@highflame/policy 2.1.3 → 2.1.5

package/_schemas/sentry/context.json

@@ -0,0 +1,1165 @@
+{
+  "service": "sentry",
+  "version": "1.0.0",
+  "description": "Sentry browser security — monitors AI chat interactions and enforces data-protection, content-safety, and compliance policies",
+  "actions": [
+    {
+      "name": "send_message",
+      "description": "User sends a message (prompt) to an AI chat service via the browser",
+      "context_attributes": [
+        {
+          "key": "content",
+          "type": "string",
+          "required": true,
+          "description": "Raw message content being sent to the AI service"
+        },
+        {
+          "key": "source",
+          "type": "string",
+          "required": true,
+          "description": "Browser extension identifier (always 'sentry')"
+        },
+        {
+          "key": "event",
+          "type": "string",
+          "required": true,
+          "description": "Event type (always 'send_message')"
+        },
+        {
+          "key": "user_email",
+          "type": "string",
+          "required": true,
+          "description": "User identifier (SSO/OAuth verified)"
+        },
+        {
+          "key": "target_app",
+          "type": "string",
+          "required": true,
+          "description": "AI service being used: chatgpt, gemini, claude, copilot, custom"
+        },
+        {
+          "key": "target_url",
+          "type": "string",
+          "required": false,
+          "description": "Full URL of the AI chat service"
+        },
+        {
+          "key": "threat_count",
+          "type": "number",
+          "required": true,
+          "description": "Total number of threats detected by Shield detection pipeline"
+        },
+        {
+          "key": "highest_severity",
+          "type": "string",
+          "required": true,
+          "description": "Highest severity level: critical, high, medium, low, none"
+        },
+        {
+          "key": "threat_categories",
+          "type": "array",
+          "required": true,
+          "description": "Threat category names from the detection aggregator"
+        },
+        {
+          "key": "detected_threats",
+          "type": "array",
+          "required": true,
+          "description": "Detection rule names that matched (e.g., prompt_injection, credit_card, secret_exposure)"
+        },
+        {
+          "key": "max_threat_severity",
+          "type": "number",
+          "required": true,
+          "description": "Numeric severity (0=none, 1=low, 2=medium, 3=high, 4=critical)"
+        },
+        {
+          "key": "contains_secrets",
+          "type": "boolean",
+          "required": true,
+          "description": "Whether secrets or credentials were detected in the message"
+        },
+        {
+          "key": "secret_types",
+          "type": "array",
+          "required": false,
+          "description": "Specific secret types: aws_access_key, aws_secret_key, github_token, github_fine_grained, slack_token, gcp_service_account, gcp_api_key, azure_connection_string, private_key, jwt_token, generic_api_key, stripe_key, openai_key, anthropic_key"
+        },
+        {
+          "key": "secret_count",
+          "type": "number",
+          "required": false,
+          "description": "Number of distinct secrets detected"
+        },
+        {
+          "key": "pii_detected",
+          "type": "boolean",
+          "required": false,
+          "description": "Whether any PII patterns were matched"
+        },
+        {
+          "key": "pii_types",
+          "type": "array",
+          "required": false,
+          "description": "Specific PII types: ssn, credit_card, email, phone_us, ip_address, date_of_birth, passport, iban, aws_key, api_key_generic"
+        },
+        {
+          "key": "pii_count",
+          "type": "number",
+          "required": false,
+          "description": "Number of PII pattern matches"
+        },
+        {
+          "key": "pii_confidence",
+          "type": "number",
+          "required": false,
+          "description": "PII detection confidence (0-100). Fixed 80 when regex PII detected, else 0"
+        },
+        {
+          "key": "violence_score",
+          "type": "number",
+          "required": true,
+          "description": "Violence content detection score (0-100, from ToxicityDetector)"
+        },
+        {
+          "key": "weapons_score",
+          "type": "number",
+          "required": true,
+          "description": "Weapons content detection score (0-100)"
+        },
+        {
+          "key": "hate_speech_score",
+          "type": "number",
+          "required": true,
+          "description": "Hate speech detection score (0-100)"
+        },
+        {
+          "key": "crime_score",
+          "type": "number",
+          "required": true,
+          "description": "Criminal content detection score (0-100)"
+        },
+        {
+          "key": "sexual_score",
+          "type": "number",
+          "required": true,
+          "description": "Sexual content detection score (0-100)"
+        },
+        {
+          "key": "profanity_score",
+          "type": "number",
+          "required": true,
+          "description": "Profanity detection score (0-100)"
+        },
+        {
+          "key": "injection_score",
+          "type": "number",
+          "required": true,
+          "description": "Prompt injection score (0-100, max of InjectionDetector + DeepContextDetector)"
+        },
+        {
+          "key": "jailbreak_score",
+          "type": "number",
+          "required": true,
+          "description": "Jailbreak detection score (0-100, max of JailbreakDetector + DeepContextDetector)"
+        },
+        {
+          "key": "content_topics",
+          "type": "array",
+          "required": false,
+          "description": "Detected topics from TopicDetector: controlled_substances, weapons_manufacturing, etc."
