visiq 0.1.0-aarch64-linux → 0.1.2-aarch64-linux

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: ff880d1b8f59c8f8af6a81d49511545f8addb24612caf6b208336134626eae65
-  data.tar.gz: 69a3eca3e9b046a707496818c75eea06682499ce1a5bb8fac75bdfc69fdee170
+  metadata.gz: 9e978c98b7d7abd26c143537d76eaa6bce5637d1180aeed084b0f31cc262ed02
+  data.tar.gz: 36a5bb504f076b8a075475917a0e153e34416ea42d6d294cd9035c60fb5f3a58
 SHA512:
-  metadata.gz: 5a046a1c32d4de7ae66b7c320d5a221458a868e10e31e3fc4b5b6f6d47e209cba1ab6d97dab5e116dc700a7f97c039c00b6ebaef3d043da5795d659e5f12679e
-  data.tar.gz: 9c6dbe1b3fb49b4e4c94d52f6978972ca34512236c60a2712456ff7621ba078c8256d38eded40c7b11e53670387a1b663391c8f34fb23bf2f5a4357858a9d088
+  metadata.gz: 7485991f5b8a6d99879bd1b80023cfa0595c2f6af7ccf636f0a00c522ba7a9287a3c3bb89490fbf1c2641c47aa81598f26ed190cf1d9a7af97bfdc1edbe553fc
+  data.tar.gz: 2a22cf69137b715a833a05d7215e8ad853594b448287bb9ef59f88f1d7881ac3d51dbf9b24b0ed9590821612a2e35d14b8bb82fff88bf058adf4b96c5ac16796

data/README.md

@@ -1,12 +1,17 @@
 # visiq — VisIQ agent-governance SDK for Ruby
 
-Local, in-process governance decisions for AI agents. ONE compiled Rust core
-(Path B) makes the **same** decisions as the shipped TypeScript SDK
-(`@visiq/harness`), bound to Ruby through the stdlib `Fiddle` FFI. The engine
+Returns a `permit`, `deny`, `approval_required`, `redact`, `escalate`, or `mask`
+decision for a tool call or retrieval **before your application executes it** —
+your code acts on the verdict; this SDK does not block for you. Decisions are made
+in-process by the compiled VisIQ core that every VisIQ SDK shares (the same engine
+behind `@visiq/harness`), bound to Ruby through the stdlib `Fiddle` FFI. The engine
 ships as **compiled machine code** (closed); the Ruby is thin FFI plumbing only.
 
 - **Local & fast** — every decision is in-process, no network.
-- **Fails closed (G001)** — malformed input, or a core that can't load, denies.
+- **Fail-open by default (G001 rescope, owner 2026-07-15)** — a harness-internal
+  failure (the core can't load, an FFI error) returns a loud fail-open permit;
+  set `VISIQ_FAIL_MODE=closed` to block instead. Malformed input and explicit
+  policy denials always block.
 - **Cross-language parity** — reproduces the exact decisions of the TS/Python/…
   SDKs from the same core, verified against a shared corpus.
 

data/lib/visiq.rb

@@ -2,13 +2,16 @@
 
 # VisIQ agent-governance SDK (Ruby) — local, in-process policy decisions.
 #
-# ONE compiled Rust core (Path B) makes the SAME decisions as the shipped
-# TypeScript SDK (`@visiq/harness`). This gem is a thin binding over the core's
+# Governance evaluation has ONE source of truth — the compiled Rust core — and
+# every VisIQ SDK evaluates through it rather than reimplementing the rules, which
+# is what keeps decisions identical across languages; a shared conformance corpus
+# is what enforces that. This gem is a thin binding over the core's
 # language-neutral C-ABI seam (`visiq_evaluate`/`visiq_free`) via Ruby's stdlib
 # `Fiddle` — zero runtime gem dependencies. The engine is compiled machine code;
 # the gem ships the shared library CLOSED (the Ruby is only FFI plumbing, no
-# policy). Every decision is local (no network) and fails closed on malformed
-# input (G001).
+# policy). Every decision is local (no network); a harness-internal failure is
+# routed by VISIQ_FAIL_MODE (default "open" — see #fail_mode below), while
+# malformed input and explicit policy denials always block (G001 rescope).
 #
 #   require "visiq"
 #   d = Visiq.gate_action(bundle, tool_name: "wire_transfer", args: { "amount" => 999 }, agent_id: "a")
@@ -20,7 +23,27 @@ require "json"
 require "rbconfig"
 
