jmanico · Oct 9, 2026 · Oct 5, 2026 · Oct 5, 2026 · Oct 5, 2026 · Oct 5, 2026
diff --git a/.github/workflows/config/local-custom.txt b/.github/workflows/config/local-custom.txt
@@ -170,3 +170,10 @@ Khazraj
 aminekhazraj
 Iman
 Sharaf
+Jungsoo
+Baek
+visker
+Sattyam
+sattyamjjain
+Satterly
+satterly
diff --git a/.github/workflows/lock-1.0.yml → .github/workflows/lock-released.yml b/.github/workflows/lock-1.0.yml → .github/workflows/lock-released.yml
@@ -1,8 +1,9 @@
-name: Lock 1.0
+name: Lock released versions
 
-# The published AISVS v1.0 standard is frozen. Requirement content and rendered
-# output remain immutable. Research corrections are accepted only through the
+# Published AISVS versions are frozen. Requirement content and rendered output
+# remain immutable. Research corrections are accepted only through the
 # repository's trusted research synchronization path.
+# When a new version is released, add its folders to the lists below.
 
 on:
   pull_request:
@@ -12,7 +13,7 @@ permissions:
   contents: read
 
 jobs:
-  reject-1-0-changes:
+  reject-released-changes:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
@@ -28,10 +29,13 @@ jobs:
             immutable:
               - 1.0/en/**
               - 1.0/dist/**
+              - 1.01/en/**
+              - 1.01/dist/**
             research:
               - 1.0/research/**
+              - 1.01/research/**
 
-      - name: Enforce the 1.0 policy
+      - name: Enforce the released-version policy
         env:
           IMMUTABLE_CHANGED: ${{ steps.files.outputs.immutable_any_changed }}
           IMMUTABLE_FILES: ${{ steps.files.outputs.immutable_all_changed_files }}
@@ -43,7 +47,7 @@ jobs:
           HAS_SYNC_LABEL: ${{ contains(github.event.pull_request.labels.*.name, 'research-sync') }}
         run: |
           if [[ "$IMMUTABLE_CHANGED" == "true" ]]; then
-            echo "::error::The published AISVS 1.0 requirements and rendered output are locked:"
+            echo "::error::Released AISVS requirements and rendered output are locked. Make changes in 1.02-dev/ or 2.0-dev/ instead:"
             printf '%s\n' "$IMMUTABLE_FILES"
             exit 1
           fi

diff --git a/.github/workflows/markdown_linter.yml b/.github/workflows/markdown_linter.yml
@@ -34,7 +34,9 @@ jobs:
           files: |
             README.md
             1.0/en/**/*.md
-            1.01-dev/en/**/*.md
+            1.01/en/**/*.md
+            1.02-dev/en/**/*.md
+            2.0-dev/en/**/*.md
 
       - name: Run markdownlint on changed files
         if: steps.files.outputs.any_changed == 'true'

diff --git a/.github/workflows/spell-check.yml b/.github/workflows/spell-check.yml
@@ -44,7 +44,9 @@ jobs:
         with:
           files: |
             1.0/en/**/*.md
-            1.01-dev/en/**/*.md
+            1.01/en/**/*.md
+            1.02-dev/en/**/*.md
+            2.0-dev/en/**/*.md
             *.md
           separator: '\n'
 
@@ -69,4 +71,4 @@ jobs:
       - name: Run cspell on all markdown files (push to main or manual)
         if: github.event_name != 'pull_request'
         run: |
-          cspell --config .github/workflows/config/cspell.json "1.0/en/**/*.md" "1.01-dev/en/**/*.md" "*.md"
+          cspell --config .github/workflows/config/cspell.json "1.0/en/**/*.md" "1.01/en/**/*.md" "1.02-dev/en/**/*.md" "2.0-dev/en/**/*.md" "*.md"
diff --git a/1.0/LOCKED.md b/1.0/LOCKED.md
@@ -8,8 +8,11 @@ Do not edit files under `1.0/en/`, `1.0/dist/`, or `1.0/research/`. A CI guard r
 
 The only exception is correcting the mistakes in the original `1.0/research/` folder which is AI generated. As newer models handle this type of research in a more capable way, we may update this content via automation only.
 
