---
document: P7-IMPLEMENTATION-PLAYBOOK
version: 1.0
owners: [Kira, Hex, Oliver Hansen, Maya Patel, Eleanor Vance]
related: mvap/MVAP-SPECIFICATION-v1.1.md
---

# Pillar 7 Implementation Playbook

Operational guide for open-source zero-day evaluation at OS and application layers.

## 1. Daily KEV Sweep (P7-01)

```yaml
# Example CI gate (conceptual)
steps:
  - fetch: https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json
  - fetch: https://api.osv.dev/v1/query  # parallel NVD substitute per CSA NVD crisis guidance
  - match: sbom.spdx + apt-manifest.txt + pip-lock.json
  - fail_on: KEV_CVE in dependencies
  - ticket: P1-priority if AI gateway (litellm, langflow, vllm, ollama)
```

**AI gateway watchlist (minimum):** LiteLLM, LangChain serve, Langflow, vLLM, Ollama, TGI, Ray Serve, BentoML.

## 2. Source Code Audit Program (P7-02, P7-04)

| Tier | Scope | Frequency | Human Sign-off |
|------|-------|-----------|----------------|
| Tier-1 Critical | Top 50 deps + custom parsers | Every release | Hex + Maya |
| Tier-2 High | Direct ML deps | Monthly | Maya |
| Tier-3 | Transitive via SBOM only | Quarterly | Automated + spot check |

**AI-assisted audit rules:**
1. LLM proposes findings — never auto-merges patches
2. Eleanor verifies CVE IDs against NVD/OSV before ticket closure
3. Hallucinated CVEs stripped per verification-ledger protocol

## 3. Fuzzing (P7-03)

- **libFuzzer** on RAG ingest parsers, PDF/DOCX extractors
- **AFL++** on custom tokenizer bindings
- **syzkaller** — tier-1 GPU nodes only, isolated lab (Aether)

## 4. Classified-Adjacent (P7-07)

Checklist per GAO-26-107861 spill patterns:
- [ ] Embeddings air-gapped from internet-facing RAG
- [ ] Spill detection on ingest (classification marker scan)
- [ ] Contractor NISP compliance attestation annual
- [ ] No FOUO/classified in public AI tools (per TechCrunch CISA incident)

## 5. Intel Redundancy (P7-08)

| Source | Role | URL |
|--------|------|-----|
| CISA KEV | Binding patch priority | https://www.cisa.gov/known-exploited-vulnerabilities-catalog |
| OSV | Fast open-source advisory | https://osv.dev |
| GitHub Advisory | Package-specific | https://github.com/advisories |
| FS-ISAC / sector ISAC | Sector context | Member portals |
| NCSC-UK / ACSC | Five Eyes parallel | Government advisories |
| CSA / Horizon3 | AI chain research | Research publications |

**Do not rely on CISA alone** — per CSA leadership vacuum analysis.

## 6. Incident Response — AI Gateway RCE

1. Isolate model proxy VLAN (Shield IR-AI-02)
2. Rotate all provider API keys (SQL_Sam data layer)
3. SBOM diff Starlette/LiteLLM versions (Oliver)
4. Hunt Host header anomalies (Aegis — BadHost pattern)
5. Eleanor append CVE refs to verification ledger