@highflame/policy 2.1.36 → 2.1.37

package/dist/service-schemas.gen.js

@@ -104,7 +104,7 @@ action call_tool appliesTo {
     threat_categories?: Set<String>,  // Threat category names
     detected_threats?: Set<String>,   // Detection rule names that matched
     max_threat_severity?: Long,       // Numeric severity (0=none, 1=low, 2=medium, 3=high, 4=critical)
-    contains_secrets?: Bool,          // Whether secrets/credentials detected
+    secrets_detected?: Bool,          // Whether secrets/credentials detected
 
     // --- Secrets (granular) ---
     secret_types?: Set<String>,
@@ -114,10 +114,11 @@ action call_tool appliesTo {
     pii_detected?: Bool,
     pii_types?: Set<String>,
     pii_count?: Long,
+    pii_score?: Long,
 
     // --- ML Detector Confidence Scores (0-100) ---
-    injection_confidence?: Long,      // Prompt injection classifier confidence
-    jailbreak_confidence?: Long,      // Jailbreak detection classifier confidence
+    injection_score?: Long,      // Prompt injection classifier confidence
+    jailbreak_score?: Long,      // Jailbreak detection classifier confidence
 
     // --- Agent Security (0-100) ---
     tool_poisoning_score?: Long,      // Hidden instructions in tool description/args
@@ -144,7 +145,7 @@ action call_tool appliesTo {
     profanity_score?: Long,
 
     // --- Encoding & Unicode Attacks ---
-    contains_invisible_chars?: Bool,
+    invisible_chars_detected?: Bool,
     invisible_chars_score?: Long,
 
     // --- Behavioral Analysis ---
@@ -155,6 +156,21 @@ action call_tool appliesTo {
     pattern_type?: String,
     sequence_risk?: Long,
 
+    // --- Session-Aware Threat Aggregation ---
+    session_threat_turns?: Long,                  // Count of turns with detected threats
+    session_cumulative_risk_score?: Long,         // Accumulated risk across turns
+    session_injection_detected?: Bool,            // Injection seen in any prior turn
+    session_command_injection?: Bool,             // Command injection seen in any prior turn
+    session_pii_detected?: Bool,                  // PII seen in any prior turn
+    session_pii_types?: Set<String>,              // PII types accumulated across session
+    session_secrets_detected?: Bool,              // Secrets seen in any prior turn
+    session_secret_types?: Set<String>,           // Secret types accumulated across session
+    session_max_injection_score?: Long,           // Max injection score across session turns
+    session_max_jailbreak_score?: Long,           // Max jailbreak score across session turns
+    session_max_command_injection_score?: Long,   // Max command-injection score across session turns
+    session_max_pii_score?: Long,                 // Max pii score across session turns
+    session_max_secret_score?: Long,              // Max secret score across session turns
+
     // --- Usage Budget (multi-window, multi-dimension) ---
     budget_remaining_pct?: Long,
     budget_exceeded?: Bool,
@@ -194,7 +210,7 @@ action connect_server appliesTo {
     indirect_injection_score?: Long,
 
     // --- Secrets ---
-    contains_secrets?: Bool,
+    secrets_detected?: Bool,
     secret_types?: Set<String>,
     secret_count?: Long,
 
@@ -202,12 +218,28 @@ action connect_server appliesTo {
     pii_detected?: Bool,
     pii_types?: Set<String>,
     pii_count?: Long,
+    pii_score?: Long,
 
     // --- MCP Trust & Config Risk ---
     mcp_server_verified?: Bool,
     mcp_config_risk?: Bool,
     mcp_risk_score?: Long,
 
+    // --- Session-Aware Threat Aggregation ---
+    session_threat_turns?: Long,                  // Count of turns with detected threats
+    session_cumulative_risk_score?: Long,         // Accumulated risk across turns
+    session_injection_detected?: Bool,            // Injection seen in any prior turn
+    session_command_injection?: Bool,             // Command injection seen in any prior turn
+    session_pii_detected?: Bool,                  // PII seen in any prior turn
+    session_pii_types?: Set<String>,              // PII types accumulated across session
+    session_secrets_detected?: Bool,              // Secrets seen in any prior turn
+    session_secret_types?: Set<String>,           // Secret types accumulated across session
+    session_max_injection_score?: Long,           // Max injection score across session turns
+    session_max_jailbreak_score?: Long,           // Max jailbreak score across session turns
+    session_max_command_injection_score?: Long,   // Max command-injection score across session turns
+    session_max_pii_score?: Long,                 // Max pii score across session turns
+    session_max_secret_score?: Long,              // Max secret score across session turns
+
     // --- Usage Budget (multi-window, multi-dimension) ---
     budget_remaining_pct?: Long,
     budget_exceeded?: Bool,
@@ -239,7 +271,7 @@ action process_prompt appliesTo {
     threat_categories?: Set<String>,
     detected_threats?: Set<String>,
     max_threat_severity?: Long,
-    contains_secrets?: Bool,
+    secrets_detected?: Bool,
 
     // --- Secrets ---
     secret_types?: Set<String>,
@@ -249,10 +281,11 @@ action process_prompt appliesTo {
     pii_detected?: Bool,
     pii_types?: Set<String>,
     pii_count?: Long,
+    pii_score?: Long,
 
     // --- ML Detector Confidence Scores (0-100) ---
-    injection_confidence?: Long,
-    jailbreak_confidence?: Long,
+    injection_score?: Long,
+    jailbreak_score?: Long,
 
     // --- Content Safety Scores (0-100) ---
     violence_score?: Long,
@@ -263,13 +296,28 @@ action process_prompt appliesTo {
     profanity_score?: Long,
 
     // --- Encoding ---
-    contains_invisible_chars?: Bool,
+    invisible_chars_detected?: Bool,
     invisible_chars_score?: Long,
 
     // --- LLM-specific ---
     model_name?: String,              // Target model name (e.g., "gpt-4", "claude-3-opus")
     model_provider?: String,          // Provider name (e.g., "openai", "anthropic", "bedrock")
 
+    // --- Session-Aware Threat Aggregation ---
+    session_threat_turns?: Long,                  // Count of turns with detected threats
+    session_cumulative_risk_score?: Long,         // Accumulated risk across turns
+    session_injection_detected?: Bool,            // Injection seen in any prior turn
+    session_command_injection?: Bool,             // Command injection seen in any prior turn
+    session_pii_detected?: Bool,                  // PII seen in any prior turn
+    session_pii_types?: Set<String>,              // PII types accumulated across session
+    session_secrets_detected?: Bool,              // Secrets seen in any prior turn
+    session_secret_types?: Set<String>,           // Secret types accumulated across session
+    session_max_injection_score?: Long,           // Max injection score across session turns
+    session_max_jailbreak_score?: Long,           // Max jailbreak score across session turns
+    session_max_command_injection_score?: Long,   // Max command-injection score across session turns
+    session_max_pii_score?: Long,                 // Max pii score across session turns
+    session_max_secret_score?: Long,              // Max secret score across session turns
+
     // --- Usage Budget (multi-window, multi-dimension) ---
     budget_remaining_pct?: Long,
     budget_exceeded?: Bool,
@@ -301,7 +349,7 @@ action read_file appliesTo {
     threat_categories?: Set<String>,
     detected_threats?: Set<String>,
     max_threat_severity?: Long,
-    contains_secrets?: Bool,
+    secrets_detected?: Bool,
 
     // --- Secrets ---
     secret_types?: Set<String>,
@@ -311,6 +359,22 @@ action read_file appliesTo {
     pii_detected?: Bool,
     pii_types?: Set<String>,
     pii_count?: Long,
+    pii_score?: Long,
+
+    // --- Session-Aware Threat Aggregation ---
+    session_threat_turns?: Long,                  // Count of turns with detected threats
+    session_cumulative_risk_score?: Long,         // Accumulated risk across turns
+    session_injection_detected?: Bool,            // Injection seen in any prior turn
+    session_command_injection?: Bool,             // Command injection seen in any prior turn
+    session_pii_detected?: Bool,                  // PII seen in any prior turn
+    session_pii_types?: Set<String>,              // PII types accumulated across session
+    session_secrets_detected?: Bool,              // Secrets seen in any prior turn
+    session_secret_types?: Set<String>,           // Secret types accumulated across session
+    session_max_injection_score?: Long,           // Max injection score across session turns
+    session_max_jailbreak_score?: Long,           // Max jailbreak score across session turns
+    session_max_command_injection_score?: Long,   // Max command-injection score across session turns
+    session_max_pii_score?: Long,                 // Max pii score across session turns
+    session_max_secret_score?: Long,              // Max secret score across session turns
 
     // --- Usage Budget (multi-window, multi-dimension) ---
     budget_remaining_pct?: Long,
@@ -343,7 +407,7 @@ action write_file appliesTo {
     threat_categories?: Set<String>,
     detected_threats?: Set<String>,
     max_threat_severity?: Long,
-    contains_secrets?: Bool,
+    secrets_detected?: Bool,
 
     // --- Secrets ---
     secret_types?: Set<String>,
@@ -353,6 +417,22 @@ action write_file appliesTo {
     pii_detected?: Bool,
     pii_types?: Set<String>,
     pii_count?: Long,
+    pii_score?: Long,
+
+    // --- Session-Aware Threat Aggregation ---
+    session_threat_turns?: Long,                  // Count of turns with detected threats
+    session_cumulative_risk_score?: Long,         // Accumulated risk across turns
+    session_injection_detected?: Bool,            // Injection seen in any prior turn
+    session_command_injection?: Bool,             // Command injection seen in any prior turn
+    session_pii_detected?: Bool,                  // PII seen in any prior turn
+    session_pii_types?: Set<String>,              // PII types accumulated across session
+    session_secrets_detected?: Bool,              // Secrets seen in any prior turn
+    session_secret_types?: Set<String>,           // Secret types accumulated across session
+    session_max_injection_score?: Long,           // Max injection score across session turns
+    session_max_jailbreak_score?: Long,           // Max jailbreak score across session turns
+    session_max_command_injection_score?: Long,   // Max command-injection score across session turns
+    session_max_pii_score?: Long,                 // Max pii score across session turns
+    session_max_secret_score?: Long,              // Max secret score across session turns
 