-Future work happens in the next version folder:
+Future work happens in the next version folders:
 
-- `1.01-dev/en/` for the next minor release.
+- `1.02-dev/en/` for the next minor release.
+- `2.0-dev/en/` for the next major release.
+
+The latest stable release is [1.01](../1.01/).
 
 See [RELEASE.md](../RELEASE.md) for the versioning and release policy.
diff --git a/1.01/LOCKED.md b/1.01/LOCKED.md
@@ -0,0 +1,14 @@
+# AISVS 1.01 is locked
+
+This folder holds the published **AISVS v1.01** standard. As of the v1.01 release it is frozen: the requirement text, levels, structure, and identifiers under `1.01/en/` are stable and will not change. Downstream adopters, auditors, and tooling can cite `v1.01-Cx.y.z` identifiers against this folder with confidence that they will not move.
+
+The research wiki under `1.01/research/` is part of this snapshot. It maps each v1.01 requirement to threats, tooling, and verification approaches, and is frozen alongside the standard it documents.
+
+Do not edit files under `1.01/en/`, `1.01/dist/`, or `1.01/research/`. A CI guard rejects pull requests that modify them. Research corrections are accepted only through the automated research synchronization path.
+
+Future work happens in the next version folders:
+
+- `1.02-dev/en/` for the next minor release.
+- `2.0-dev/en/` for the next major release.
+
+See [RELEASE.md](../RELEASE.md) for the versioning and release policy.
diff --git a/1.01/dist/AISVS-1.01.pdf b/1.01/dist/AISVS-1.01.pdf
diff --git a/1.01-dev/en/0x00-Header.yaml → 1.01/en/0x00-Header.yaml b/1.01-dev/en/0x00-Header.yaml → 1.01/en/0x00-Header.yaml
diff --git a/1.01-dev/en/0x01-Frontispiece.md → 1.01/en/0x01-Frontispiece.md b/1.01-dev/en/0x01-Frontispiece.md → 1.01/en/0x01-Frontispiece.md
@@ -70,3 +70,6 @@ The list below reflects authored and edited content. It does not fully capture c
 * Amine Khazraj ([aminekhazraj](https://github.com/aminekhazraj))
 * Iman ([ImanSharaf](https://github.com/ImanSharaf))
 * MRX ([MRX-72](https://github.com/MRX-72))
+* Jungsoo Baek ([visker83-del](https://github.com/visker83-del))
+* Sattyam Jain ([sattyamjjain](https://github.com/sattyamjjain))
+* Zachary Satterly ([zachary-satterly](https://github.com/zachary-satterly))
diff --git a/1.01-dev/en/0x02-Preface.md → 1.01/en/0x02-Preface.md b/1.01-dev/en/0x02-Preface.md → 1.01/en/0x02-Preface.md
diff --git a/1.01-dev/en/0x03-Using-AISVS.md → 1.01/en/0x03-Using-AISVS.md b/1.01-dev/en/0x03-Using-AISVS.md → 1.01/en/0x03-Using-AISVS.md
diff --git a/...aining-Data-Integrity-and-Traceability.md → ...aining-Data-Integrity-and-Traceability.md b/...aining-Data-Integrity-and-Traceability.md → ...aining-Data-Integrity-and-Traceability.md
diff --git a/1.01-dev/en/0x10-C02-Input-Validation.md → 1.01/en/0x10-C02-Input-Validation.md b/1.01-dev/en/0x10-C02-Input-Validation.md → 1.01/en/0x10-C02-Input-Validation.md
