Security: see references/scanner-notes.md and upstream SECURITY.md for expected scanner signals and trust model.

Verasic Agent Disclosure — policy + red-team orchestration

Source of truth

The full policy lives in references/disclosure-policy.md. The always-applied Cursor rule is a copy of assets/verasic-agent-disclosure.mdc — never duplicate the spec in chat.

Red-team workflow: read references/red-team-protocol.md before running regression. Prompt catalog and pass/fail heuristics: references/red-team-prompts.md.

Orchestration (Cursor)

Run the verasic agent disclosure red-team regression from the repository root.

From the repo root, run:

bash .cursor/skills/verasic-agent-disclosure/scripts/run-red-team.sh