{
  "updated_at": "2026-09-18T12:00:00Z",
  "total_frameworks": 10,
  "frameworks": [
    {
      "id": "cursor",
      "name": "Cursor AI IDE",
      "category": "Developer Coding Agents",
      "autonomy_tier": "Autonomous Multi-Step Planning",
      "default_sandbox": "Partial (Regex / AST Filter)",
      "ambient_tool_risk": "CRITICAL",
      "mean_hass": 91,
      "risk_status": "CRITICAL",
      "verified_cves": [
        "CVE-2026-22708",
        "CVE-2026-4372"
      ]
    },
    {
      "id": "mistral-vibe",
      "name": "Mistral Vibe Agent",
      "category": "Autonomous CLI Coding Agents",
      "autonomy_tier": "Autonomous Multi-Step Planning",
      "default_sandbox": "Partial (Regex / AST Filter)",
      "ambient_tool_risk": "CRITICAL",
      "mean_hass": 92.5,
      "risk_status": "CRITICAL",
      "verified_cves": [
        "CVE-2026-87983",
        "CVE-2026-87984",
        "CVE-2026-87985",
        "CVE-2026-87986",
        "CVE-2026-87987"
      ]
    },
    {
      "id": "langchain",
      "name": "LangChain / LangGraph",
      "category": "Agentic Orchestration Frameworks",
      "autonomy_tier": "Autonomous Workflow",
      "default_sandbox": "None (Host Process)",
      "ambient_tool_risk": "CRITICAL",
      "mean_hass": 88,
      "risk_status": "CRITICAL",
      "verified_cves": [
        "CVE-2026-48746",
        "CVE-2026-27966",
        "CVE-2025-3248"
      ]
    },
    {
      "id": "autogen",
      "name": "Microsoft AutoGen",
      "category": "Multi-Agent Conversation Frameworks",
      "autonomy_tier": "Fully Autonomous Execution",
      "default_sandbox": "Container (Docker)",
      "ambient_tool_risk": "HIGH",
      "mean_hass": 85,
      "risk_status": "ELEVATED",
      "verified_cves": [
        "CVE-2026-5027"
      ]
    },
    {
      "id": "crewai",
      "name": "CrewAI",
      "category": "Role-Playing Agent Swarms",
      "autonomy_tier": "Fully Autonomous Execution",
      "default_sandbox": "Partial (Regex / AST Filter)",
      "ambient_tool_risk": "HIGH",
      "mean_hass": 86.5,
      "risk_status": "ELEVATED",
      "verified_cves": [
        "CVE-2026-11393"
      ]
    },
    {
      "id": "opendevin",
      "name": "OpenDevin (All-Hands)",
      "category": "Autonomous Software Engineers",
      "autonomy_tier": "Fully Autonomous Execution",
      "default_sandbox": "Container (Docker)",
      "ambient_tool_risk": "CRITICAL",
      "mean_hass": 94,
      "risk_status": "CRITICAL",
      "verified_cves": [
        "CVE-2026-54236"
      ]
    },
    {
      "id": "mcp-core",
      "name": "Model Context Protocol (MCP)",
      "category": "Agent Actuation & Tool Protocols",
      "autonomy_tier": "Supervised Decisions",
      "default_sandbox": "None (Host Process)",
      "ambient_tool_risk": "CRITICAL",
      "mean_hass": 89,
      "risk_status": "CRITICAL",
      "verified_cves": [
        "AAP-003",
        "AAP-004"
      ]
    },
    {
      "id": "llamaindex",
      "name": "LlamaIndex Agentic RAG",
      "category": "Data & Context Frameworks",
      "autonomy_tier": "Autonomous Workflow",
      "default_sandbox": "None (Host Process)",
      "ambient_tool_risk": "HIGH",
      "mean_hass": 82,
      "risk_status": "ELEVATED",
      "verified_cves": [
        "CVE-2025-26319"
      ]
    },
    {
      "id": "vllm-ollama",
      "name": "vLLM / Ollama Runtime",
      "category": "Inference & Model Serving",
      "autonomy_tier": "Supervised Decisions",
      "default_sandbox": "None (Host Process)",
      "ambient_tool_risk": "MEDIUM",
      "mean_hass": 78,
      "risk_status": "MONITORED",
      "verified_cves": [
        "CVE-2025-54794",
        "CVE-2025-54795"
      ]
    },
    {
      "id": "deepseek",
      "name": "DeepSeek / Janus Architecture",
      "category": "Frontier Foundation Models",
      "autonomy_tier": "Supervised Decisions",
      "default_sandbox": "None (Host Process)",
      "ambient_tool_risk": "HIGH",
      "mean_hass": 83,
      "risk_status": "ELEVATED",
      "verified_cves": [
        "CVE-2026-76460"
      ]
    }
  ]
}