rUv e3a403e9f4 docs(adr): add ADR-377 — AgentDB Retrieval Security Layer (#2872) ...

Recovers a fully-written, never-merged dream-cycle proposal from the
abandoned branch dream/2026-07-01-security (issue #2516) — the bot wrote
the ADR and SOTA report but never opened a PR for this night, so it sat
undiscovered outside the 49-PR backlog cleared in #2871.

Six 2026 Grade A papers establish that AgentDB's retrieval and write
paths have zero certified defenses: SMSR proves 93-100% poisoning ASR
without a certified defense (0% with one); indirect prompt injection
achieves near-100% retrieval success once a poisoned entry is written.
ADR-165 (CVE-1-5) covers input validation and plugin signing but not
this path.

Renumbered ADR-180 -> ADR-377 (180 was already reused by the bot's own
autopilot once and is not the current next-free slot after #2871).

Tracking issue with phased implementation plan: (filled in after merge)

2026-07-30 13:33:32 -04:00

..

2026-07-01-security-sota.md

docs(adr): add ADR-377 — AgentDB Retrieval Security Layer (#2872)

2026-07-30 13:33:32 -04:00

2026-07-06-security-sota-report.md

[Dream Cycle 2026-07-06] security: VMG + RepE IPI detection gaps identified (ADR-178) (#2589)

2026-07-07 22:46:02 -04:00