sponsored_logs 0.3.0 → 0.3.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 6f7ed20148d47d4ae067aca15087fcb756ebe60daf9904f12b44a5b6408c81a8
-  data.tar.gz: 3de566f7682c17b0cb8de899fbbaf53915bfdb33c23f3b3990c2da5e7db8dde5
+  metadata.gz: 6fb5cc1d702c7a78769eabc68497519929f3b539022e060e183236bea09bf2e9
+  data.tar.gz: 833fc7655dc58fe08d225c30d8cbeb4fb671f8420e28174a902a2b90127a8126
 SHA512:
-  metadata.gz: 51e1e530a4a0fcb83ccaec861c55bada9dc94d3d55f65b15a45c4be2d9eea0cc844161159e9e1aaaf31521e17aee0fa58e801bef72e8c32dd1cc669ff0d5fb80
-  data.tar.gz: cc14c9358180c8258561b0e3946209f875b34dbfd976307d8686d816a4ebd977eced3e295144d016e8db8cda1229a1e9ad19002e676e8099c8e08e263ed28034
+  metadata.gz: a082ca74275c9295fbe89b5a37df6ff53ef4384be302b6fe63a6b69f93ee11ec9ac2443a75375ea3a2fb78db96fb2285a825d797c0d793af7834b64304d28faf
+  data.tar.gz: 0e583c888d9b72d785d76492c1dc7b71cebb6769321f025a2d9a3282a5ff0425f51dfbbbca693a6e1382bc0dbbe19eb3a4bc71c3825535e8e46444fbebc00ba0

data/CHANGELOG.md

@@ -7,6 +7,13 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [0.3.1] - 2026-09-10
+
+### Fixed
+
+- **Fill integrity is a moat.** A `NaN` bid is not demand — it's a tourist. It used to slip past the guard into `weighted_pick` and stall the whole rotation. Now non-finite bids (`NaN`, `±Infinity`) bill at zero where they belong, and the exchange keeps clearing. We don't let bad actors set the price
+- **Brand safety is table stakes.** A creative that forges its own `ERROR` line isn't a placement — it's fraud with ambitions. Control characters, DEL, and the sneaky Unicode separators (U+2028/U+2029) now collapse to a space before serving. Punctuation, em-dashes, and emoji survive. The exploit does not
+
 ## [0.3.0] - 2026-09-07
 
 ### Fixed
@@ -71,7 +78,8 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 - Requires Ruby >= 3.1
 
-[Unreleased]: https://github.com/sponsoredlogs/sponsored_logs/compare/v0.3.0...HEAD
+[Unreleased]: https://github.com/sponsoredlogs/sponsored_logs/compare/v0.3.1...HEAD
+[0.3.1]: https://github.com/sponsoredlogs/sponsored_logs/compare/v0.3.0...v0.3.1
 [0.3.0]: https://github.com/sponsoredlogs/sponsored_logs/compare/v0.2.0...v0.3.0
 [0.2.0]: https://github.com/sponsoredlogs/sponsored_logs/compare/v0.1.0...v0.2.0
 [0.1.0]: https://github.com/sponsoredlogs/sponsored_logs/releases/tag/v0.1.0