     // --- Usage Budget (multi-window, multi-dimension) ---
     budget_remaining_pct?: Long,
@@ -483,8 +563,8 @@ namespace Guardrails {
         "detector_count": Long,
 
         // Security - Injection & Jailbreak (optional)
-        "injection_confidence"?: Long,  // Combined injection confidence: MAX(pulse, deep_context)
-        "jailbreak_confidence"?: Long,  // Combined jailbreak confidence: MAX(pulse, deep_context)
+        "injection_score"?: Long,  // Combined injection confidence: MAX(pulse, deep_context)
+        "jailbreak_score"?: Long,  // Combined jailbreak confidence: MAX(pulse, deep_context)
         "injection_pulse_score"?: Long,  // 0-100 Pulse single-turn classifier
         "injection_deep_context_score"?: Long, // 0-100 DeepContext multi-turn
         "jailbreak_pulse_score"?: Long,  // 0-100 Pulse single-turn classifier
@@ -492,7 +572,7 @@ namespace Guardrails {
         "injection_type"?: String,       // "prompt" | "sql" | "command" | "none"
 
         // Privacy - Secrets (optional)
-        "contains_secrets"?: Bool,
+        "secrets_detected"?: Bool,
         "secret_count"?: Long,
         "secret_types"?: Set<String>,    // ["aws_access_key", "github_token", ...]
 
@@ -500,7 +580,7 @@ namespace Guardrails {
         "pii_detected"?: Bool,
         "pii_count"?: Long,
         "pii_types"?: Set<String>,       // ["email", "phone", "ssn", "credit_card", ...]
-        "pii_confidence"?: Long,         // PII ML classifier confidence (0-100) — catches novel PII patterns that escape regex detection
+        "pii_score"?: Long,         // PII ML classifier confidence (0-100) — catches novel PII patterns that escape regex detection
 
         // Threat Severity Aggregation (optional)
         "highest_severity"?: String,     // Highest severity across all detectors: "critical" | "high" | "medium" | "low" | "none"
@@ -518,7 +598,7 @@ namespace Guardrails {
         "topic_confidence"?: Long,           // 0-100
 
         // Security - Invisible Character Detection (optional)
-        "contains_invisible_chars"?: Bool,
+        "invisible_chars_detected"?: Bool,
         "invisible_chars_score"?: Long,      // 0-100
 
         // Security - Pattern Detection (optional)
@@ -660,14 +740,14 @@ namespace Guardrails {
         "topic_confidence"?: Long,           // 0-100
 
         // Security checks on tool arguments (optional)
-        "contains_secrets"?: Bool,
+        "secrets_detected"?: Bool,
         "secret_count"?: Long,
         "secret_types"?: Set<String>,
         "pii_detected"?: Bool,
         "pii_types"?: Set<String>,
         "pii_count"?: Long,              // Number of PII pattern matches in tool content
-        "pii_confidence"?: Long,         // PII ML classifier confidence (0-100)
-        "injection_confidence"?: Long,
+        "pii_score"?: Long,         // PII ML classifier confidence (0-100)
+        "injection_score"?: Long,
         "injection_pulse_score"?: Long,  // 0-100 Pulse single-turn classifier
         "injection_deep_context_score"?: Long, // 0-100 DeepContext multi-turn
 
@@ -691,7 +771,7 @@ namespace Guardrails {
         "path"?: String,                         // File path when tool operates on files
 
         // Security - Invisible Character Detection in tool args (optional)
-        "contains_invisible_chars"?: Bool,       // Whether invisible Unicode chars detected in tool args
+        "invisible_chars_detected"?: Bool,       // Whether invisible Unicode chars detected in tool args
         "invisible_chars_score"?: Long,          // Invisible character attack severity (0-100)
 
         // Security - Encoded Injection (optional)
@@ -755,7 +835,7 @@ namespace Guardrails {
         "path"?: String,                 // File path being read
 
         // Security checks on file content (optional)
-        "contains_secrets"?: Bool,
+        "secrets_detected"?: Bool,
         "secret_count"?: Long,
         "secret_types"?: Set<String>,
         "pii_detected"?: Bool,
@@ -815,11 +895,11 @@ namespace Guardrails {
         "path"?: String,                         // File path being written
 
         // Security - Invisible Character Detection in write content (optional)
-        "contains_invisible_chars"?: Bool,       // Whether invisible Unicode chars detected in write content
+        "invisible_chars_detected"?: Bool,       // Whether invisible Unicode chars detected in write content
         "invisible_chars_score"?: Long,          // Invisible character attack severity (0-100)
 
         // Security checks on content being written (optional)
-        "contains_secrets"?: Bool,
+        "secrets_detected"?: Bool,
         "secret_count"?: Long,
         "secret_types"?: Set<String>,
         "pii_detected"?: Bool,
@@ -1036,7 +1116,7 @@ action process_prompt appliesTo {
     threat_categories: Set<String>,   // Threat category names
     detected_threats: Set<String>,    // Detection rule names that matched
     max_threat_severity: Long,        // Numeric severity (0=none, 1=low, 2=medium, 3=high, 4=critical)
-    contains_secrets: Bool,           // Whether secrets/credentials detected
+    secrets_detected: Bool,           // Whether secrets/credentials detected
 
     // --- Secrets (granular) ---
     secret_types?: Set<String>,       // Types: "aws_access_key", "github_token", "ssh_private_key", etc.
@@ -1048,7 +1128,7 @@ action process_prompt appliesTo {
     pii_count?: Long,                 // Number of PII matches
 
     // --- Encoding & Unicode Attacks ---
-    contains_invisible_chars?: Bool,  // Zero-width chars, bidi overrides, tag chars detected
+    invisible_chars_detected?: Bool,  // Zero-width chars, bidi overrides, tag chars detected
     invisible_chars_score?: Long,     // Unicode attack severity (0-100)
 
     // --- Content Safety Scores (0-100, from ML classifiers) ---
@@ -1060,9 +1140,9 @@ action process_prompt appliesTo {
     profanity_score: Long,
 
     // --- ML Detector Confidence Scores (0-100) ---
-    pii_confidence: Long,             // PII detection classifier confidence
-    injection_confidence: Long,       // Combined injection confidence: MAX(pulse, deep_context)
-    jailbreak_confidence: Long,       // Combined jailbreak confidence: MAX(pulse, deep_context)
+    pii_score: Long,             // PII detection classifier confidence
+    injection_score: Long,       // Combined injection confidence: MAX(pulse, deep_context)
+    jailbreak_score: Long,       // Combined jailbreak confidence: MAX(pulse, deep_context)
     injection_pulse_score?: Long,     // 0-100 Pulse single-turn classifier
     injection_deep_context_score?: Long, // 0-100 DeepContext multi-turn
     jailbreak_pulse_score?: Long,     // 0-100 Pulse single-turn classifier
@@ -1122,7 +1202,7 @@ action call_tool appliesTo {
     threat_categories?: Set<String>,
     detected_threats?: Set<String>,
     max_threat_severity?: Long,
-    contains_secrets?: Bool,
+    secrets_detected?: Bool,
 
     // --- Secrets (granular) ---
     secret_types?: Set<String>,
@@ -1134,7 +1214,7 @@ action call_tool appliesTo {
     pii_count?: Long,
 
     // --- Encoding & Unicode Attacks ---
-    contains_invisible_chars?: Bool,
+    invisible_chars_detected?: Bool,
     invisible_chars_score?: Long,
 
     // --- Content Safety Scores (0-100) ---
@@ -1146,9 +1226,9 @@ action call_tool appliesTo {
     profanity_score?: Long,
 
     // --- ML Detector Confidence Scores (0-100) ---
-    pii_confidence?: Long,
-    injection_confidence?: Long,      // Combined injection confidence: MAX(pulse, deep_context)
-    jailbreak_confidence?: Long,      // Combined jailbreak confidence: MAX(pulse, deep_context)
+    pii_score?: Long,
+    injection_score?: Long,      // Combined injection confidence: MAX(pulse, deep_context)
+    jailbreak_score?: Long,      // Combined jailbreak confidence: MAX(pulse, deep_context)
     injection_pulse_score?: Long,     // 0-100 Pulse single-turn classifier
     injection_deep_context_score?: Long, // 0-100 DeepContext multi-turn
     jailbreak_pulse_score?: Long,     // 0-100 Pulse single-turn classifier
@@ -1265,7 +1345,7 @@ action read_file appliesTo {
     threat_categories?: Set<String>,
     detected_threats?: Set<String>,
     max_threat_severity?: Long,
-    contains_secrets?: Bool,
+    secrets_detected?: Bool,
 
     // --- Secrets (granular) ---
     secret_types?: Set<String>,
@@ -1316,7 +1396,7 @@ action write_file appliesTo {
     threat_categories?: Set<String>,
     detected_threats?: Set<String>,
     max_threat_severity?: Long,
-    contains_secrets?: Bool,
+    secrets_detected?: Bool,
 
     // --- Secrets (granular) ---
     secret_types?: Set<String>,
@@ -1624,7 +1704,7 @@ action process_prompt appliesTo {
     max_threat_severity: Long,        // Numeric severity (0=none, 1=low, 2=medium, 3=high, 4=critical)
 