+        },
+        {
+          "key": "topic_confidence",
+          "type": "number",
+          "required": false,
+          "description": "Topic classifier confidence (0-100)"
+        },
+        {
+          "key": "contains_invisible_chars",
+          "type": "boolean",
+          "required": false,
+          "description": "Whether invisible Unicode characters (zero-width, bidi overrides, tag chars) were detected"
+        },
+        {
+          "key": "invisible_chars_score",
+          "type": "number",
+          "required": false,
+          "description": "Invisible character attack severity score (0-100)"
+        },
+        {
+          "key": "encoded_content_detected",
+          "type": "boolean",
+          "required": false,
+          "description": "Whether encoded content (base64, hex, unicode, URL) was detected"
+        },
+        {
+          "key": "encoded_types",
+          "type": "array",
+          "required": false,
+          "description": "Encoding types detected: base64, hex, unicode, url"
+        },
+        {
+          "key": "encoded_count",
+          "type": "number",
+          "required": false,
+          "description": "Number of encoded segments detected"
+        },
+        {
+          "key": "encoded_score",
+          "type": "number",
+          "required": false,
+          "description": "Encoded injection severity score (0-100)"
+        },
+        {
+          "key": "contains_code",
+          "type": "boolean",
+          "required": false,
+          "description": "Whether content contains source code"
+        },
+        {
+          "key": "code_languages",
+          "type": "array",
+          "required": false,
+          "description": "Detected programming languages: python, javascript, go, etc."
+        },
+        {
+          "key": "code_ratio",
+          "type": "number",
+          "required": false,
+          "description": "Percentage of content that is code (0-100)"
+        },
+        {
+          "key": "detected_language",
+          "type": "string",
+          "required": false,
+          "description": "Detected natural language ISO code from LanguageDetector"
+        },
+        {
+          "key": "is_english",
+          "type": "boolean",
+          "required": false,
+          "description": "Whether detected language is English"
+        },
+        {
+          "key": "language_confidence",
+          "type": "number",
+          "required": false,
+          "description": "Language detection confidence (0-100)"
+        },
+        {
+          "key": "detected_script",
+          "type": "string",
+          "required": false,
+          "description": "Unicode script: latin, cyrillic, arabic, unknown"
+        },
+        {
+          "key": "is_latin_script",
+          "type": "boolean",
+          "required": false,
+          "description": "Whether detected script is Latin"
+        },
+        {
+          "key": "script_confidence",
+          "type": "number",
+          "required": false,
+          "description": "Script detection confidence (0-100)"
+        },
+        {
+          "key": "keyword_matched",
+          "type": "boolean",
+          "required": false,
+          "description": "Whether any keywords from KeywordDetector matched"
+        },
+        {
+          "key": "keyword_categories",
+          "type": "array",
+          "required": false,
+          "description": "Matched keyword categories"
+        },
+        {
+          "key": "keyword_count",
+          "type": "number",
+          "required": false,
+          "description": "Number of keyword matches"
+        },
+        {
+          "key": "phishing_detected",
+          "type": "boolean",
+          "required": false,
+          "description": "Whether phishing URLs detected by CheckPhishDetector"
+        },
+        {
+          "key": "session_pii_detected",
+          "type": "boolean",
+          "required": false,
+          "description": "Whether PII was detected in any previous turn of the session"
+        },
+        {
+          "key": "session_pii_types",
+          "type": "array",
+          "required": false,
+          "description": "PII types detected across the session (accumulated)"
+        },
+        {
+          "key": "session_secrets_detected",
+          "type": "boolean",
+          "required": false,
+          "description": "Whether secrets were detected in any previous turn of the session"
+        },
+        {
+          "key": "session_secret_types",
