CYBRARY Map the AI System
Northwind shipped an AI support assistant six months ago and nobody can say what it can reach. You have the running system, its traces and its identity records; produce the asset, trust-boundary, identity, data and tool map the security review needs.
Assistant absent from the CMDB
No model, index, prompt or tool is recorded as an asset. Renewals and vulnerability scanning skip it entirely.
System prompt reviewed
The prompt asserts a support persona and refund limits, and inspects only the user turn.
Index mixes internal, partner and customer-uploaded content
One namespace, no trust tags, no per-source authorization.
namespaces=1 · sources=3
Four tools reachable, one moves money
crm.lookup, ticket.update, email.send, refund.issue — all under one token.
Shared service principal
svc-support-agent is used by the assistant and two batch jobs, so agent actions cannot be attributed.