     // --- Secrets Detection (from SecretsDetector) ---
-    contains_secrets: Bool,           // Whether secrets/credentials detected
+    secrets_detected: Bool,           // Whether secrets/credentials detected
     secret_types?: Set<String>,       // Types: "aws_access_key", "github_token", "ssh_private_key", etc.
     secret_count?: Long,              // Number of distinct secrets found
 
@@ -1632,7 +1712,7 @@ action process_prompt appliesTo {
     pii_detected?: Bool,              // Whether any PII patterns matched
     pii_types?: Set<String>,          // Types: "ssn", "credit_card", "email", "phone", etc.
     pii_count?: Long,                 // Number of PII matches
-    pii_confidence?: Long,            // PII detection confidence (0-100)
+    pii_score?: Long,            // PII detection confidence (0-100)
 
     // --- Content Safety Scores (from ToxicityDetector, 0-100) ---
     violence_score: Long,
@@ -1651,7 +1731,7 @@ action process_prompt appliesTo {
     topic_confidence?: Long,          // Topic classifier confidence (0-100)
 
     // --- Encoding & Unicode Attacks (from SecurityFiltersDetector, EncodedInjectionDetector) ---
-    contains_invisible_chars?: Bool,  // Zero-width chars, bidi overrides, tag chars
+    invisible_chars_detected?: Bool,  // Zero-width chars, bidi overrides, tag chars
     invisible_chars_score?: Long,     // Unicode attack severity (0-100)
     encoded_content_detected?: Bool,  // Base64, hex, unicode, URL encoded content
     encoded_types?: Set<String>,      // Encoding types detected
@@ -1711,7 +1791,7 @@ action receive_response appliesTo {
     max_threat_severity: Long,
 
     // --- Secrets Detection ---
-    contains_secrets: Bool,
+    secrets_detected: Bool,
     secret_types?: Set<String>,
     secret_count?: Long,
 
@@ -1719,7 +1799,7 @@ action receive_response appliesTo {
     pii_detected?: Bool,
     pii_types?: Set<String>,
     pii_count?: Long,
-    pii_confidence?: Long,
+    pii_score?: Long,
 
     // --- Content Safety Scores (0-100) ---
     violence_score: Long,
@@ -1782,7 +1862,7 @@ action paste_content appliesTo {
     max_threat_severity: Long,
 
     // --- Secrets Detection ---
-    contains_secrets: Bool,
+    secrets_detected: Bool,
     secret_types?: Set<String>,
     secret_count?: Long,
 
@@ -1790,7 +1870,7 @@ action paste_content appliesTo {
     pii_detected?: Bool,
     pii_types?: Set<String>,
     pii_count?: Long,
-    pii_confidence?: Long,
+    pii_score?: Long,
 
     // --- Content Safety Scores (0-100) ---
     violence_score: Long,
@@ -1810,7 +1890,7 @@ action paste_content appliesTo {
     code_ratio?: Long,
 
     // --- Encoding Attacks ---
-    contains_invisible_chars?: Bool,
+    invisible_chars_detected?: Bool,
     invisible_chars_score?: Long,
     encoded_content_detected?: Bool,
     encoded_types?: Set<String>,
@@ -1867,7 +1947,7 @@ action upload_file appliesTo {
     max_threat_severity: Long,
 
     // --- Secrets Detection ---
-    contains_secrets: Bool,
+    secrets_detected: Bool,
     secret_types?: Set<String>,
     secret_count?: Long,
 
@@ -1875,7 +1955,7 @@ action upload_file appliesTo {
     pii_detected?: Bool,
     pii_types?: Set<String>,
     pii_count?: Long,
-    pii_confidence?: Long,
+    pii_score?: Long,
 
     // --- Content Safety Scores (0-100) ---
     violence_score: Long,
@@ -1898,7 +1978,7 @@ action upload_file appliesTo {
     phishing_detected?: Bool,
 