data/README.md

@@ -609,6 +609,27 @@ Run the test suite:
 bundle exec rspec
 ```
 
+## 🏅 Certifications & Compliance
+
+The exchange meets or exceeds every standard that matters, and several we
+invented.
+
+[![ScriptPorn: 79 Filthy](https://scriptporn.com/badge/83-a-house-key-would-break-character/badge.svg)](https://scriptporn.com/v/83-a-house-key-would-break-character/)
+
+- 🧾 **ScriptPorn Verified™ — FILTHY (79/100).** Independently audited by a
+  five-judge panel; a season-finale score. SOC 2? We have something better.
+- 🛡️ **Brand-Safety Certified.** No creative has forged a log line since the
+  U+2028 incident of 2026. Zero known injection vectors. Zero.
+- ♻️ **Carbon-Neutral by Design.** We monetize exhaust that already exists. The
+  greenest CPM on Earth.
+- 🤖 **A2A-Ready™.** First-party audited for agent-to-agent interoperability.
+  Our fastest-growing auditors are not human.
+- ✅ **100% Viewability Guaranteed.** Independently unverifiable, because the
+  impressions are inside your logs, where no verification vendor can reach.
+- 🔒 **SponsoredLogs Promise™ Compliant.** Fully opt-in. Consent is our moat.
+
+_Governance is a feature. Excellence is a discipline, not a moment._
+
 ## 📜 License
 
 Released under the [MIT License](LICENSE.txt) — **democratizing access to the

data/lib/sponsored_logs/advertisers.rb

@@ -69,7 +69,7 @@ module SponsoredLogs
     # Build one normalized ad row from a raw hash, or nil when text is blank.
     #
     def self.normalize_entry(entry)
-      text = fetch(entry, :text).to_s.strip
+      text = sanitize_text(fetch(entry, :text))
       return if text.empty?
 
       {
@@ -110,6 +110,22 @@ module SponsoredLogs
       entry[key] || entry[key.to_s]
     end
 
+    # Line-breaking and control characters that let crafted ad copy inject
+    # forged log lines when emitted raw: the C0 range plus DEL, and the Unicode
+    # line/paragraph separators U+2028/U+2029 that many log viewers and parsers
+    # treat as newlines. Newlines and carriage returns are the obvious vectors;
+    # the rest are neutralized for good measure.
+    #
+    CONTROL_CHARS = /[\u0000-\u001F\u007F\u2028\u2029]/
+
+    # Scrub emitted creative text: replace control characters with a space so a
+    # newline in ad copy cannot forge a second log line, then strip. Normal
+    # punctuation, em-dashes, and emoji are preserved untouched.
+    #
+    def self.sanitize_text(value)
+      value.to_s.gsub(CONTROL_CHARS, " ").strip
+    end
+
     # Normalize an advertiser name; blank/nil falls back to "Unattributed".
     #
     def self.coerce_advertiser(value)
@@ -133,7 +149,14 @@ module SponsoredLogs
       return default if value.nil?
 
       number = Float(value)
-      number.negative? ? 0.0 : number
+
+      # NaN and +/-Infinity parse cleanly but poison downstream math
+      # (weighted_pick sums + rand * total + target < cumulative all break),
+      # so treat non-finite demand as unsellable: zero, like a negative bid.
+      #
+      return 0.0 if number.negative? || !number.finite?
+
+      number
     rescue ArgumentError, TypeError
       default
     end
@@ -153,43 +176,23 @@ module SponsoredLogs
       nil
     end
 
-    # Whether an ad is within its flight window at `now`. Missing bounds are
-    # open-ended (nil starts_at = always started; nil ends_at = never ends).
+    # Flight-window and cap predicates live in Flight; delegated here so the
+    # public selection API (live?, status, capped?, eligible?) is unchanged.
     #
     def self.live?(ad, now)
-      return false if ad[:starts_at] && now < ad[:starts_at]
-      return false if ad[:ends_at] && now > ad[:ends_at]
-
-      true
+      Flight.live?(ad, now)
     end
 
-    # Whether an ad has reached its impression cap given a current count.
-    # Uncapped ads (nil cap) are never capped.
-    #
     def self.capped?(ad, count)
-      cap = ad[:cap]
-      return false if cap.nil?
-
-      count.to_i >= cap
+      Flight.capped?(ad, count)
     end
 
-    # Whether an ad is eligible for selection: live at `now` and not capped.
-    #
     def self.eligible?(ad, now, count)
-      live?(ad, now) && !capped?(ad, count)
+      Flight.eligible?(ad, now, count)
     end
 
-    # Status of an ad at `now` given its impression count: :exhausted (cap
-    # reached), :scheduled (window not started), :ended (window passed),
