olyx-guardrails 1.0.0

data/lib/olyx/guardrails/supplemental_violation_labels.rb

@@ -0,0 +1,22 @@
+# frozen_string_literal: true
+
+module Olyx
+  module Guardrails
+    # Derives violation labels that depend on individual check records.
+    module SupplementalViolationLabels
+      module_function
+
+      def call(result)
+        labels = []
+        labels << 'input_length_exceeded' if disallowed_check?(result, 'length')
+        labels << 'analyzer_error' if disallowed_check?(result, 'ai')
+        labels
+      end
+
+      def disallowed_check?(result, type)
+        Array(result[:checks]).any? { |check| check[:type] == type && !check[:allowed] }
+      end
+      private_class_method :disallowed_check?
+    end
+  end
+end

data/lib/olyx/guardrails/text/base64_decoder.rb

@@ -0,0 +1,45 @@
+# frozen_string_literal: true
+
+require 'base64'
+
+module Olyx
+  module Guardrails
+    module Text
+      # Decodes one bounded layer of standalone Base64-looking runs. A run is
+      # only substituted when it both decodes cleanly and produces printable
+      # text, so ordinary alphanumeric text (hex hashes, identifiers) is never
+      # corrupted by a coincidental decode.
+      module Base64Decoder
+        RUN = %r{(?<![A-Za-z0-9+/=])[A-Za-z0-9+/]{16,}={0,2}(?![A-Za-z0-9+/=])}
+
+        # Padding needed to reach a multiple of 4, keyed by length % 4.
+        # Unpadded base64 can only end on remainder 0 (none needed), 2, or 3;
+        # remainder 1 is not a valid unpadded length and maps to no padding
+        # rather than guessing, so decode simply fails for it below.
+        PADDING_FOR_REMAINDER = { 0 => '', 2 => '==', 3 => '=' }.freeze
+
+        module_function
+
+        def call(value)
+          value.gsub(RUN) { |run| decode(run) || run }
+        end
+
+        def decode(run)
+          decoded = Base64.strict_decode64(pad(run))
+          decoded if printable?(decoded)
+        rescue ArgumentError
+          nil
+        end
+
+        def pad(run) = run + PADDING_FOR_REMAINDER.fetch(run.length % 4, '')
+
+        # [:print:] already covers space; \t/\n/\r are the only extra
+        # whitespace worth tolerating, listed explicitly to avoid an overlap
+        # with [:print:] inside the negated class.
+        def printable?(text) = text.valid_encoding? && !text.match?(/[^[:print:]\t\n\r]/)
+
+        private_class_method :decode, :pad, :printable?
+      end
+    end
+  end
+end

data/lib/olyx/guardrails/text/detection_variants.rb

@@ -0,0 +1,28 @@
+# frozen_string_literal: true
+
+require_relative 'base64_decoder'
+require_relative 'html_decoder'
+require_relative 'normalizer'
+require_relative 'unicode_escape_decoder'
+require_relative 'url_decoder'
+
+module Olyx
+  module Guardrails
+    module Text
+      # Produces bounded single-layer variants for evasion-resistant detection.
+      module DetectionVariants
+        WINDOW = 20_000
+        DECODERS = [HtmlDecoder, UrlDecoder, UnicodeEscapeDecoder, Base64Decoder].freeze
+
+        module_function
+
+        def call(value)
+          source = value.to_s[0...WINDOW]
+          normalized = Normalizer.call(source)
+          decoded = DECODERS.map { |decoder| decoder.call(normalized) }
+          [source, normalized, *decoded].uniq
+        end
+      end
+    end
+  end
+end

data/lib/olyx/guardrails/text/html_decoder.rb

@@ -0,0 +1,18 @@
+# frozen_string_literal: true
+
+require 'cgi'
+
+module Olyx
+  module Guardrails
+    module Text
+      # Decodes one bounded layer of HTML entities.
+      module HtmlDecoder
+        module_function
+
+        def call(value)
+          CGI.unescapeHTML(value)
+        end
+      end
+    end
+  end
+end

