@highflame/policy 2.2.11 → 2.2.22
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
|
@@ -178,19 +178,6 @@
|
|
|
178
178
|
"compliance:pci-dss",
|
|
179
179
|
"compliance:hipaa"
|
|
180
180
|
]
|
|
181
|
-
},
|
|
182
|
-
{
|
|
183
|
-
"id": "organization.permit-llm-default",
|
|
184
|
-
"name": "Permit LLM proxy calls",
|
|
185
|
-
"description": "Permit all LLM chat completion requests by default; deploy alongside threat-specific forbids for a permit-default posture.",
|
|
186
|
-
"category": "organization",
|
|
187
|
-
"file": "llm_default_allow.cedar",
|
|
188
|
-
"severity": "low",
|
|
189
|
-
"tags": [
|
|
190
|
-
"category:organization",
|
|
191
|
-
"surface:process-prompt",
|
|
192
|
-
"posture:permit-default"
|
|
193
|
-
]
|
|
194
181
|
}
|
|
195
182
|
]
|
|
196
183
|
}
|
|
@@ -1299,28 +1299,6 @@ when {
|
|
|
1299
1299
|
)
|
|
1300
1300
|
};
|
|
1301
1301
|
`;
|
|
1302
|
-
const AI_GATEWAY_ORGANIZATION_PERMIT_LLM_DEFAULT_CEDAR = `// =============================================================================
|
|
1303
|
-
// LLM Default Allow
|
|
1304
|
-
// =============================================================================
|
|
1305
|
-
// Permits all LLM prompt processing by default. Deploy alongside threat-specific
|
|
1306
|
-
// forbid policies to create a "default allow, block on threat" posture for LLM
|
|
1307
|
-
// chat completions.
|
|
1308
|
-
//
|
|
1309
|
-
// Category: organization
|
|
1310
|
-
// Namespace: AIGateway
|
|
1311
|
-
// =============================================================================
|
|
1312
|
-
|
|
1313
|
-
@id("organization.permit-llm-default")
|
|
1314
|
-
@name("Permit LLM proxy calls")
|
|
1315
|
-
@description("Permits all process_prompt actions for the LLM proxy.")
|
|
1316
|
-
@severity("low")
|
|
1317
|
-
@tags("category:organization,surface:process-prompt,posture:permit-default")
|
|
1318
|
-
permit (
|
|
1319
|
-
principal,
|
|
1320
|
-
action == AIGateway::Action::"process_prompt",
|
|
1321
|
-
resource
|
|
1322
|
-
);
|
|
1323
|
-
`;
|
|
1324
1302
|
// =============================================================================
|
|
1325
1303
|
// CATEGORIES
|
|
1326
1304
|
// =============================================================================
|
|
@@ -1442,15 +1420,6 @@ export const AI_GATEWAY_TEMPLATES = [
|
|
|
1442
1420
|
severity: 'critical',
|
|
1443
1421
|
tags: ['category:privacy', 'threat:pii', 'detection:pattern', 'compliance:pci-dss', 'compliance:hipaa'],
|
|
1444
1422
|
},
|
|
1445
|
-
{
|
|
1446
|
-
id: 'organization.permit-llm-default',
|
|
1447
|
-
name: 'Permit LLM proxy calls',
|
|
1448
|
-
description: 'Permit all LLM chat completion requests by default; deploy alongside threat-specific forbids for a permit-default posture.',
|
|
1449
|
-
category: 'organization',
|
|
1450
|
-
cedarText: AI_GATEWAY_ORGANIZATION_PERMIT_LLM_DEFAULT_CEDAR,
|
|
1451
|
-
severity: 'low',
|
|
1452
|
-
tags: ['category:organization', 'surface:process-prompt', 'posture:permit-default'],
|
|
1453
|
-
},
|
|
1454
1423
|
];
|
|
1455
1424
|
// =============================================================================
|
|
1456
1425
|
// TEMPLATES METADATA
|
|
@@ -1636,19 +1605,6 @@ export const AI_GATEWAY_TEMPLATES_JSON = `{
|
|
|
1636
1605
|
"compliance:pci-dss",
|
|
1637
1606
|
"compliance:hipaa"
|
|
1638
1607
|
]
|
|
1639
|
-
},
|
|
1640
|
-
{
|
|
1641
|
-
"id": "organization.permit-llm-default",
|
|
1642
|
-
"name": "Permit LLM proxy calls",
|
|
1643
|
-
"description": "Permit all LLM chat completion requests by default; deploy alongside threat-specific forbids for a permit-default posture.",
|
|
1644
|
-
"category": "organization",
|
|
1645
|
-
"file": "llm_default_allow.cedar",
|
|
1646
|
-
"severity": "low",
|
|
1647
|
-
"tags": [
|
|
1648
|
-
"category:organization",
|
|
1649
|
-
"surface:process-prompt",
|
|
1650
|
-
"posture:permit-default"
|
|
1651
|
-
]
|
|
1652
1608
|
}
|
|
1653
1609
|
]
|
|
1654
1610
|
}
|
package/package.json
CHANGED
|
@@ -1,21 +0,0 @@
|
|
|
1
|
-
// =============================================================================
|
|
2
|
-
// LLM Default Allow
|
|
3
|
-
// =============================================================================
|
|
4
|
-
// Permits all LLM prompt processing by default. Deploy alongside threat-specific
|
|
5
|
-
// forbid policies to create a "default allow, block on threat" posture for LLM
|
|
6
|
-
// chat completions.
|
|
7
|
-
//
|
|
8
|
-
// Category: organization
|
|
9
|
-
// Namespace: AIGateway
|
|
10
|
-
// =============================================================================
|
|
11
|
-
|
|
12
|
-
@id("organization.permit-llm-default")
|
|
13
|
-
@name("Permit LLM proxy calls")
|
|
14
|
-
@description("Permits all process_prompt actions for the LLM proxy.")
|
|
15
|
-
@severity("low")
|
|
16
|
-
@tags("category:organization,surface:process-prompt,posture:permit-default")
|
|
17
|
-
permit (
|
|
18
|
-
principal,
|
|
19
|
-
action == AIGateway::Action::"process_prompt",
|
|
20
|
-
resource
|
|
21
|
-
);
|