@highflame/policy 2.2.3 → 2.2.5

package/dist/sentry-detectors.gen.js

@@ -93,11 +93,95 @@ export const SENTRY_DETECTORS = [
         inhouse: false,
         model: null,
         latencyP50Ms: 2,
-        emits: [{ name: "file_name", type: "String", modifiable: false, semantic: "category_label" }, { name: "file_extension", type: "String", modifiable: false, semantic: "category_label" }, { name: "file_size_bytes", type: "Long", modifiable: false, semantic: "count" }, { name: "file_type", type: "String", modifiable: false, semantic: "category_label" }, { name: "mip_label_id", type: "String", modifiable: false, semantic: "category_label" }, { name: "mip_label_name", type: "String", modifiable: false, semantic: "category_label" }],
+        emits: [{ name: "file_name", type: "String", modifiable: false, semantic: "category_label" }, { name: "file_extension", type: "String", modifiable: false, semantic: "category_label" }, { name: "file_size_bytes", type: "Long", modifiable: false, semantic: "count" }, { name: "file_type", type: "String", modifiable: false, semantic: "category_label" }, { name: "mip_label_id", type: "String", modifiable: false, semantic: "category_label" }, { name: "mip_label_name", type: "String", modifiable: false, semantic: "category_label" }, { name: "sensitivity_level", type: "String", modifiable: false, description: "Normalized MIP sensitivity level (public, internal, confidential, restricted)." }, { name: "is_encrypted", type: "Bool", modifiable: false, semantic: "boolean_flag", description: "True iff the file is encrypted via MIP protection (absent ⇒ unknown)." }, { name: "is_rights_managed", type: "Bool", modifiable: false, semantic: "boolean_flag", description: "True iff the file has IRM/RMS restrictions (absent ⇒ unknown)." }],
         supportedModes: ["enforce", "monitor", "alert"],
         defendsAgainst: ["pii_leakage", "finance_leakage", "legal_leakage"],
         exampleAttacks: [],
     },
+    {
+        id: "code",
+        displayName: "Code Detection",
+        category: "code",
+        stability: "preview",
+        tier: "fast",
+        inhouse: false,
+        model: null,
+        latencyP50Ms: null,
+        emits: [{ name: "contains_code", type: "Bool", modifiable: false, semantic: "boolean_flag", description: "True iff code-like content was detected." }, { name: "code_languages", type: "Set<String>", modifiable: false, semantic: "category_set", description: "Programming languages identified in the content." }, { name: "code_ratio", type: "Long", modifiable: false, description: "Ratio of code-like lines to total non-empty lines (0-100)." }],
+        supportedModes: ["enforce", "monitor", "alert"],
+        defendsAgainst: [],
+        exampleAttacks: [],
+    },
+    {
+        id: "language",
+        displayName: "Language Detection",
+        category: "context",
+        stability: "stable",
+        tier: "standard",
+        inhouse: false,
+        model: null,
+        latencyP50Ms: null,
+        emits: [{ name: "detected_language", type: "String", modifiable: false, description: "ISO 639-1 code (e.g. en, fr, ja) or `unknown`." }, { name: "is_english", type: "Bool", modifiable: false, semantic: "boolean_flag", description: "True iff the detected language is English." }, { name: "language_confidence", type: "Long", modifiable: false, semantic: "severity_0_100", description: "Language-detection confidence (0-100)." }],
+        supportedModes: ["enforce", "monitor", "alert"],
+        defendsAgainst: [],
+        exampleAttacks: [],
+    },
+    {
+        id: "script",
+        displayName: "Script Detection",
+        category: "context",
+        stability: "stable",
+        tier: "fast",
+        inhouse: false,
+        model: null,
+        latencyP50Ms: null,
+        emits: [{ name: "detected_script", type: "String", modifiable: false, description: "Dominant Unicode script (latin, cjk, cyrillic, arabic, devanagari, other, unknown)." }, { name: "is_latin_script", type: "Bool", modifiable: false, semantic: "boolean_flag", description: "True iff content is primarily Latin-script." }, { name: "script_confidence", type: "Long", modifiable: false, semantic: "severity_0_100", description: "Confidence in the dominant-script classification (0-100)." }],
+        supportedModes: ["enforce", "monitor", "alert"],
+        defendsAgainst: [],
+        exampleAttacks: [],
+    },
+    {
+        id: "keyword",
+        displayName: "Keyword Blocklist",
+        category: "content_safety",
+        stability: "stable",
+        tier: "fast",
+        inhouse: false,
+        model: null,
+        latencyP50Ms: null,
