Agent-threat-rules ships "Sigma for AI agents": 425 open detection rules, 97.1% recall, already in Microsoft AGT, Cisco AI Defense, MISP and OWASP.

The project proposes a vendor-neutral detection standard explicitly modeled on Sigma (GitHub). That downstream adopter list is unusually broad for a young repo. This is the clearest sign yet that detections-as-code for autonomous agents is consolidating into one shared format instead of fragmenting per vendor. If you're building agent monitoring, start from this rather than rolling your own taxonomy.