+          "type": "array",
+          "required": false,
+          "description": "Secret types detected across the session (accumulated)"
+        },
+        {
+          "key": "session_injection_detected",
+          "type": "boolean",
+          "required": false,
+          "description": "Whether prompt injection was detected in any previous turn of the session"
+        },
+        {
+          "key": "session_threat_turns",
+          "type": "number",
+          "required": false,
+          "description": "Number of turns in the session where threats were detected"
+        }
+      ]
+    },
+    {
+      "name": "receive_response",
+      "description": "AI service responds to the user — scan response content for harmful output",
+      "context_attributes": [
+        {
+          "key": "content",
+          "type": "string",
+          "required": true,
+          "description": "AI response content"
+        },
+        {
+          "key": "source",
+          "type": "string",
+          "required": true,
+          "description": "Browser extension identifier"
+        },
+        {
+          "key": "event",
+          "type": "string",
+          "required": true,
+          "description": "Event type (always 'receive_response')"
+        },
+        {
+          "key": "user_email",
+          "type": "string",
+          "required": true,
+          "description": "User identifier"
+        },
+        {
+          "key": "target_app",
+          "type": "string",
+          "required": true,
+          "description": "AI service: chatgpt, gemini, claude, copilot, custom"
+        },
+        {
+          "key": "target_url",
+          "type": "string",
+          "required": false,
+          "description": "Full URL of the AI chat service"
+        },
+        {
+          "key": "threat_count",
+          "type": "number",
+          "required": true,
+          "description": "Total number of threats detected"
+        },
+        {
+          "key": "highest_severity",
+          "type": "string",
+          "required": true,
+          "description": "Highest severity level: critical, high, medium, low, none"
+        },
+        {
+          "key": "threat_categories",
+          "type": "array",
+          "required": true,
+          "description": "Threat category names"
+        },
+        {
+          "key": "detected_threats",
+          "type": "array",
+          "required": true,
+          "description": "Detection rule names that matched"
+        },
+        {
+          "key": "max_threat_severity",
+          "type": "number",
+          "required": true,
+          "description": "Numeric severity (0-4)"
+        },
+        {
+          "key": "contains_secrets",
+          "type": "boolean",
+          "required": true,
+          "description": "Whether secrets detected in AI response"
+        },
+        {
+          "key": "secret_types",
+          "type": "array",
+          "required": false,
+          "description": "Secret types in response"
+        },
+        {
+          "key": "secret_count",
+          "type": "number",
+          "required": false,
+          "description": "Number of secrets in response"
+        },
+        {
+          "key": "pii_detected",
+          "type": "boolean",
+          "required": false,
+          "description": "Whether PII detected in response"
+        },
+        {
+          "key": "pii_types",
+          "type": "array",
+          "required": false,
+          "description": "PII types in response"
+        },
+        {
+          "key": "pii_count",
+          "type": "number",
+          "required": false,
+          "description": "Number of PII matches in response"
+        },
+        {
+          "key": "pii_confidence",
+          "type": "number",
+          "required": false,
+          "description": "PII detection confidence (0-100)"
+        },
+        {
+          "key": "violence_score",
+          "type": "number",
+          "required": true,
+          "description": "Violence score (0-100)"
+        },
+        {
+          "key": "weapons_score",
+          "type": "number",
+          "required": true,
+          "description": "Weapons score (0-100)"
+        },
+        {
+          "key": "hate_speech_score",
+          "type": "number",
+          "required": true,
+          "description": "Hate speech score (0-100)"
+        },
+        {
+          "key": "crime_score",
+          "type": "number",
+          "required": true,
