7.2 Message Integrity

Description

Agent-to-agent messages MUST be integrity-protected using signatures.

Rationale

Messages can be modified in transit without integrity protection.

Audit Procedure

1. Check for message signing
2. Verify signatures are validated
3. Check for replay protection

Remediation

1. Sign all outgoing messages
2. Verify signatures before processing
3. Include timestamps and nonces

Framework Mappings