Preserve the report
The manifest binds every report filename and SHA-256. Corrections, conflicts, and version updates do not overwrite the governed body.
Research source map
Separate preserved claims from current implementation review.
The governed Markdown reports remain exact source evidence. This derived, checksum-governed layer records selected claim support, standards currency, conflicts, replacements, implementation impact, and required follow-up without silently rewriting a report or assigning a source-quality score.
Quick answer
What does the Machine Tradecraft research source map do?
It keeps exact governed report bodies separate from a checksum-governed review plane that records significant claims, current source and standards status, direct or partial support, conflicts, non-establishment, implementation impact, and required follow-up without assigning source-quality scores or making runtime network requests.
- Reports
- 31 governed reports covered.
- Claim reviews
- 39 bounded significant claims.
- Reviewed sources
- 63 authority-labelled sources.
Method
One exact source layer, one separate review layer
Every claim record points to a stable report heading and one or more reviewed sources. Current conclusions live here; the original report remains unchanged.
Classify the relationship
A review records direct support, partial support, conflict or qualification, or that a source does not establish the claim.
Record currency
Standards and publications are labelled current, living, final, draft, preprint, stable, historical, superseded, or mixed.
Route the next proof
Implementation impact and exact follow-up identify when browser, parser, model, cryptographic, registry, DNS, legal, or organizational verification remains necessary.
Release-time research, offline runtime. Source metadata was reviewed during release work. The public site reads only the local manifest and makes no source, registry, trust-service, DNS, model, or browser request.
Claim traceability
1 matching claim reviews
Filters use a normal GET form and remain useful without JavaScript. Filter combinations are noindex while the canonical unfiltered map remains indexable.
claim-ipi-external-content
Directly supports
Instructions embedded in externally retrieved content can influence an LLM-integrated application and become dangerous when coupled to privileged actions.
Reviewed sources
Not what you've signed up for: Compromising Real-World LLM-Integrated Applications with Indirect Prompt Injection
arXiv · arXiv:2302.12173 · Preprint
LLM01:2025 Prompt Injection
OWASP GenAI Security Project · 2025 · Current
Adversarial Machine Learning: A Taxonomy and Terminology of Attacks and Mitigations
NIST · NIST AI 100-2e2025 · Current
Implementation impact
Treat retrieved content as untrusted and place capability controls outside the model.
Required follow-up
Measure the exact application, model, retrieval, and tool configuration; do not generalize benchmark rates.
Source registry
63 authority-labelled resources
Labels explain the source’s role and publication state. They do not rank credibility or imply that every source supports every report claim.
The Unicode Standard, Version 17.0
Current Unicode character and property baseline.
- Publisher
- Unicode Consortium
- Version
- 17.0.0
- Checked
- 2026-08-27
- Host
- unicode.org
UAX #15: Unicode Normalization Forms
Normative normalization algorithms and stability rules.
- Publisher
- Unicode Consortium
- Version
- Revision 58 / Unicode 17.0
- Checked
- 2026-08-27
- Host
- unicode.org
UAX #9: Unicode Bidirectional Algorithm
Normative logical-to-visual ordering algorithm.
- Publisher
- Unicode Consortium
- Version
- Revision 51 / Unicode 17.0
- Checked
- 2026-08-27
- Host
- unicode.org
UAX #29: Unicode Text Segmentation
Normative grapheme, word, and sentence boundary rules.
- Publisher
- Unicode Consortium
- Version
- Revision 47 / Unicode 17.0
- Checked
- 2026-08-27
- Host
- unicode.org
UTS #39: Unicode Security Mechanisms
Stable identifier, script, and confusable-security mechanisms.
- Publisher
- Unicode Consortium
- Version
- Revision 32 / Unicode 17.0
- Checked
- 2026-08-27
- Host
- unicode.org
UTR #36: Unicode Security Considerations
Informative Unicode security guidance.
- Publisher
- Unicode Consortium
- Version
- Revision 10
- Checked
- 2026-08-27
- Host
- unicode.org
UTS #18: Unicode Regular Expressions
Stable Unicode regular-expression guidance.
- Publisher
- Unicode Consortium
- Version
- Revision 25
- Checked
- 2026-08-27
- Host
- unicode.org
UTS #55: Unicode Source Code Handling
Source-code-specific Unicode handling guidance.
- Publisher
- Unicode Consortium
- Version
- Latest stable
- Checked
- 2026-08-27
- Host
- unicode.org
Trojan Source: Invisible Vulnerabilities
Peer-reviewed analysis of bidirectional source-code presentation attacks.
