---
id: owasp-asi08-cascading-failures
track: coding
version: 0.0.2
label: advisory
keyword: advise
where: text
sha256: b726bb02cdccb4a7c8484e7b59c383459fbca67fc8a06956341e0757eedfa95f
source: https://github.com/open-coder-ai/chock-catalog/tree/1e60d211c1bb767152c6ab0167932da06ab3a10f/agentic-security/owasp-asi08-cascading-failures
catalog_ref: 1e60d211c1bb767152c6ab0167932da06ab3a10f
---

# OWASP ASI08 — Cascading Failures

owasp-asi08-cascading-failures · version 0.0.2

Advisory — Advisory only. It is skill text, and nothing stops a violation. Chock adds friction. It is not a security boundary. 

In a git repo: advisory (The agent reads the text, and nothing stops a violation.)



## What it does

Keep one agent's bad output from propagating through everything downstream. Isolate blast radius per agent and per environment, separate development from production access, validate agent-to-agent handoffs, and add circuit breakers that halt automation on behavioural deviation. Use when chaining agents, designing orchestration, granting production access, or wiring agent output into downstream automation. Do NOT use for the transport security of those handoffs — that is \`owasp-asi07-insecure-inter-agent-communication\`.

## Its label on each agent

- Claude Code (tested): Advisory — Advisory only. It is skill text, and nothing stops a violation. Builder: /coding/builder/#client=claude-code&p=owasp-asi08-cascading-failures
- Cursor (tested): Advisory — Advisory only. It is skill text, and nothing stops a violation. Builder: /coding/builder/#client=cursor&p=owasp-asi08-cascading-failures
- Codex (tested): Advisory — Advisory only. It is skill text, and nothing stops a violation. Builder: /coding/builder/#client=codex&p=owasp-asi08-cascading-failures
- GitHub Copilot (tested): Advisory — Advisory only. It is skill text, and nothing stops a violation. Builder: /coding/builder/#client=copilot&p=owasp-asi08-cascading-failures
- Devin (tested): Advisory — Advisory only. It is skill text, and nothing stops a violation. Builder: /coding/builder/#client=devin&p=owasp-asi08-cascading-failures
- Grok (tested): Not graded yet for Grok. Builder: /coding/builder/#client=grok&p=owasp-asi08-cascading-failures
- goose (tested): Not graded yet for goose. Builder: /coding/builder/#client=goose&p=owasp-asi08-cascading-failures
- Antigravity (tested): Not graded yet for Antigravity. Builder: /coding/builder/#client=antigravity&p=owasp-asi08-cascading-failures
- OpenHands (untested): Not graded yet for OpenHands. Builder: /coding/builder/#client=openhands&p=owasp-asi08-cascading-failures
- Kimi Code (untested): Not graded yet for Kimi Code. Builder: /coding/builder/#client=kimi-code&p=owasp-asi08-cascading-failures
- Factory Droid (untested): Not graded yet for Factory Droid. Builder: /coding/builder/#client=factory-droid&p=owasp-asi08-cascading-failures

## What it misses

This policy does not state what it misses.

## Latest change

0.0.2 · 2026-09-29 — Point at the mechanised slice: the agentic-code-security gate's bounds pack refuses, once switched on in the selection file, loops with no turn limit or a recursion or iteration limit in the hundreds or thousands, at commit and at tool use. Everything else here stays advisory, and no rule text or claim is raised; the pointer is a see() and a references section.

## Provenance

- Tested by 0 of 6 cases run automatically
- SHA-256: `b726bb02cdccb4a7c8484e7b59c383459fbca67fc8a06956341e0757eedfa95f`
- Catalog commit: https://github.com/open-coder-ai/chock-catalog/commit/1e60d211c1bb767152c6ab0167932da06ab3a10f
- Source: https://github.com/open-coder-ai/chock-catalog/tree/1e60d211c1bb767152c6ab0167932da06ab3a10f/agentic-security/owasp-asi08-cascading-failures (catalog path `agentic-security/owasp-asi08-cascading-failures`)
- Presets: OWASP agentic top 10
- JSON: `/api/coding/policies/owasp-asi08-cascading-failures.json`
- Report a problem: https://chock.sh/report/?policy=owasp-asi08-cascading-failures&version=0.0.2&page=%2Fcoding%2Fpolicies%2Fowasp-asi08-cascading-failures%2F