data/lib/olyx/guardrails/text/mapped_builder.rb

@@ -0,0 +1,33 @@
+# frozen_string_literal: true
+
+require_relative 'normalizer'
+
+module Olyx
+  module Guardrails
+    module Text
+      # Builds normalized text with indexes back to the original String.
+      module MappedBuilder
+        module_function
+
+        def call(source)
+          text = +''
+          starts = []
+          endings = []
+          source.each_char.with_index do |character, index|
+            append(text, starts, endings, Normalizer.normalize_character(character), index)
+          end
+          [text, starts.freeze, endings.freeze]
+        end
+
+        def append(text, starts, endings, normalized, index)
+          normalized.to_s.each_char do |character|
+            text << character
+            starts << index
+            endings << (index + 1)
+          end
+        end
+        private_class_method :append
+      end
+    end
+  end
+end

data/lib/olyx/guardrails/text/mapped_normalization.rb

@@ -0,0 +1,27 @@
+# frozen_string_literal: true
+
+require_relative 'mapped_builder'
+
+module Olyx
+  module Guardrails
+    module Text
+      # Holds normalized detector text and translates matches to original spans.
+      class MappedNormalization
+        attr_reader :text
+
+        def initialize(source)
+          @source = source
+          @text, @starts, @endings = MappedBuilder.call(source)
+        end
+
+        def changed?
+          @text != @source
+        end
+
+        def original_span(starting, ending)
+          [@starts.fetch(starting), @endings.fetch(ending - 1)]
+        end
+      end
+    end
+  end
+end

data/lib/olyx/guardrails/text/normalizer.rb

@@ -0,0 +1,35 @@
+# frozen_string_literal: true
+
+module Olyx
+  module Guardrails
+    module Text
+      # Produces a bounded comparison form for common Unicode evasions.
+      module Normalizer
+        ZERO_WIDTH = /[\u200B-\u200D\u2060\uFEFF]/
+        HOMOGLYPHS = {
+          'Α' => 'A', 'А' => 'A', 'Β' => 'B', 'В' => 'B', 'Ε' => 'E', 'Е' => 'E',
+          'Η' => 'H', 'Н' => 'H', 'Ι' => 'I', 'І' => 'I', 'Κ' => 'K', 'К' => 'K',
+          'Μ' => 'M', 'М' => 'M', 'Ν' => 'N', 'О' => 'O', 'Ρ' => 'P', 'Р' => 'P',
+          'С' => 'C', 'Τ' => 'T', 'Т' => 'T', 'Χ' => 'X', 'Х' => 'X',
+          'а' => 'a', 'е' => 'e', 'і' => 'i', 'о' => 'o', 'р' => 'p', 'с' => 'c',
+          'х' => 'x', 'у' => 'y'
+        }.freeze
+
+        module_function
+
+        def call(value)
+          value.to_s.each_char.filter_map { |character| normalize_character(character) }.join
+        end
+
+        def normalize_character(character)
+          return if character.match?(ZERO_WIDTH)
+
+          normalized = character.unicode_normalize(:nfkc)
+          HOMOGLYPHS.fetch(normalized, normalized)
+        rescue Encoding::CompatibilityError, ArgumentError
+          character
+        end
+      end
+    end
+  end
+end

data/lib/olyx/guardrails/text/unicode_escape_decoder.rb

@@ -0,0 +1,20 @@
+# frozen_string_literal: true
+
+module Olyx
+  module Guardrails
+    module Text
+      # Decodes one layer of JSON-style Unicode escapes.
+      module UnicodeEscapeDecoder
+        ESCAPE = /\\u([0-9a-fA-F]{4})/
+
+        module_function
+
+        def call(value)
+          value.gsub(ESCAPE) { [::Regexp.last_match(1).to_i(16)].pack('U') }
+        rescue RangeError
+          value
+        end
+      end
+    end
+  end
+end

data/lib/olyx/guardrails/text/url_decoder.rb

@@ -0,0 +1,20 @@
+# frozen_string_literal: true
+
+require 'uri'
+
+module Olyx
+  module Guardrails
+    module Text
+      # Decodes one layer of URL-encoded text.
+      module UrlDecoder
+        module_function
+
+        def call(value)
+          URI.decode_www_form_component(value)
+        rescue ArgumentError
+          value
+        end
+      end
+    end
+  end
+end

