unified
UC-AI-25 — Guide code-generating systems toward secure patterns and safe dependencies
Configure code-generating AI systems with secure-by-default guidance: steer generated code toward parameterized queries and safe frameworks for common vulnerability classes, established authentication and authorization libraries, secure session and cookie settings, input validation and safe error handling, and logging that excludes secrets; require pinned, verified dependency specifications so hallucinated or typosquatted packages are not introduced; and test the guidance against a vulnerability benchmark on change. Retain system-prompt and policy configurations and benchmark results as evidence.
Record JSON · Open in map · Data retrieval guide
Catalog revision: 24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028. A connection does not establish full coverage.
Attributes
- domain
- AI Governance
- type
- preventive
- category
- technical
Details
- unified_id
- UC-AI-25
- title
- Guide code-generating systems toward secure patterns and safe dependencies
- statement
- Configure code-generating AI systems with secure-by-default guidance: steer generated code toward parameterized queries and safe frameworks for common vulnerability classes, established authentication and authorization libraries, secure session and cookie settings, input validation and safe error handling, and logging that excludes secrets; require pinned, verified dependency specifications so hallucinated or typosquatted packages are not introduced; and test the guidance against a vulnerability benchmark on change. Retain system-prompt and policy configurations and benchmark results as evidence.
- domain
- AI Governance
- control_type
- preventive
- control_category
- technical
- members
- framework
- aiuc-1
- control_id
- B010
- coverage
- full
- relationship
- equal
- guidance
Source
No record-specific source URL is provided.
Connections
- UC-AI-25 — Guide code-generating systems toward secure patterns and safe dependencies maps_to B010 — Promote secure patterns in generated code
- framework
- aiuc-1
- control_id
- B010
- coverage
- full
- relationship
- equal
- delta
- Not provided
- source_version
- July 15, 2026 release (quarterly update cadence)
- provenance
- mapper
- coworkcanvas-compliance-graph
- reviewDate
- 2026-09-07
- direction
- canonical_to_source
- defaultConfidence
- medium
- defaultStatus
- active
- note
- Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.
- UC-AI-25 — Guide code-generating systems toward secure patterns and safe dependencies mitigates Insecure AI-generated code and hallucinated or typosquatted dependencies
- strength
- primary
- rationale
- Secure-by-default guidance and pinned, verified dependency specification for code-generating systems directly counter insecure generated code and hallucinated packages.
- AI Guardrail Configuration & Agent Permission Review operates UC-AI-25 — Guide code-generating systems toward secure patterns and safe dependencies
- UC-AI-25 — Guide code-generating systems toward secure patterns and safe dependencies mitigates Credential and secret leakage through AI inputs, outputs, logs and generated code
- strength
- related
- rationale
- Guidance to reference secret managers rather than hardcode credentials keeps secrets out of generated code.