+        emits: [{ name: "keyword_matched", type: "Bool", modifiable: false, description: "True iff at least one keyword from any active category matched." }, { name: "keyword_categories", type: "Set<String>", modifiable: false, semantic: "category_set", description: "Distinct keyword categories with at least one match." }, { name: "keyword_count", type: "Long", modifiable: false, semantic: "count", description: "Total keyword matches across all categories." }],
+        supportedModes: ["enforce", "monitor", "alert"],
+        defendsAgainst: ["toxicity"],
+        exampleAttacks: [],
+    },
+    {
+        id: "hallucination",
+        displayName: "Hallucination Guard",
+        category: "content_safety",
+        stability: "stable",
+        tier: "standard",
+        inhouse: true,
+        model: { name: "guard-hallucination", version: "1.2.0" },
+        latencyP50Ms: 52,
+        emits: [{ name: "hallucination_score", type: "Long", modifiable: false, semantic: "severity_0_100", description: "Hallucination probability (0-100)." }, { name: "factuality_score", type: "Long", modifiable: false, semantic: "severity_0_100", description: "Factuality score (0-100) — complement of hallucination." }],
+        supportedModes: ["enforce", "monitor", "alert"],
+        defendsAgainst: ["misinformation"],
+        exampleAttacks: [],
+    },
+    {
+        id: "topic",
+        displayName: "Topic Classifier",
+        category: "context",
+        stability: "stable",
+        tier: "standard",
+        inhouse: false,
+        model: null,
+        latencyP50Ms: null,
+        emits: [{ name: "content_topics", type: "Set<String>", modifiable: false, semantic: "category_set", description: "Detected content topics." }, { name: "topic_confidence", type: "Long", modifiable: false, semantic: "severity_0_100", description: "Confidence in the dominant-topic classification (0-100)." }],
+        supportedModes: ["enforce", "monitor", "alert"],
+        defendsAgainst: [],
+        exampleAttacks: [],
+    },
     {
         id: "paste_monitor",
         displayName: "Paste Monitor",
@@ -116,21 +200,36 @@ export const SENTRY_DETECTORS = [
 // Semantic field → contributing detector ids (producesAttrs + normalizationAliases,
 // resolved at codegen). Used by the client field→detector resolver — no Shield round-trip.
 export const SENTRY_FIELD_TO_DETECTORS = {
-    "content_topics": ["paste_monitor"],
+    "code_languages": ["code"],
+    "code_ratio": ["code"],
+    "contains_code": ["code"],
+    "content_topics": ["topic", "paste_monitor"],
     "crime_score": ["toxicity"],
+    "detected_language": ["language"],
+    "detected_script": ["script"],
     "encoded_content_detected": ["encoded_injection"],
     "encoded_count": ["encoded_injection"],
     "encoded_score": ["encoded_injection"],
     "encoded_types": ["encoded_injection"],
+    "factuality_score": ["hallucination"],
     "file_extension": ["file_metadata"],
     "file_name": ["file_metadata"],
     "file_size_bytes": ["file_metadata"],
     "file_type": ["file_metadata"],
+    "hallucination_score": ["hallucination"],
     "hate_speech_score": ["toxicity"],
     "injection_score": ["injection"],
     "invisible_chars_detected": ["encoded_injection"],
     "invisible_chars_score": ["encoded_injection"],
+    "is_encrypted": ["file_metadata"],
+    "is_english": ["language"],
+    "is_latin_script": ["script"],
+    "is_rights_managed": ["file_metadata"],
     "jailbreak_score": ["injection"],
+    "keyword_categories": ["keyword"],
+    "keyword_count": ["keyword"],
+    "keyword_matched": ["keyword"],
+    "language_confidence": ["language"],
     "mip_label_id": ["file_metadata"],
     "mip_label_name": ["file_metadata"],
     "paste_length": ["paste_monitor"],
@@ -142,12 +241,20 @@ export const SENTRY_FIELD_TO_DETECTORS = {
     "pii_score": ["pii"],
     "pii_types": ["pii"],
     "profanity_score": ["toxicity"],
+    "script_confidence": ["script"],
     "secret_count": ["secrets"],
     "secret_types": ["secrets"],
     "secrets_detected": ["secrets"],
+    "sensitivity_level": ["file_metadata"],
+    "session_injection_detected": ["injection"],
+    "session_pii_detected": ["pii"],
+    "session_pii_types": ["pii"],
+    "session_secret_types": ["secrets"],
+    "session_secrets_detected": ["secrets"],
     "sexual_score": ["toxicity"],
     "target_app": ["paste_monitor"],
     "target_url": ["paste_monitor"],
+    "topic_confidence": ["topic"],
     "violence_score": ["toxicity"],
     "weapons_score": ["toxicity"],
 };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@highflame/policy",
-  "version": "2.2.3",
+  "version": "2.2.5",
   "engines": {
     "node": ">=18"
   },