diff --git a/...en/0x10-C03-Model-Lifecycle-Management.md → ...en/0x10-C03-Model-Lifecycle-Management.md b/...en/0x10-C03-Model-Lifecycle-Management.md → ...en/0x10-C03-Model-Lifecycle-Management.md
diff --git a/1.01-dev/en/0x10-C04-Infrastructure.md → 1.01/en/0x10-C04-Infrastructure.md b/1.01-dev/en/0x10-C04-Infrastructure.md → 1.01/en/0x10-C04-Infrastructure.md
diff --git a/...n/0x10-C05-Access-Control-and-Identity.md → ...n/0x10-C05-Access-Control-and-Identity.md b/...n/0x10-C05-Access-Control-and-Identity.md → ...n/0x10-C05-Access-Control-and-Identity.md
diff --git a/1.01-dev/en/0x10-C06-Supply-Chain.md → 1.01/en/0x10-C06-Supply-Chain.md b/1.01-dev/en/0x10-C06-Supply-Chain.md → 1.01/en/0x10-C06-Supply-Chain.md
diff --git a/1.01-dev/en/0x10-C07-Model-Behavior.md → 1.01/en/0x10-C07-Model-Behavior.md b/1.01-dev/en/0x10-C07-Model-Behavior.md → 1.01/en/0x10-C07-Model-Behavior.md
diff --git a/...-Memory-Embeddings-and-Vector-Database.md → ...-Memory-Embeddings-and-Vector-Database.md b/...-Memory-Embeddings-and-Vector-Database.md → ...-Memory-Embeddings-and-Vector-Database.md
diff --git a/...0-C09-Orchestration-and-Agentic-Action.md → ...0-C09-Orchestration-and-Agentic-Action.md b/...0-C09-Orchestration-and-Agentic-Action.md → ...0-C09-Orchestration-and-Agentic-Action.md
diff --git a/1.01-dev/en/0x10-C10-MCP-Security.md → 1.01/en/0x10-C10-MCP-Security.md b/1.01-dev/en/0x10-C10-MCP-Security.md → 1.01/en/0x10-C10-MCP-Security.md
diff --git a/...dev/en/0x10-C11-Adversarial-Robustness.md → 1.01/en/0x10-C11-Adversarial-Robustness.md b/...dev/en/0x10-C11-Adversarial-Robustness.md → 1.01/en/0x10-C11-Adversarial-Robustness.md
diff --git a/...dev/en/0x10-C12-Monitoring-and-Logging.md → 1.01/en/0x10-C12-Monitoring-and-Logging.md b/...dev/en/0x10-C12-Monitoring-and-Logging.md → 1.01/en/0x10-C12-Monitoring-and-Logging.md
diff --git a/1.01-dev/en/0x90-Appendix-A_Glossary.md → 1.01/en/0x90-Appendix-A_Glossary.md b/1.01-dev/en/0x90-Appendix-A_Glossary.md → 1.01/en/0x90-Appendix-A_Glossary.md
diff --git a/...endix-B_AI_Security_Controls_Inventory.md → ...endix-B_AI_Security_Controls_Inventory.md b/...endix-B_AI_Security_Controls_Inventory.md → ...endix-B_AI_Security_Controls_Inventory.md
diff --git a/...0x92-Appendix-C_AI_for_Code_Generation.md → ...0x92-Appendix-C_AI_for_Code_Generation.md b/...0x92-Appendix-C_AI_for_Code_Generation.md → ...0x92-Appendix-C_AI_for_Code_Generation.md
diff --git a/1.01-dev/research/README.md → 1.01/research/README.md b/1.01-dev/research/README.md → 1.01/research/README.md
diff --git a/1.01-dev/research/REVIEW-STATUS.md → 1.01/research/REVIEW-STATUS.md b/1.01-dev/research/REVIEW-STATUS.md → 1.01/research/REVIEW-STATUS.md
@@ -4,7 +4,7 @@ This checklist tracks [#1109](https://github.com/OWASP/AISVS/issues/1109). It is
 
