@highflame/policy 2.1.0 → 2.1.2

package/_schemas/overwatch/context.json

@@ -1,7 +1,7 @@
 {
   "service": "overwatch",
-  "version": "2.0.0",
-  "description": "Overwatch (Guardian) IDE security & policy enforcement",
+  "version": "3.0.0",
+  "description": "Overwatch IDE agent security & policy enforcement",
   "actions": [
     {
       "name": "process_prompt",
@@ -47,37 +47,31 @@
           "key": "threat_count",
           "type": "number",
           "required": true,
-          "description": "Total number of threats detected by YARA/Javelin"
+          "description": "Total number of threats detected by the detection engine pipeline"
         },
         {
           "key": "highest_severity",
           "type": "string",
           "required": true,
-          "description": "Highest severity level: critical, high, medium, low"
+          "description": "Highest severity level: critical, high, medium, low, none"
         },
         {
           "key": "threat_categories",
           "type": "array",
           "required": true,
-          "description": "Threat category names from aggregator"
+          "description": "Threat category names from the detection aggregator"
         },
         {
-          "key": "threat_types",
+          "key": "detected_threats",
           "type": "array",
           "required": true,
-          "description": "YARA threat category names"
-        },
-        {
-          "key": "yara_threats",
-          "type": "array",
-          "required": true,
-          "description": "YARA rule names that matched"
+          "description": "Detection rule names that matched (e.g., prompt_injection, jailbreak, credit_card, secret_exposure)"
         },
         {
           "key": "max_threat_severity",
           "type": "number",
           "required": true,
-          "description": "Numeric severity (0-4, where 4=CRITICAL)"
+          "description": "Numeric severity (0=none, 1=low, 2=medium, 3=high, 4=critical)"
         },
         {
           "key": "contains_secrets",
@@ -85,11 +79,53 @@
           "required": true,
           "description": "Whether secrets or credentials were detected"
         },
+        {
+          "key": "secret_types",
+          "type": "array",
+          "required": false,
+          "description": "Specific secret types found: aws_access_key, github_token, ssh_private_key, api_key, etc."
+        },
+        {
+          "key": "secret_count",
+          "type": "number",
+          "required": false,
+          "description": "Number of distinct secrets detected"
+        },
+        {
+          "key": "pii_detected",
+          "type": "boolean",
+          "required": false,
+          "description": "Whether any PII patterns were matched"
+        },
+        {
+          "key": "pii_types",
+          "type": "array",
+          "required": false,
+          "description": "Specific PII types found: ssn, credit_card, email, phone, medical_record, etc."
+        },
+        {
+          "key": "pii_count",
+          "type": "number",
+          "required": false,
+          "description": "Number of PII pattern matches"
+        },
+        {
+          "key": "contains_invisible_chars",
+          "type": "boolean",
+          "required": false,
+          "description": "Whether invisible Unicode characters (zero-width, bidi overrides, tag chars) were detected"
+        },
+        {
+          "key": "invisible_chars_score",
+          "type": "number",
+          "required": false,
+          "description": "Invisible character attack severity score (0-100)"
+        },
         {
           "key": "prompt_text",
           "type": "string",
           "required": false,
-          "description": "Same as content (legacy field)"
+          "description": "Same as content (backward compatibility)"
         },
         {
           "key": "response_content",
@@ -137,25 +173,25 @@
           "key": "pii_confidence",
           "type": "number",
           "required": true,
-          "description": "PII detection classifier confidence (0-100)"
+          "description": "PII detection ML classifier confidence (0-100)"
         },
         {
           "key": "injection_confidence",
           "type": "number",
           "required": true,
-          "description": "Prompt injection classifier confidence (0-100)"
+          "description": "Prompt injection ML classifier confidence (0-100)"
         },
         {
           "key": "jailbreak_confidence",
           "type": "number",
           "required": true,
-          "description": "Jailbreak detection classifier confidence (0-100)"
+          "description": "Jailbreak detection ML classifier confidence (0-100)"
         },
         {
           "key": "indirect_injection_score",
           "type": "number",
           "required": true,
-          "description": "Indirect prompt injection risk score (0-100)"
+          "description": "Indirect prompt injection risk score (0-100) — injection via tool outputs or retrieved content"
         }
       ]
     },
@@ -167,7 +203,7 @@
           "key": "content",
           "type": "string",
           "required": true,
-          "description": "Raw content being scanned (e.g., shell command)"
+          "description": "Raw content being scanned (e.g., shell command, tool arguments)"
         },
         {
           "key": "source",
@@ -227,49 +263,85 @@
           "key": "threat_count",
           "type": "number",
           "required": false,
-          "description": "Total threats detected (if scanning ran)"
+          "description": "Total threats detected by the detection engine pipeline"
         },
         {
           "key": "highest_severity",
           "type": "string",