     // --- Encoding Attacks ---
-    contains_invisible_chars?: Bool,
+    invisible_chars_detected?: Bool,
     invisible_chars_score?: Long,
     encoded_content_detected?: Bool,
     encoded_types?: Set<String>,
@@ -1938,14 +2018,15 @@ export const AI_GATEWAY_CONTEXT = {
                 { "key": "threat_categories", "type": "array", "required": false, "description": "Threat category names" },
                 { "key": "detected_threats", "type": "array", "required": false, "description": "Detection rule names that matched" },
                 { "key": "max_threat_severity", "type": "number", "required": false, "description": "Numeric severity (0-4)" },
-                { "key": "contains_secrets", "type": "boolean", "required": false, "description": "Whether secrets/credentials detected" },
+                { "key": "secrets_detected", "type": "boolean", "required": false, "description": "Whether secrets/credentials detected" },
                 { "key": "secret_types", "type": "array", "required": false, "description": "Types of secrets found" },
                 { "key": "secret_count", "type": "number", "required": false, "description": "Number of distinct secrets" },
                 { "key": "pii_detected", "type": "boolean", "required": false, "description": "Whether PII detected" },
                 { "key": "pii_types", "type": "array", "required": false, "description": "Types of PII detected" },
                 { "key": "pii_count", "type": "number", "required": false, "description": "Number of PII matches" },
-                { "key": "injection_confidence", "type": "number", "required": false, "description": "Injection classifier confidence (0-100)" },
-                { "key": "jailbreak_confidence", "type": "number", "required": false, "description": "Jailbreak classifier confidence (0-100)" },
+                { "key": "pii_score", "type": "number", "required": false, "description": "PII classifier confidence (0-100)" },
+                { "key": "injection_score", "type": "number", "required": false, "description": "Injection classifier confidence (0-100)" },
+                { "key": "jailbreak_score", "type": "number", "required": false, "description": "Jailbreak classifier confidence (0-100)" },
                 { "key": "tool_poisoning_score", "type": "number", "required": false, "description": "Tool poisoning risk score (0-100)" },
                 { "key": "tool_poisoning_detected", "type": "boolean", "required": false, "description": "Tool poisoning detected flag" },
                 { "key": "rug_pull_score", "type": "number", "required": false, "description": "Rug pull risk score (0-100)" },
@@ -1962,13 +2043,26 @@ export const AI_GATEWAY_CONTEXT = {
                 { "key": "crime_score", "type": "number", "required": false, "description": "Crime content score (0-100)" },
                 { "key": "sexual_score", "type": "number", "required": false, "description": "Sexual content score (0-100)" },
                 { "key": "profanity_score", "type": "number", "required": false, "description": "Profanity score (0-100)" },
-                { "key": "contains_invisible_chars", "type": "boolean", "required": false, "description": "Invisible Unicode chars detected" },
+                { "key": "invisible_chars_detected", "type": "boolean", "required": false, "description": "Invisible Unicode chars detected" },
                 { "key": "invisible_chars_score", "type": "number", "required": false, "description": "Unicode attack severity (0-100)" },
                 { "key": "loop_detected", "type": "boolean", "required": false, "description": "Tool call loop detected" },
                 { "key": "loop_count", "type": "number", "required": false, "description": "Consecutive repeat calls" },
                 { "key": "suspicious_pattern", "type": "boolean", "required": false, "description": "Data exfiltration or attack sequence detected" },
                 { "key": "pattern_type", "type": "string", "required": false, "description": "Pattern type" },
-                { "key": "sequence_risk", "type": "number", "required": false, "description": "Sequence risk score (0-100)" }
+                { "key": "sequence_risk", "type": "number", "required": false, "description": "Sequence risk score (0-100)" },
+                { "key": "session_threat_turns", "type": "number", "required": false, "description": "Count of turns with detected threats in this session" },
+                { "key": "session_cumulative_risk_score", "type": "number", "required": false, "description": "Cumulative risk score across session turns" },
+                { "key": "session_injection_detected", "type": "boolean", "required": false, "description": "Injection seen in any prior turn of this session" },
+                { "key": "session_command_injection", "type": "boolean", "required": false, "description": "Command injection seen in any prior turn of this session" },
+                { "key": "session_pii_detected", "type": "boolean", "required": false, "description": "PII seen in any prior turn of this session" },
+                { "key": "session_pii_types", "type": "array", "required": false, "description": "PII types accumulated across session" },
+                { "key": "session_secrets_detected", "type": "boolean", "required": false, "description": "Secrets seen in any prior turn of this session" },
+                { "key": "session_secret_types", "type": "array", "required": false, "description": "Secret types accumulated across session" },
+                { "key": "session_max_injection_score", "type": "number", "required": false, "description": "Max injection score across session turns" },
+                { "key": "session_max_jailbreak_score", "type": "number", "required": false, "description": "Max jailbreak score across session turns" },
+                { "key": "session_max_command_injection_score", "type": "number", "required": false, "description": "Max command-injection score across session turns" },
+                { "key": "session_max_pii_score", "type": "number", "required": false, "description": "Max pii score across session turns" },
+                { "key": "session_max_secret_score", "type": "number", "required": false, "description": "Max secret score across session turns" }
             ]
         },
         {
@@ -1986,15 +2080,29 @@ export const AI_GATEWAY_CONTEXT = {
                 { "key": "rug_pull_score", "type": "number", "required": false, "description": "Rug pull risk (0-100)" },
                 { "key": "rug_pull_detected", "type": "boolean", "required": false, "description": "Rug pull detected" },
                 { "key": "indirect_injection_score", "type": "number", "required": false, "description": "Indirect injection score (0-100)" },
-                { "key": "contains_secrets", "type": "boolean", "required": false, "description": "Whether secrets/credentials detected" },
+                { "key": "secrets_detected", "type": "boolean", "required": false, "description": "Whether secrets/credentials detected" },
                 { "key": "secret_types", "type": "array", "required": false, "description": "Types of secrets found" },
                 { "key": "secret_count", "type": "number", "required": false, "description": "Number of distinct secrets" },
                 { "key": "pii_detected", "type": "boolean", "required": false, "description": "Whether PII detected" },
                 { "key": "pii_types", "type": "array", "required": false, "description": "Types of PII detected" },
                 { "key": "pii_count", "type": "number", "required": false, "description": "Number of PII matches" },
+                { "key": "pii_score", "type": "number", "required": false, "description": "PII classifier confidence (0-100)" },
                 { "key": "mcp_server_verified", "type": "boolean", "required": false, "description": "Verified registry status" },
                 { "key": "mcp_config_risk", "type": "boolean", "required": false, "description": "Risky server config detected" },
-                { "key": "mcp_risk_score", "type": "number", "required": false, "description": "Config risk severity (0-100)" }
+                { "key": "mcp_risk_score", "type": "number", "required": false, "description": "Config risk severity (0-100)" },
+                { "key": "session_threat_turns", "type": "number", "required": false, "description": "Count of turns with detected threats in this session" },
+                { "key": "session_cumulative_risk_score", "type": "number", "required": false, "description": "Cumulative risk score across session turns" },
+                { "key": "session_injection_detected", "type": "boolean", "required": false, "description": "Injection seen in any prior turn of this session" },
+                { "key": "session_command_injection", "type": "boolean", "required": false, "description": "Command injection seen in any prior turn of this session" },
+                { "key": "session_pii_detected", "type": "boolean", "required": false, "description": "PII seen in any prior turn of this session" },
+                { "key": "session_pii_types", "type": "array", "required": false, "description": "PII types accumulated across session" },
+                { "key": "session_secrets_detected", "type": "boolean", "required": false, "description": "Secrets seen in any prior turn of this session" },
+                { "key": "session_secret_types", "type": "array", "required": false, "description": "Secret types accumulated across session" },
+                { "key": "session_max_injection_score", "type": "number", "required": false, "description": "Max injection score across session turns" },
+                { "key": "session_max_jailbreak_score", "type": "number", "required": false, "description": "Max jailbreak score across session turns" },
+                { "key": "session_max_command_injection_score", "type": "number", "required": false, "description": "Max command-injection score across session turns" },
+                { "key": "session_max_pii_score", "type": "number", "required": false, "description": "Max pii score across session turns" },
+                { "key": "session_max_secret_score", "type": "number", "required": false, "description": "Max secret score across session turns" }
             ]
         },
         {
@@ -2008,24 +2116,38 @@ export const AI_GATEWAY_CONTEXT = {
                 { "key": "threat_categories", "type": "array", "required": false, "description": "Threat category names" },
                 { "key": "detected_threats", "type": "array", "required": false, "description": "Detection rule names that matched" },
                 { "key": "max_threat_severity", "type": "number", "required": false, "description": "Numeric severity (0-4)" },
-                { "key": "contains_secrets", "type": "boolean", "required": false, "description": "Whether secrets/credentials detected" },
+                { "key": "secrets_detected", "type": "boolean", "required": false, "description": "Whether secrets/credentials detected" },
                 { "key": "secret_types", "type": "array", "required": false, "description": "Types of secrets found" },
                 { "key": "secret_count", "type": "number", "required": false, "description": "Number of distinct secrets" },
                 { "key": "pii_detected", "type": "boolean", "required": false, "description": "Whether PII detected" },
                 { "key": "pii_types", "type": "array", "required": false, "description": "Types of PII detected" },
                 { "key": "pii_count", "type": "number", "required": false, "description": "Number of PII matches" },
-                { "key": "injection_confidence", "type": "number", "required": false, "description": "Injection classifier confidence (0-100)" },
-                { "key": "jailbreak_confidence", "type": "number", "required": false, "description": "Jailbreak classifier confidence (0-100)" },
+                { "key": "pii_score", "type": "number", "required": false, "description": "PII classifier confidence (0-100)" },
+                { "key": "injection_score", "type": "number", "required": false, "description": "Injection classifier confidence (0-100)" },
+                { "key": "jailbreak_score", "type": "number", "required": false, "description": "Jailbreak classifier confidence (0-100)" },
                 { "key": "violence_score", "type": "number", "required": false, "description": "Violence content score (0-100)" },
                 { "key": "weapons_score", "type": "number", "required": false, "description": "Weapons content score (0-100)" },
                 { "key": "hate_speech_score", "type": "number", "required": false, "description": "Hate speech score (0-100)" },
                 { "key": "crime_score", "type": "number", "required": false, "description": "Crime content score (0-100)" },
                 { "key": "sexual_score", "type": "number", "required": false, "description": "Sexual content score (0-100)" },
                 { "key": "profanity_score", "type": "number", "required": false, "description": "Profanity score (0-100)" },
-                { "key": "contains_invisible_chars", "type": "boolean", "required": false, "description": "Invisible Unicode chars detected" },
+                { "key": "invisible_chars_detected", "type": "boolean", "required": false, "description": "Invisible Unicode chars detected" },
                 { "key": "invisible_chars_score", "type": "number", "required": false, "description": "Unicode attack severity (0-100)" },