data/lib/olyx/guardrails/validation.rb

@@ -0,0 +1,33 @@
+# frozen_string_literal: true
+
+module Olyx
+  module Guardrails
+    # Shared internal validators for public collection arguments.
+    module Validation
+      def self.array_of!(value, item_class, name:)
+        valid = value.is_a?(Array) && value.all?(item_class)
+        return value if valid
+
+        raise ArgumentError, "#{name} must be an Array of #{item_class} values"
+      end
+
+      def self.boolean!(value, name:)
+        return value if [true, false].include?(value)
+
+        raise ArgumentError, "#{name} must be true or false"
+      end
+
+      def self.non_negative_integer!(value, name:)
+        return value if value.is_a?(Integer) && value >= 0
+
+        raise ArgumentError, "#{name} must be a non-negative Integer"
+      end
+
+      def self.callable_or_nil!(value, name:)
+        return value if value.nil? || value.respond_to?(:call)
+
+        raise ArgumentError, "#{name} must respond to call"
+      end
+    end
+  end
+end

data/lib/olyx/guardrails/version.rb

@@ -0,0 +1,8 @@
+# frozen_string_literal: true
+
+module Olyx
+  module Guardrails
+    # The current gem version, following semantic versioning.
+    VERSION = '1.0.0'
+  end
+end

data/lib/olyx/guardrails/violation_labels.rb

@@ -0,0 +1,24 @@
+# frozen_string_literal: true
+
+require_relative 'supplemental_violation_labels'
+
+module Olyx
+  module Guardrails
+    # Derives shared machine-readable violation labels from a decision.
+    module ViolationLabels
+      MAPPINGS = {
+        injection_attempt: 'injection_attempt',
+        secret_leaked: 'secret_leaked',
+        pii_detected: 'pii_detected',
+        policy_violated: 'restricted_content'
+      }.freeze
+
+      module_function
+
+      def call(result)
+        labels = MAPPINGS.filter_map { |field, label| label if result[field] }
+        labels.concat(SupplementalViolationLabels.call(result))
+      end
+    end
+  end
+end

data/lib/olyx/guardrails.rb

@@ -0,0 +1,63 @@
+# frozen_string_literal: true
+
+require_relative 'guardrails/version'
+require_relative 'guardrails/errors'
+require_relative 'guardrails/validation'
+require_relative 'guardrails/risk/weights'
+require_relative 'guardrails/pii_scrubber'
+require_relative 'guardrails/injection_detector'
+require_relative 'guardrails/secret_scanner'
+require_relative 'guardrails/policy'
+require_relative 'guardrails/check_runner'
+require_relative 'guardrails/message_check_runner'
+require_relative 'guardrails/redactor'
+require_relative 'guardrails/notifier'
+require_relative 'guardrails/rails' if defined?(Rails::Railtie)
+
+module Olyx
+  # Guardrails is a standalone, in-process AI safety toolkit: custom policy
+  # enforcement, PII redaction, prompt-injection detection, and secret scanning,
+  # unified behind explicit decision and transformation entry points.
+  module Guardrails
+    INJECTION_RISK_WEIGHT = Risk::Weights::FINDINGS.fetch(:injection).last
+    SECRET_RISK_WEIGHT    = Risk::Weights::FINDINGS.fetch(:secret).last
+    PII_RISK_WEIGHT       = Risk::Weights::FINDINGS.fetch(:pii).last
+    POLICY_RISK_WEIGHT    = Risk::Weights::FINDINGS.fetch(:policy).last
+    BLOCKED_RISK_WEIGHT   = Risk::Weights::BLOCKED
+
+    # Runs the full guardrail suite on one input, optionally enriched by a
+    # caller-supplied AI analyzer. AI findings can add violations but cannot
+    # clear deterministic findings.
+    #
+    # @param input [#to_s] the content to check.
+    # @param policy [Policy] reusable enforcement and restricted-content rules.
+    # @param ai_analyzer [#call, nil] optional semantic analyzer receiving
+    #   `(text, context)`.
+    # @return [Hash] the aggregate decision, findings, score, and check details.
+    def self.check(input, policy: Policy.default, ai_analyzer: nil)
+      CheckRunner.call(input, policy: policy, ai_analyzer: ai_analyzer)
+    end
+
+    # Runs guardrails against structured chat messages, including adjacent-turn detection.
+    def self.check_messages(messages, policy: Policy.default, ai_analyzer: nil)
+      MessageCheckRunner.call(messages, policy: policy, ai_analyzer: ai_analyzer)
+    end
+
+    # Redacts regex-detected PII, secrets, and restricted policy matches without
+    # making an allow/block decision.
+    #
+    # @param input [#to_s] the content to redact.
+    # @param policy [Policy] reusable limits and restricted-content rules.
+    # @return [Hash] redacted text, detection flags, and safe findings.
+    # @raise [ArgumentError] when an option is invalid or input is oversized.
+    def self.redact(input, policy: Policy.default)
+      Redactor.call(input, policy: policy)
+    end
+
+    class << self
+      # Explicit completed-output entry points; streaming enforcement belongs to the proxy platform.
+      alias check_output check
+      alias redact_output redact
+    end
+  end
+end

