---
document: MVAP-SPECIFICATION
version: 1.2-draft
status: draft
prior_version: mvap/MVAP-SPECIFICATION-v1.1.md
board_vote_pending: true
sessions:
  - sessions/2027-03-20-p7-05-zero-day-tabletop.md
  - sessions/2027-03-20-quarterly-government-risk-review.md
---

# MVAP Specification v1.2 (Draft)

## Changes from v1.1

| ID | Change | Vote (Q1 2027) |
|----|--------|----------------|
| P7-09 | Full transitive dependency tree SBOM (Python/npm) | 17/27 conditional |
| P7-10 | KEV patch SLA: 4h tier-1, 24h tier-2 | 19/27 PASS |
| P7-11 | AI gateway/router hardening (LiteLLM-class) | 21/27 PASS |
| P6 | Mandatory tier-1 **and** tier-2 (firmware/GPU) | 18/27 PASS |
| P2-08 | Membership inference — mandatory tier-1 | 16/27 — v1.2.1 |
| SLSA L3 | Tier-1 builds | 16/27 — deferred v1.3 |

## P7-11 — AI Gateway Hardening (NEW)

Mandatory for any model router/proxy (LiteLLM, Langflow, custom):

| Control | Requirement |
|---------|-------------|
| P7-11a | No internet-exposed admin/MCP test endpoints |
| P7-11b | Starlette ≥1.0.1 or equivalent BadHost mitigation |
| P7-11c | PROXY_ADMIN role on all destructive endpoints |
| P7-11d | Block POST `/mcp-rest/test/*` at reverse proxy default-deny |
| P7-11e | Weekly automated check against CISA KEV AI package list |

**Reference incidents:** CVE-2026-42271, CVE-2026-48710, CVE-2026-42208.

## P7-10 — KEV Patch SLA

| Tier | SLA | Measurement |
|------|-----|-------------|
| Tier-1 Critical | 4 hours from KEV add | Ticket timestamp → prod deploy |
| Tier-2 High | 24 hours | Same |
| Tier-3 | 7 days | Risk acceptance memo required |

## Government Risk Acknowledgment (Expanded)

All tier-1 owners must re-attest quarterly against `mvap/ZERO-DAY-OPEN-SOURCE-RISK-ASSESSMENT.md` v2.0 including GOV-01 through GOV-15.

New mandatory reading:
- [White House EO 14409 — AI Innovation and Security (Jun 2, 2026)](https://www.whitehouse.gov/presidential-actions/2026/06/promoting-advanced-artificial-intelligence-innovation-and-security/)
- [CSA NVD Infrastructure Crisis whitepaper (May 2026)](https://labs.cloudsecurityalliance.org/wp-content/uploads/2026/05/CSA_whitepaper_NVD_infrastructure_crisis_AI_vulnerability_discovery_20260504-csa-styled.pdf)