Weekly reading · methodology v1.0

Window ending Nov. 3, 2025

Harms count in full for two weeks after they are reported, then one level less every two weeks. The control floor looks at reports from Oct. 5, 2025 through Nov. 3, 2025. A selected catalogue of reported AI incidents, reviewed through Oct. 10, 2026. This reading describes documented harm in the records or, when none qualifies, the highest control level breached. It is not a forecast or a measure of all AI activity.

Current recalculation

Control failures only · No qualifying harm. The reading is the highest control level breached: 2, by 1 record. It is a level, not a count.

Recalculated from the catalogue in this build. Historical backcasts were not published at the time.

Published at the time

No publication snapshot exists for this week.

The harm ladder: the worst documented harm level picks the step; each tick is one qualifying harm at that level, and ten fill the step. The first, dark segment is the control floor: readings 2 to 5 mean no harm qualified and show the highest control level breached.

This is a backcast from the current catalogue. It was not a reading published at the time.

Records behind this reading

1 selected record; 0 documented external harms counting (0 qualifying). Records and ratings below reflect the current catalogue.

No harm counting that week. The reading is the highest control level breached, 2: a level, not a count (PI-0031). 1 record reported in the last 30 days.

Records behind this reading · 1

PI-0031 · CamoLeak: hidden pull-request comments made GitHub Copilot Chat leak private code and secretsControl level 2, broke an instruction: sets the reading

Only these records move the reading. How it is calculated

PI-0031
CamoLeak: hidden pull-request comments made GitHub Copilot Chat leak private code and secretsOct. 8, 2025 · No harm reported · Controlled test

Sources

These links support the records above. Source availability and conclusions may change.

Legit Security: CamoLeak: Critical GitHub Copilot vulnerability leaks private source codeCited in PI-0031
The Register: GitHub Copilot Chat turns blabbermouth with crafty prompt injection attackCited in PI-0031
Dark Reading: GitHub Copilot 'CamoLeak' AI Attack Exfiltrates DataCited in PI-0031

Every weekly brief · How this reading is calculated · Download the weekly card