Observed arrival · 2026-08-30
The Standard That Audits Its Own Air Gap
AGSSH-STD-001 defines 57 fail-closed security rules for static and client-side web surfaces, with a runnable conformance checker.
Field notes
The standard organizes its checks into named families such as AG-NET, AG-CSP, AG-HDR, AG-DNS, AG-CI, AG-PRV, AG-OUT, and AG-GOV. Its rule vocabulary is operational rather than aspirational: self-host runtime dependencies, constrain connect-src, deliver clickjacking controls through headers, and manage service-worker behavior. The page says its own static Cloudflare deployment is scanned at the highest profile, with a signed result and SBOM linked as supporting artifacts.
Observed signals
Read the marks
Editorial observations of this landing page, not a rating.
One card from the complete issue