rfc: classify findings and make catalog detection rules executable and testable - #23

What this changes

Two additions to From Lessons to Controls:

1. Each recommendation also specifies the technique classification of the failure against open, vendor-neutral taxonomies (for example MITRE ATLAS techniques or the OWASP LLM and agentic classes). The Mission says SAFE turns recurring failures into shared controls, and the confidential rapid alert shares affected patterns. Recurrence and patterns are only mechanically detectable if findings carry a shared classification; without one, spotting the same failure twice depends on editorial memory.

2. The catalog paragraph already commits SAFE to publishing machine-readable policies and detection rules in a shared, versioned catalog, but says nothing about what form those rules take. The added paragraph asks published detection rules to meet the same bar the RFC already sets for recommendations (a reproducible verification method): open executable format, declared true-positive and true-negative test cases, measured false-positive evidence on benign traffic, a version, and the classification above. It names Sigma and ATR as existing examples at the infrastructure and agent layers; the normative text stays format-agnostic.

Why, argued from the RFC's own goals

A catalog entry a member can adopt and verify needs tests and stated error rates in the same way the RFC already demands a reproducible verification method for controls. And the weekly machine-readable updates in Notification Timelines only interoperate across members if the semantics of a finding (what technique class, which detection caught or missed it) are classified consistently, not only the transport format.

Relationship to open issue #5

Complementary, not overlapping. #5 proposes mapping the Evidence Preservation fields to OpenTelemetry GenAI semantic conventions, which is the transport layer of evidence. This change is about the semantics of findings and published rules. Both together make cross-member commonality analysis workable.

Disclosure

I maintain ATR (Agent Threat Rules, MIT), named once in the added text as an existing example alongside Sigma. The proposed wording does not require it or any specific format.