- Publisher
- USENIX Association
- Version
- USENIX Security 2023
- Checked
- 2026-08-27
- Host
- usenix.org
RFC 8785: JSON Canonicalization Scheme
Deterministic JSON serialization for hashing and signing.
- Publisher
- IETF / RFC Editor
- Version
- RFC 8785
- Checked
- 2026-08-27
- Host
- rfc-editor.org
HTML Living Standard
Authoritative HTML parsing, DOM construction, and interaction rules.
- Publisher
- WHATWG
- Version
- Living Standard
- Checked
- 2026-08-27
- Host
- html.spec.whatwg.org
DOM Standard
Authoritative DOM tree and mutation model.
- Publisher
- WHATWG
- Version
- Living Standard
- Checked
- 2026-08-27
- Host
- dom.spec.whatwg.org
CSS Object Model
Current CSSOM draft; implementation-sensitive rather than a finished Recommendation.
- Publisher
- W3C CSS Working Group
- Version
- Editor’s Draft
- Checked
- 2026-08-27
- Host
- drafts.csswg.org
WAI-ARIA 1.2
Current WAI-ARIA Recommendation.
- Publisher
- W3C
- Version
- W3C Recommendation
- Checked
- 2026-08-27
- Host
- w3.org
WAI-ARIA 1.3
Newer draft work; not a replacement Recommendation yet.
- Publisher
- W3C
- Version
- Working Draft
- Checked
- 2026-08-27
- Host
- w3.org
Accessible Name and Description Computation 1.2
Current 1.2 draft for accessible-name computation; status must not be described as a Recommendation.
- Publisher
- W3C
- Version
- Working Draft
- Checked
- 2026-08-27
- Host
- w3.org
Core Accessibility API Mappings 1.2
Platform accessibility mapping work; exact browser/OS output remains implementation-dependent.
- Publisher
- W3C
- Version
- Working Draft
- Checked
- 2026-08-27
- Host
- w3.org
Web Content Accessibility Guidelines 2.2
Current WCAG Recommendation used for accessibility requirements.
- Publisher
- W3C
- Version
- W3C Recommendation
- Checked
- 2026-08-27
- Host
- w3.org
JSON-LD 1.1
Structured linked-data syntax and processing context.
- Publisher
- W3C
- Version
- W3C Recommendation
- Checked
- 2026-08-27
- Host
- w3.org
WebDriver
Current WebDriver remote-control specification draft.
- Publisher
- W3C
- Version
- Working Draft
- Checked
- 2026-08-27
- Host
- w3.org
WebDriver BiDi
Current bidirectional browser-automation specification draft.
- Publisher
- W3C
- Version
- Working Draft
- Checked
- 2026-08-27
- Host
- w3.org
Chrome DevTools Protocol: Accessibility domain
Chromium-specific accessibility instrumentation reference.
- Publisher
- Chromium Project
- Version
- Tip-of-tree protocol
- Checked
- 2026-08-27
- Host
- chromedevtools.github.io
PDF 2.0 / ISO 32000-2 resource
Current PDF 2.0 specification resource and errata path.
- Publisher
- PDF Association
- Version
- ISO 32000-2:2020
- Checked
- 2026-08-27
- Host
- pdfa.org
ECMA-376 Office Open XML File Formats
Current ECMA OOXML specification edition.
- Publisher
- Ecma International
- Version
- 5th edition
- Checked
- 2026-08-27
- Host
- ecma-international.org
PNG Third Edition
Current PNG Recommendation.
- Publisher
- W3C
- Version
- W3C Recommendation
- Checked
- 2026-08-27
- Host
- w3.org
CIPA DC-008: Exchangeable image file format
Current Exif specification listing.
- Publisher
- CIPA
- Version
- Exif 3.1 / 2026 translation
- Checked
- 2026-08-27
- Host
- cipa.jp
XMP Specifications
Primary implementation reference for XMP metadata.
- Publisher
- Adobe
- Version
- Current specification index
- Checked
- 2026-08-27
- Host
- developer.adobe.com
Media Types Registry
Authoritative media-type registry.
- Publisher
- IANA
- Version
- Registry
- Checked
- 2026-08-27
- Host
- iana.org
RFC 5322: Internet Message Format
Internet message syntax baseline.
- Publisher
- IETF / RFC Editor
- Version
- RFC 5322
- Checked
- 2026-08-27
- Host
- rfc-editor.org
RFC 2045: MIME Part One
MIME content types and transfer encodings.