+          "description": "Crime score (0-100)"
+        },
+        {
+          "key": "sexual_score",
+          "type": "number",
+          "required": true,
+          "description": "Sexual content score (0-100)"
+        },
+        {
+          "key": "profanity_score",
+          "type": "number",
+          "required": true,
+          "description": "Profanity score (0-100)"
+        },
+        {
+          "key": "injection_score",
+          "type": "number",
+          "required": true,
+          "description": "Indirect injection score in response (0-100)"
+        },
+        {
+          "key": "jailbreak_score",
+          "type": "number",
+          "required": true,
+          "description": "Jailbreak score (0-100)"
+        },
+        {
+          "key": "hallucination_score",
+          "type": "number",
+          "required": false,
+          "description": "Hallucination confidence (0-100, from HallucinationDetector)"
+        },
+        {
+          "key": "factuality_score",
+          "type": "number",
+          "required": false,
+          "description": "Factuality score (0-100)"
+        },
+        {
+          "key": "contains_code",
+          "type": "boolean",
+          "required": false,
+          "description": "Whether response contains code"
+        },
+        {
+          "key": "code_languages",
+          "type": "array",
+          "required": false,
+          "description": "Code languages in response"
+        },
+        {
+          "key": "code_ratio",
+          "type": "number",
+          "required": false,
+          "description": "Code ratio (0-100)"
+        },
+        {
+          "key": "phishing_detected",
+          "type": "boolean",
+          "required": false,
+          "description": "Whether phishing URLs detected in response"
+        },
+        {
+          "key": "session_pii_detected",
+          "type": "boolean",
+          "required": false,
+          "description": "Whether PII was detected in any previous turn of the session"
+        },
+        {
+          "key": "session_pii_types",
+          "type": "array",
+          "required": false,
+          "description": "PII types detected across the session (accumulated)"
+        },
+        {
+          "key": "session_secrets_detected",
+          "type": "boolean",
+          "required": false,
+          "description": "Whether secrets were detected in any previous turn of the session"
+        },
+        {
+          "key": "session_secret_types",
+          "type": "array",
+          "required": false,
+          "description": "Secret types detected across the session (accumulated)"
+        },
+        {
+          "key": "session_injection_detected",
+          "type": "boolean",
+          "required": false,
+          "description": "Whether prompt injection was detected in any previous turn of the session"
+        },
+        {
+          "key": "session_threat_turns",
+          "type": "number",
+          "required": false,
+          "description": "Number of turns in the session where threats were detected"
+        }
+      ]
+    },
+    {
+      "name": "paste_content",
+      "description": "User pastes content into an AI chat (clipboard, cross-tab, cross-app)",
+      "context_attributes": [
+        {
+          "key": "content",
+          "type": "string",
+          "required": true,
+          "description": "Pasted content"
+        },
+        {
+          "key": "source",
+          "type": "string",
+          "required": true,
+          "description": "Browser extension identifier"
+        },
+        {
+          "key": "event",
+          "type": "string",
+          "required": true,
+          "description": "Event type (always 'paste_content')"
+        },
+        {
+          "key": "user_email",
+          "type": "string",
+          "required": true,
+          "description": "User identifier"
+        },
+        {
+          "key": "target_app",
+          "type": "string",
+          "required": true,
+          "description": "AI service: chatgpt, gemini, claude, copilot, custom"
+        },
+        {
+          "key": "target_url",
+          "type": "string",
+          "required": false,
+          "description": "Full URL of the AI chat service"
+        },
+        {
+          "key": "paste_source_app",
+          "type": "string",
+          "required": false,
+          "description": "Source application for the paste: outlook, excel, vscode, terminal, slack, etc."