metadata

@@ -0,0 +1,283 @@
+--- !ruby/object:Gem::Specification
+name: olyx-guardrails
+version: !ruby/object:Gem::Version
+  version: 1.0.0
+platform: ruby
+authors:
+- Moses Njoroge
+bindir: bin
+cert_chain: []
+date: 1980-01-02 00:00:00.000000000 Z
+dependencies: []
+description: 'Standalone Ruby library for completed AI input and output safety. Detects
+  and redacts PII, identifies prompt injection attacks (including multi-turn patterns),
+  scans for leaked secrets, enforces reusable custom restricted-content policies,
+  and provides explicit Rails boundary adapters and sanitized application-defined
+  notifications — no external dependencies for the core checks, runs entirely in-process.
+  Ships with a pluggable ai_analyzer: hook for LLM-backed semantic evaluation.'
+email:
+- mosesnjoroge@olyxai.io
+executables: []
+extensions: []
+extra_rdoc_files: []
+files:
+- CHANGELOG.md
+- CODE_OF_CONDUCT.md
+- CONTRIBUTING.md
+- LICENSE
+- README.md
+- SECURITY.md
+- docs/API.md
+- examples/claude_analyzer.rb
+- examples/custom_policy.rb
+- examples/notifier.rb
+- examples/openai_analyzer.rb
+- examples/rails_opt_in.rb
+- examples/ruby_only.rb
+- lib/generators/olyx_guardrails/install_generator.rb
+- lib/generators/olyx_guardrails/templates/initializer.rb.tt
+- lib/generators/olyx_guardrails/templates/policy.yml.tt
+- lib/olyx/guardrails.rb
+- lib/olyx/guardrails/ai/analysis_normalizer.rb
+- lib/olyx/guardrails/ai/analysis_pipeline.rb
+- lib/olyx/guardrails/ai/boolean_validator.rb
+- lib/olyx/guardrails/ai/flag_finding_merger.rb
+- lib/olyx/guardrails/ai/result_sanitizer.rb
+- lib/olyx/guardrails/ai/secret_finding_merger.rb
+- lib/olyx/guardrails/ai/standard_finding_merger.rb
+- lib/olyx/guardrails/ai_analysis.rb
+- lib/olyx/guardrails/ai_context_builder.rb
+- lib/olyx/guardrails/ai_failure_handler.rb
+- lib/olyx/guardrails/ai_finding_merger.rb
+- lib/olyx/guardrails/check_analyzer.rb
+- lib/olyx/guardrails/check_base_result.rb
+- lib/olyx/guardrails/check_pipeline.rb
+- lib/olyx/guardrails/check_result_builder.rb
+- lib/olyx/guardrails/check_runner.rb
+- lib/olyx/guardrails/check_set.rb
+- lib/olyx/guardrails/checks/injection_check.rb
+- lib/olyx/guardrails/checks/injection_result.rb
+- lib/olyx/guardrails/checks/length_check.rb
+- lib/olyx/guardrails/checks/message_injection_check.rb
+- lib/olyx/guardrails/checks/pii_check.rb
+- lib/olyx/guardrails/checks/policy_check.rb
+- lib/olyx/guardrails/checks/secret_check.rb
+- lib/olyx/guardrails/checks/skipped_checks.rb
+- lib/olyx/guardrails/enum_value.rb
+- lib/olyx/guardrails/errors.rb
+- lib/olyx/guardrails/injection_detector.rb
+- lib/olyx/guardrails/injection_patterns.rb
+- lib/olyx/guardrails/integrations/openai/analyzer_setup.rb
+- lib/olyx/guardrails/integrations/openai/configuration_resolver.rb
+- lib/olyx/guardrails/integrations/openai/dependency_contracts.rb
+- lib/olyx/guardrails/integrations/openai/input_builder.rb
+- lib/olyx/guardrails/integrations/openai/member_reader.rb
+- lib/olyx/guardrails/integrations/openai/model_identifier.rb
+- lib/olyx/guardrails/integrations/openai/refusal_guard.rb
+- lib/olyx/guardrails/integrations/openai/request_builder.rb