- Publisher
- IETF / RFC Editor
- Version
- RFC 2045
- Checked
- 2026-08-27
- Host
- rfc-editor.org
RFC 6376: DomainKeys Identified Mail
DKIM signing and verification requirements.
- Publisher
- IETF / RFC Editor
- Version
- RFC 6376, updated by RFC 8301 and RFC 8463
- Checked
- 2026-08-27
- Host
- rfc-editor.org
RFC 9989: Domain-based Message Authentication, Reporting, and Conformance
Current DMARC core protocol; obsoletes RFC 7489 and RFC 9091.
- Publisher
- IETF / RFC Editor
- Version
- Proposed Standard
- Checked
- 2026-08-27
- Host
- rfc-editor.org
RFC 8617: Authenticated Received Chain
ARC protocol specification.
- Publisher
- IETF / RFC Editor
- Version
- RFC 8617
- Checked
- 2026-08-27
- Host
- rfc-editor.org
RFC 5545: iCalendar
Calendar object and recurrence baseline.
- Publisher
- IETF / RFC Editor
- Version
- RFC 5545
- Checked
- 2026-08-27
- Host
- rfc-editor.org
SentencePiece: A simple and language independent subword tokenizer and detokenizer
Peer-reviewed SentencePiece design paper.
- Publisher
- ACL Anthology
- Version
- EMNLP 2018
- Checked
- 2026-08-27
- Host
- aclanthology.org
Neural Machine Translation of Rare Words with Subword Units
Peer-reviewed BPE-for-NMT paper.
- Publisher
- ACL Anthology
- Version
- ACL 2016
- Checked
- 2026-08-27
- Host
- aclanthology.org
tiktoken
Versioned implementation reference; not a universal tokenizer specification.
- Publisher
- OpenAI
- Version
- Repository
- Checked
- 2026-08-27
- Host
- github.com
Not what you've signed up for: Compromising Real-World LLM-Integrated Applications with Indirect Prompt Injection
Foundational indirect-prompt-injection threat analysis.
- Publisher
- arXiv
- Version
- arXiv:2302.12173
- Checked
- 2026-08-27
- Host
- arxiv.org
InjecAgent: Benchmarking Indirect Prompt Injections in Tool-Integrated LLM Agents
Agent-focused prompt-injection benchmark.
- Publisher
- arXiv
- Version
- arXiv:2403.02691
- Checked
- 2026-08-27
- Host
- arxiv.org
LLM01:2025 Prompt Injection
Current OWASP LLM prompt-injection risk entry.
- Publisher
- OWASP GenAI Security Project
- Version
- 2025
- Checked
- 2026-08-27
- Host
- genai.owasp.org
LLM Prompt Injection Prevention Cheat Sheet
Application-layer prompt-injection mitigation guidance.
- Publisher
- OWASP Cheat Sheet Series
- Version
- Current
- Checked
- 2026-08-27
- Host
- cheatsheetseries.owasp.org
AI Agent Security Cheat Sheet
Agent capability, authorization, memory, and tool-boundary guidance.
- Publisher
- OWASP Cheat Sheet Series
- Version
- Current
- Checked
- 2026-08-27
- Host
- cheatsheetseries.owasp.org
Adversarial Machine Learning: A Taxonomy and Terminology of Attacks and Mitigations
Current NIST adversarial-machine-learning taxonomy.
- Publisher
- NIST
- Version
- NIST AI 100-2e2025
- Checked
- 2026-08-27
- Host
- csrc.nist.gov
MITRE ATLAS
Adversarial AI tactics, techniques, mitigations, and case studies.
- Publisher
- MITRE
- Version
- Current knowledge base
- Checked
- 2026-08-27
- Host
- atlas.mitre.org
A Watermark for Large Language Models
Peer-reviewed statistical LLM watermarking method.
- Publisher
- PMLR
- Version
- ICML 2023
- Checked
- 2026-08-27
- Host
- proceedings.mlr.press
Provably Secure Generative Linguistic Steganography
Peer-reviewed neural linguistic steganography research.
- Publisher
- ACL Anthology
- Version
- Findings of ACL 2021
- Checked
- 2026-08-27
- Host
- aclanthology.org
Zero-shot Generative Linguistic Steganography
Peer-reviewed zero-shot linguistic steganography research.