                 { "key": "model_name", "type": "string", "required": false, "description": "Target model name (e.g., gpt-4, claude-3-opus)" },
-                { "key": "model_provider", "type": "string", "required": false, "description": "Provider name (e.g., openai, anthropic, bedrock)" }
+                { "key": "model_provider", "type": "string", "required": false, "description": "Provider name (e.g., openai, anthropic, bedrock)" },
+                { "key": "session_threat_turns", "type": "number", "required": false, "description": "Count of turns with detected threats in this session" },
+                { "key": "session_cumulative_risk_score", "type": "number", "required": false, "description": "Cumulative risk score across session turns" },
+                { "key": "session_injection_detected", "type": "boolean", "required": false, "description": "Injection seen in any prior turn of this session" },
+                { "key": "session_command_injection", "type": "boolean", "required": false, "description": "Command injection seen in any prior turn of this session" },
+                { "key": "session_pii_detected", "type": "boolean", "required": false, "description": "PII seen in any prior turn of this session" },
+                { "key": "session_pii_types", "type": "array", "required": false, "description": "PII types accumulated across session" },
+                { "key": "session_secrets_detected", "type": "boolean", "required": false, "description": "Secrets seen in any prior turn of this session" },
+                { "key": "session_secret_types", "type": "array", "required": false, "description": "Secret types accumulated across session" },
+                { "key": "session_max_injection_score", "type": "number", "required": false, "description": "Max injection score across session turns" },
+                { "key": "session_max_jailbreak_score", "type": "number", "required": false, "description": "Max jailbreak score across session turns" },
+                { "key": "session_max_command_injection_score", "type": "number", "required": false, "description": "Max command-injection score across session turns" },
+                { "key": "session_max_pii_score", "type": "number", "required": false, "description": "Max pii score across session turns" },
+                { "key": "session_max_secret_score", "type": "number", "required": false, "description": "Max secret score across session turns" }
             ]
         },
         {
@@ -2039,12 +2161,26 @@ export const AI_GATEWAY_CONTEXT = {
                 { "key": "threat_categories", "type": "array", "required": false, "description": "Threat category names" },
                 { "key": "detected_threats", "type": "array", "required": false, "description": "Detection rule names that matched" },
                 { "key": "max_threat_severity", "type": "number", "required": false, "description": "Numeric severity (0-4)" },
-                { "key": "contains_secrets", "type": "boolean", "required": false, "description": "Whether secrets/credentials detected" },
+                { "key": "secrets_detected", "type": "boolean", "required": false, "description": "Whether secrets/credentials detected" },
                 { "key": "secret_types", "type": "array", "required": false, "description": "Types of secrets found" },
                 { "key": "secret_count", "type": "number", "required": false, "description": "Number of distinct secrets" },
                 { "key": "pii_detected", "type": "boolean", "required": false, "description": "Whether PII detected" },
                 { "key": "pii_types", "type": "array", "required": false, "description": "Types of PII detected" },
-                { "key": "pii_count", "type": "number", "required": false, "description": "Number of PII matches" }
+                { "key": "pii_count", "type": "number", "required": false, "description": "Number of PII matches" },
+                { "key": "pii_score", "type": "number", "required": false, "description": "PII classifier confidence (0-100)" },
+                { "key": "session_threat_turns", "type": "number", "required": false, "description": "Count of turns with detected threats in this session" },
+                { "key": "session_cumulative_risk_score", "type": "number", "required": false, "description": "Cumulative risk score across session turns" },
+                { "key": "session_injection_detected", "type": "boolean", "required": false, "description": "Injection seen in any prior turn of this session" },
+                { "key": "session_command_injection", "type": "boolean", "required": false, "description": "Command injection seen in any prior turn of this session" },
+                { "key": "session_pii_detected", "type": "boolean", "required": false, "description": "PII seen in any prior turn of this session" },
+                { "key": "session_pii_types", "type": "array", "required": false, "description": "PII types accumulated across session" },
+                { "key": "session_secrets_detected", "type": "boolean", "required": false, "description": "Secrets seen in any prior turn of this session" },
+                { "key": "session_secret_types", "type": "array", "required": false, "description": "Secret types accumulated across session" },
+                { "key": "session_max_injection_score", "type": "number", "required": false, "description": "Max injection score across session turns" },
+                { "key": "session_max_jailbreak_score", "type": "number", "required": false, "description": "Max jailbreak score across session turns" },
+                { "key": "session_max_command_injection_score", "type": "number", "required": false, "description": "Max command-injection score across session turns" },
+                { "key": "session_max_pii_score", "type": "number", "required": false, "description": "Max pii score across session turns" },
+                { "key": "session_max_secret_score", "type": "number", "required": false, "description": "Max secret score across session turns" }
             ]
         },
         {
@@ -2058,12 +2194,26 @@ export const AI_GATEWAY_CONTEXT = {
                 { "key": "threat_categories", "type": "array", "required": false, "description": "Threat category names" },
                 { "key": "detected_threats", "type": "array", "required": false, "description": "Detection rule names that matched" },
                 { "key": "max_threat_severity", "type": "number", "required": false, "description": "Numeric severity (0-4)" },
-                { "key": "contains_secrets", "type": "boolean", "required": false, "description": "Whether secrets/credentials detected" },
+                { "key": "secrets_detected", "type": "boolean", "required": false, "description": "Whether secrets/credentials detected" },
                 { "key": "secret_types", "type": "array", "required": false, "description": "Types of secrets found" },
                 { "key": "secret_count", "type": "number", "required": false, "description": "Number of distinct secrets" },
                 { "key": "pii_detected", "type": "boolean", "required": false, "description": "Whether PII detected" },
                 { "key": "pii_types", "type": "array", "required": false, "description": "Types of PII detected" },
-                { "key": "pii_count", "type": "number", "required": false, "description": "Number of PII matches" }
+                { "key": "pii_count", "type": "number", "required": false, "description": "Number of PII matches" },
+                { "key": "pii_score", "type": "number", "required": false, "description": "PII classifier confidence (0-100)" },
+                { "key": "session_threat_turns", "type": "number", "required": false, "description": "Count of turns with detected threats in this session" },
+                { "key": "session_cumulative_risk_score", "type": "number", "required": false, "description": "Cumulative risk score across session turns" },
+                { "key": "session_injection_detected", "type": "boolean", "required": false, "description": "Injection seen in any prior turn of this session" },
+                { "key": "session_command_injection", "type": "boolean", "required": false, "description": "Command injection seen in any prior turn of this session" },
+                { "key": "session_pii_detected", "type": "boolean", "required": false, "description": "PII seen in any prior turn of this session" },
+                { "key": "session_pii_types", "type": "array", "required": false, "description": "PII types accumulated across session" },
+                { "key": "session_secrets_detected", "type": "boolean", "required": false, "description": "Secrets seen in any prior turn of this session" },
+                { "key": "session_secret_types", "type": "array", "required": false, "description": "Secret types accumulated across session" },
+                { "key": "session_max_injection_score", "type": "number", "required": false, "description": "Max injection score across session turns" },
+                { "key": "session_max_jailbreak_score", "type": "number", "required": false, "description": "Max jailbreak score across session turns" },
+                { "key": "session_max_command_injection_score", "type": "number", "required": false, "description": "Max command-injection score across session turns" },
+                { "key": "session_max_pii_score", "type": "number", "required": false, "description": "Max pii score across session turns" },
+                { "key": "session_max_secret_score", "type": "number", "required": false, "description": "Max secret score across session turns" }
             ]
         }
     ]
@@ -2085,20 +2235,20 @@ export const GUARDRAILS_CONTEXT = {
                 { "key": "direction", "type": "string", "required": true, "description": "Content flow direction: \'input\' for user prompts, \'output\' for AI responses. Use this to apply different policies to inputs vs outputs (e.g., block PII only in outputs)" },
                 { "key": "content_type", "type": "string", "required": true, "description": "Type of content being analyzed: \'prompt\', \'response\', \'tool_call\', \'file\', or \'clipboard\'" },
                 { "key": "detector_count", "type": "number", "required": true, "description": "Number of detectors that were executed for this request" },
-                { "key": "injection_confidence", "type": "number", "required": false, "description": "Combined prompt injection confidence (0-100). MAX of all detector scores (Pulse + DeepContext). Use injection_pulse_score / injection_deep_context_score for individual detector control" },
-                { "key": "jailbreak_confidence", "type": "number", "required": false, "description": "Combined jailbreak detection confidence (0-100). MAX of all detector scores (Pulse + DeepContext). Use jailbreak_pulse_score / jailbreak_deep_context_score for individual detector control" },
+                { "key": "injection_score", "type": "number", "required": false, "description": "Combined prompt injection confidence (0-100). MAX of all detector scores (Pulse + DeepContext). Use injection_pulse_score / injection_deep_context_score for individual detector control" },
+                { "key": "jailbreak_score", "type": "number", "required": false, "description": "Combined jailbreak detection confidence (0-100). MAX of all detector scores (Pulse + DeepContext). Use jailbreak_pulse_score / jailbreak_deep_context_score for individual detector control" },
                 { "key": "injection_pulse_score", "type": "number", "required": false, "description": "Highflame single-turn classifier score for prompt injection (0-100). Raw score from Pulse detector before combination with deep-context. Use for per-detector policy control" },
                 { "key": "injection_deep_context_score", "type": "number", "required": false, "description": "DeepContext multi-turn analyzer score for prompt injection (0-100). Tracks injection patterns across conversation history. Generally higher confidence than single-turn" },
                 { "key": "jailbreak_pulse_score", "type": "number", "required": false, "description": "Highflame single-turn classifier score for jailbreak attempts (0-100). Raw score from Pulse detector before combination with deep-context" },
                 { "key": "jailbreak_deep_context_score", "type": "number", "required": false, "description": "DeepContext multi-turn analyzer score for jailbreak attempts (0-100). Detects jailbreak escalation patterns across conversation turns" },
                 { "key": "injection_type", "type": "string", "required": false, "description": "Type of injection detected: \'prompt\', \'sql\', \'command\', or \'none\'. Use this to apply different policies per injection type" },
-                { "key": "contains_secrets", "type": "boolean", "required": false, "description": "Whether any API keys, tokens, passwords, or credentials were detected in the content. True indicates presence of secrets" },
+                { "key": "secrets_detected", "type": "boolean", "required": false, "description": "Whether any API keys, tokens, passwords, or credentials were detected in the content. True indicates presence of secrets" },
                 { "key": "secret_count", "type": "number", "required": false, "description": "Total number of secret matches found. Multiple matches may indicate data dumps or accidental credential exposure" },
