OWASP LLM Top 10 — Vouch coverage matrix

Broker version v0.30.0. Targets per 99/2/2 decision doc. Measured values from evals/results/latest.json; nightly CI gate enforces TPR≥0.99, FPR≤0.02, FNR≤0.02.

green 0yellow 4red 0unknown 7

ClassRiskStatusTPRFPRFNRClassifiers
LLM01aPrompt Injection (Direct)unknownprompt_injection, cipher_encoding, adversarial_suffix
LLM01bPrompt Injection (Indirect)yellow100.00%0.00%0.00%indirect_injection, tool_call_request
LLM02Sensitive Information Disclosureyellow100.00%0.00%0.00%pii_input, pii_output
LLM03Supply Chain Vulnerabilitiesunknownprovider_attestation
LLM04Data & Model Poisoningunknown
LLM05Insecure Plugin Designyellow100.00%0.00%0.00%tool_call_request, destination_mismatch
LLM06Excessive Agencyunknownagency_budget
LLM07System Prompt Leakageyellow100.00%0.00%0.00%model_extraction, indirect_injection
LLM08Vector & Embedding Weaknessesunknownembedding_similarity
LLM09Misinformation / Overrelianceunknownharmful_content_output
LLM10Unbounded Consumptionunknownmodel_dos

Also available as JSON.