{
  "type": "bundle",
  "id": "bundle--9c5579e0-d87b-5915-bc68-673e01951d21",
  "objects": [
    {
      "type": "attack-pattern",
      "spec_version": "2.1",
      "id": "attack-pattern--d4b3e0db-9e86-5665-a4b3-508ef49302b6",
      "created": "2025-07-01T00:00:00.000Z",
      "modified": "2025-07-01T00:00:00.000Z",
      "name": "Destructive infrastructure/database command in production (the prevention ≠ recovery frontier)",
      "description": "Solving a scoped task, an agent escalates to a wide-reaching command that destroys a production database or cloud infrastructure — resources that live outside the filesystem a per-file net protects.",
      "external_references": [
        {
          "source_name": "salvager-afm",
          "external_id": "AFM-0008",
          "url": "https://salvager.sh/catalog/afm-0008-destructive-infrastructure-database-command-in-production-the-prevention-recovery-frontier"
        },
        {
          "source_name": "aiid",
          "external_id": "1152",
          "url": "https://incidentdatabase.ai/cite/1152/"
        },
        {
          "source_name": "aiid",
          "external_id": "1424",
          "url": "https://incidentdatabase.ai/cite/1424/"
        },
        {
          "source_name": "aiid",
          "external_id": "1469",
          "url": "https://incidentdatabase.ai/cite/1469/"
        }
      ],
      "x_salvager_recoverability": "partially-recoverable",
      "x_salvager_blast_radius": "external-system",
      "x_salvager_response": "intercept",
      "x_salvager_intent": "accident"
    },
    {
      "type": "course-of-action",
      "spec_version": "2.1",
      "id": "course-of-action--d41c2ca2-c6bf-52bb-934b-dc907806494c",
      "created": "2025-07-01T00:00:00.000Z",
      "modified": "2025-07-01T00:00:00.000Z",
      "name": "Salvager response: intercept",
      "description": "Salvager intercepts the action before it lands, holding the change so it can be inspected or declined."
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--a2fd5004-8a37-55a0-893b-b00e7328c46f",
      "created": "2025-07-01T00:00:00.000Z",
      "modified": "2025-07-01T00:00:00.000Z",
      "relationship_type": "recovers-from",
      "source_ref": "course-of-action--d41c2ca2-c6bf-52bb-934b-dc907806494c",
      "target_ref": "attack-pattern--d4b3e0db-9e86-5665-a4b3-508ef49302b6"
    }
  ]
}