How to meet it
OWASP AISVS v1.01
AI-Assisted Secure Coding (Appendix C) · Compromise Containment & Automated Remediation
Trace affected artifacts during incidents
Verify that build provenance and AI BOM records are used during incident response to identify every downstream artifact produced under the suspect AI agent or the compromised pipeline run, so that recall, rebuild, or quarantine can be targeted.
OWASP AISVS v1.01, requirement AC.14.4
In plain English
Use build provenance and AI BOM records during incidents to find every artifact produced by a suspect agent or compromised pipeline run, so recall, rebuild or quarantine can be targeted.
What good looks like
- Provenance can be queried by agent and run.
- The query is part of the incident playbook.
- It has been rehearsed.
How teams usually do it
- A searchable store of provenance and BOM records.
Evidence an auditor would accept
- A worked example query.
Common mistakes
- Provenance stored but impossible to search quickly.
Not sure which requirements apply to your system? Take the assessment.
Requirement text from the OWASP AI Security Verification Standard, licensed under CC BY-SA 4.0. This guidance is shared under the same licence.