                 { "key": "secret_types", "type": "array", "required": false, "description": "Array of secret types found (e.g., [\'aws_access_key\', \'github_token\']). Use set operations like .contains() to check for specific types" },
                 { "key": "pii_detected", "type": "boolean", "required": false, "description": "Whether personally identifiable information (PII) was found in the content. Commonly used to block PII in outputs to prevent data leakage" },
                 { "key": "pii_count", "type": "number", "required": false, "description": "Total number of PII matches found (emails, phone numbers, SSNs, etc.)" },
                 { "key": "pii_types", "type": "array", "required": false, "description": "Array of PII types detected (e.g., [\'email\', \'phone\', \'ssn\', \'credit_card\']). Use .contains() to block specific sensitive types" },
-                { "key": "pii_confidence", "type": "number", "required": false, "description": "PII detection ML classifier confidence (0-100). Catches novel PII patterns including names, addresses, and identifiers that regex rules may miss. Typical threshold: >=80 for high-confidence blocking" },
+                { "key": "pii_score", "type": "number", "required": false, "description": "PII detection ML classifier confidence (0-100). Catches novel PII patterns including names, addresses, and identifiers that regex rules may miss. Typical threshold: >=80 for high-confidence blocking" },
                 { "key": "highest_severity", "type": "string", "required": false, "description": "Highest severity level across all detection engines: \'critical\', \'high\', \'medium\', \'low\', or \'none\'. Use for severity-based catch-all policies (e.g., block any content flagged as critical)" },
                 { "key": "violence_score", "type": "number", "required": false, "description": "ML-based score for violent content references (0-100). Typical threshold: >90 for critical blocks, >60 for warnings" },
                 { "key": "hate_speech_score", "type": "number", "required": false, "description": "ML-based score for hate speech, discriminatory language, or targeted harassment (0-100). Typical threshold: >75 for blocks" },
@@ -2108,7 +2258,7 @@ export const GUARDRAILS_CONTEXT = {
                 { "key": "profanity_score", "type": "number", "required": false, "description": "ML-based score for profanity and vulgar language (0-100)" },
                 { "key": "content_topics", "type": "array", "required": false, "description": "Semantic topics detected in content (e.g., [\'controlled_substances\', \'weapons_manufacturing\']). Use .contains() to block specific topics per application" },
                 { "key": "topic_confidence", "type": "number", "required": false, "description": "Confidence score from topic classifier (0-100). Use with content_topics to tune sensitivity — higher thresholds reduce false positives" },
-                { "key": "contains_invisible_chars", "type": "boolean", "required": false, "description": "Whether invisible Unicode characters (zero-width joiners, RTL marks, etc.) were detected in the content. Commonly used for prompt injection evasion" },
+                { "key": "invisible_chars_detected", "type": "boolean", "required": false, "description": "Whether invisible Unicode characters (zero-width joiners, RTL marks, etc.) were detected in the content. Commonly used for prompt injection evasion" },
                 { "key": "invisible_chars_score", "type": "number", "required": false, "description": "Density score for invisible characters in the content (0-100). Higher scores indicate more invisible characters, suggesting evasion attempts" },
                 { "key": "command_injection_detected", "type": "boolean", "required": false, "description": "Whether command injection patterns were detected in the content (reverse shells, privilege escalation, destructive commands)" },
                 { "key": "command_injection_type", "type": "string", "required": false, "description": "Type of command injection: \'reverse_shell\', \'privilege_escalation\', \'code_execution\', \'destructive_command\', or \'data_exfiltration\'" },
@@ -2191,14 +2341,14 @@ export const GUARDRAILS_CONTEXT = {
                 { "key": "budget_exceeded", "type": "boolean", "required": false, "description": "Whether the token budget has been exceeded. Use this to enforce cost controls on agentic sessions" },
                 { "key": "content_topics", "type": "array", "required": false, "description": "Semantic topics detected in tool arguments or content (e.g., [\'controlled_substances\']). Use .contains() to restrict tool calls involving specific topics" },
                 { "key": "topic_confidence", "type": "number", "required": false, "description": "Confidence score from topic classifier for tool content (0-100)" },
-                { "key": "contains_secrets", "type": "boolean", "required": false, "description": "Whether secrets were detected in tool arguments or content" },
+                { "key": "secrets_detected", "type": "boolean", "required": false, "description": "Whether secrets were detected in tool arguments or content" },
                 { "key": "secret_count", "type": "number", "required": false, "description": "Total number of secret matches found in tool arguments or content. Multiple matches may indicate data dumps or accidental credential exposure" },
                 { "key": "secret_types", "type": "array", "required": false, "description": "Array of secret types found in tool arguments" },
                 { "key": "pii_detected", "type": "boolean", "required": false, "description": "Whether PII was detected in tool arguments or content" },
                 { "key": "pii_types", "type": "array", "required": false, "description": "Array of PII types found in tool arguments" },
                 { "key": "pii_count", "type": "number", "required": false, "description": "Number of PII pattern matches in tool arguments or content. Use >=3 to detect bulk PII exposure indicating data dumps or CSV pastes" },
-                { "key": "pii_confidence", "type": "number", "required": false, "description": "PII detection ML classifier confidence for tool content (0-100). Catches novel PII patterns that escape regex detection" },
-                { "key": "injection_confidence", "type": "number", "required": false, "description": "Combined prompt injection confidence in tool arguments (0-100). MAX of all detector scores (Pulse + DeepContext). Use injection_pulse_score / injection_deep_context_score for individual detector control" },
+                { "key": "pii_score", "type": "number", "required": false, "description": "PII detection ML classifier confidence for tool content (0-100). Catches novel PII patterns that escape regex detection" },
+                { "key": "injection_score", "type": "number", "required": false, "description": "Combined prompt injection confidence in tool arguments (0-100). MAX of all detector scores (Pulse + DeepContext). Use injection_pulse_score / injection_deep_context_score for individual detector control" },
                 { "key": "injection_pulse_score", "type": "number", "required": false, "description": "Highflame single-turn classifier score for prompt injection in tool arguments (0-100). Raw score from Pulse detector before combination with deep-context" },
                 { "key": "injection_deep_context_score", "type": "number", "required": false, "description": "DeepContext multi-turn analyzer score for prompt injection in tool arguments (0-100). Tracks injection patterns across tool call history" },
                 { "key": "command_injection_detected", "type": "boolean", "required": false, "description": "Whether command injection patterns were detected in tool arguments" },
@@ -2226,7 +2376,7 @@ export const GUARDRAILS_CONTEXT = {
                 { "key": "encoded_count", "type": "number", "required": false, "description": "Number of encoded segments found in tool arguments" },
                 { "key": "encoded_score", "type": "number", "required": false, "description": "Risk score for encoded injection in tool arguments (0-100)" },
                 { "key": "path", "type": "string", "required": false, "description": "File path targeted by the tool call (if file operation). Use for path-based blocking of .env files, credential files, system directories, and credential directories" },
-                { "key": "contains_invisible_chars", "type": "boolean", "required": false, "description": "Whether invisible Unicode characters (zero-width, bidi overrides, tag characters) were detected in tool arguments. Tool args should be plain text — invisible chars indicate payload injection" },
+                { "key": "invisible_chars_detected", "type": "boolean", "required": false, "description": "Whether invisible Unicode characters (zero-width, bidi overrides, tag characters) were detected in tool arguments. Tool args should be plain text — invisible chars indicate payload injection" },
                 { "key": "invisible_chars_score", "type": "number", "required": false, "description": "Invisible character attack severity score in tool arguments (0-100)" },
                 { "key": "indirect_injection_score", "type": "number", "required": false, "description": "Indirect prompt injection risk score (0-100) — injection via tool outputs, retrieved documents, or external content. Use >=70 for general blocking, >=50 for sensitive tools" },
                 { "key": "indirect_injection_type", "type": "string", "required": false, "description": "Type of indirect injection detected in tool content (e.g., instruction override, authority hijack)" },
@@ -2260,7 +2410,7 @@ export const GUARDRAILS_CONTEXT = {
                 { "key": "request_id", "type": "string", "required": true, "description": "Unique identifier for this request" },
                 { "key": "timestamp", "type": "number", "required": true, "description": "Unix timestamp in milliseconds" },
                 { "key": "path", "type": "string", "required": false, "description": "File path being read. Use for path-based access control policies (e.g., block .env files, system directories, credential directories)" },
-                { "key": "contains_secrets", "type": "boolean", "required": false, "description": "Whether secrets were detected in the file content being read" },
+                { "key": "secrets_detected", "type": "boolean", "required": false, "description": "Whether secrets were detected in the file content being read" },
                 { "key": "secret_count", "type": "number", "required": false, "description": "Total number of secret matches found in file content. Multiple matches may indicate data dumps or accidental credential exposure" },
                 { "key": "secret_types", "type": "array", "required": false, "description": "Array of secret types found in file content" },
                 { "key": "pii_detected", "type": "boolean", "required": false, "description": "Whether PII was detected in the file content" },
@@ -2295,9 +2445,9 @@ export const GUARDRAILS_CONTEXT = {
                 { "key": "request_id", "type": "string", "required": true, "description": "Unique identifier for this request" },
                 { "key": "timestamp", "type": "number", "required": true, "description": "Unix timestamp in milliseconds" },
                 { "key": "path", "type": "string", "required": false, "description": "File path being written. Use for path-based blocking policies (e.g., block writes to .env files, credential directories)" },
-                { "key": "contains_invisible_chars", "type": "boolean", "required": false, "description": "Whether invisible Unicode characters (zero-width, bidi overrides, tag characters) were detected in the content being written. Prevents persistence of invisible payloads in source code" },
+                { "key": "invisible_chars_detected", "type": "boolean", "required": false, "description": "Whether invisible Unicode characters (zero-width, bidi overrides, tag characters) were detected in the content being written. Prevents persistence of invisible payloads in source code" },
                 { "key": "invisible_chars_score", "type": "number", "required": false, "description": "Invisible character attack severity score (0-100) in write content" },
-                { "key": "contains_secrets", "type": "boolean", "required": false, "description": "Whether secrets were detected in the content being written. Block writes containing credentials" },
+                { "key": "secrets_detected", "type": "boolean", "required": false, "description": "Whether secrets were detected in the content being written. Block writes containing credentials" },
                 { "key": "secret_count", "type": "number", "required": false, "description": "Total number of secret matches found in write content. Multiple matches may indicate data dumps or accidental credential exposure" },
                 { "key": "secret_types", "type": "array", "required": false, "description": "Array of secret types found in write content" },
                 { "key": "pii_detected", "type": "boolean", "required": false, "description": "Whether PII was detected in the content being written" },
@@ -2387,13 +2537,13 @@ export const OVERWATCH_CONTEXT = {
                 { "key": "threat_categories", "type": "array", "required": true, "description": "Threat category names from the detection aggregator" },
                 { "key": "detected_threats", "type": "array", "required": true, "description": "Detection rule names that matched (e.g., prompt_injection, jailbreak, credit_card, secret_exposure)" },