+- lib/olyx/guardrails/integrations/openai/request_configuration.rb
+- lib/olyx/guardrails/integrations/openai/request_values.rb
+- lib/olyx/guardrails/integrations/openai/response_contents.rb
+- lib/olyx/guardrails/integrations/openai/response_option_keys.rb
+- lib/olyx/guardrails/integrations/openai/response_options.rb
+- lib/olyx/guardrails/integrations/openai/schema_registry.rb
+- lib/olyx/guardrails/integrations/openai/sdk.rb
+- lib/olyx/guardrails/integrations/openai/signal_summary.rb
+- lib/olyx/guardrails/integrations/openai_analyzer.rb
+- lib/olyx/guardrails/integrations/openai_analyzer_configuration.rb
+- lib/olyx/guardrails/integrations/openai_response_parser.rb
+- lib/olyx/guardrails/message_check_runner.rb
+- lib/olyx/guardrails/message_check_set.rb
+- lib/olyx/guardrails/message_content.rb
+- lib/olyx/guardrails/message_source.rb
+- lib/olyx/guardrails/multi_turn_injection_detector.rb
+- lib/olyx/guardrails/multi_turn_pair_scanner.rb
+- lib/olyx/guardrails/multi_turn_variant_pairs.rb
+- lib/olyx/guardrails/notification/base_event.rb
+- lib/olyx/guardrails/notification/deep_freezer.rb
+- lib/olyx/guardrails/notification/delivery_dispatcher.rb
+- lib/olyx/guardrails/notification/delivery_summary.rb
+- lib/olyx/guardrails/notification/handler.rb
+- lib/olyx/guardrails/notification/handler_collection.rb
+- lib/olyx/guardrails/notification/handler_collection_validator.rb
+- lib/olyx/guardrails/notification/key.rb
+- lib/olyx/guardrails/notification/metadata.rb
+- lib/olyx/guardrails/notification/notifier_setup.rb
+- lib/olyx/guardrails/notification/preview.rb
+- lib/olyx/guardrails/notification/scrubber.rb
+- lib/olyx/guardrails/notification/violation_labels.rb
+- lib/olyx/guardrails/notification_event_builder.rb
+- lib/olyx/guardrails/notification_sanitizer.rb
+- lib/olyx/guardrails/notifier.rb
+- lib/olyx/guardrails/notifier_configuration.rb
+- lib/olyx/guardrails/pii/ambiguous_numeric_date.rb
+- lib/olyx/guardrails/pii/block_scrubber.rb
+- lib/olyx/guardrails/pii/content_scrubber.rb
+- lib/olyx/guardrails/pii/date_validator.rb
+- lib/olyx/guardrails/pii/hash_key.rb
+- lib/olyx/guardrails/pii/iban_remainder.rb
+- lib/olyx/guardrails/pii/iban_validator.rb
+- lib/olyx/guardrails/pii/ipv4_validator.rb
+- lib/olyx/guardrails/pii/ipv6_validator.rb
+- lib/olyx/guardrails/pii/luhn_checksum.rb
+- lib/olyx/guardrails/pii/luhn_validator.rb
+- lib/olyx/guardrails/pii/message_scrubber.rb
+- lib/olyx/guardrails/pii/named_date_validator.rb
+- lib/olyx/guardrails/pii/numeric_date_validator.rb
+- lib/olyx/guardrails/pii/pattern_catalog.rb
+- lib/olyx/guardrails/pii/sin_validator.rb
+- lib/olyx/guardrails/pii/ssn_validator.rb
+- lib/olyx/guardrails/pii/text_scrubber.rb
+- lib/olyx/guardrails/pii/year_first_date.rb
+- lib/olyx/guardrails/pii_scrubber.rb
+- lib/olyx/guardrails/pii_validators.rb
+- lib/olyx/guardrails/policy.rb
+- lib/olyx/guardrails/policy/ai_failure_mode.rb
+- lib/olyx/guardrails/policy/configuration.rb
+- lib/olyx/guardrails/policy/configuration_hash.rb
+- lib/olyx/guardrails/policy/finding_order.rb
+- lib/olyx/guardrails/policy/finding_presenter.rb
+- lib/olyx/guardrails/policy/match_collector.rb
+- lib/olyx/guardrails/policy/name.rb