 ## Current position
 
-- Requirement-text and level synchronization has been checked for all 213 active core requirements and all 69 Appendix C requirements, and rechecked after the source audit: no requirement text, ID, or level quoted in the research pages differs from `1.01-dev/en`.
+- Requirement-text and level synchronization has been checked for all 213 active core requirements and all 69 Appendix C requirements, and rechecked after the source audit: no requirement text, ID, or level quoted in the research pages differs from `1.01/en`.
 - The source audit of all research documents was completed on 2026-09-30. About 4,900 factual claims were checked against original sources; roughly 70% matched as written, and the rest were corrected, qualified, re-sourced, or removed. Each area's changes were re-verified in a separate review pass, which also spot-checked about 400 unchanged claims. Counts are approximate tallies, not a per-claim ledger.
 - Appendix B retains 41 statistics rows, all source-checked; none are pending. Seven held entries below cover former rows and associated prose that are not presented as established findings.
 - OWASP Top 10 for LLM Applications citations now use the 2026 edition adopted by the standard, and EU AI Act dates reflect the Digital Omnibus on AI (Regulation (EU) 2026/1744, in force 27 July 2026).

diff --git a/...esearch/appendices/Appendix-A-Glossary.md → ...esearch/appendices/Appendix-A-Glossary.md b/...esearch/appendices/Appendix-A-Glossary.md → ...esearch/appendices/Appendix-A-Glossary.md
@@ -1,14 +1,14 @@
 # Appendix A: Glossary — Research Notes
 
-> **Source:** [`1.01-dev/en/0x90-Appendix-A_Glossary.md`](https://github.com/OWASP/AISVS/blob/main/1.01-dev/en/0x90-Appendix-A_Glossary.md)
+> **Source:** [`1.01/en/0x90-Appendix-A_Glossary.md`](https://github.com/OWASP/AISVS/blob/main/1.01/en/0x90-Appendix-A_Glossary.md)
 >
 > **Focused Update:** 2026-09-27 — corrected the protocol-downgrade and retired session-teardown references for [#1158](https://github.com/OWASP/AISVS/pull/1158). 2026-09-30 — source audit for [#1109](https://github.com/OWASP/AISVS/issues/1109): corrected MCPTox counts, CVE dates, ATLAS attribution, and EU Omnibus adoption status; restated NHI ratios with their sources and populations, replaced an uncited shadow-AI percentage, and added the Action Chain and Reversibility Classification cross-references.
 
 ## Overview
 
 The glossary defines 158 terms used throughout the AISVS, covering AI/ML concepts, security terminology, and domain-specific definitions. This research page cross-references every glossary term to the chapters that use it, identifies missing terms, flags definitions that could be improved, and tracks emerging terminology from the broader AI security community. Cross-references follow the AISVS **C01–C12** chapter structure: monitoring and logging terms map to **C12 (Monitoring and Logging)**, and explainability and human-oversight terms map to **C07 (Model Behavior)** for interpretability and **C09 (Orchestration and Agentic Action)** for oversight, kill-switches, and human-in-the-loop controls.
 
-As of July 2026, the analysis identifies 49 high-priority missing terms, 12 medium-priority missing terms, 12 definitions needing improvement, and 66 emerging terms from the 2025–2026 threat landscape that may warrant future inclusion. The [June 22 glossary revision](https://github.com/OWASP/AISVS/commits/main/1.01-dev/en/0x90-Appendix-A_Glossary.md) closed two previously tracked gaps by defining **System Prompt** and **Indirect Prompt Injection**, and added seven other security-relevant entries: **Alignment**, **DPoP**, **Excessive Agency**, **Inference**, **LLM**, **Sender-Constrained Token**, and **Trust Boundary**.
+As of July 2026, the analysis identifies 49 high-priority missing terms, 12 medium-priority missing terms, 12 definitions needing improvement, and 66 emerging terms from the 2025–2026 threat landscape that may warrant future inclusion. The [June 22 glossary revision](https://github.com/OWASP/AISVS/commits/main/1.01/en/0x90-Appendix-A_Glossary.md) closed two previously tracked gaps by defining **System Prompt** and **Indirect Prompt Injection**, and added seven other security-relevant entries: **Alignment**, **DPoP**, **Excessive Agency**, **Inference**, **LLM**, **Sender-Constrained Token**, and **Trust Boundary**.
 
 MITRE ATLAS has settled into monthly releases. The May 4, 2026 v5.6.0 release added the Acquire Public AI Artifacts: AI Agent Configuration technique and the Deepfake-Assisted Phishing sub-technique, while the March 31, 2026 v5.5.0 release introduced twelve techniques covering agent tool poisoning persistence (AML.T0110), AI supply chain rug pulls (AML.T0109), reputation inflation (AML.T0111), AI service proxies (AML.T0008.005), agentic resource consumption (AML.T0034.002), and call chains (AML.T0084.003), plus five case studies including MCP server poisoning and model distillation campaigns. The May 6, 2026 Secure AI v2 release from MITRE's Center for Threat-Informed Defense (CTID) added more than 45 techniques and sub-techniques, more than 10 mitigations, and more than 20 case studies across the full 2025–2026 work cycle, plus a new Technique Maturity filter that lets defenders prioritize emerging versus mature threats and an interactive ATLAS Knowledge Graph. The OpenClaw investigation case studies (AML.CS0048–CS0051) documented exposed agent control interfaces, poisoned skills, one-click RCE, sandbox escape, and prompt-injection-driven command and control. On May 27, 2026, ATLAS retired the v5.x numbering in favor of a split content/format versioning scheme: the v2026.05 content release pairs with format v6.0.0, which restructures the data model (typed relationship objects, schema validation, a REST API) and adds a `platforms` field tagging every technique as Predictive AI, Generative AI, Agentic AI, or Enterprise — a structural release that introduced no new technique or case-study IDs.
 

