Source for aveproject.org, the site presenting AVE (Agentic Vulnerability Enumeration), the behavioral classification standard for agentic AI components.
Confirm the actual deploy workflow filename and the real, current record
count before relying on the badges above; the deploy badge assumes
.github/workflows/deploy.yml exists under that name, and the records
badge is deliberately left as a placeholder rather than hand-typing a
number likely to go stale the next time a record is added.
This repo is presentation. The standard itself, its records, and its
schema live in aveproject/ave; this
repo has no authority over that content and generates none of its own.
Every page here either renders data pulled from that repo, or documents
how to use it. If a change is about what AVE says, it belongs in
aveproject/ave, not here.
| Page | Purpose |
|---|---|
| Registry | Every AVE record, searchable and filterable |
| Crosswalks | Mappings from other scanners' categories to AVE ids |
| Architecture | The standard's own structure: records, fixtures, how an implementation consumes them |
| Scoring | AIVSS scoring methodology |
| Schema | Field-by-field reference for the current schema version |
| Implementer Guide | The three consumption patterns, which one fits which deployment |
records.js is generated by scripts/build-records.js, which pulls from
aveproject/ave's published records,
not from any copy kept in this repo. The consolidated JSON dump
(dist/ave-records-latest.json, an alias that always points at current,
distinct from the versioned, frozen dist/ave-records-v<version>.json
snapshots) is the same artifact ave-api and any external implementer
would use; this site is one more consumer of it, not a second source of
truth.
node scripts/build-records.js
# regenerates records.js from aveproject/ave's current published recordsgit clone https://github.com/aveproject/ave-site.git
git clone https://github.com/aveproject/ave.git
cd ave-site
node scripts/build-records.js --source ../ave
python3 -m http.server 8080
# or: npx serve .Serve over HTTP, don't open the HTML files directly from disk; several
pages fetch JSON at runtime, and fetch() does not work against a
file:// URL.
GitHub Pages, custom domain aveproject.org. DNS and Pages configuration
aren't duplicated here; see the repo's deployment workflow and GitHub
Pages settings for the current setup.
| Project | What it is |
|---|---|
| aveproject/ave | The standard: records, schema, governance |
| aveproject/ave-api | Read-only reference API, api.aveproject.org |
| bawbel/scanner | Reference implementation scanner (a Bawbel product implementing AVE, not part of the standard) |
Third-party tools and services that consume AVE, commercial or otherwise,
are implementations of the standard, not part of it, and are documented in
their own repos, not here, matching aveproject/ave's own CONTEXT.md.
Changes to AVE's own content (records, schema, framework mappings) go to aveproject/ave's own CONTRIBUTING.md. Changes to this repo are about presentation only: page layout, the build script, styling, and site-level bugs.
Apache 2.0, see LICENSE.