Skip to content

fix: remove bawbel CLI names and stale counts from LANGUAGE.md #55

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
chaksaray merged 1 commit into from
Jul 17, 2026
+4 −4
Merged

fix: remove bawbel CLI names and stale counts from LANGUAGE.md #55

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
8 changes: 4 additions & 4 deletions LANGUAGE.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -77,7 +77,7 @@ The false-positive guard. A rule without a negative fixture is incomplete.
The five values of `detection_layer` define where evidence surfaces and what scanner reaches it.

**content** — Evidence is in the text body of the skill file, prompt file, or MCP tool description
field. Detectable by a static scanner reading the file before the agent runs. 33 of the 48 records
field. Detectable by a static scanner reading the file before the agent runs. 37 of the 59 records
are at this layer.

**server_card** — Evidence is in the MCP server manifest: `.well-known/mcp.json`, tool schemas, or
Expand All @@ -89,7 +89,7 @@ registry before installation.

**runtime** — Evidence only appears during live agent execution: injected via tool results, memory
writes, A2A messages, rendered UI payloads, image pixels, or async task payloads. A static scanner
cannot catch these. Requires a behavioral sandbox or runtime monitoring. 12 of the 48 records are
cannot catch these. Requires a behavioral sandbox or runtime monitoring. 15 of the 59 records are
at this layer.

**transport** — Evidence is in the network layer: HTTP headers, OAuth discovery endpoints, webhook
Expand All @@ -99,8 +99,8 @@ The layer determines what detection stage is reachable:

| detection_layer | detection_stage | Scanner type needed |
|---|---|---|
| content | static_detection | File-level static scanner (bawbel scan) |
| server_card | static_detection | Server-card scanner (bawbel scan-server-card) |
| content | static_detection | File-level static scanner |
| server_card | static_detection | Server-card scanner |
| registry_metadata | static_detection | Registry audit tool |
| runtime | runtime_observed | Behavioral sandbox or runtime monitor |
| transport | runtime_observed | Network proxy or monitor |
Expand Down
Loading