@highflame/policy 2.2.10 → 2.2.22

package/_schemas/ai_gateway/templates/templates.json

@@ -178,19 +178,6 @@
         "compliance:pci-dss",
         "compliance:hipaa"
       ]
-    },
-    {
-      "id": "organization.permit-llm-default",
-      "name": "Permit LLM proxy calls",
-      "description": "Permit all LLM chat completion requests by default; deploy alongside threat-specific forbids for a permit-default posture.",
-      "category": "organization",
-      "file": "llm_default_allow.cedar",
-      "severity": "low",
-      "tags": [
-        "category:organization",
-        "surface:process-prompt",
-        "posture:permit-default"
-      ]
     }
   ]
 }

package/dist/ai_gateway-defaults.gen.js

@@ -1299,28 +1299,6 @@ when {
     )
 };
 `;
-const AI_GATEWAY_ORGANIZATION_PERMIT_LLM_DEFAULT_CEDAR = `// =============================================================================
-// LLM Default Allow
-// =============================================================================
-// Permits all LLM prompt processing by default. Deploy alongside threat-specific
-// forbid policies to create a "default allow, block on threat" posture for LLM
-// chat completions.
-//
-// Category:  organization
-// Namespace: AIGateway
-// =============================================================================
-
-@id("organization.permit-llm-default")
-@name("Permit LLM proxy calls")
-@description("Permits all process_prompt actions for the LLM proxy.")
-@severity("low")
-@tags("category:organization,surface:process-prompt,posture:permit-default")
-permit (
-    principal,
-    action == AIGateway::Action::"process_prompt",
-    resource
-);
-`;
 // =============================================================================
 // CATEGORIES
 // =============================================================================
@@ -1442,15 +1420,6 @@ export const AI_GATEWAY_TEMPLATES = [
         severity: 'critical',
         tags: ['category:privacy', 'threat:pii', 'detection:pattern', 'compliance:pci-dss', 'compliance:hipaa'],
     },
-    {
-        id: 'organization.permit-llm-default',
-        name: 'Permit LLM proxy calls',
-        description: 'Permit all LLM chat completion requests by default; deploy alongside threat-specific forbids for a permit-default posture.',
-        category: 'organization',
-        cedarText: AI_GATEWAY_ORGANIZATION_PERMIT_LLM_DEFAULT_CEDAR,
-        severity: 'low',
-        tags: ['category:organization', 'surface:process-prompt', 'posture:permit-default'],
-    },
 ];
 // =============================================================================
 // TEMPLATES METADATA
@@ -1636,19 +1605,6 @@ export const AI_GATEWAY_TEMPLATES_JSON = `{
         "compliance:pci-dss",
         "compliance:hipaa"
       ]
-    },
-    {
-      "id": "organization.permit-llm-default",
-      "name": "Permit LLM proxy calls",
-      "description": "Permit all LLM chat completion requests by default; deploy alongside threat-specific forbids for a permit-default posture.",
-      "category": "organization",
-      "file": "llm_default_allow.cedar",
-      "severity": "low",
-      "tags": [
-        "category:organization",
-        "surface:process-prompt",
-        "posture:permit-default"
-      ]
     }
   ]
 }

package/dist/guardrails-detectors.gen.js

@@ -350,20 +350,6 @@ export const GUARDRAILS_DETECTORS = [
         defendsAgainst: ["pii_leakage", "phi_leakage"],
         exampleAttacks: [{ title: "Unstructured PII", vulnerabilityId: "pii_leakage", snippet: "My patient John Halloway at 42 Birch Lane was diagnosed last Tuesday.", expectedSignal: {} }],
     },
-    {
-        id: "dlp",
-        displayName: "Highflame DLP",
-        category: "data_protection",
-        stability: "stable",
-        tier: "slow",
-        inhouse: false,
-        model: null,
-        latencyP50Ms: 248,
-        emits: [{ name: "pii_detected", type: "Bool", modifiable: false, semantic: "boolean_flag", description: "True iff the DLP detector returned at least one PII finding." }, { name: "pii_types", type: "Set<String>", modifiable: false, semantic: "category_set", description: "PII info-types found (Presidio info-type names)." }, { name: "pii_confidence", type: "String", modifiable: false, semantic: "severity_0_100", description: "Highest likelihood level returned by DLP (VERY_UNLIKELY, UNLIKELY, POSSIBLE, LIKELY, VERY_LIKELY, NONE)." }, { name: "info_types", type: "Set<String>", modifiable: false, semantic: "category_set", description: "All DLP info-types detected (alias of pii_types for explicit DLP semantics)." }],
-        supportedModes: ["enforce", "monitor", "alert"],
-        defendsAgainst: ["pii_leakage", "phi_leakage", "pci_data_exposure"],
-        exampleAttacks: [{ title: "Credit card number", vulnerabilityId: "pci_data_exposure", snippet: "Customer record: 4111 1111 1111 1111, exp 04/27.", expectedSignal: {} }],
-    },
     {
         id: "content_safety",
         displayName: "Content Safety (Model Armor)",
@@ -474,7 +460,6 @@ export const GUARDRAILS_FIELD_TO_DETECTORS = {
     "hate_speech_score": ["toxicity"],
     "indirect_injection_score": ["injection"],
     "indirect_injection_type": ["injection"],
-    "info_types": ["dlp"],
     "injection_confidence": ["injection"],
     "injection_deep_context_score": ["deepcontext"],
     "injection_pulse_score": ["injection"],
@@ -513,14 +498,13 @@ export const GUARDRAILS_FIELD_TO_DETECTORS = {
     "pattern_type": ["action_pattern"],
     "phishing_detected": ["phishing"],
     "phishing_urls": ["phishing"],
-    "pii_confidence": ["dlp"],
     "pii_count": ["pii"],
-    "pii_detected": ["pii", "dlp"],
+    "pii_detected": ["pii"],
     "pii_model_count": ["pii_model"],
     "pii_model_detected": ["pii_model"],
     "pii_model_types": ["pii_model"],
     "pii_score": ["pii"],
-    "pii_types": ["pii", "dlp"],
+    "pii_types": ["pii"],
     "profanity_score": ["toxicity"],
     "prompt_injection_score": ["deepcontext"],
     "rpm_exceeded": ["budget_checker"],
@@ -544,7 +528,7 @@ export const GUARDRAILS_FIELD_TO_DETECTORS = {
     "session_max_pii_score": ["pii"],
     "session_max_secret_score": ["secrets"],
     "session_pii_detected": ["pii"],
-    "session_pii_types": ["pii", "dlp"],
+    "session_pii_types": ["pii"],
     "session_secret_types": ["secrets"],
     "session_secrets_detected": ["secrets"],
     "sexual_score": ["toxicity"],

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@highflame/policy",
-  "version": "2.2.10",
+  "version": "2.2.22",
   "engines": {
     "node": ">=18"
   },

package/_schemas/ai_gateway/templates/llm_default_allow.cedar

@@ -1,21 +0,0 @@
-// =============================================================================
-// LLM Default Allow
-// =============================================================================
-// Permits all LLM prompt processing by default. Deploy alongside threat-specific
-// forbid policies to create a "default allow, block on threat" posture for LLM
-// chat completions.
-//
-// Category:  organization
-// Namespace: AIGateway
-// =============================================================================
-
-@id("organization.permit-llm-default")
-@name("Permit LLM proxy calls")
-@description("Permits all process_prompt actions for the LLM proxy.")
-@severity("low")
-@tags("category:organization,surface:process-prompt,posture:permit-default")
-permit (
-    principal,
-    action == AIGateway::Action::"process_prompt",
-    resource
-);