diff --git a/...pendices/Appendix-B-Controls-Inventory.md → ...pendices/Appendix-B-Controls-Inventory.md b/...pendices/Appendix-B-Controls-Inventory.md → ...pendices/Appendix-B-Controls-Inventory.md
@@ -1,6 +1,6 @@
 # Appendix B: AI Security Controls Inventory — Research Notes
 
-> **Source:** [`1.01-dev/en/0x91-Appendix-B_AI_Security_Controls_Inventory.md`](https://github.com/OWASP/AISVS/blob/main/1.01-dev/en/0x91-Appendix-B_AI_Security_Controls_Inventory.md)
+> **Source:** [`1.01/en/0x91-Appendix-B_AI_Security_Controls_Inventory.md`](https://github.com/OWASP/AISVS/blob/main/1.01/en/0x91-Appendix-B_AI_Security_Controls_Inventory.md)
 >
 > **Focused updates:** 2026-09-27 — synchronized counts and corrected NIST references, survey figures, attribution and scope, and a paper date. 2026-09-30 — source audit of the maturity, framework, platform, and incident sections: untraceable survey percentages removed, CVE products and dates corrected, vendor claims labeled; uncited SBOM, Patch Tuesday, and M&A figures sourced or removed, MCP measurement wording aligned with the snapshot table, and orphaned references pruned. Other research remains under review in [#1109](https://github.com/OWASP/AISVS/issues/1109).
 

diff --git a/...appendices/Appendix-C-AI-Secure-Coding.md → ...appendices/Appendix-C-AI-Secure-Coding.md b/...appendices/Appendix-C-AI-Secure-Coding.md → ...appendices/Appendix-C-AI-Secure-Coding.md
@@ -1,6 +1,6 @@
 # Appendix C: AI-Assisted Secure Coding
 
-> **Source:** [`1.01-dev/en/0x92-Appendix-C_AI_for_Code_Generation.md`](https://github.com/OWASP/AISVS/blob/main/1.01-dev/en/0x92-Appendix-C_AI_for_Code_Generation.md)
+> **Source:** [`1.01/en/0x92-Appendix-C_AI_for_Code_Generation.md`](https://github.com/OWASP/AISVS/blob/main/1.01/en/0x92-Appendix-C_AI_for_Code_Generation.md)
 > **Requirements:** 69 | **Sections:** 14
 > **Last Researched:** 2026-07-13
 > **Focused Update:** 2026-09-27 — AC.3.7 and AC.14.2 synchronized with [PR #1163](https://github.com/OWASP/AISVS/pull/1163); other research unchanged.

diff --git a/...1-01-Training-Data-Origin-Traceability.md → ...1-01-Training-Data-Origin-Traceability.md b/...1-01-Training-Data-Origin-Traceability.md → ...1-01-Training-Data-Origin-Traceability.md
diff --git a/...1-02-Data-Labeling-Annotation-Security.md → ...1-02-Data-Labeling-Annotation-Security.md b/...1-02-Data-Labeling-Annotation-Security.md → ...1-02-Data-Labeling-Annotation-Security.md
diff --git a/...aining-Data-Quality-Security-Assurance.md → ...aining-Data-Quality-Security-Assurance.md b/...aining-Data-Quality-Security-Assurance.md → ...aining-Data-Quality-Security-Assurance.md
diff --git a/...rs/C01-Training-Data/C01-Training-Data.md → ...rs/C01-Training-Data/C01-Training-Data.md b/...rs/C01-Training-Data/C01-Training-Data.md → ...rs/C01-Training-Data/C01-Training-Data.md
@@ -1,6 +1,6 @@
 # C01: Training Data Integrity & Traceability
 