+- lib/olyx/guardrails/policy/normalized_pattern_matcher.rb
+- lib/olyx/guardrails/policy/pattern_matcher.rb
+- lib/olyx/guardrails/policy/redaction_result.rb
+- lib/olyx/guardrails/policy/redaction_spans.rb
+- lib/olyx/guardrails/policy/rule_collection.rb
+- lib/olyx/guardrails/policy/rule_matcher.rb
+- lib/olyx/guardrails/policy/rule_normalizer.rb
+- lib/olyx/guardrails/policy/scan_result.rb
+- lib/olyx/guardrails/policy/secret_pattern_collection.rb
+- lib/olyx/guardrails/policy/unmatched_segment_builder.rb
+- lib/olyx/guardrails/policy/unmatched_transformer.rb
+- lib/olyx/guardrails/policy_aware_redactor.rb
+- lib/olyx/guardrails/policy_redactor.rb
+- lib/olyx/guardrails/policy_rule.rb
+- lib/olyx/guardrails/policy_rule/configuration.rb
+- lib/olyx/guardrails/policy_rule/description_value.rb
+- lib/olyx/guardrails/policy_rule/match_mode.rb
+- lib/olyx/guardrails/policy_rule/name_value.rb
+- lib/olyx/guardrails/policy_rule/pattern_compiler.rb
+- lib/olyx/guardrails/policy_rule/regexp_compiler.rb
+- lib/olyx/guardrails/policy_rule/replacement_value.rb
+- lib/olyx/guardrails/policy_rule/term_compiler.rb
+- lib/olyx/guardrails/policy_rule/text_values.rb
+- lib/olyx/guardrails/policy_rule/values.rb
+- lib/olyx/guardrails/policy_scanner.rb
+- lib/olyx/guardrails/rails.rb
+- lib/olyx/guardrails/rails/action_cable.rb
+- lib/olyx/guardrails/rails/active_job_handler.rb
+- lib/olyx/guardrails/rails/active_model_validator.rb
+- lib/olyx/guardrails/rails/check_telemetry.rb
+- lib/olyx/guardrails/rails/configuration.rb
+- lib/olyx/guardrails/rails/configuration_finalizer.rb
+- lib/olyx/guardrails/rails/configuration_registry.rb
+- lib/olyx/guardrails/rails/configuration_values.rb
+- lib/olyx/guardrails/rails/constant_resolver.rb
+- lib/olyx/guardrails/rails/controller.rb
+- lib/olyx/guardrails/rails/controller_metadata.rb
+- lib/olyx/guardrails/rails/decision_service.rb
+- lib/olyx/guardrails/rails/enforcer.rb
+- lib/olyx/guardrails/rails/evaluation_lifecycle.rb
+- lib/olyx/guardrails/rails/evaluation_service.rb
+- lib/olyx/guardrails/rails/filter_parameters.rb
+- lib/olyx/guardrails/rails/graphql.rb
+- lib/olyx/guardrails/rails/ingress.rb
+- lib/olyx/guardrails/rails/input_runtime.rb
+- lib/olyx/guardrails/rails/instrumentation.rb
+- lib/olyx/guardrails/rails/instrumentation_payloads.rb
+- lib/olyx/guardrails/rails/instrumentation_publisher.rb
+- lib/olyx/guardrails/rails/integration_configuration.rb
+- lib/olyx/guardrails/rails/job.rb
+- lib/olyx/guardrails/rails/job_argument.rb
+- lib/olyx/guardrails/rails/job_reference.rb
+- lib/olyx/guardrails/rails/message_evaluation_service.rb
+- lib/olyx/guardrails/rails/message_runtime.rb
+- lib/olyx/guardrails/rails/notification_dispatcher.rb
+- lib/olyx/guardrails/rails/output_runtime.rb
+- lib/olyx/guardrails/rails/path_value.rb
+- lib/olyx/guardrails/rails/policy_configuration.rb
+- lib/olyx/guardrails/rails/policy_document.rb
+- lib/olyx/guardrails/rails/policy_file.rb
+- lib/olyx/guardrails/rails/policy_file_error.rb
+- lib/olyx/guardrails/rails/policy_rule_names.rb
+- lib/olyx/guardrails/rails/policy_yaml.rb
+- lib/olyx/guardrails/rails/queue_name.rb
+- lib/olyx/guardrails/rails/redaction_payload.rb
