visiq 0.1.0-aarch64-linux → 0.1.1-aarch64-linux

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: ff880d1b8f59c8f8af6a81d49511545f8addb24612caf6b208336134626eae65
-  data.tar.gz: 69a3eca3e9b046a707496818c75eea06682499ce1a5bb8fac75bdfc69fdee170
+  metadata.gz: 62019e14f6eaca1722c3c9e897e641838a2ea88d367a7aa24f86a402baa2a33c
+  data.tar.gz: 4c3b6db8a3597acaf928e7f3dbecc54bed637158496975f02d9672b173c258aa
 SHA512:
-  metadata.gz: 5a046a1c32d4de7ae66b7c320d5a221458a868e10e31e3fc4b5b6f6d47e209cba1ab6d97dab5e116dc700a7f97c039c00b6ebaef3d043da5795d659e5f12679e
-  data.tar.gz: 9c6dbe1b3fb49b4e4c94d52f6978972ca34512236c60a2712456ff7621ba078c8256d38eded40c7b11e53670387a1b663391c8f34fb23bf2f5a4357858a9d088
+  metadata.gz: 0616f7861f3c5626e69aaefed5a80fc6a929211bda0294c9751bc7b7782833374dbc5ef6f31a3bf949fa9b2c90fb89482a74f365d142246b994bbda1d7b3abcc
+  data.tar.gz: ef37ebca47c208cb12afef8622af63b4f456a61a6cf53303addfdd0780a4eb53fc999c5cca637338a394fa687549152275c89bce01596288c1b9e1e376a26dbe

data/README.md

@@ -1,12 +1,17 @@
 # visiq — VisIQ agent-governance SDK for Ruby
 
-Local, in-process governance decisions for AI agents. ONE compiled Rust core
-(Path B) makes the **same** decisions as the shipped TypeScript SDK
-(`@visiq/harness`), bound to Ruby through the stdlib `Fiddle` FFI. The engine
+Returns a `permit`, `deny`, `approval_required`, `redact`, `escalate`, or `mask`
+decision for a tool call or retrieval **before your application executes it** —
+your code acts on the verdict; this SDK does not block for you. Decisions are made
+in-process by the compiled VisIQ core that every VisIQ SDK shares (the same engine
+behind `@visiq/harness`), bound to Ruby through the stdlib `Fiddle` FFI. The engine
 ships as **compiled machine code** (closed); the Ruby is thin FFI plumbing only.
 
 - **Local & fast** — every decision is in-process, no network.
-- **Fails closed (G001)** — malformed input, or a core that can't load, denies.
+- **Fail-open by default (G001 rescope, owner 2026-07-15)** — a harness-internal
+  failure (the core can't load, an FFI error) returns a loud fail-open permit;
+  set `VISIQ_FAIL_MODE=closed` to block instead. Malformed input and explicit
+  policy denials always block.
 - **Cross-language parity** — reproduces the exact decisions of the TS/Python/…
   SDKs from the same core, verified against a shared corpus.
 

data/lib/visiq.rb

@@ -2,13 +2,16 @@
 
 # VisIQ agent-governance SDK (Ruby) — local, in-process policy decisions.
 #
-# ONE compiled Rust core (Path B) makes the SAME decisions as the shipped
-# TypeScript SDK (`@visiq/harness`). This gem is a thin binding over the core's
+# Governance evaluation has ONE source of truth — the compiled Rust core — and
+# every VisIQ SDK evaluates through it rather than reimplementing the rules, which
+# is what keeps decisions identical across languages; a shared conformance corpus
+# is what enforces that. This gem is a thin binding over the core's
 # language-neutral C-ABI seam (`visiq_evaluate`/`visiq_free`) via Ruby's stdlib
 # `Fiddle` — zero runtime gem dependencies. The engine is compiled machine code;
 # the gem ships the shared library CLOSED (the Ruby is only FFI plumbing, no
-# policy). Every decision is local (no network) and fails closed on malformed
-# input (G001).
+# policy). Every decision is local (no network); a harness-internal failure is
+# routed by VISIQ_FAIL_MODE (default "open" — see #fail_mode below), while
+# malformed input and explicit policy denials always block (G001 rescope).
 #
 #   require "visiq"
 #   d = Visiq.gate_action(bundle, tool_name: "wire_transfer", args: { "amount" => 999 }, agent_id: "a")
@@ -20,7 +23,7 @@ require "json"
 require "rbconfig"
 
 module Visiq
-  VERSION = "0.1.0"
+  VERSION = "0.1.1"
 