-> **Source:** [`1.01-dev/en/0x10-C01-Training-Data-Integrity-and-Traceability.md`](https://github.com/OWASP/AISVS/blob/main/1.01-dev/en/0x10-C01-Training-Data-Integrity-and-Traceability.md)
+> **Source:** [`1.01/en/0x10-C01-Training-Data-Integrity-and-Traceability.md`](https://github.com/OWASP/AISVS/blob/main/1.01/en/0x10-C01-Training-Data-Integrity-and-Traceability.md)
 > **Requirements:** 13 | **Sections:** 3
 
 ## Control Objective

diff --git a/...dation/C02-01-Prompt-Injection-Defense.md → ...dation/C02-01-Prompt-Injection-Defense.md b/...dation/C02-01-Prompt-Injection-Defense.md → ...dation/C02-01-Prompt-Injection-Defense.md
diff --git a/...dation/C02-02-Content-Policy-Screening.md → ...dation/C02-02-Content-Policy-Screening.md b/...dation/C02-02-Content-Policy-Screening.md → ...dation/C02-02-Content-Policy-Screening.md
diff --git a/...t-Validation/C02-User-Input-Validation.md → ...t-Validation/C02-User-Input-Validation.md b/...t-Validation/C02-User-Input-Validation.md → ...t-Validation/C02-User-Input-Validation.md
@@ -1,6 +1,6 @@
 # C02: User Input Validation
 
-> **Source:** [`1.01-dev/en/0x10-C02-Input-Validation.md`](https://github.com/OWASP/AISVS/blob/main/1.01-dev/en/0x10-C02-Input-Validation.md)
+> **Source:** [`1.01/en/0x10-C02-Input-Validation.md`](https://github.com/OWASP/AISVS/blob/main/1.01/en/0x10-C02-Input-Validation.md)
 > **Requirements:** 12 | **Sections:** 2
 
 ## Control Objective

diff --git a/...t/C03-01-Model-Authorization-Integrity.md → ...t/C03-01-Model-Authorization-Integrity.md b/...t/C03-01-Model-Authorization-Integrity.md → ...t/C03-01-Model-Authorization-Integrity.md
diff --git a/...gement/C03-02-Model-Validation-Testing.md → ...gement/C03-02-Model-Validation-Testing.md b/...gement/C03-02-Model-Validation-Testing.md → ...gement/C03-02-Model-Validation-Testing.md
diff --git a/.../C03-03-Controlled-Deployment-Rollback.md → .../C03-03-Controlled-Deployment-Rollback.md b/.../C03-03-Controlled-Deployment-Rollback.md → .../C03-03-Controlled-Deployment-Rollback.md
diff --git a/...nt/C03-04-Secure-Development-Practices.md → ...nt/C03-04-Secure-Development-Practices.md b/...nt/C03-04-Secure-Development-Practices.md → ...nt/C03-04-Secure-Development-Practices.md
diff --git a/...Management/C03-05-Pipeline-Fine-Tuning.md → ...Management/C03-05-Pipeline-Fine-Tuning.md b/...Management/C03-05-Pipeline-Fine-Tuning.md → ...Management/C03-05-Pipeline-Fine-Tuning.md
diff --git a/...agement/C03-Model-Lifecycle-Management.md → ...agement/C03-Model-Lifecycle-Management.md b/...agement/C03-Model-Lifecycle-Management.md → ...agement/C03-Model-Lifecycle-Management.md
@@ -1,6 +1,6 @@
 # C03: Model Lifecycle Management & Change Control
 
-> **Source:** [`1.01-dev/en/0x10-C03-Model-Lifecycle-Management.md`](https://github.com/OWASP/AISVS/blob/main/1.01-dev/en/0x10-C03-Model-Lifecycle-Management.md)
+> **Source:** [`1.01/en/0x10-C03-Model-Lifecycle-Management.md`](https://github.com/OWASP/AISVS/blob/main/1.01/en/0x10-C03-Model-Lifecycle-Management.md)
 > **Requirements:** 15 | **Sections:** 5
 