package/_schemas/ai_gateway/templates/pii_redaction.cedar

@@ -1,94 +0,0 @@
-// =============================================================================
-// PII & Secrets Redaction
-// =============================================================================
-// Blocks AI Gateway operations when personally identifiable information or
-// secrets are detected in the content. Covers both LLM prompt processing
-// and MCP tool calls, plus a bulk-exposure catch-all.
-//
-// Context keys consumed:
-//   - pii_detected:      Bool
-//   - secrets_detected:  Bool
-//   - pii_count:         Long
-//
-// Compliance:
-//   - OWASP LLM06
-//   - GDPR, HIPAA (depending on data classification)
-//
-// Category:  data-protection
-// Namespace: AIGateway
-// =============================================================================
-
-@id("data-protection.block-pii")
-@name("Block PII in prompts")
-@description("Blocks process_prompt when pii_detected is true.")
-@severity("high")
-@tags("category:data-protection,threat:pii,detection:rule,surface:process-prompt,owasp:llm06")
-@reject_message("Prompt blocked: personally identifiable information was detected — remove sensitive data and retry.")
-forbid (
-    principal,
-    action == AIGateway::Action::"process_prompt",
-    resource
-)
-when {
-    context has pii_detected && context.pii_detected == true
-};
-
-@id("data-protection.block-secrets")
-@name("Block secrets in prompts")
-@description("Blocks process_prompt when secrets_detected is true.")
-@severity("critical")
-@tags("category:data-protection,threat:secrets,detection:rule,surface:process-prompt")
-@reject_message("Prompt blocked: secrets or credentials were detected — remove sensitive data and retry.")
-forbid (
-    principal,
-    action == AIGateway::Action::"process_prompt",
-    resource
-)
-when {
-    context has secrets_detected && context.secrets_detected == true
-};
-
-@id("data-protection.block-pii-tools")
-@name("Block PII in tool calls")
-@description("Blocks call_tool when pii_detected is true.")
-@severity("high")
-@tags("category:data-protection,threat:pii,detection:rule,surface:call-tool,owasp:llm06")
-@reject_message("Tool execution blocked: personally identifiable information was detected in tool arguments.")
-forbid (
-    principal,
-    action == AIGateway::Action::"call_tool",
-    resource
-)
-when {
-    context has pii_detected && context.pii_detected == true
-};
-
-@id("data-protection.block-secrets-tools")
-@name("Block secrets in tool calls")
-@description("Blocks call_tool when secrets_detected is true.")
-@severity("critical")
-@tags("category:data-protection,threat:secrets,detection:rule,surface:call-tool")
-@reject_message("Tool execution blocked: secrets or credentials were detected in tool arguments.")
-forbid (
-    principal,
-    action == AIGateway::Action::"call_tool",
-    resource
-)
-when {
-    context has secrets_detected && context.secrets_detected == true
-};
-
-@id("data-protection.block-pii-bulk")
-@name("Block bulk PII exposure")
-@description("Blocks any action when pii_count >= 3.")
-@severity("critical")
-@tags("category:data-protection,threat:exfiltration,detection:aggregate,posture:catch-all")
-@reject_message("Request blocked: multiple PII matches were detected — possible data exfiltration.")
-forbid (
-    principal,
-    action,
-    resource
-)
-when {
-    context has pii_count && context.pii_count >= 3
-};