                 { "key": "max_threat_severity", "type": "number", "required": true, "description": "Numeric severity (0=none, 1=low, 2=medium, 3=high, 4=critical)" },
-                { "key": "contains_secrets", "type": "boolean", "required": true, "description": "Whether secrets or credentials were detected" },
+                { "key": "secrets_detected", "type": "boolean", "required": true, "description": "Whether secrets or credentials were detected" },
                 { "key": "secret_types", "type": "array", "required": false, "description": "Specific secret types found: aws_access_key, github_token, ssh_private_key, api_key, etc." },
                 { "key": "secret_count", "type": "number", "required": false, "description": "Number of distinct secrets detected" },
                 { "key": "pii_detected", "type": "boolean", "required": false, "description": "Whether any PII patterns were matched" },
                 { "key": "pii_types", "type": "array", "required": false, "description": "Specific PII types found: ssn, credit_card, email, phone, medical_record, etc." },
                 { "key": "pii_count", "type": "number", "required": false, "description": "Number of PII pattern matches" },
-                { "key": "contains_invisible_chars", "type": "boolean", "required": false, "description": "Whether invisible Unicode characters (zero-width, bidi overrides, tag chars) were detected" },
+                { "key": "invisible_chars_detected", "type": "boolean", "required": false, "description": "Whether invisible Unicode characters (zero-width, bidi overrides, tag chars) were detected" },
                 { "key": "invisible_chars_score", "type": "number", "required": false, "description": "Invisible character attack severity score (0-100)" },
                 { "key": "prompt_text", "type": "string", "required": false, "description": "Same as content (backward compatibility)" },
                 { "key": "response_content", "type": "string", "required": false, "description": "Response content from AI (if available)" },
@@ -2403,9 +2553,9 @@ export const OVERWATCH_CONTEXT = {
                 { "key": "crime_score", "type": "number", "required": true, "description": "Criminal content detection score (0-100)" },
                 { "key": "sexual_score", "type": "number", "required": true, "description": "Sexual content detection score (0-100)" },
                 { "key": "profanity_score", "type": "number", "required": true, "description": "Profanity detection score (0-100)" },
-                { "key": "pii_confidence", "type": "number", "required": true, "description": "PII detection ML classifier confidence (0-100)" },
-                { "key": "injection_confidence", "type": "number", "required": true, "description": "Combined prompt injection confidence (0-100). MAX of all detector scores (Pulse + DeepContext). Use injection_pulse_score / injection_deep_context_score for individual detector control" },
-                { "key": "jailbreak_confidence", "type": "number", "required": true, "description": "Combined jailbreak detection confidence (0-100). MAX of all detector scores (Pulse + DeepContext). Use jailbreak_pulse_score / jailbreak_deep_context_score for individual detector control" },
+                { "key": "pii_score", "type": "number", "required": true, "description": "PII detection ML classifier confidence (0-100)" },
+                { "key": "injection_score", "type": "number", "required": true, "description": "Combined prompt injection confidence (0-100). MAX of all detector scores (Pulse + DeepContext). Use injection_pulse_score / injection_deep_context_score for individual detector control" },
+                { "key": "jailbreak_score", "type": "number", "required": true, "description": "Combined jailbreak detection confidence (0-100). MAX of all detector scores (Pulse + DeepContext). Use jailbreak_pulse_score / jailbreak_deep_context_score for individual detector control" },
                 { "key": "injection_pulse_score", "type": "number", "required": false, "description": "Highflame single-turn classifier score for prompt injection (0-100). Raw score from Pulse detector before combination with deep-context. Use for per-detector policy control" },
                 { "key": "injection_deep_context_score", "type": "number", "required": false, "description": "DeepContext multi-turn analyzer score for prompt injection (0-100). Tracks injection patterns across conversation history. Generally higher confidence than single-turn" },
                 { "key": "jailbreak_pulse_score", "type": "number", "required": false, "description": "Highflame single-turn classifier score for jailbreak attempts (0-100). Raw score from Pulse detector before combination with deep-context" },
@@ -2445,13 +2595,13 @@ export const OVERWATCH_CONTEXT = {
                 { "key": "threat_categories", "type": "array", "required": false, "description": "Threat category names from the detection aggregator" },
                 { "key": "detected_threats", "type": "array", "required": false, "description": "Detection rule names that matched" },
                 { "key": "max_threat_severity", "type": "number", "required": false, "description": "Numeric severity (0=none, 1=low, 2=medium, 3=high, 4=critical)" },
-                { "key": "contains_secrets", "type": "boolean", "required": false, "description": "Whether secrets or credentials were detected" },
+                { "key": "secrets_detected", "type": "boolean", "required": false, "description": "Whether secrets or credentials were detected" },
                 { "key": "secret_types", "type": "array", "required": false, "description": "Specific secret types found" },
                 { "key": "secret_count", "type": "number", "required": false, "description": "Number of distinct secrets detected" },
                 { "key": "pii_detected", "type": "boolean", "required": false, "description": "Whether any PII patterns were matched" },
                 { "key": "pii_types", "type": "array", "required": false, "description": "Specific PII types found" },
                 { "key": "pii_count", "type": "number", "required": false, "description": "Number of PII pattern matches" },
-                { "key": "contains_invisible_chars", "type": "boolean", "required": false, "description": "Whether invisible Unicode characters were detected" },
+                { "key": "invisible_chars_detected", "type": "boolean", "required": false, "description": "Whether invisible Unicode characters were detected" },
                 { "key": "invisible_chars_score", "type": "number", "required": false, "description": "Invisible character attack severity score (0-100)" },
                 { "key": "response_content", "type": "string", "required": false, "description": "Response content from AI (if available)" },
                 { "key": "violence_score", "type": "number", "required": false, "description": "Violence content detection score (0-100)" },
@@ -2460,9 +2610,9 @@ export const OVERWATCH_CONTEXT = {
                 { "key": "crime_score", "type": "number", "required": false, "description": "Criminal content detection score (0-100)" },
                 { "key": "sexual_score", "type": "number", "required": false, "description": "Sexual content detection score (0-100)" },
                 { "key": "profanity_score", "type": "number", "required": false, "description": "Profanity detection score (0-100)" },
-                { "key": "pii_confidence", "type": "number", "required": false, "description": "PII detection ML classifier confidence (0-100)" },
-                { "key": "injection_confidence", "type": "number", "required": false, "description": "Combined prompt injection confidence (0-100). MAX of all detector scores (Pulse + DeepContext). Use injection_pulse_score / injection_deep_context_score for individual detector control" },
-                { "key": "jailbreak_confidence", "type": "number", "required": false, "description": "Combined jailbreak detection confidence (0-100). MAX of all detector scores (Pulse + DeepContext). Use jailbreak_pulse_score / jailbreak_deep_context_score for individual detector control" },
+                { "key": "pii_score", "type": "number", "required": false, "description": "PII detection ML classifier confidence (0-100)" },
+                { "key": "injection_score", "type": "number", "required": false, "description": "Combined prompt injection confidence (0-100). MAX of all detector scores (Pulse + DeepContext). Use injection_pulse_score / injection_deep_context_score for individual detector control" },
+                { "key": "jailbreak_score", "type": "number", "required": false, "description": "Combined jailbreak detection confidence (0-100). MAX of all detector scores (Pulse + DeepContext). Use jailbreak_pulse_score / jailbreak_deep_context_score for individual detector control" },
                 { "key": "injection_pulse_score", "type": "number", "required": false, "description": "Highflame single-turn classifier score for prompt injection in tool arguments (0-100). Raw score from Pulse detector before combination with deep-context" },
                 { "key": "injection_deep_context_score", "type": "number", "required": false, "description": "DeepContext multi-turn analyzer score for prompt injection in tool arguments (0-100). Tracks injection patterns across tool call history" },
                 { "key": "jailbreak_pulse_score", "type": "number", "required": false, "description": "Highflame single-turn classifier score for jailbreak in tool arguments (0-100). Raw score from Pulse detector before combination with deep-context" },
@@ -2511,7 +2661,7 @@ export const OVERWATCH_CONTEXT = {
                 { "key": "highest_severity", "type": "string", "required": false, "description": "Highest severity level: critical, high, medium, low, none" },
                 { "key": "threat_categories", "type": "array", "required": false, "description": "Threat category names from the detection aggregator" },
                 { "key": "max_threat_severity", "type": "number", "required": false, "description": "Numeric severity (0=none, 1=low, 2=medium, 3=high, 4=critical)" },
-                { "key": "contains_invisible_chars", "type": "boolean", "required": false, "description": "Whether invisible Unicode characters were detected in server data" },
+                { "key": "invisible_chars_detected", "type": "boolean", "required": false, "description": "Whether invisible Unicode characters were detected in server data" },
                 { "key": "tool_poisoning_score", "type": "number", "required": false, "description": "Tool description manipulation risk score (0-100) — poisoned tool descriptions in server" },
                 { "key": "tool_poisoning_detected", "type": "boolean", "required": false, "description": "Whether tool poisoning patterns were explicitly detected" },
                 { "key": "rug_pull_score", "type": "number", "required": false, "description": "Server behavioral drift score (0-100) — behavior change after approval" },
@@ -2551,7 +2701,7 @@ export const OVERWATCH_CONTEXT = {
                 { "key": "threat_categories", "type": "array", "required": false, "description": "Threat category names from the detection aggregator" },
                 { "key": "detected_threats", "type": "array", "required": false, "description": "Detection rule names that matched" },
                 { "key": "max_threat_severity", "type": "number", "required": false, "description": "Numeric severity (0=none, 1=low, 2=medium, 3=high, 4=critical)" },
-                { "key": "contains_secrets", "type": "boolean", "required": false, "description": "Whether secrets or credentials were detected in file content" },
+                { "key": "secrets_detected", "type": "boolean", "required": false, "description": "Whether secrets or credentials were detected in file content" },
                 { "key": "secret_types", "type": "array", "required": false, "description": "Specific secret types found in file" },
                 { "key": "secret_count", "type": "number", "required": false, "description": "Number of distinct secrets detected in file" },
                 { "key": "pii_detected", "type": "boolean", "required": false, "description": "Whether any PII patterns were matched in file content" },
@@ -2588,13 +2738,13 @@ export const OVERWATCH_CONTEXT = {
                 { "key": "threat_categories", "type": "array", "required": false, "description": "Threat category names from the detection aggregator" },
                 { "key": "detected_threats", "type": "array", "required": false, "description": "Detection rule names that matched" },
                 { "key": "max_threat_severity", "type": "number", "required": false, "description": "Numeric severity (0=none, 1=low, 2=medium, 3=high, 4=critical)" },
-                { "key": "contains_secrets", "type": "boolean", "required": false, "description": "Whether secrets or credentials were detected in content being written" },
+                { "key": "secrets_detected", "type": "boolean", "required": false, "description": "Whether secrets or credentials were detected in content being written" },
                 { "key": "secret_types", "type": "array", "required": false, "description": "Specific secret types found" },
                 { "key": "secret_count", "type": "number", "required": false, "description": "Number of distinct secrets detected" },