+        },
+        {
+          "key": "paste_source_url",
+          "type": "string",
+          "required": false,
+          "description": "Source URL if content pasted from another browser tab"
+        },
+        {
+          "key": "paste_length",
+          "type": "number",
+          "required": false,
+          "description": "Character length of pasted content"
+        },
+        {
+          "key": "threat_count",
+          "type": "number",
+          "required": true,
+          "description": "Total threats detected"
+        },
+        {
+          "key": "highest_severity",
+          "type": "string",
+          "required": true,
+          "description": "Highest severity: critical, high, medium, low, none"
+        },
+        {
+          "key": "threat_categories",
+          "type": "array",
+          "required": true,
+          "description": "Threat category names"
+        },
+        {
+          "key": "detected_threats",
+          "type": "array",
+          "required": true,
+          "description": "Detection rule names that matched"
+        },
+        {
+          "key": "max_threat_severity",
+          "type": "number",
+          "required": true,
+          "description": "Numeric severity (0-4)"
+        },
+        {
+          "key": "contains_secrets",
+          "type": "boolean",
+          "required": true,
+          "description": "Whether secrets detected in pasted content"
+        },
+        {
+          "key": "secret_types",
+          "type": "array",
+          "required": false,
+          "description": "Secret types in pasted content"
+        },
+        {
+          "key": "secret_count",
+          "type": "number",
+          "required": false,
+          "description": "Number of secrets"
+        },
+        {
+          "key": "pii_detected",
+          "type": "boolean",
+          "required": false,
+          "description": "Whether PII detected in pasted content"
+        },
+        {
+          "key": "pii_types",
+          "type": "array",
+          "required": false,
+          "description": "PII types in pasted content"
+        },
+        {
+          "key": "pii_count",
+          "type": "number",
+          "required": false,
+          "description": "PII match count"
+        },
+        {
+          "key": "pii_confidence",
+          "type": "number",
+          "required": false,
+          "description": "PII detection confidence (0-100)"
+        },
+        {
+          "key": "violence_score",
+          "type": "number",
+          "required": true,
+          "description": "Violence score (0-100)"
+        },
+        {
+          "key": "weapons_score",
+          "type": "number",
+          "required": true,
+          "description": "Weapons score (0-100)"
+        },
+        {
+          "key": "hate_speech_score",
+          "type": "number",
+          "required": true,
+          "description": "Hate speech score (0-100)"
+        },
+        {
+          "key": "crime_score",
+          "type": "number",
+          "required": true,
+          "description": "Crime score (0-100)"
+        },
+        {
+          "key": "sexual_score",
+          "type": "number",
+          "required": true,
+          "description": "Sexual score (0-100)"
+        },
+        {
+          "key": "profanity_score",
+          "type": "number",
+          "required": true,
+          "description": "Profanity score (0-100)"
+        },
+        {
+          "key": "injection_score",
+          "type": "number",
+          "required": true,
+          "description": "Injection score (0-100)"
+        },
+        {
+          "key": "jailbreak_score",
+          "type": "number",
+          "required": true,
+          "description": "Jailbreak score (0-100)"
+        },
+        {
+          "key": "contains_code",
+          "type": "boolean",
+          "required": false,
+          "description": "Whether pasted content contains code"
+        },
+        {
+          "key": "code_languages",
+          "type": "array",
+          "required": false,
+          "description": "Code languages in pasted content"
+        },
+        {
+          "key": "code_ratio",
+          "type": "number",
+          "required": false,
+          "description": "Code ratio (0-100)"
+        },
+        {
+          "key": "contains_invisible_chars",
+          "type": "boolean",
+          "required": false,
+          "description": "Whether invisible Unicode characters detected"
+        },
+        {
+          "key": "invisible_chars_score",
+          "type": "number",
+          "required": false,
+          "description": "Invisible chars severity (0-100)"
+        },
+        {
+          "key": "encoded_content_detected",
+          "type": "boolean",
+          "required": false,
+          "description": "Whether encoded content detected"
+        },
+        {
+          "key": "encoded_types",
+          "type": "array",
+          "required": false,
+          "description": "Encoding types"
+        },
+        {
+          "key": "encoded_count",
+          "type": "number",
+          "required": false,
+          "description": "Encoded segment count"
+        },
+        {
+          "key": "encoded_score",
+          "type": "number",
+          "required": false,
+          "description": "Encoded injection severity (0-100)"
+        },
+        {
+          "key": "keyword_matched",
+          "type": "boolean",
+          "required": false,
+          "description": "Whether keywords matched"