- Publisher
- ACL Anthology
- Version
- NAACL 2024
- Checked
- 2026-08-27
- Host
- aclanthology.org
C2PA Technical Specification
Current C2PA technical specification used by this review.
- Publisher
- C2PA
- Version
- 2.4
- Checked
- 2026-08-27
- Host
- spec.c2pa.org
C2PA Implementation Guidance
Implementation guidance for C2PA 2.4.
- Publisher
- C2PA
- Version
- 2.4
- Checked
- 2026-08-27
- Host
- spec.c2pa.org
Reducing Risks Posed by Synthetic Content
Technical overview of provenance, watermarking, detection, and related limits.
- Publisher
- NIST
- Version
- NIST AI 100-4
- Checked
- 2026-08-27
- Host
- nist.gov
Image Hijacks: Adversarial Images can Control Generative Models at Runtime
Primary image-hijack research; transfer claims remain model-specific.
- Publisher
- arXiv
- Version
- arXiv:2309.00236
- Checked
- 2026-08-27
- Host
- arxiv.org
An alt Decision Tree
Practical image-alternative decision guidance.
- Publisher
- W3C Web Accessibility Initiative
- Version
- Current WAI tutorial
- Checked
- 2026-08-27
- Host
- w3.org
SLSA Specification
Current SLSA specification.
- Publisher
- OpenSSF / SLSA
- Version
- 1.2
- Checked
- 2026-08-27
- Host
- slsa.dev
SLSA v1.0
Historical SLSA release; retired in favor of newer versions.
- Publisher
- OpenSSF / SLSA
- Version
- 1.0
- Checked
- 2026-08-27
- Host
- slsa.dev
Current replacement
SLSA Specification
https://slsa.dev/spec/v1.0/
SPDX Specification 3.0.1
Current SPDX 3.x specification.
- Publisher
- Linux Foundation / SPDX
- Version
- 3.0.1
- Checked
- 2026-08-27
- Host
- spdx.github.io
CycloneDX Specification
Current CycloneDX specification.
- Publisher
- OWASP CycloneDX / Ecma International
- Version
- 1.7
- Checked
- 2026-08-27
- Host
- cyclonedx.org
CycloneDX 1.6
Historical CycloneDX version; superseded by 1.7.
- Publisher
- OWASP CycloneDX / Ecma International
- Version
- 1.6
- Checked
- 2026-08-27
- Host
- cyclonedx.org
Current replacement
CycloneDX Specification
https://cyclonedx.org/docs/1.6/json/
Sigstore Overview
Primary implementation guidance for Sigstore trust and transparency.
- Publisher
- Sigstore
- Version
- Current documentation
- Checked
- 2026-08-27
- Host
- docs.sigstore.dev
Secure Software Development Framework
Secure software-development practice framework.
- Publisher
- NIST
- Version
- SP 800-218
- Checked
- 2026-08-27
- Host
- csrc.nist.gov
Cybersecurity Framework 2.0
Current NIST Cybersecurity Framework.
- Publisher
- NIST
- Version
- 2.0
- Checked
- 2026-08-27
- Host
- nist.gov
AI Risk Management Framework
Current published AI RMF with revision work in progress.
- Publisher
- NIST
- Version
- AI RMF 1.0; revision underway
- Checked
- 2026-08-27
- Host
- nist.gov
OWASP Software Assurance Maturity Model
Software-assurance maturity reference.
- Publisher
- OWASP
- Version
- Current model
- Checked
- 2026-08-27
- Host
- owaspsamm.org
CVSS v4.0 Specification
Vulnerability-severity scoring specification; not an organizational-risk score.
- Publisher
- FIRST
- Version
- 4.0
- Checked
- 2026-08-27
- Host
- first.org
Review vocabulary
Descriptive labels, not scores
Directly supports
The cited source directly establishes the bounded paraphrase under the declared version and scope.
Partially supports
The source supports a narrower mechanism or result but does not justify the full breadth of the report wording.
Conflicts or qualifies
Current standards, final publications, or implementation evidence materially qualify or contradict the preserved wording.
Does not establish
The cited material is relevant context but does not establish the stated empirical, legal, or philosophical conclusion.
BoundariesNo silent rewrite
Current review does not replace exact source evidence.
This release reviews a bounded set of important claims and selected sources. It does not establish that every unreviewed sentence is correct, that every external URL will remain available, that one source category is inherently superior, or that release-time URL resolution proves continuing publication authority.
For consequential decisions, inspect the original report, the current source, the implementation-owned review, and the named external authority together.