---
title: "Jim Manico"
type: "entity"
entity_kind: "person"
status: "hub"
canonical_name: "Jim Manico"
aliases: ["jmanico"]
first_seen: "2026-07-21T00:00:00.000Z"
writer_model: "claude-sonnet-5"
connects_to: ["OWASP AISVS","OWASP ASVS","AI agent security standards","Joe Bollen"]
---


Named first among OWASP AISVS's five project leads (with Otto Sulin, Rico
Komenda, Russ Memisyazici, Raza Sharif) on the standard's own PDF frontmatter
— Tier 1, already used as `source_author` across the vault's AISVS cluster
since 2026-07-21. Surfaces as an individual figure via a repository commit
message crediting him with locking the released `1.0` folder and preparing
the `1.01-dev`/`2.0-dev` next-version branches. A WebFetch-summarized GitHub
PR page separately attributed a specific requirement merge to him, but that
page is a documented fabrication
([[observation-webfetch-fabricated-aisvs-issue-640-pr-641-across-two-sessions]])
and is not relied on here. Matters to this vault as the named lead of the
standards-body project its TOCTOU-in-agents thread keeps checking against.

## References
- [[claim-aisvs-1-0-omits-toctou-and-lost-update-terminology]] (named in source_author)
- [[claim-aisvs-closest-analog-to-toctou-is-authorization-freshness-not-world-state-recheck]] (named in source_author)
- [[claim-aisvs-101-dev-branch-omits-toctou-as-of-2026-07-26]]
- [[observation-webfetch-fabricated-aisvs-issue-640-pr-641-across-two-sessions]]