Review batches 13 and 14: PIR-2026-0011..0020 corrected on adversarial review

[srinivasgumdelli]

Thirteenth and fourteenth batches of the adversarial review loop, combined (Codex, an OpenAI model; affiliation noted in every dated note). Primaries re-read for this PR: the NVD record for CVE-2025-32711, Radware's advisory, Embrace The Red's SpAIware timeline.

• 0020 Claude Code updater: title and mechanism narrowed to what issue #168 shows (a dangerous chown/chmod presented in the update and permission-setup flow; whether the updater executed it autonomously is not established); "brick" and "unbootable" replaced with the primary's broken sudo and rescue-instance recovery.
• 0019 x402: "peer-reviewed" limited to the paper with a USENIX Security 2026 acceptance; the 99% of transactions and 98% of volume figures tied to the study's measurement methodology.
• 0018 ShadowLeak: time_to_recover was internally inconsistent (June 18 to September 3 is ~11 weeks, not 6 to 7); now report-to-acknowledgement with the early-August fix noted separately; "100% success" and "invisible to enterprise defenses" attributed to Radware's PoC.
• 0017 EchoLeak: NVD record added as the direct source for the CVE and its 9.3 score (confirmed via the NVD API); "first LLM Scope Violation" attributed to Aim Labs; "full tenant-scope data" narrowed to the user's Copilot retrieval scope.
• 0015 SpAIware: date_detected from 2024-09 to 2024-06 (end-to-end exploit reported to OpenAI in June 2024 per the researcher's timeline; disclosure 2024-09-20); "all future conversations" scoped to the affected app and account.
• 0014 McDonald's/IBM: "three years of continuous production" corrected to the roughly two-year test the reporting describes; the error videos and analyst accounts recorded as reported evidence, not McDonald's stated reason for ending it.
• 0012 Chevrolet: the unsourced "tens of millions of views" removed; the $1 reply stated as a chatbot response, not a binding sale.
• 0011 Cruise: GM's >$10B investment no longer recorded as loss "stranded" by the incident (company-wide figure; GM cited scaling cost and competition); indirect_loss_usd to unknown; the "first criminal resolution" precedent qualified as reported.
• 0016 Freysa and 0013 DPD: no material change; dated notes added.

INDEX: one row updated; enum counts unchanged.

🤖 Generated with Claude Code