PEI-006 Agent Config Runtime Modification

Policy Enforcement Integrity: Attacks that bypass policy enforcement via threshold fallbacks, config file injection, or parser error paths that fail open

Description

Tests if agent.json or equivalent runtime config can be modified to change enforcement behavior

Remediation

Agent runtime configuration must be immutable after startup. Config reload must re-verify integrity. failOpen must never be an accepted configuration value.

Severity

CRITICAL

OASB Control

4.2

CWE

CWE-15

PreviousPEI-005 Skill YAML Policy Injection NextPEI-007 Parser Error Path Fail-Open