visiq 0.1.0-x86_64-linux → 0.1.1-x86_64-linux

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 002da0e84b12a9803aa799a69cf53d9d31f354b699ceba941ad81a561d0ed936
-  data.tar.gz: acc2f808fe222469b2248ff7755f57bf130bf4ae95444093116dfc700a13fecf
+  metadata.gz: 59fdf18306fae52394f76fef053f6fa43101b2bb35fb0d600d365c0f417c96bc
+  data.tar.gz: 87d2048ad63900902379436fb5e7fd1e7e9ef4d9b007b5c1c1dcb42751048a16
 SHA512:
-  metadata.gz: b496fbf49ca2f4eb7086e4363e02de85edc96a09af7f5e1cdd3fd6e69bb0534b4252bc30a4eb974a2f36b16903b00b654c15eaa77920aca2760ae2843056be86
-  data.tar.gz: 1f6d7560dabe0489a5a6a7f3c2c389a38406fbb22e82fc80559d64cf6e5e0f0c83f813f2b300423871cc9df1dee13ec43d8ecc9a81a7d7f49555525c2683df32
+  metadata.gz: 30fc08b2017c157cea8dbccefcb58b1a1d157c40377fe8ff0304f200502d5b1f3b215b66ddedfe191707ca47abb88e9553848fd1b417a07879736dd6481beac9
+  data.tar.gz: 3022c4da2ae3f40aa0b320e10ed3c6dcf1f07f49345b86f24ca191616fcf6829a736761d256a679bcfdc5202ddae3b832ad03adaff0a798e9e605525975379c9

data/README.md

@@ -1,12 +1,17 @@
 # visiq — VisIQ agent-governance SDK for Ruby
 
-Local, in-process governance decisions for AI agents. ONE compiled Rust core
-(Path B) makes the **same** decisions as the shipped TypeScript SDK
-(`@visiq/harness`), bound to Ruby through the stdlib `Fiddle` FFI. The engine
+Returns a `permit`, `deny`, `approval_required`, `redact`, `escalate`, or `mask`
+decision for a tool call or retrieval **before your application executes it** —
+your code acts on the verdict; this SDK does not block for you. Decisions are made
+in-process by the compiled VisIQ core that every VisIQ SDK shares (the same engine
+behind `@visiq/harness`), bound to Ruby through the stdlib `Fiddle` FFI. The engine
 ships as **compiled machine code** (closed); the Ruby is thin FFI plumbing only.
 
 - **Local & fast** — every decision is in-process, no network.
-- **Fails closed (G001)** — malformed input, or a core that can't load, denies.
+- **Fail-open by default (G001 rescope, owner 2026-07-15)** — a harness-internal
+  failure (the core can't load, an FFI error) returns a loud fail-open permit;
+  set `VISIQ_FAIL_MODE=closed` to block instead. Malformed input and explicit
+  policy denials always block.
 - **Cross-language parity** — reproduces the exact decisions of the TS/Python/…
   SDKs from the same core, verified against a shared corpus.
 

data/lib/visiq.rb

@@ -2,13 +2,16 @@
 
 # VisIQ agent-governance SDK (Ruby) — local, in-process policy decisions.
 #
-# ONE compiled Rust core (Path B) makes the SAME decisions as the shipped
-# TypeScript SDK (`@visiq/harness`). This gem is a thin binding over the core's
+# Governance evaluation has ONE source of truth — the compiled Rust core — and
+# every VisIQ SDK evaluates through it rather than reimplementing the rules, which
+# is what keeps decisions identical across languages; a shared conformance corpus
+# is what enforces that. This gem is a thin binding over the core's
 # language-neutral C-ABI seam (`visiq_evaluate`/`visiq_free`) via Ruby's stdlib
 # `Fiddle` — zero runtime gem dependencies. The engine is compiled machine code;
 # the gem ships the shared library CLOSED (the Ruby is only FFI plumbing, no
-# policy). Every decision is local (no network) and fails closed on malformed
-# input (G001).
+# policy). Every decision is local (no network); a harness-internal failure is
+# routed by VISIQ_FAIL_MODE (default "open" — see #fail_mode below), while
+# malformed input and explicit policy denials always block (G001 rescope).
 #
 #   require "visiq"
 #   d = Visiq.gate_action(bundle, tool_name: "wire_transfer", args: { "amount" => 999 }, agent_id: "a")
@@ -20,7 +23,7 @@ require "json"
 require "rbconfig"
 
 module Visiq
-  VERSION = "0.1.0"
+  VERSION = "0.1.1"
 
