How to meet it
OWASP AISVS v1.01
AI-Assisted Secure Coding (Appendix C) · AI-Generated Infrastructure & Pipeline Artifacts
Detect drift from signed baselines
Verify that drift detection compares deployed infrastructure and live workflow configurations against signed, AI-attributed baselines, and alerts on any unauthorized modification.
OWASP AISVS v1.01, requirement AC.7.5
In plain English
Compare live infrastructure and workflow settings with signed baselines that record AI involvement, and alert on unauthorised changes.
What good looks like
- Baselines are signed and include AI attribution.
- Drift detection runs regularly.
- Unauthorised drift raises alerts.
How teams usually do it
- Infrastructure drift detection plus workflow settings audits.
Evidence an auditor would accept
- Baselines and drift reports.
Common mistakes
- Drift detection that ignores CI/CD settings.
Not sure which requirements apply to your system? Take the assessment.
Requirement text from the OWASP AI Security Verification Standard, licensed under CC BY-SA 4.0. This guidance is shared under the same licence.