nist-csf
Open-source hunt playbooks and a policy-driven Sentinel reference framework for detecting runaway AI agents, unauthorized tool calls, behavioral drift, DNS exfiltration, and poisoned MCP tools. MITRE ATLAS mapped.