                 { "key": "pii_detected", "type": "boolean", "required": false, "description": "Whether any PII patterns were matched in content being written" },
                 { "key": "pii_types", "type": "array", "required": false, "description": "Specific PII types found" },
                 { "key": "pii_count", "type": "number", "required": false, "description": "Number of PII pattern matches" },
-                { "key": "contains_invisible_chars", "type": "boolean", "required": false, "description": "Whether invisible Unicode characters were detected in content being written" },
+                { "key": "invisible_chars_detected", "type": "boolean", "required": false, "description": "Whether invisible Unicode characters were detected in content being written" },
                 { "key": "session_pii_detected", "type": "boolean", "required": false, "description": "Whether PII was detected in any previous turn of the session" },
                 { "key": "session_pii_types", "type": "array", "required": false, "description": "PII types detected across the session (accumulated)" },
                 { "key": "session_secrets_detected", "type": "boolean", "required": false, "description": "Whether secrets were detected in any previous turn of the session" },
@@ -2733,13 +2883,13 @@ export const SENTRY_CONTEXT = {
                 { "key": "threat_categories", "type": "array", "required": true, "description": "Threat category names from the detection aggregator" },
                 { "key": "detected_threats", "type": "array", "required": true, "description": "Detection rule names that matched (e.g., prompt_injection, credit_card, secret_exposure)" },
                 { "key": "max_threat_severity", "type": "number", "required": true, "description": "Numeric severity (0=none, 1=low, 2=medium, 3=high, 4=critical)" },
-                { "key": "contains_secrets", "type": "boolean", "required": true, "description": "Whether secrets or credentials were detected in the message" },
+                { "key": "secrets_detected", "type": "boolean", "required": true, "description": "Whether secrets or credentials were detected in the message" },
                 { "key": "secret_types", "type": "array", "required": false, "description": "Specific secret types: aws_access_key, aws_secret_key, github_token, github_fine_grained, slack_token, gcp_service_account, gcp_api_key, azure_connection_string, private_key, jwt_token, generic_api_key, stripe_key, openai_key, anthropic_key" },
                 { "key": "secret_count", "type": "number", "required": false, "description": "Number of distinct secrets detected" },
                 { "key": "pii_detected", "type": "boolean", "required": false, "description": "Whether any PII patterns were matched" },
                 { "key": "pii_types", "type": "array", "required": false, "description": "Specific PII types: ssn, credit_card, email, phone_us, ip_address, date_of_birth, passport, iban, aws_key, api_key_generic" },
                 { "key": "pii_count", "type": "number", "required": false, "description": "Number of PII pattern matches" },
-                { "key": "pii_confidence", "type": "number", "required": false, "description": "PII detection confidence (0-100). Fixed 80 when regex PII detected, else 0" },
+                { "key": "pii_score", "type": "number", "required": false, "description": "PII detection confidence (0-100). Fixed 80 when regex PII detected, else 0" },
                 { "key": "violence_score", "type": "number", "required": true, "description": "Violence content detection score (0-100, from ToxicityDetector)" },
                 { "key": "weapons_score", "type": "number", "required": true, "description": "Weapons content detection score (0-100)" },
                 { "key": "hate_speech_score", "type": "number", "required": true, "description": "Hate speech detection score (0-100)" },
@@ -2750,7 +2900,7 @@ export const SENTRY_CONTEXT = {
                 { "key": "jailbreak_score", "type": "number", "required": true, "description": "Jailbreak detection score (0-100, max of JailbreakDetector + DeepContextDetector)" },
                 { "key": "content_topics", "type": "array", "required": false, "description": "Detected topics from TopicDetector: controlled_substances, weapons_manufacturing, etc." },
                 { "key": "topic_confidence", "type": "number", "required": false, "description": "Topic classifier confidence (0-100)" },
-                { "key": "contains_invisible_chars", "type": "boolean", "required": false, "description": "Whether invisible Unicode characters (zero-width, bidi overrides, tag chars) were detected" },
+                { "key": "invisible_chars_detected", "type": "boolean", "required": false, "description": "Whether invisible Unicode characters (zero-width, bidi overrides, tag chars) were detected" },
                 { "key": "invisible_chars_score", "type": "number", "required": false, "description": "Invisible character attack severity score (0-100)" },
                 { "key": "encoded_content_detected", "type": "boolean", "required": false, "description": "Whether encoded content (base64, hex, unicode, URL) was detected" },
                 { "key": "encoded_types", "type": "array", "required": false, "description": "Encoding types detected: base64, hex, unicode, url" },
@@ -2792,13 +2942,13 @@ export const SENTRY_CONTEXT = {
                 { "key": "threat_categories", "type": "array", "required": true, "description": "Threat category names" },
                 { "key": "detected_threats", "type": "array", "required": true, "description": "Detection rule names that matched" },
                 { "key": "max_threat_severity", "type": "number", "required": true, "description": "Numeric severity (0-4)" },
-                { "key": "contains_secrets", "type": "boolean", "required": true, "description": "Whether secrets detected in AI response" },
+                { "key": "secrets_detected", "type": "boolean", "required": true, "description": "Whether secrets detected in AI response" },
                 { "key": "secret_types", "type": "array", "required": false, "description": "Secret types in response" },
                 { "key": "secret_count", "type": "number", "required": false, "description": "Number of secrets in response" },
                 { "key": "pii_detected", "type": "boolean", "required": false, "description": "Whether PII detected in response" },
                 { "key": "pii_types", "type": "array", "required": false, "description": "PII types in response" },
                 { "key": "pii_count", "type": "number", "required": false, "description": "Number of PII matches in response" },
-                { "key": "pii_confidence", "type": "number", "required": false, "description": "PII detection confidence (0-100)" },
+                { "key": "pii_score", "type": "number", "required": false, "description": "PII detection confidence (0-100)" },
                 { "key": "violence_score", "type": "number", "required": true, "description": "Violence score (0-100)" },
                 { "key": "weapons_score", "type": "number", "required": true, "description": "Weapons score (0-100)" },
                 { "key": "hate_speech_score", "type": "number", "required": true, "description": "Hate speech score (0-100)" },
@@ -2839,13 +2989,13 @@ export const SENTRY_CONTEXT = {
                 { "key": "threat_categories", "type": "array", "required": true, "description": "Threat category names" },
                 { "key": "detected_threats", "type": "array", "required": true, "description": "Detection rule names that matched" },
                 { "key": "max_threat_severity", "type": "number", "required": true, "description": "Numeric severity (0-4)" },
-                { "key": "contains_secrets", "type": "boolean", "required": true, "description": "Whether secrets detected in pasted content" },
+                { "key": "secrets_detected", "type": "boolean", "required": true, "description": "Whether secrets detected in pasted content" },
                 { "key": "secret_types", "type": "array", "required": false, "description": "Secret types in pasted content" },
                 { "key": "secret_count", "type": "number", "required": false, "description": "Number of secrets" },
                 { "key": "pii_detected", "type": "boolean", "required": false, "description": "Whether PII detected in pasted content" },
                 { "key": "pii_types", "type": "array", "required": false, "description": "PII types in pasted content" },
                 { "key": "pii_count", "type": "number", "required": false, "description": "PII match count" },
-                { "key": "pii_confidence", "type": "number", "required": false, "description": "PII detection confidence (0-100)" },
+                { "key": "pii_score", "type": "number", "required": false, "description": "PII detection confidence (0-100)" },
                 { "key": "violence_score", "type": "number", "required": true, "description": "Violence score (0-100)" },
                 { "key": "weapons_score", "type": "number", "required": true, "description": "Weapons score (0-100)" },
                 { "key": "hate_speech_score", "type": "number", "required": true, "description": "Hate speech score (0-100)" },
@@ -2857,7 +3007,7 @@ export const SENTRY_CONTEXT = {
                 { "key": "contains_code", "type": "boolean", "required": false, "description": "Whether pasted content contains code" },
                 { "key": "code_languages", "type": "array", "required": false, "description": "Code languages in pasted content" },
                 { "key": "code_ratio", "type": "number", "required": false, "description": "Code ratio (0-100)" },
-                { "key": "contains_invisible_chars", "type": "boolean", "required": false, "description": "Whether invisible Unicode characters detected" },
+                { "key": "invisible_chars_detected", "type": "boolean", "required": false, "description": "Whether invisible Unicode characters detected" },
                 { "key": "invisible_chars_score", "type": "number", "required": false, "description": "Invisible chars severity (0-100)" },
                 { "key": "encoded_content_detected", "type": "boolean", "required": false, "description": "Whether encoded content detected" },
                 { "key": "encoded_types", "type": "array", "required": false, "description": "Encoding types" },
@@ -2898,13 +3048,13 @@ export const SENTRY_CONTEXT = {
                 { "key": "threat_categories", "type": "array", "required": true, "description": "Threat category names" },
                 { "key": "detected_threats", "type": "array", "required": true, "description": "Detection rule names that matched" },
                 { "key": "max_threat_severity", "type": "number", "required": true, "description": "Numeric severity (0-4)" },
-                { "key": "contains_secrets", "type": "boolean", "required": true, "description": "Whether secrets detected in file content" },
+                { "key": "secrets_detected", "type": "boolean", "required": true, "description": "Whether secrets detected in file content" },
                 { "key": "secret_types", "type": "array", "required": false, "description": "Secret types in file" },
                 { "key": "secret_count", "type": "number", "required": false, "description": "Number of secrets" },
                 { "key": "pii_detected", "type": "boolean", "required": false, "description": "Whether PII detected in file" },
                 { "key": "pii_types", "type": "array", "required": false, "description": "PII types in file" },
                 { "key": "pii_count", "type": "number", "required": false, "description": "PII match count" },
-                { "key": "pii_confidence", "type": "number", "required": false, "description": "PII confidence (0-100)" },
+                { "key": "pii_score", "type": "number", "required": false, "description": "PII confidence (0-100)" },
                 { "key": "violence_score", "type": "number", "required": true, "description": "Violence score (0-100)" },
                 { "key": "weapons_score", "type": "number", "required": true, "description": "Weapons score (0-100)" },
                 { "key": "hate_speech_score", "type": "number", "required": true, "description": "Hate speech score (0-100)" },
@@ -2917,7 +3067,7 @@ export const SENTRY_CONTEXT = {
                 { "key": "code_languages", "type": "array", "required": false, "description": "Code languages in file" },
                 { "key": "code_ratio", "type": "number", "required": false, "description": "Code ratio (0-100)" },
                 { "key": "phishing_detected", "type": "boolean", "required": false, "description": "Whether phishing URLs detected in file" },
-                { "key": "contains_invisible_chars", "type": "boolean", "required": false, "description": "Whether invisible chars detected in file" },
+                { "key": "invisible_chars_detected", "type": "boolean", "required": false, "description": "Whether invisible chars detected in file" },
                 { "key": "invisible_chars_score", "type": "number", "required": false, "description": "Invisible chars severity (0-100)" },
                 { "key": "encoded_content_detected", "type": "boolean", "required": false, "description": "Whether encoded content detected in file" },
                 { "key": "encoded_types", "type": "array", "required": false, "description": "Encoding types in file" },