 ## Control Objective

diff --git a/.../C04-01-Workload-Sandboxing-Validation.md → .../C04-01-Workload-Sandboxing-Validation.md b/.../C04-01-Workload-Sandboxing-Validation.md → .../C04-01-Workload-Sandboxing-Validation.md
diff --git a/...nfrastructure/C04-02-Hardware-Security.md → ...nfrastructure/C04-02-Hardware-Security.md b/...nfrastructure/C04-02-Hardware-Security.md → ...nfrastructure/C04-02-Hardware-Security.md
diff --git a/...cture/C04-03-Edge-Distributed-Security.md → ...cture/C04-03-Edge-Distributed-Security.md b/...cture/C04-03-Edge-Distributed-Security.md → ...cture/C04-03-Edge-Distributed-Security.md
diff --git a/.../C04-Infrastructure/C04-Infrastructure.md → .../C04-Infrastructure/C04-Infrastructure.md b/.../C04-Infrastructure/C04-Infrastructure.md → .../C04-Infrastructure/C04-Infrastructure.md
@@ -1,6 +1,6 @@
 # C04: Infrastructure, Configuration & Deployment Security
 
-> **Source:** [`1.01-dev/en/0x10-C04-Infrastructure.md`](https://github.com/OWASP/AISVS/blob/main/1.01-dev/en/0x10-C04-Infrastructure.md)
+> **Source:** [`1.01/en/0x10-C04-Infrastructure.md`](https://github.com/OWASP/AISVS/blob/main/1.01/en/0x10-C04-Infrastructure.md)
 > **Requirements:** 14 | **Sections:** 3
 
 ## Control Objective

diff --git a/...-01-Identity-Management-Authentication.md → ...-01-Identity-Management-Authentication.md b/...-01-Identity-Management-Authentication.md → ...-01-Identity-Management-Authentication.md
diff --git a/...-Resource-Authorization-Classification.md → ...-Resource-Authorization-Classification.md b/...-Resource-Authorization-Classification.md → ...-Resource-Authorization-Classification.md
diff --git a/...-Control/C05-03-Multi-Tenant-Isolation.md → ...-Control/C05-03-Multi-Tenant-Isolation.md b/...-Control/C05-03-Multi-Tenant-Isolation.md → ...-Control/C05-03-Multi-Tenant-Isolation.md
diff --git a/.../C05-Access-Control/C05-Access-Control.md → .../C05-Access-Control/C05-Access-Control.md b/.../C05-Access-Control/C05-Access-Control.md → .../C05-Access-Control/C05-Access-Control.md
@@ -1,6 +1,6 @@
 # C05: Access Control & Identity for AI Components & Users
 
-> **Source:** [`1.01-dev/en/0x10-C05-Access-Control-and-Identity.md`](https://github.com/OWASP/AISVS/blob/main/1.01-dev/en/0x10-C05-Access-Control-and-Identity.md)
+> **Source:** [`1.01/en/0x10-C05-Access-Control-and-Identity.md`](https://github.com/OWASP/AISVS/blob/main/1.01/en/0x10-C05-Access-Control-and-Identity.md)
 > **Requirements:** 11 | **Sections:** 3
 
 ## Control Objective

diff --git a/...-Chain/C06-01-Model-Artifact-Integrity.md → ...-Chain/C06-01-Model-Artifact-Integrity.md b/...-Chain/C06-01-Model-Artifact-Integrity.md → ...-Chain/C06-01-Model-Artifact-Integrity.md
diff --git a/.../C06-02-AI-BOM-Supply-Chain-Monitoring.md → .../C06-02-AI-BOM-Supply-Chain-Monitoring.md b/.../C06-02-AI-BOM-Supply-Chain-Monitoring.md → .../C06-02-AI-BOM-Supply-Chain-Monitoring.md
diff --git a/...ters/C06-Supply-Chain/C06-Supply-Chain.md → ...ters/C06-Supply-Chain/C06-Supply-Chain.md b/...ters/C06-Supply-Chain/C06-Supply-Chain.md → ...ters/C06-Supply-Chain/C06-Supply-Chain.md
@@ -1,6 +1,6 @@
 # C06: Supply Chain Security for Models
 