+        },
+        {
+          "key": "keyword_categories",
+          "type": "array",
+          "required": false,
+          "description": "Keyword categories"
+        },
+        {
+          "key": "keyword_count",
+          "type": "number",
+          "required": false,
+          "description": "Keyword match count"
+        },
+        {
+          "key": "session_pii_detected",
+          "type": "boolean",
+          "required": false,
+          "description": "Whether PII was detected in any previous turn of the session"
+        },
+        {
+          "key": "session_pii_types",
+          "type": "array",
+          "required": false,
+          "description": "PII types detected across the session (accumulated)"
+        },
+        {
+          "key": "session_secrets_detected",
+          "type": "boolean",
+          "required": false,
+          "description": "Whether secrets were detected in any previous turn of the session"
+        },
+        {
+          "key": "session_secret_types",
+          "type": "array",
+          "required": false,
+          "description": "Secret types detected across the session (accumulated)"
+        },
+        {
+          "key": "session_injection_detected",
+          "type": "boolean",
+          "required": false,
+          "description": "Whether prompt injection was detected in any previous turn of the session"
+        },
+        {
+          "key": "session_threat_turns",
+          "type": "number",
+          "required": false,
+          "description": "Number of turns in the session where threats were detected"
+        }
+      ]
+    },
+    {
+      "name": "upload_file",
+      "description": "User uploads a file or document into an AI chat service",
+      "context_attributes": [
+        {
+          "key": "content",
+          "type": "string",
+          "required": true,
+          "description": "Extracted file text content (for scanning)"
+        },
+        {
+          "key": "source",
+          "type": "string",
+          "required": true,
+          "description": "Browser extension identifier"
+        },
+        {
+          "key": "event",
+          "type": "string",
+          "required": true,
+          "description": "Event type (always 'upload_file')"
+        },
+        {
+          "key": "user_email",
+          "type": "string",
+          "required": true,
+          "description": "User identifier"
+        },
+        {
+          "key": "target_app",
+          "type": "string",
+          "required": true,
+          "description": "AI service: chatgpt, gemini, claude, copilot, custom"
+        },
+        {
+          "key": "target_url",
+          "type": "string",
+          "required": false,
+          "description": "Full URL of the AI chat service"
+        },
+        {
+          "key": "file_name",
+          "type": "string",
+          "required": false,
+          "description": "Original file name"
+        },
+        {
+          "key": "file_type",
+          "type": "string",
+          "required": false,
+          "description": "MIME type: application/pdf, text/csv, application/vnd.openxmlformats-officedocument.spreadsheetml.sheet, etc."
+        },
+        {
+          "key": "file_size_bytes",
+          "type": "number",
+          "required": false,
+          "description": "File size in bytes"
+        },
+        {
+          "key": "file_extension",
+          "type": "string",
+          "required": false,
+          "description": "File extension: pdf, docx, xlsx, csv, txt, py, js, etc."
+        },
+        {
+          "key": "mip_label_id",
+          "type": "string",
+          "required": false,
+          "description": "Microsoft Information Protection label GUID"
+        },
+        {
+          "key": "mip_label_name",
+          "type": "string",
+          "required": false,
+          "description": "MIP label display name: Public, General, Confidential, Highly Confidential"
+        },
+        {
+          "key": "sensitivity_level",
+          "type": "string",
+          "required": false,
+          "description": "Normalized sensitivity: public, internal, confidential, restricted"
+        },
+        {
+          "key": "is_encrypted",
+          "type": "boolean",
+          "required": false,
+          "description": "Whether file is encrypted via MIP protection"
+        },
+        {
+          "key": "is_rights_managed",
+          "type": "boolean",
+          "required": false,
+          "description": "Whether file has rights management (IRM/RMS) restrictions"
+        },
+        {
+          "key": "threat_count",
+          "type": "number",
+          "required": true,
+          "description": "Total threats detected"
+        },
+        {
+          "key": "highest_severity",
+          "type": "string",
+          "required": true,
+          "description": "Highest severity: critical, high, medium, low, none"
+        },
+        {
+          "key": "threat_categories",
+          "type": "array",
+          "required": true,
+          "description": "Threat category names"
+        },
+        {
+          "key": "detected_threats",
+          "type": "array",
+          "required": true,
+          "description": "Detection rule names that matched"
+        },
+        {
+          "key": "max_threat_severity",
+          "type": "number",
+          "required": true,
+          "description": "Numeric severity (0-4)"
+        },
+        {
+          "key": "contains_secrets",
