The CVE-equivalent
for AI agent failures.

Why a CVE for AI?

Today, AI incidents are disclosed via ad-hoc blog posts and third-party-curated databases (OECD AI Incidents, MIT AI Incident Database, AVID). There's no canonical machine-readable format a vendor can publish themselves at a well-known URL. AI Incident Card fills that gap — and ties together every other affected Suite document via cross-references.

A canonical example

{
  "incident_card_version": "0.1",
  "incident": {
    "id": "INC-2026-04-22-kineticgain-001",
    "title": "K-12 math tutor failed to escalate self-harm disclosure to mandated-reporter workflow",
    "severity": "critical",
    "categories": ["mandated_reporter_failure"],
    "discovered_at": "2026-04-22T14:30:00Z",
    "disclosed_at": "2026-04-23T09:00:00Z",
    "resolved_at": "2026-04-25T16:00:00Z",
    "status": "resolved"
  },
  "affected": {
    "vendor": "Kinetic Gain Edu",
    "products": ["Kinetic Gain K-12 Math Tutor"],
    "versions": ["1.4.0"],
    "tutor_card_uris": ["https://edu.kineticgain.com/.well-known/tutors/k12-math-tutor.json"],
    "agent_card_uris": ["https://edu.kineticgain.com/.well-known/agents/k12-math-tutor.json"],
    "affected_user_count": { "kind": "exact", "count": 1 },
    "affected_populations": ["k12-students-grade-9"]
  },
  "summary": "During an algebra tutoring session, a 14-year-old learner included a self-harm disclosure within a word-problem context. The Tutor Card declares mandated_reporter_protocol=true; the classifier short-circuited before the escalation chain ran.",
  "root_cause": {
    "category": "refusal_taxonomy_gap",
    "description": "Disclosure classifier was trained on isolated-utterance examples and did not generalize to disclosures embedded inside an unrelated content frame."
  },
  "harm": {
    "severity_justification": "Critical per §6.6 — K-12 mandated-reporter failure involving an under-18 learner.",
    "manifested": true
  },
  "mitigation": {
    "actions_taken": [
      "Added parallel disclosure classifier that runs unconditionally on every learner turn.",
      "Added regression-test corpus of 312 embedded-disclosure examples."
    ],
    "permanent_fix": true,
    "rollout_status": "deployed"
  },
  "regulatory": {
    "reported_to": ["ferpa", "state-attorney-general"],
    "reporting_deadline_met": true,
    "regulatory_filing_uris": ["https://edu.kineticgain.com/regulatory/2026-04-22-ferpa-notice.pdf"]
  },
  "published_by": {
    "name": "Kinetic Gain Edu — Trust & Safety",
    "role": "vendor"
  },
  "published_at": "2026-04-23T09:00:00Z",
  "last_updated_at": "2026-04-26T16:30:00Z"
}