Issues

• §6.3 needs the same no-DENY hook exception that §6.5 has for postCompact

  type:proposalworkstream:spec
  GenAI-Security-Project/agent-control-standard#270 · Filter by author rocklambros opened on Oct 13, 2026

• The advertised decision deadline ties with the OPA timeout, so a slow OPA proceeds

  type:bugtype:refimplworkstream:refimpl
  GenAI-Security-Project/agent-control-standard#269 · Filter by author rocklambros opened on Oct 12, 2026

• Egress annotator reports the wrong host when the URL contains U+FEFF or a no-break space

  priority:P1type:bugtype:refimplworkstream:refimpl
  GenAI-Security-Project/agent-control-standard#268 · Filter by author rocklambros opened on Oct 12, 2026

• [Docs] Replace unsupported SDK and wire examples in acs.md

  scope:in-focusstatus:acceptedtype:docsworkstream:docs
  GenAI-Security-Project/agent-control-standard#267 · Filter by author Lrd0036 opened on Oct 12, 2026
  

• [RefImpl] Commit a sample OTLP trace from the reference Guardian, and test the exporter against it

  priority:P1scope:in-focusstatus:acceptedtype:refimplworkstream:coding-agents
  GenAI-Security-Project/agent-control-standard#266 · Filter by author rocklambros opened on Oct 12, 2026 · Installable reference Guardian
  

• Review the Current Priority Scope (was due October 9, 2026)

  status:needs-triage
  GenAI-Security-Project/agent-control-standard#265 · Filter by author github-actions opened on Oct 12, 2026

• [Proposal] Trace event for a verdict the Observed Agent substituted under §6.3 or §6.5

  priority:P2scope:deferredstatus:acceptedtype:proposalworkstream:spec
  GenAI-Security-Project/agent-control-standard#264 · Filter by author rocklambros opened on Oct 12, 2026 · v0.2.0

• [Bug] Empty strings in policy_references and source_id collide with Trace padding

  priority:P2scope:deferredstatus:acceptedtype:bugworkstream:spec
  GenAI-Security-Project/agent-control-standard#263 · Filter by author rocklambros opened on Oct 12, 2026 · v0.2.0

• [Bug] Trace can't join a cited provenance id to its provenance facts

  priority:P2scope:in-focusstatus:acceptedtype:bugworkstream:spec
  GenAI-Security-Project/agent-control-standard#262 · Filter by author rocklambros opened on Oct 12, 2026 · Spec and docs fixes for v0.1

• [Bug] OCSF provenance has two homes, and the mapping's enrichment shape fails OCSF validation

  priority:P2scope:in-focusstatus:acceptedtype:bugworkstream:spec
  GenAI-Security-Project/agent-control-standard#260 · Filter by author rocklambros opened on Oct 12, 2026 · Spec and docs fixes for v0.1
  1

• [RefImpl] Expectations for Guardian implementations

  priority:P1scope:in-focusstatus:acceptedtype:refimplworkstream:coding-agents
  Feature

  GenAI-Security-Project/agent-control-standard#252 · Filter by author artmaro opened on Oct 11, 2026 · Language ports
  1

  

• [Bug] Host audit log reuses seq on about half its entries when five or more hooks run at once; no entry is lost

  status:needs-triagetype:bug
  GenAI-Security-Project/agent-control-standard#250 · Filter by author Premmethuku75 opened on Oct 10, 2026

• [Bug] ACS events can't fill the fields their OCSF classes require

  status:needs-triagetype:bug
  GenAI-Security-Project/agent-control-standard#235 · Filter by author bar-capsule opened on Oct 8, 2026
  2

• [Docs] OCSF examples in acs.md and implementation_examples.md contradict the normative mapping

  status:needs-triagetype:docs
  GenAI-Security-Project/agent-control-standard#234 · Filter by author bar-capsule opened on Oct 8, 2026
  

• [RefImpl] Keep AGT Guardian replay and session-chain state across restarts and eviction

  GenAI-Security-Project/agent-control-standard#233 · Filter by author jrcrittenden opened on Oct 8, 2026

• [RefImpl] Consolidate AGT wire signing, config and protocol constants into a shared acs-wire package

  GenAI-Security-Project/agent-control-standard#230 · Filter by author jrcrittenden opened on Oct 7, 2026

• [Bug]: acs.decision trace event cannot carry reason_codes, policy_references, cited_provenance_ids, or chain_hash, so replay from the trace alone is not possible

  priority:P1scope:in-focusstatus:acceptedtype:bugworkstream:spec
  GenAI-Security-Project/agent-control-standard#228 · Filter by author rocklambros opened on Oct 5, 2026 · Spec and docs fixes for v0.1
  7

  

• [Bug]: otel-mapping.json requires acs.capability on gen_ai.tool.call, but capability is optional in tool-call-request.json

  priority:P1scope:in-focusstatus:acceptedtype:bugworkstream:spec
  GenAI-Security-Project/agent-control-standard#227 · Filter by author rocklambros opened on Oct 5, 2026 · Spec and docs fixes for v0.1
  4

  

• Retire the separate marketing site

  scope:in-focusstatus:acceptedtype:proposal
  GenAI-Security-Project/agent-control-standard#217 · Filter by author rocklambros opened on Oct 5, 2026 · Governance under OWASP
  

• Move the project domain to owaspacs.org

  scope:in-focusstatus:acceptedtype:proposal
  GenAI-Security-Project/agent-control-standard#216 · Filter by author rocklambros opened on Oct 5, 2026 · Governance under OWASP
  

• Register for the OpenSSF Best Practices badge

  scope:in-focusstatus:acceptedtype:proposal
  GenAI-Security-Project/agent-control-standard#214 · Filter by author rocklambros opened on Oct 5, 2026 · Governance under OWASP

• Map the ACS conformance profiles against AARM with its authors

  scope:in-focusstatus:acceptedtype:proposal
  GenAI-Security-Project/agent-control-standard#213 · Filter by author rocklambros opened on Oct 5, 2026 · AGT interoperability benchmark

• Forward Cursor's file-read hooks so a Guardian can govern file reads

  scope:in-focusstatus:acceptedtype:refimpl
  GenAI-Security-Project/agent-control-standard#212 · Filter by author rocklambros opened on Oct 5, 2026 · AGT interoperability benchmark

• Roadmap health

  GenAI-Security-Project/agent-control-standard#209 · Filter by author github-actions opened on Oct 5, 2026
  2

• Proposal: source-rights evidence as a standard pre-tool governance hook

  GenAI-Security-Project/agent-control-standard#204 · Filter by author reflectme-source opened on Oct 5, 2026