+          "type": "boolean",
+          "required": true,
+          "description": "Whether secrets detected in file content"
+        },
+        {
+          "key": "secret_types",
+          "type": "array",
+          "required": false,
+          "description": "Secret types in file"
+        },
+        {
+          "key": "secret_count",
+          "type": "number",
+          "required": false,
+          "description": "Number of secrets"
+        },
+        {
+          "key": "pii_detected",
+          "type": "boolean",
+          "required": false,
+          "description": "Whether PII detected in file"
+        },
+        {
+          "key": "pii_types",
+          "type": "array",
+          "required": false,
+          "description": "PII types in file"
+        },
+        {
+          "key": "pii_count",
+          "type": "number",
+          "required": false,
+          "description": "PII match count"
+        },
+        {
+          "key": "pii_confidence",
+          "type": "number",
+          "required": false,
+          "description": "PII confidence (0-100)"
+        },
+        {
+          "key": "violence_score",
+          "type": "number",
+          "required": true,
+          "description": "Violence score (0-100)"
+        },
+        {
+          "key": "weapons_score",
+          "type": "number",
+          "required": true,
+          "description": "Weapons score (0-100)"
+        },
+        {
+          "key": "hate_speech_score",
+          "type": "number",
+          "required": true,
+          "description": "Hate speech score (0-100)"
+        },
+        {
+          "key": "crime_score",
+          "type": "number",
+          "required": true,
+          "description": "Crime score (0-100)"
+        },
+        {
+          "key": "sexual_score",
+          "type": "number",
+          "required": true,
+          "description": "Sexual score (0-100)"
+        },
+        {
+          "key": "profanity_score",
+          "type": "number",
+          "required": true,
+          "description": "Profanity score (0-100)"
+        },
+        {
+          "key": "injection_score",
+          "type": "number",
+          "required": true,
+          "description": "Injection score in file content (0-100)"
+        },
+        {
+          "key": "jailbreak_score",
+          "type": "number",
+          "required": true,
+          "description": "Jailbreak score (0-100)"
+        },
+        {
+          "key": "contains_code",
+          "type": "boolean",
+          "required": false,
+          "description": "Whether file contains source code"
+        },
+        {
+          "key": "code_languages",
+          "type": "array",
+          "required": false,
+          "description": "Code languages in file"
+        },
+        {
+          "key": "code_ratio",
+          "type": "number",
+          "required": false,
+          "description": "Code ratio (0-100)"
+        },
+        {
+          "key": "phishing_detected",
+          "type": "boolean",
+          "required": false,
+          "description": "Whether phishing URLs detected in file"
+        },
+        {
+          "key": "contains_invisible_chars",
+          "type": "boolean",
+          "required": false,
+          "description": "Whether invisible chars detected in file"
+        },
+        {
+          "key": "invisible_chars_score",
+          "type": "number",
+          "required": false,
+          "description": "Invisible chars severity (0-100)"
+        },
+        {
+          "key": "encoded_content_detected",
+          "type": "boolean",
+          "required": false,
+          "description": "Whether encoded content detected in file"
+        },
+        {
+          "key": "encoded_types",
+          "type": "array",
+          "required": false,
+          "description": "Encoding types in file"
+        },
+        {
+          "key": "encoded_count",
+          "type": "number",
+          "required": false,
+          "description": "Encoded segment count"
+        },
+        {
+          "key": "encoded_score",
+          "type": "number",
+          "required": false,
+          "description": "Encoded injection severity (0-100)"
+        },
+        {
+          "key": "session_pii_detected",
+          "type": "boolean",
+          "required": false,
+          "description": "Whether PII was detected in any previous turn of the session"
+        },
+        {
+          "key": "session_pii_types",
+          "type": "array",
+          "required": false,
+          "description": "PII types detected across the session (accumulated)"
+        },
+        {
+          "key": "session_secrets_detected",
+          "type": "boolean",
+          "required": false,
+          "description": "Whether secrets were detected in any previous turn of the session"
+        },
+        {
+          "key": "session_secret_types",
+          "type": "array",
+          "required": false,
+          "description": "Secret types detected across the session (accumulated)"
+        },
+        {
+          "key": "session_injection_detected",
+          "type": "boolean",
+          "required": false,
+          "description": "Whether prompt injection was detected in any previous turn of the session"
+        },
+        {
+          "key": "session_threat_turns",
+          "type": "number",
+          "required": false,
+          "description": "Number of turns in the session where threats were detected"
+        }
+      ]
+    }
+  ]
+}