K08 · traceable Machine Intelligence knowledge infrastructure

Supply-Chain Incident Playbooks

Direct answer

K08 adds seven bounded playbooks that connect detection, containment, recovery, and evidence without exposing offensive procedures.

Stable record: K08-PAGE-SUPPLY-CHAIN-PLAYBOOKS
Claim status: PROJECT TECHNICAL PROPOSAL
Last reviewed: 2026-08-16
Research cutoff: 2026-08-16
Source type: GOVERNED PROJECT KNOWLEDGE
Currentness: Current for release 2.1.0; external sources require periodic revalidation.
Correction state: No unresolved public correction recorded for this release.
Machine record: Static JSON record

Authority and evidence boundary. K08 publishes governed research, synthetic reference traces, non-certifying workbooks, acquisition evaluation structures, offline planning records, and bounded protocol experiments. It does not prove historical authority, facility truth, compliance, certification, contract award, deployment, current operation, or authorization for external effects.

Seven defensive playbooks

DEFENSIVE REFERENCE PLAYBOOK

Compromised Supplier Signing Key

3 detection cues, 3 containment actions, and 3 recovery actions.

SCIP-K08-001

DEFENSIVE REFERENCE PLAYBOOK

Counterfeit Or Substituted Component

3 detection cues, 2 containment actions, and 3 recovery actions.

SCIP-K08-002

DEFENSIVE REFERENCE PLAYBOOK

Malicious Or Unauthorized Firmware

3 detection cues, 3 containment actions, and 3 recovery actions.

SCIP-K08-003

DEFENSIVE REFERENCE PLAYBOOK

Poisoned Model Or Data Artifact

3 detection cues, 2 containment actions, and 3 recovery actions.

SCIP-K08-004

DEFENSIVE REFERENCE PLAYBOOK

Revoked Or False Attestation

3 detection cues, 2 containment actions, and 2 recovery actions.

SCIP-K08-005

DEFENSIVE REFERENCE PLAYBOOK

Incomplete Bill Of Materials

3 detection cues, 2 containment actions, and 3 recovery actions.

SCIP-K08-006

DEFENSIVE REFERENCE PLAYBOOK

Concentrated Recovery Dependency

1 detection cues, 2 containment actions, and 2 recovery actions.

SCIP-K08-007

Operating boundary

The playbooks cover internal trust decisions, quarantine, evidence preservation, supplier coordination, restoration, and retesting. They do not publish methods for compromising suppliers, firmware, models, components, or third-party systems.