   # Low-level binding to the compiled core over the C-ABI seam.
   module Core
@@ -86,10 +89,44 @@ module Visiq
 
   module_function
 
+  # Error posture (owner decision 2026-07-15, G001 rescope): a harness-internal
+  # failure (the compiled core cannot load, an FFI error) is routed by
+  # VISIQ_FAIL_MODE — "open" (DEFAULT): return a loud fail-open permit so a
+  # VisIQ packaging/outage bug never disrupts the agent; "closed": raise as
+  # before. Policy outcomes from a successful evaluation are unaffected.
+  def fail_mode
+    raw = ENV["VISIQ_FAIL_MODE"].to_s.strip.downcase
+    %w[open closed].include?(raw) ? raw : "open"
+  end
+
+  # A non-enforced permit decision naming the failure cause — the fail-open
+  # counterpart of the core's decisions, mirrored from the TS runtime.
+  def fail_open_decision(operations, cause)
+    warn "[VisIQ] FAIL-OPEN (core-error): #{cause} — proceeding UNGOVERNED. " \
+         "Set VISIQ_FAIL_MODE=closed to block instead."
+    has_action = operations.include?("action") || operations.include?("delegation")
+    has_retrieval = operations.include?("retrieval")
+    {
+      "decision" => "permit",
+      "allowed" => true,
+      "reason" => "fail-open: #{cause} — proceeding UNGOVERNED (set VISIQ_FAIL_MODE=closed to block instead)",
+      "ruleId" => nil,
+      "ruleCode" => nil,
+      "enforced" => false,
+      "action" => has_action ? { "decision" => "permit", "allowed" => true } : { "decision" => nil, "allowed" => true },
+      "retrieval" => has_retrieval ? { "action" => "allow" } : { "action" => nil }
+    }
+  end
+
   # Evaluate one governed agent event against a rules bundle. Returns the
   # UnifiedDecision hash: {"decision","allowed","action","retrieval"}.
   def decide(event, bundle)
     JSON.parse(Core.evaluate_json(JSON.generate(event), JSON.generate(bundle)))
+  rescue StandardError, Fiddle::DLError => e
+    # Core load / FFI / parse failure — a HARNESS error, never a policy one.
+    raise if fail_mode == "closed"
+
+    fail_open_decision(event["operations"] || [], e.message)
   end
 
   # Gate a tool/action call. Check ["allowed"]; on "mask" apply

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: visiq
 version: !ruby/object:Gem::Version
-  version: 0.1.0
+  version: 0.1.1
 platform: x86_64-linux
 authors:
 - VisIQ Labs Team
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2026-07-08 00:00:00.000000000 Z
+date: 2026-07-30 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: fiddle
@@ -24,10 +24,12 @@ dependencies:
     - - ">="
       - !ruby/object:Gem::Version
         version: '1.0'
-description: ONE compiled Rust core (Path B) that reproduces the shipped TypeScript
-  SDK's decisions, bound to Ruby via a stdlib Fiddle FFI. Fully local; fails closed
-  on malformed input (G001). The engine ships as compiled machine code (closed); the
-  Ruby is thin FFI plumbing only.
+description: VisIQ agent-governance SDK for Ruby — returns a permit, deny, approval_required,
+  redact, escalate, or mask decision for a tool call or retrieval before your application
+  executes it, evaluated in-process by the compiled VisIQ core that every VisIQ SDK
+  shares. Installs with no compiler toolchain on macOS and Linux, x86_64 and arm64,
+  with no Windows gem; malformed input denies, and core-load failures follow VISIQ_FAIL_MODE,
+  which defaults to open.
 email:
 - dev@visiqlabs.com
 executables: []
@@ -65,5 +67,5 @@ requirements: []
 rubygems_version: 3.5.22
 signing_key:
 specification_version: 4
-summary: VisIQ agent-governance SDK — local, in-process policy decisions.
+summary: VisIQ agent-governance SDK for Ruby
 test_files: []