           "required": false,
-          "description": "Highest severity (if scanning ran)"
+          "description": "Highest severity level: critical, high, medium, low, none"
         },
         {
           "key": "threat_categories",
           "type": "array",
           "required": false,
-          "description": "Threat category names (if scanning ran)"
+          "description": "Threat category names from the detection aggregator"
         },
         {
-          "key": "threat_types",
+          "key": "detected_threats",
           "type": "array",
           "required": false,
-          "description": "YARA threat categories (if scanning ran)"
+          "description": "Detection rule names that matched"
         },
         {
-          "key": "yara_threats",
+          "key": "max_threat_severity",
+          "type": "number",
+          "required": false,
+          "description": "Numeric severity (0=none, 1=low, 2=medium, 3=high, 4=critical)"
+        },
+        {
+          "key": "contains_secrets",
+          "type": "boolean",
+          "required": false,
+          "description": "Whether secrets or credentials were detected"
+        },
+        {
+          "key": "secret_types",
           "type": "array",
           "required": false,
-          "description": "YARA rule names (if scanning ran)"
+          "description": "Specific secret types found"
         },
         {
-          "key": "max_threat_severity",
+          "key": "secret_count",
           "type": "number",
           "required": false,
-          "description": "Numeric severity 0-4 (if scanning ran)"
+          "description": "Number of distinct secrets detected"
         },
         {
-          "key": "contains_secrets",
+          "key": "pii_detected",
           "type": "boolean",
           "required": false,
-          "description": "Whether secrets detected (if scanning ran)"
+          "description": "Whether any PII patterns were matched"
+        },
+        {
+          "key": "pii_types",
+          "type": "array",
+          "required": false,
+          "description": "Specific PII types found"
+        },
+        {
+          "key": "pii_count",
+          "type": "number",
+          "required": false,
+          "description": "Number of PII pattern matches"
+        },
+        {
+          "key": "contains_invisible_chars",
+          "type": "boolean",
+          "required": false,
+          "description": "Whether invisible Unicode characters were detected"
+        },
+        {
+          "key": "invisible_chars_score",
+          "type": "number",
+          "required": false,
+          "description": "Invisible character attack severity score (0-100)"
         },
         {
           "key": "response_content",
           "type": "string",
           "required": false,
-          "description": "Response content (if available)"
+          "description": "Response content from AI (if available)"
         },
         {
           "key": "violence_score",
@@ -311,43 +383,115 @@
           "key": "pii_confidence",
           "type": "number",
           "required": false,
-          "description": "PII detection classifier confidence (0-100)"
+          "description": "PII detection ML classifier confidence (0-100)"
         },
         {
           "key": "injection_confidence",
           "type": "number",
           "required": false,
-          "description": "Prompt injection classifier confidence (0-100)"
+          "description": "Prompt injection ML classifier confidence (0-100)"
         },
         {
           "key": "jailbreak_confidence",
           "type": "number",
           "required": false,
-          "description": "Jailbreak detection classifier confidence (0-100)"
+          "description": "Jailbreak detection ML classifier confidence (0-100)"
         },
         {
           "key": "tool_poisoning_score",
           "type": "number",
           "required": false,
-          "description": "Tool description manipulation risk score (0-100)"
+          "description": "Tool description manipulation risk score (0-100) — hidden instructions in tool descriptions or arguments"
+        },
+        {
+          "key": "tool_poisoning_detected",
+          "type": "boolean",
+          "required": false,
+          "description": "Whether tool poisoning patterns were explicitly detected"
         },
         {
           "key": "rug_pull_score",
           "type": "number",
           "required": false,
-          "description": "Tool behavior mismatch risk score (0-100)"
+          "description": "Tool behavioral drift score (0-100) — deviation from established tool behavior patterns"
+        },
+        {
+          "key": "rug_pull_detected",
+          "type": "boolean",
+          "required": false,
+          "description": "Whether a rug pull attack was explicitly detected"
         },
         {
           "key": "indirect_injection_score",
           "type": "number",
           "required": false,
-          "description": "Indirect prompt injection risk score (0-100)"
+          "description": "Indirect prompt injection risk score (0-100) — injection via tool outputs"
+        },
+        {
+          "key": "tool_risk_score",
+          "type": "number",
+          "required": false,
+          "description": "Computed tool risk score (0-100) combining tool type, arguments, and context"
+        },
+        {
+          "key": "tool_category",
+          "type": "string",
+          "required": false,
+          "description": "Tool risk classification: safe, sensitive, dangerous"
+        },
+        {
+          "key": "tool_is_sensitive",
+          "type": "boolean",
+          "required": false,
