AI-02 production MTTC <15m average | L2 promotion |
| Appendix A | OT AI Tier — IEC 62443 ($180K funded track) | GridLock |
| Pillar 6 (Advisory) | Firmware/GPU attestation on inference nodes | Aether/Hex — non-blocking |

## L2 Pipeline Gates (Mandatory)

1. P1 registry check — unregistered AI services block deploy
2. P2 SAST pass — Semgrep/CodeQL LLM rules
3. P3 SBOM + cosign verify
4. P2-03 poisoned-corpus smoke test ≥9/10 in CI

## Certification Status (2026-09-21)

| Control | Status |
|---------|--------|
| P2-03 | ✅ Production certified (11/12) |
| P4-05 | ✅ Production certified (14m avg MTTC) |
| P2-04 | ✅ Closed Pass 1 |
| Sprint | ✅ CLOSED |