Issues

• [Bug]: acs.decision trace event cannot carry reason_codes, policy_references, cited_provenance_ids, or chain_hash, so replay from the trace alone is not possible

  priority:P1scope:in-focusstatus:acceptedtype:bugworkstream:spec
  GenAI-Security-Project/agent-control-standard#228 · Filter by author rocklambros opened on Oct 5, 2026 · Spec and docs fixes for v0.1
  

• [Bug]: otel-mapping.json requires acs.capability on gen_ai.tool.call, but capability is optional in tool-call-request.json

  priority:P1scope:in-focusstatus:acceptedtype:bugworkstream:spec
  GenAI-Security-Project/agent-control-standard#227 · Filter by author rocklambros opened on Oct 5, 2026 · Spec and docs fixes for v0.1
  

• Retire the separate marketing site

  scope:in-focusstatus:acceptedtype:proposal
  GenAI-Security-Project/agent-control-standard#217 · Filter by author rocklambros opened on Oct 5, 2026 · Governance under OWASP
  

• Move the project domain to owaspacs.org

  scope:in-focusstatus:acceptedtype:proposal
  GenAI-Security-Project/agent-control-standard#216 · Filter by author rocklambros opened on Oct 5, 2026 · Governance under OWASP
  

• Register for the OpenSSF Best Practices badge

  scope:in-focusstatus:acceptedtype:proposal
  GenAI-Security-Project/agent-control-standard#214 · Filter by author rocklambros opened on Oct 5, 2026 · Governance under OWASP

• Map the ACS conformance profiles against AARM with its authors

  scope:in-focusstatus:acceptedtype:proposal
  GenAI-Security-Project/agent-control-standard#213 · Filter by author rocklambros opened on Oct 5, 2026 · AGT interoperability benchmark

• Forward Cursor's file-read hooks so a Guardian can govern file reads

  scope:in-focusstatus:acceptedtype:refimpl
  GenAI-Security-Project/agent-control-standard#212 · Filter by author rocklambros opened on Oct 5, 2026 · AGT interoperability benchmark

• Roadmap health

  GenAI-Security-Project/agent-control-standard#209 · Filter by author github-actions opened on Oct 5, 2026
  2

• Proposal: source-rights evidence as a standard pre-tool governance hook

  GenAI-Security-Project/agent-control-standard#204 · Filter by author reflectme-source opened on Oct 5, 2026

• toolCallRequest has no idempotency binding: a retry after a lost toolCallResult can repeat an external effect

  GenAI-Security-Project/agent-control-standard#200 · Filter by author holland202 opened on Oct 4, 2026

• [Conformance] Guardian omits required chain_hash from step responses

  scope:in-focusstatus:acceptedtype:conformance
  GenAI-Security-Project/agent-control-standard#199 · Filter by author shivang-sec opened on Oct 2, 2026 · ACS-Core conformant reference Guardian

• [Docs] Trace events page omits the OCSF class for allow that ocsf-mapping.json defines

  scope:in-focusstatus:accepted
  GenAI-Security-Project/agent-control-standard#198 · Filter by author imran-siddique opened on Oct 1, 2026 · Spec and docs fixes for v0.1

• [Docs] hooks.md's toolCallRequest payload summary doesn't match tool-call-request.json

  scope:in-focusstatus:accepted
  GenAI-Security-Project/agent-control-standard#197 · Filter by author iCineza opened on Oct 1, 2026 · Spec and docs fixes for v0.1

• [Bug] §3 forward compat accepts any matching major version, which under 0.x accepts every 0.y release

  scope:in-focusstatus:accepted
  GenAI-Security-Project/agent-control-standard#196 · Filter by author iCineza opened on Oct 1, 2026 · Spec and docs fixes for v0.1

• [Bug] Signatures are REQUIRED in §10 and conformance, "field-optional" in §10.1, and not required by the envelope schemas

  scope:in-focusstatus:accepted
  GenAI-Security-Project/agent-control-standard#195 · Filter by author iCineza opened on Oct 1, 2026 · Spec and docs fixes for v0.1

• [Bug] §3 says acs_version is top-level; the request envelope schema and hooks.md put it in params

  scope:in-focusstatus:accepted
  GenAI-Security-Project/agent-control-standard#194 · Filter by author iCineza opened on Oct 1, 2026 · Spec and docs fixes for v0.1

• [Conformance] AGT Guardian accepts duplicate request_id values within a session

  scope:in-focusstatus:acceptedtype:conformance
  GenAI-Security-Project/agent-control-standard#186 · Filter by author shivang-sec opened on Sep 25, 2026 · ACS-Core conformant reference Guardian

• Contribution proposal: offline-verifiable action evidence for AI agents (aaes.export/v2)

  GenAI-Security-Project/agent-control-standard#185 · Filter by author alschell opened on Sep 23, 2026
  1

• [Conformance] ACS-Core over the wire: the reference Guardian accepts unsigned, replayed and stale envelopes and publishes no chain head

  scope:in-focusstatus:acceptedtype:conformance
  GenAI-Security-Project/agent-control-standard#184 · Filter by author astrogilda opened on Sep 23, 2026 · ACS-Core conformant reference Guardian
  1

• [Conformance] Reference host adapter accepts deny decisions without required reasoning

  scope:in-focusstatus:acceptedtype:conformance
  GenAI-Security-Project/agent-control-standard#182 · Filter by author shivang-sec opened on Sep 22, 2026 · ACS-Core conformant reference Guardian
  8

• [Conformance] Reference host adapter cannot honor valid MODIFY with modified_content

  scope:in-focusstatus:acceptedtype:conformance
  GenAI-Security-Project/agent-control-standard#181 · Filter by author shivang-sec opened on Sep 22, 2026 · ACS-Core conformant reference Guardian

• Decide the triage label taxonomy proposed in Discussion #161

  status:needs-triagetype:proposal
  GenAI-Security-Project/agent-control-standard#178 · Filter by author rocklambros opened on Sep 21, 2026
  2

  

• [Bug] ASK has no way to deliver the approver's answer to the Guardian

  status:needs-triagetype:bug
  GenAI-Security-Project/agent-control-standard#175 · Filter by author President opened on Sep 21, 2026

• [Conformance] OpenCode host honors live decisions and both failure postures

  priority:P1scope:in-focusstatus:acceptedtype:conformanceworkstream:coding-agents
  GenAI-Security-Project/agent-control-standard#171 · Filter by author rocklambros opened on Sep 21, 2026 · AGT interoperability benchmark

• [RefImpl] Codex adapter: tool calls through PreToolUse

  priority:P1scope:in-focusstatus:acceptedtype:refimplworkstream:coding-agents
  GenAI-Security-Project/agent-control-standard#170 · Filter by author rocklambros opened on Sep 21, 2026 · Host adapter coverage