QG306 Wrong write¶
| Type | Vulnerability |
| Severity | Critical |
| Front end | a synthesised host and its router |
| Guardrail category (Vassilev 2026) | E. Action & Execution Guardrails |
| AI RMF functions (NIST AI 100-1) | GOVERN, MANAGE |
| OWASP | ASI02:2026 Tool Misuse and Exploitation |
| Gates by default | yes: a new finding under it fails the default quality gate |
Raised when¶
A case in the team's ratchet or dialogue corpus calls a write the case does not name.
Why it matters¶
The router ran a write the user did not ask for, on a wording the team itself wrote down.
How to fix it¶
Separate the two tools in the vocabulary, or declare the word that tells them apart.
What the finding carries¶
A location in the document the team edits, a fingerprint that survives unrelated edits, a reproduction (a transcript replayed against NeMo Guardrails for a policy, a dialogue case played through the selector for a router, or the gate's inputs reproduced by agreement), and, where the scan can produce one, a fix whose re-scan it has already run. See the catalogue for the other rules.