An open specification for agentic AI security evaluation and testing, from Cisco

Cisco's Advanced Security Initiatives Group released Foundry, an organization-neutral specification distilling its internal agentic security evaluation design into eight core agent roles, five extension roles, a finding lifecycle, coordination and governance requirements, and roughly 130 functional requirements with rationale. The repository contains no code by design: it is written to be run through a spec-driven workflow such as spec-kit, where organization-specific decisions marked [NEEDS CLARIFICATION] are resolved against your own infrastructure. It also describes a detection-to-prevention loop in which rule gaps found by exploratory agents become CodeGuard rules that feed back into the corpus and into LLM coding assistants.