[
  {
    "dimension_id": "host_infrastructure",
    "name": "Host & Infrastructure Reach",
    "weight": 0.25,
    "description": "Depth of host OS compromise, local filesystem access, shell execution, Docker socket tampering, and hypervisor escape potential.",
    "severity_impact": "Host takeover, container breakout, kernel rootkit persistence."
  },
  {
    "dimension_id": "data_rag",
    "name": "Data & Memory Blast",
    "weight": 0.25,
    "description": "Exposure, exfiltration, or adversarial poisoning of vector databases, enterprise knowledge bases, user conversations, and sensitive files.",
    "severity_impact": "Persistent RAG poisoning, corporate secret leakage, cross-session sleeper payloads."
  },
  {
    "dimension_id": "identity_iam",
    "name": "Identity & Credential Scope",
    "weight": 0.2,
    "description": "Blast perimeter of credentials accessible to the agent: cloud IAM roles, OAuth tokens, SSH keys, API secrets, and inter-service authentication.",
    "severity_impact": "Cloud tenant pivot, unauthorized database access, automated lateral movement."
  },
  {
    "dimension_id": "financial_spend",
    "name": "Financial & Operational Burn",
    "weight": 0.15,
    "description": "Financial damage caused by runaway autonomous loops, unconstrained API token consumption, third-party service fees, or Denial of Wallet.",
    "severity_impact": "Budget exhaustion, upstream API rate lockout, unexpected cloud billing spikes."
  },
  {
    "dimension_id": "cascade_propagation",
    "name": "Downstream Cascade Propagation",
    "weight": 0.15,
    "description": "Propagation multiplier when compromised agent communicates with peer agents in a swarm, triggering downstream trusted actuators without re-validation.",
    "severity_impact": "Swarm-wide subversion, automated production deployments, cascading system destabilization."
  }
]