+          "description": "Whether the tool is classified as sensitive (shell, file write, network)"
+        },
+        {
+          "key": "tool_is_builtin",
+          "type": "boolean",
+          "required": false,
+          "description": "Whether the tool is a built-in IDE tool (true) or MCP tool (false)"
+        },
+        {
+          "key": "loop_detected",
+          "type": "boolean",
+          "required": false,
+          "description": "Whether a consecutive same-tool call loop was detected"
+        },
+        {
+          "key": "loop_count",
+          "type": "number",
+          "required": false,
+          "description": "Number of consecutive calls to the same tool"
+        },
+        {
+          "key": "loop_tool",
+          "type": "string",
+          "required": false,
+          "description": "The tool name involved in the detected loop"
+        },
+        {
+          "key": "suspicious_pattern",
+          "type": "boolean",
+          "required": false,
+          "description": "Whether a suspicious action sequence was detected (exfiltration, theft, destructive)"
+        },
+        {
+          "key": "pattern_type",
+          "type": "string",
+          "required": false,
+          "description": "Type of suspicious pattern: data_exfiltration, secret_exfiltration, credential_theft, destructive_sequence"
+        },
+        {
+          "key": "sequence_risk",
+          "type": "number",
+          "required": false,
+          "description": "Behavioral sequence risk score (0-100)"
         },
         {
           "key": "mcp_server_verified",
           "type": "boolean",
           "required": false,
-          "description": "Whether MCP server is from a verified registry"
+          "description": "Whether the MCP server is from a verified registry"
         }
       ]
     },
@@ -359,13 +503,13 @@
           "key": "content",
           "type": "string",
           "required": false,
-          "description": "Raw content being scanned (if available)"
+          "description": "Server configuration content (if available)"
         },
         {
           "key": "source",
           "type": "string",
           "required": true,
-          "description": "IDE source"
+          "description": "IDE source: cursor, claudecode, github_copilot"
         },
         {
           "key": "event",
@@ -389,49 +533,79 @@
           "key": "threat_count",
           "type": "number",
           "required": false,
-          "description": "Total threats detected (if scanning ran)"
+          "description": "Total threats detected by the detection engine pipeline"
         },
         {
           "key": "highest_severity",
           "type": "string",
           "required": false,
-          "description": "Highest severity level (if scanning ran)"
+          "description": "Highest severity level: critical, high, medium, low, none"
         },
         {
           "key": "threat_categories",
           "type": "array",
           "required": false,
-          "description": "Threat category names (if scanning ran)"
+          "description": "Threat category names from the detection aggregator"
         },
         {
           "key": "max_threat_severity",
           "type": "number",
           "required": false,
-          "description": "Numeric severity 0-4 (if scanning ran)"
+          "description": "Numeric severity (0=none, 1=low, 2=medium, 3=high, 4=critical)"
+        },
+        {
+          "key": "contains_invisible_chars",
+          "type": "boolean",
+          "required": false,
+          "description": "Whether invisible Unicode characters were detected in server data"
         },
         {
           "key": "tool_poisoning_score",
           "type": "number",
           "required": false,
-          "description": "Tool description manipulation risk score (0-100)"
+          "description": "Tool description manipulation risk score (0-100) — poisoned tool descriptions in server"
+        },
+        {
+          "key": "tool_poisoning_detected",
+          "type": "boolean",
+          "required": false,
+          "description": "Whether tool poisoning patterns were explicitly detected"
         },
         {
           "key": "rug_pull_score",
           "type": "number",
           "required": false,
-          "description": "Tool behavior mismatch risk score (0-100)"
+          "description": "Server behavioral drift score (0-100) — behavior change after approval"
+        },
+        {
+          "key": "rug_pull_detected",
+          "type": "boolean",
+          "required": false,
+          "description": "Whether a rug pull attack was explicitly detected"
         },
         {
           "key": "indirect_injection_score",
           "type": "number",
           "required": false,
-          "description": "Indirect prompt injection risk score (0-100)"
+          "description": "Indirect injection risk score (0-100) — injection payloads in server responses"
         },
         {
           "key": "mcp_server_verified",
           "type": "boolean",
           "required": false,
-          "description": "Whether MCP server is from a verified registry"
+          "description": "Whether the MCP server is from a verified registry"
+        },
+        {
+          "key": "mcp_config_risk",
+          "type": "boolean",
+          "required": false,
+          "description": "Whether risky server configuration was detected (inline code exec, mixed transports)"
+        },
+        {
+          "key": "mcp_risk_score",
+          "type": "number",
+          "required": false,
+          "description": "MCP configuration risk severity score (0-100)"
         }
       ]