-> **Source:** [`1.01-dev/en/0x10-C06-Supply-Chain.md`](https://github.com/OWASP/AISVS/blob/main/1.01-dev/en/0x10-C06-Supply-Chain.md)
+> **Source:** [`1.01/en/0x10-C06-Supply-Chain.md`](https://github.com/OWASP/AISVS/blob/main/1.01/en/0x10-C06-Supply-Chain.md)
 > **Requirements:** 7 | **Sections:** 2
 
 ## Control Objective

diff --git a/...avior/C07-01-Output-Format-Enforcement.md → ...avior/C07-01-Output-Format-Enforcement.md b/...avior/C07-01-Output-Format-Enforcement.md → ...avior/C07-01-Output-Format-Enforcement.md
diff --git a/...ehavior/C07-02-Hallucination-Detection.md → ...ehavior/C07-02-Hallucination-Detection.md b/...ehavior/C07-02-Hallucination-Detection.md → ...ehavior/C07-02-Hallucination-Detection.md
diff --git a/...3-Output-Safety-Privacy-Explainability.md → ...3-Output-Safety-Privacy-Explainability.md b/...3-Output-Safety-Privacy-Explainability.md → ...3-Output-Safety-Privacy-Explainability.md
diff --git a/...-Source-Attribution-Citation-Integrity.md → ...-Source-Attribution-Citation-Integrity.md b/...-Source-Attribution-Citation-Integrity.md → ...-Source-Attribution-Citation-Integrity.md
diff --git a/.../C07-Model-Behavior/C07-Model-Behavior.md → .../C07-Model-Behavior/C07-Model-Behavior.md b/.../C07-Model-Behavior/C07-Model-Behavior.md → .../C07-Model-Behavior/C07-Model-Behavior.md
@@ -1,6 +1,6 @@
 # C07: Model Behavior, Output Control & Safety Assurance
 
-> **Source:** [`1.01-dev/en/0x10-C07-Model-Behavior.md`](https://github.com/OWASP/AISVS/blob/main/1.01-dev/en/0x10-C07-Model-Behavior.md)
+> **Source:** [`1.01/en/0x10-C07-Model-Behavior.md`](https://github.com/OWASP/AISVS/blob/main/1.01/en/0x10-C07-Model-Behavior.md)
 > **Requirements:** 14 | **Sections:** 4
 
 ## Control Objective

diff --git a/...ings/C08-01-Access-Controls-Memory-RAG.md → ...ings/C08-01-Access-Controls-Memory-RAG.md b/...ings/C08-01-Access-Controls-Memory-RAG.md → ...ings/C08-01-Access-Controls-Memory-RAG.md
diff --git a/...8-02-Embedding-Sanitization-Validation.md → ...8-02-Embedding-Sanitization-Validation.md b/...8-02-Embedding-Sanitization-Validation.md → ...8-02-Embedding-Sanitization-Validation.md
diff --git a/...y-Expiry-Revocation-Leakage-Prevention.md → ...y-Expiry-Revocation-Leakage-Prevention.md b/...y-Expiry-Revocation-Leakage-Prevention.md → ...y-Expiry-Revocation-Leakage-Prevention.md
diff --git a/...d-Embeddings/C08-Memory-and-Embeddings.md → ...d-Embeddings/C08-Memory-and-Embeddings.md b/...d-Embeddings/C08-Memory-and-Embeddings.md → ...d-Embeddings/C08-Memory-and-Embeddings.md
@@ -1,6 +1,6 @@
 # C08: Memory, Embeddings & Vector Database Security
 
-> **Source:** [`1.01-dev/en/0x10-C08-Memory-Embeddings-and-Vector-Database.md`](https://github.com/OWASP/AISVS/blob/main/1.01-dev/en/0x10-C08-Memory-Embeddings-and-Vector-Database.md)
+> **Source:** [`1.01/en/0x10-C08-Memory-Embeddings-and-Vector-Database.md`](https://github.com/OWASP/AISVS/blob/main/1.01/en/0x10-C08-Memory-Embeddings-and-Vector-Database.md)
 > **Requirements:** 11 | **Sections:** 3
 
 ## Control Objective

diff --git a/...on-and-Agents/C09-01-Execution-Budgets.md → ...on-and-Agents/C09-01-Execution-Budgets.md b/...on-and-Agents/C09-01-Execution-Budgets.md → ...on-and-Agents/C09-01-Execution-Budgets.md