Moona Intelligence / Risk Registry / Risk Dashboard Priorities Risk Dashboard Compare and prioritize the published weaknesses. Every row is derived from the canonical registry: recorded instances, cited sources, detection signals, connected Intelligence Records and the AESS severity of the strongest instance. Unknowns stay unknown and are never counted as zero.
34 Published weaknesses
83 Recorded instances
95 Connected records
477 Cited sources
Sort by Urgency Authority impact Registry order Derived from the corpus as of 2026-09-13.
AEW-002 Objective authorization treated as action authorization 7 instances · 10 records Urgency 100
Authority impact 96
AEW-006 Delegated authority inherited without attenuation 6 instances · 15 records Urgency 100
Authority impact 96
AEW-010 Sequence authorized step by step but not as a whole 4 instances · 14 records Urgency 100
Authority impact 96
AEW-001 Action without applicable policy 10 instances · 12 records Urgency 90
Authority impact 86
AEW-004 The agent controls whether its control applies 5 instances · 6 records Urgency 90
Authority impact 85
AEW-005 Approval not bound to the executed action 3 instances · 13 records Urgency 90
Authority impact 77
AEW-008 Reachability treated as authority 14 instances · 23 records Urgency 90
Authority impact 85
AEW-007 Claimed authorization accepted without verification 2 instances · 5 records Urgency 88
Authority impact 96
AEW-009 Oversight without the ability to stop 2 instances · 13 records Urgency 88
Authority impact 94
AEW-020 An operation blocked in one syntactic form is authorized in an equivalent one 2 instances · 3 records Urgency 78
Authority impact 82
AEW-023 A tool's stored response transformation runs with the gateway's own authority 2 instances · 2 records Urgency 78
Authority impact 83
AEW-024 Network locality is treated as a higher-authority principal class 2 instances · 2 records Urgency 78
Authority impact 82
AEW-029 Authority to instruct an install is treated as authority over whoever currently controls what the instruction names 2 instances · 1 record Urgency 78
Authority impact 83
AEW-042 Existence of a predictably named destination is treated as ownership of it 2 instances · 1 record Urgency 78
Authority impact 85
AEW-011 Evidence after the fact mistaken for authorization before it 1 instance · 8 records Urgency 77
Authority impact 96
AEW-003 Execution authority collapsed into capability to prepare 2 instances · 7 records Urgency 68
Authority impact 74
AEW-030 Budget authorization treated as effect authorization 2 instances · 2 records Urgency 68
Authority impact 75
AEW-012 Persistent state carries inherited objectives across agents 1 instance · 4 records Urgency 67
Authority impact 84
AEW-013 Authorization over an operation treated as authorization over its target 1 instance · 2 records Urgency 67
Authority impact 83
AEW-017 Failed resource resolution inherits the trust of the apparent path 1 instance · 2 records Urgency 67
Authority impact 77
AEW-025 A tool's declared capability does not survive the executor's own argument grammar 1 instance · 1 record Urgency 67
Authority impact 77
AEW-026 A value accepted as data during generation executes under a later deployer's own authority 1 instance · 1 record Urgency 67
Authority impact 83
AEW-027 A persistent effect survives the revocation of the authority that created it 1 instance · 3 records Urgency 67
Authority impact 88
AEW-028 A capability's enforcement gate is wired to one caller instead of the executor every caller shares 1 instance · 2 records Urgency 67
Authority impact 88
AEW-032 A malformed authority restriction is parsed the same as no restriction at all 1 instance · 1 record Urgency 67
Authority impact 77
AEW-037 A verifier returns a positive verdict from an empty qualifying evidence set 1 instance · 1 record Urgency 67
Authority impact 75
AEW-038 An execution bearing authority representation is maintained independently of its own canonical grant, with no derivation or parity proof between them 1 instance · 1 record Urgency 67
Authority impact 88
AEW-040 Destination confinement assumed from an unsafe join, not enforced by one 1 instance · 1 record Urgency 67
Authority impact 78
AEW-014 Authority over a reference treated as authority over the shared resource it resolves to 1 instance · 1 record Urgency 60
Authority impact 90
AEW-018 Authority over a destination treated as authority over the source that fills it 1 instance · 1 record Urgency 60
Authority impact 83
AEW-034 Quantitative mandate sized from the observed value, not the maximum executable effect 1 instance · 1 record Urgency 57
Authority impact 69
AEW-035 Equivalent actions resolve to different authority decisions across execution surfaces 1 instance · 2 records Urgency 57
Authority impact 69
AEW-039 A verifier's checked predicate is treated as the stronger proposition it was never shown to establish 0 instances · 1 record Urgency 42
Authority impact Unknown
AEW-022 An explicit denial is discarded by default substitution during policy compilation 0 instances · 1 record Urgency 31
Authority impact Unknown
Scores combine recorded instances, the strongest derived AESS severity and corpus recency. Components without evidence are excluded and their weight redistributed across what is known, so an unknown never reads as zero. The registry itself remains at Risk Registry .