     },
@@ -449,7 +623,7 @@
           "key": "source",
           "type": "string",
           "required": true,
-          "description": "IDE source"
+          "description": "IDE source: cursor, claudecode, github_copilot"
         },
         {
           "key": "event",
@@ -485,31 +659,67 @@
           "key": "threat_count",
           "type": "number",
           "required": false,
-          "description": "Total threats detected (if scanning ran)"
+          "description": "Total threats detected by the detection engine pipeline"
         },
         {
           "key": "highest_severity",
           "type": "string",
           "required": false,
-          "description": "Highest severity level (if scanning ran)"
+          "description": "Highest severity level: critical, high, medium, low, none"
         },
         {
           "key": "threat_categories",
           "type": "array",
           "required": false,
-          "description": "Threat categories (if scanning ran)"
+          "description": "Threat category names from the detection aggregator"
+        },
+        {
+          "key": "detected_threats",
+          "type": "array",
+          "required": false,
+          "description": "Detection rule names that matched"
         },
         {
           "key": "max_threat_severity",
           "type": "number",
           "required": false,
-          "description": "Numeric severity 0-4 (if scanning ran)"
+          "description": "Numeric severity (0=none, 1=low, 2=medium, 3=high, 4=critical)"
         },
         {
           "key": "contains_secrets",
           "type": "boolean",
           "required": false,
-          "description": "Whether secrets detected (if scanning ran)"
+          "description": "Whether secrets or credentials were detected in file content"
+        },
+        {
+          "key": "secret_types",
+          "type": "array",
+          "required": false,
+          "description": "Specific secret types found in file"
+        },
+        {
+          "key": "secret_count",
+          "type": "number",
+          "required": false,
+          "description": "Number of distinct secrets detected in file"
+        },
+        {
+          "key": "pii_detected",
+          "type": "boolean",
+          "required": false,
+          "description": "Whether any PII patterns were matched in file content"
+        },
+        {
+          "key": "pii_types",
+          "type": "array",
+          "required": false,
+          "description": "Specific PII types found in file"
+        },
+        {
+          "key": "pii_count",
+          "type": "number",
+          "required": false,
+          "description": "Number of PII pattern matches in file"
         }
       ]
     },
@@ -527,7 +737,7 @@
           "key": "source",
           "type": "string",
           "required": true,
-          "description": "IDE source"
+          "description": "IDE source: cursor, claudecode, github_copilot"
         },
         {
           "key": "event",
@@ -563,31 +773,73 @@
           "key": "threat_count",
           "type": "number",
           "required": false,
-          "description": "Total threats detected (if scanning ran)"
+          "description": "Total threats detected by the detection engine pipeline"
         },
         {
           "key": "highest_severity",
           "type": "string",
           "required": false,
-          "description": "Highest severity level (if scanning ran)"
+          "description": "Highest severity level: critical, high, medium, low, none"
         },
         {
           "key": "threat_categories",
           "type": "array",
           "required": false,
-          "description": "Threat categories (if scanning ran)"
+          "description": "Threat category names from the detection aggregator"
+        },
+        {
+          "key": "detected_threats",
+          "type": "array",
+          "required": false,
+          "description": "Detection rule names that matched"
         },
         {
           "key": "max_threat_severity",
           "type": "number",
           "required": false,
-          "description": "Numeric severity 0-4 (if scanning ran)"
+          "description": "Numeric severity (0=none, 1=low, 2=medium, 3=high, 4=critical)"
         },
         {
           "key": "contains_secrets",
           "type": "boolean",
           "required": false,
-          "description": "Whether secrets detected (if scanning ran)"
+          "description": "Whether secrets or credentials were detected in content being written"
+        },
+        {
+          "key": "secret_types",
+          "type": "array",
+          "required": false,
+          "description": "Specific secret types found"
+        },
+        {
+          "key": "secret_count",
+          "type": "number",
+          "required": false,
+          "description": "Number of distinct secrets detected"
+        },
+        {
+          "key": "pii_detected",
+          "type": "boolean",
+          "required": false,
+          "description": "Whether any PII patterns were matched in content being written"
+        },
+        {
+          "key": "pii_types",
+          "type": "array",
+          "required": false,
+          "description": "Specific PII types found"
+        },
+        {
+          "key": "pii_count",
+          "type": "number",
+          "required": false,
+          "description": "Number of PII pattern matches"
+        },
+        {
+          "key": "contains_invisible_chars",
+          "type": "boolean",
+          "required": false,
+          "description": "Whether invisible Unicode characters were detected in content being written"
         }
       ]
     }