 module Visiq
-  VERSION = "0.1.0"
+  # 0.1.1 -> 0.1.2 republishes the SAME Ruby source against a REBUILT core.
+  #
+  # WHY A BUMP IS THE FIX. `sdk-published-freshness.yml` replays the current oracle
+  # corpus through each PUBLISHED artifact's own bundled core. The gem at 0.1.1
+  # reproduces 133 of 135 vectors: it predates the source-3 named-detector work, so
+  # its core never fills `write.data_categories`, a customer rule of the form
+  # `mask { "pii" in input.normalized.write.data_categories }` abstains, and the
+  # no-coverage floor denies the write instead of masking it. Fail-closed, but wrong
+  # — a customer who asked for redaction gets a hard denial (D-WRITE-DENY).
+  #
+  # The Ruby source needs no change; only a REBUILD does, and `rubygems-publish.yml`
+  # compiles the C-ABI core from current source on every publish. Its version guard
+  # reads the gemspec (which reads this constant), so an unchanged version is a
+  # whole-pipeline no-op — which is exactly why the lane has been red since
+  # 2026-08-01 with a landed fix that could never ship. Bumping is the trigger.
+  #
+  # NOT COUPLED TO THE PYTHON HOLD. visiq-core-rs stays pinned at 0.2.4 for the
+  # Semantic-Kernel adapter defect (see its Cargo.toml). That hold gates the PyPI
+  # wheel, which ships the core's own version; Ruby and Java version independently
+  # and are not implicated. Bumping here does not resume the Python release.
+  VERSION = "0.1.2"
 
   # Low-level binding to the compiled core over the C-ABI seam.
   module Core
@@ -86,10 +109,44 @@ module Visiq
 
   module_function
 
+  # Error posture (owner decision 2026-07-15, G001 rescope): a harness-internal
+  # failure (the compiled core cannot load, an FFI error) is routed by
+  # VISIQ_FAIL_MODE — "open" (DEFAULT): return a loud fail-open permit so a
+  # VisIQ packaging/outage bug never disrupts the agent; "closed": raise as
+  # before. Policy outcomes from a successful evaluation are unaffected.
+  def fail_mode
+    raw = ENV["VISIQ_FAIL_MODE"].to_s.strip.downcase
+    %w[open closed].include?(raw) ? raw : "open"
+  end
+
+  # A non-enforced permit decision naming the failure cause — the fail-open
+  # counterpart of the core's decisions, mirrored from the TS runtime.
+  def fail_open_decision(operations, cause)
+    warn "[VisIQ] FAIL-OPEN (core-error): #{cause} — proceeding UNGOVERNED. " \
+         "Set VISIQ_FAIL_MODE=closed to block instead."
+    has_action = operations.include?("action") || operations.include?("delegation")
+    has_retrieval = operations.include?("retrieval")
+    {
+      "decision" => "permit",
+      "allowed" => true,
+      "reason" => "fail-open: #{cause} — proceeding UNGOVERNED (set VISIQ_FAIL_MODE=closed to block instead)",
+      "ruleId" => nil,
+      "ruleCode" => nil,
+      "enforced" => false,
+      "action" => has_action ? { "decision" => "permit", "allowed" => true } : { "decision" => nil, "allowed" => true },
+      "retrieval" => has_retrieval ? { "action" => "allow" } : { "action" => nil }
+    }
+  end
+
   # Evaluate one governed agent event against a rules bundle. Returns the
   # UnifiedDecision hash: {"decision","allowed","action","retrieval"}.
   def decide(event, bundle)
     JSON.parse(Core.evaluate_json(JSON.generate(event), JSON.generate(bundle)))
+  rescue StandardError, Fiddle::DLError => e
+    # Core load / FFI / parse failure — a HARNESS error, never a policy one.
+    raise if fail_mode == "closed"
+
+    fail_open_decision(event["operations"] || [], e.message)
   end
 
   # Gate a tool/action call. Check ["allowed"]; on "mask" apply

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: visiq
 version: !ruby/object:Gem::Version
-  version: 0.1.0
+  version: 0.1.2
 platform: aarch64-linux
 authors:
 - VisIQ Labs Team
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2026-07-08 00:00:00.000000000 Z
+date: 2026-08-11 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: fiddle
@@ -24,10 +24,12 @@ dependencies:
     - - ">="
       - !ruby/object:Gem::Version
         version: '1.0'
-description: ONE compiled Rust core (Path B) that reproduces the shipped TypeScript
-  SDK's decisions, bound to Ruby via a stdlib Fiddle FFI. Fully local; fails closed
-  on malformed input (G001). The engine ships as compiled machine code (closed); the
-  Ruby is thin FFI plumbing only.
+description: VisIQ agent-governance SDK for Ruby — returns a permit, deny, approval_required,
+  redact, escalate, or mask decision for a tool call or retrieval before your application
+  executes it, evaluated in-process by the compiled VisIQ core that every VisIQ SDK
+  shares. Installs with no compiler toolchain on macOS and Linux, x86_64 and arm64,
+  with no Windows gem; malformed input denies, and core-load failures follow VISIQ_FAIL_MODE,
+  which defaults to open.
 email:
 - dev@visiqlabs.com
 executables: []
@@ -65,5 +67,5 @@ requirements: []
 rubygems_version: 3.5.22
 signing_key:
 specification_version: 4
-summary: VisIQ agent-governance SDK — local, in-process policy decisions.
+summary: VisIQ agent-governance SDK for Ruby
 test_files: []