-    # :evergreen (no bounds), or :active.
-    #
     def self.status(ad, now = Time.now, count = 0)
-      return :exhausted if capped?(ad, count)
-      return :scheduled if ad[:starts_at] && now < ad[:starts_at]
-      return :ended if ad[:ends_at] && now > ad[:ends_at]
-      return :evergreen if ad[:starts_at].nil? && ad[:ends_at].nil?
-
-      :active
+      Flight.status(ad, now, count)
     end
 
     # Pick one normalized ad entry using the given selection mode, considering
@@ -211,7 +214,14 @@ module SponsoredLogs
       return if pool.empty?
 
       key = SELECTION_MODES.include?(mode) ? mode : :weight
-      key = :weight if key == :cpm && pool.sum { |ad| ad[:cpm] }.zero?
+
+      # Fall back to weight when there is no sellable cpm demand. `positive?`
+      # (rather than `zero?`) also catches a non-finite or negative sum, so a
+      # NaN/Infinity cpm that ever reaches this line can't skip the fallback and
+      # poison weighted_pick. coerce_number already zeroes NaN upstream; this is
+      # the defense-in-depth guard for the downstream decision.
+      #
+      key = :weight if key == :cpm && !pool.sum { |ad| ad[:cpm] }.positive?
 
       weighted_pick(pool, key)
     end

data/lib/sponsored_logs/flight.rb

@@ -0,0 +1,62 @@
+# frozen_string_literal: true
+
+require "time"
+
+module SponsoredLogs
+  # Flight-window and impression-cap predicates for a normalized ad. Extracted
+  # from Advertisers so the eligibility rules live in one cohesive place and the
+  # host module stays under Metrics/ModuleLength. Advertisers keeps thin
+  # delegators for its public surface (live?, status, capped?, eligible?).
+  #
+  module Flight
+    # Whether `now` falls before an ad's flight window opens. A nil starts_at is
+    # open-ended, so the ad has always started.
+    #
+    def self.before_start?(ad, now)
+      !ad[:starts_at].nil? && now < ad[:starts_at]
+    end
+
+    # Whether `now` falls after an ad's flight window closes. A nil ends_at is
+    # open-ended, so the ad never ends.
+    #
+    def self.after_end?(ad, now)
+      !ad[:ends_at].nil? && now > ad[:ends_at]
+    end
+
+    # Whether an ad is within its flight window at `now`. Missing bounds are
+    # open-ended (nil starts_at = always started; nil ends_at = never ends).
+    #
+    def self.live?(ad, now)
+      !before_start?(ad, now) && !after_end?(ad, now)
+    end
+
+    # Whether an ad has reached its impression cap given a current count.
+    # Uncapped ads (nil cap) are never capped.
+    #
+    def self.capped?(ad, count)
+      cap = ad[:cap]
+      return false if cap.nil?
+
+      count.to_i >= cap
+    end
+
+    # Whether an ad is eligible for selection: live at `now` and not capped.
+    #
+    def self.eligible?(ad, now, count)
+      live?(ad, now) && !capped?(ad, count)
+    end
+
+    # Status of an ad at `now` given its impression count: :exhausted (cap
+    # reached), :scheduled (window not started), :ended (window passed),
+    # :evergreen (no bounds), or :active.
+    #
+    def self.status(ad, now = Time.now, count = 0)
+      return :exhausted if capped?(ad, count)
+      return :scheduled if before_start?(ad, now)
+      return :ended if after_end?(ad, now)
+      return :evergreen if ad[:starts_at].nil? && ad[:ends_at].nil?
+
+      :active
+    end
+  end
+end

data/lib/sponsored_logs/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module SponsoredLogs
-  VERSION = "0.3.0"
+  VERSION = "0.3.1"
 end

data/lib/sponsored_logs.rb

@@ -5,6 +5,7 @@ require "logger"
 require_relative "sponsored_logs/version"
 require_relative "sponsored_logs/color"
 require_relative "sponsored_logs/advertisers"
+require_relative "sponsored_logs/flight"
 require_relative "sponsored_logs/banner"
 require_relative "sponsored_logs/ads_file"
 require_relative "sponsored_logs/ledger/store/base"

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: sponsored_logs
 version: !ruby/object:Gem::Version
-  version: 0.3.0
+  version: 0.3.1
 platform: ruby
 authors:
 - Kerri Miller
@@ -127,6 +127,7 @@ files:
 - lib/sponsored_logs/configuration.rb
 - lib/sponsored_logs/engine.rb
 - lib/sponsored_logs/env.rb
+- lib/sponsored_logs/flight.rb
 - lib/sponsored_logs/injector.rb
 - lib/sponsored_logs/ledger/report.rb
 - lib/sponsored_logs/ledger/store/active_record.rb