package/_schemas/guardrails/templates/profiles/chat_assistant/privacy.cedar

@@ -1,35 +0,0 @@
-// =============================================================================
-// Chat Assistant — Privacy
-// =============================================================================
-// PII protection for customer-facing chatbots. Blocks PII in both directions
-// (input + output) across prompts, tool calls, and file operations.
-//
-// Context keys consumed:
-//   - pii_detected: Bool
-//
-// Compliance:
-//   - GDPR Art. 32, HIPAA, PCI-DSS
-//
-// Category:  privacy
-// Namespace: Guardrails
-// =============================================================================
-
-@id("privacy.chat-block-pii")
-@name("Block PII in chat (both directions)")
-@description("Blocks process_prompt, call_tool, read_file, and write_file when pii_detected is true.")
-@severity("high")
-@tags("category:privacy,threat:pii,detection:rule,compliance:gdpr,compliance:hipaa")
-@reject_message("Request blocked: personally identifiable information was detected.")
-forbid (
-    principal,
-    action in [
-        Guardrails::Action::"process_prompt",
-        Guardrails::Action::"call_tool",
-        Guardrails::Action::"read_file",
-        Guardrails::Action::"write_file"
-    ],
-    resource
-)
-when {
-    context has pii_detected && context.pii_detected == true
-};

package/_schemas/guardrails/templates/profiles/data_pipeline/privacy.cedar

@@ -1,63 +0,0 @@
-// =============================================================================
-// Data Pipeline — Privacy
-// =============================================================================
-// Strict PII protection for RAG pipelines and data processing agents.
-// Zero-tolerance for sensitive PII types — data pipelines must not leak PII.
-//
-// Context keys consumed:
-//   - pii_detected: Bool
-//   - pii_types:    Set<String>
-//
-// Compliance:
-//   - GDPR Art. 32, HIPAA §164.312, PCI DSS 3.4
-//
-// Category:  privacy
-// Namespace: Guardrails
-// =============================================================================
-
-@id("privacy.data-pipeline-block-pii")
-@name("Block PII in data pipeline")
-@description("Blocks process_prompt, call_tool, read_file, and write_file when pii_detected is true.")
-@severity("critical")
-@tags("category:privacy,threat:pii,detection:rule,compliance:gdpr,compliance:hipaa")
-@reject_message("Request blocked: PII detected in a data pipeline — pipelines must not process or leak personal data.")
-forbid (
-    principal,
-    action in [
-        Guardrails::Action::"process_prompt",
-        Guardrails::Action::"call_tool",
-        Guardrails::Action::"read_file",
-        Guardrails::Action::"write_file"
-    ],
-    resource
-)
-when {
-    context has pii_detected && context.pii_detected == true
-};
-
-@id("privacy.data-pipeline-block-pii-sensitive")
-@name("Block sensitive PII types in data pipeline")
-@description("Blocks process_prompt, call_tool, read_file, and write_file when pii_types contains SSN, credit_card, passport, medical_id, or tax_id.")
-@severity("critical")
-@tags("category:privacy,threat:pii,detection:rule,compliance:gdpr,compliance:hipaa,compliance:pci-dss")
-@reject_message("Request blocked: highly sensitive PII (SSN, credit card, passport, medical ID, or tax ID) detected in a data pipeline.")
-forbid (
-    principal,
-    action in [
-        Guardrails::Action::"process_prompt",
-        Guardrails::Action::"call_tool",
-        Guardrails::Action::"read_file",
-        Guardrails::Action::"write_file"
-    ],
-    resource
-)
-when {
-    context has pii_types &&
-    (
-        context.pii_types.contains("ssn") ||
-        context.pii_types.contains("credit_card") ||
-        context.pii_types.contains("passport") ||
-        context.pii_types.contains("medical_id") ||
-        context.pii_types.contains("tax_id")
-    )
-};