+- lib/olyx/guardrails/rails/redaction_service.rb
+- lib/olyx/guardrails/rails/result_summary.rb
+- lib/olyx/guardrails/rails/runtime.rb
+- lib/olyx/guardrails/rails/timer.rb
+- lib/olyx/guardrails/rails/upload.rb
+- lib/olyx/guardrails/railtie.rb
+- lib/olyx/guardrails/redaction/content_result.rb
+- lib/olyx/guardrails/redaction/input_validator.rb
+- lib/olyx/guardrails/redaction/public_result.rb
+- lib/olyx/guardrails/redaction/unrestricted_text.rb
+- lib/olyx/guardrails/redactor.rb
+- lib/olyx/guardrails/risk/ai_score.rb
+- lib/olyx/guardrails/risk/check_weights.rb
+- lib/olyx/guardrails/risk/deterministic_score.rb
+- lib/olyx/guardrails/risk/weights.rb
+- lib/olyx/guardrails/risk_scorer.rb
+- lib/olyx/guardrails/secret_finding_collector.rb
+- lib/olyx/guardrails/secret_scanner.rb
+- lib/olyx/guardrails/secrets/blocked.rb
+- lib/olyx/guardrails/secrets/catalog_source.rb
+- lib/olyx/guardrails/secrets/cloud_credential_patterns.rb
+- lib/olyx/guardrails/secrets/confidentiality_source.rb
+- lib/olyx/guardrails/secrets/custom_pattern_compiler.rb
+- lib/olyx/guardrails/secrets/custom_pattern_source.rb
+- lib/olyx/guardrails/secrets/finding_order.rb
+- lib/olyx/guardrails/secrets/finding_presenter.rb
+- lib/olyx/guardrails/secrets/generic_credential_patterns.rb
+- lib/olyx/guardrails/secrets/internal_endpoint_source.rb
+- lib/olyx/guardrails/secrets/network_patterns.rb
+- lib/olyx/guardrails/secrets/normalized_source_set.rb
+- lib/olyx/guardrails/secrets/pattern_catalog.rb
+- lib/olyx/guardrails/secrets/private_network_validator.rb
+- lib/olyx/guardrails/secrets/redaction_spans.rb
+- lib/olyx/guardrails/secrets/redactor.rb
+- lib/olyx/guardrails/secrets/regexp_finding_source.rb
+- lib/olyx/guardrails/secrets/source_set.rb
+- lib/olyx/guardrails/single_message_injection_detector.rb
+- lib/olyx/guardrails/supplemental_violation_labels.rb
+- lib/olyx/guardrails/text/base64_decoder.rb
+- lib/olyx/guardrails/text/detection_variants.rb
+- lib/olyx/guardrails/text/html_decoder.rb
+- lib/olyx/guardrails/text/mapped_builder.rb
+- lib/olyx/guardrails/text/mapped_normalization.rb
+- lib/olyx/guardrails/text/normalizer.rb
+- lib/olyx/guardrails/text/unicode_escape_decoder.rb
+- lib/olyx/guardrails/text/url_decoder.rb
+- lib/olyx/guardrails/validation.rb
+- lib/olyx/guardrails/version.rb
+- lib/olyx/guardrails/violation_labels.rb
+homepage: https://github.com/Olyx-labs/olyx-guardrails
+licenses:
+- Apache-2.0
+metadata:
+  source_code_uri: https://github.com/Olyx-labs/olyx-guardrails
+  changelog_uri: https://github.com/Olyx-labs/olyx-guardrails/blob/master/CHANGELOG.md
+  documentation_uri: https://github.com/Olyx-labs/olyx-guardrails/blob/master/docs/API.md
+  bug_tracker_uri: https://github.com/Olyx-labs/olyx-guardrails/issues
+  allowed_push_host: https://rubygems.org
+  rubygems_mfa_required: 'true'
+rdoc_options: []
+require_paths:
+- lib
+required_ruby_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '3.4'
+required_rubygems_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+requirements: []
+rubygems_version: 3.6.9
+specification_version: 4
+summary: In-process AI guardrails for Ruby and Rails with configurable policies.
+test_files: []