   # Low-level binding to the compiled core over the C-ABI seam.
   module Core
@@ -86,10 +89,44 @@ module Visiq
 
   module_function
 
+  # Error posture (owner decision 2026-07-15, G001 rescope): a harness-internal
+  # failure (the compiled core cannot load, an FFI error) is routed by
+  # VISIQ_FAIL_MODE — "open" (DEFAULT): return a loud fail-open permit so a
+  # VisIQ packaging/outage bug never disrupts the agent; "closed": raise as
+  # before. Policy outcomes from a successful evaluation are unaffected.
+  def fail_mode
+    raw = ENV["VISIQ_FAIL_MODE"].to_s.strip.downcase
+    %w[open closed].include?(raw) ? raw : "open"
+  end
+
+  # A non-enforced permit decision naming the failure cause — the fail-open
+  # counterpart of the core's decisions, mirrored from the TS runtime.
+  def fail_open_decision(operations, cause)
+    warn "[VisIQ] FAIL-OPEN (core-error): #{cause} — proceeding UNGOVERNED. " \
+         "Set VISIQ_FAIL_MODE=closed to block instead."
+    has_action = operations.include?("action") || operations.include?("delegation")
+    has_retrieval = operations.include?("retrieval")
+    {
+      "decision" => "permit",
+      "allowed" => true,
+      "reason" => "fail-open: #{cause} — proceeding UNGOVERNED (set VISIQ_FAIL_MODE=closed to block instead)",
+      "ruleId" => nil,
+      "ruleCode" => nil,
+      "enforced" => false,
+      "action" => has_action ? { "decision" => "permit", "allowed" => true } : { "decision" => nil, "allowed" => true },
+      "retrieval" => has_retrieval ? { "action" => "allow" } : { "action" => nil }
+    }
+  end
+
   # Evaluate one governed agent event against a rules bundle. Returns the
   # UnifiedDecision hash: {"decision","allowed","action","retrieval"}.
   def decide(event, bundle)
     JSON.parse(Core.evaluate_json(JSON.generate(event), JSON.generate(bundle)))
+  rescue StandardError, Fiddle::DLError => e
+    # Core load / FFI / parse failure — a HARNESS error, never a policy one.
+    raise if fail_mode == "closed"
+
+    fail_open_decision(event["operations"] || [], e.message)
   end
 
   # Gate a tool/action call. Check ["allowed"]; on "mask" apply

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: visiq
 version: !ruby/object:Gem::Version
-  version: 0.1.0
+  version: 0.1.1
 platform: aarch64-linux
 authors:
 - VisIQ Labs Team
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2026-07-08 00:00:00.000000000 Z
+date: 2026-07-30 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: fiddle
@@ -24,10 +24,12 @@ dependencies:
     - - ">="
       - !ruby/object:Gem::Version
         version: '1.0'
-description: ONE compiled Rust core (Path B) that reproduces the shipped TypeScript
-  SDK's decisions, bound to Ruby via a stdlib Fiddle FFI. Fully local; fails closed
-  on malformed input (G001). The engine ships as compiled machine code (closed); the
-  Ruby is thin FFI plumbing only.
+description: VisIQ agent-governance SDK for Ruby — returns a permit, deny, approval_required,
+  redact, escalate, or mask decision for a tool call or retrieval before your application
+  executes it, evaluated in-process by the compiled VisIQ core that every VisIQ SDK
+  shares. Installs with no compiler toolchain on macOS and Linux, x86_64 and arm64,
+  with no Windows gem; malformed input denies, and core-load failures follow VISIQ_FAIL_MODE,
+  which defaults to open.
 email:
 - dev@visiqlabs.com
 executables: []
@@ -65,5 +67,5 @@ requirements: []
 rubygems_version: 3.5.22
 signing_key:
 specification_version: 4
-summary: VisIQ agent-governance SDK — local, in-process policy decisions.
+summary: VisIQ agent-governance SDK for Ruby
 test_files: []