@intutic/proxy 2.2.0 → 2.4.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +7 -6
- package/package.json +1 -1
package/README.md
CHANGED
|
@@ -10,10 +10,11 @@ intutic-proxy is a high-performance AI agent proxy written in Rust (edition 2021
|
|
|
10
10
|
|
|
11
11
|
### WASM Plugin Sandbox
|
|
12
12
|
|
|
13
|
-
- **Runtime**: wasmtime
|
|
13
|
+
- **Runtime**: wasmtime 36 with pre-compiled module caching
|
|
14
14
|
- **Memory limit**: 16 MB per plugin invocation
|
|
15
|
-
- **Fuel limit**: 1,000,000
|
|
16
|
-
- **
|
|
15
|
+
- **Fuel limit**: the limit a rule is held to, deterministic on any machine: 1,000,000 instructions for a native rule, 100,000,000 for a Rego rule
|
|
16
|
+
- **Wall-clock backstop**: 1 s for a native rule, 2 s for a Rego rule, enforced by epoch interruption for stalls fuel cannot see; set far above the time it takes to use up the fuel on a loaded machine
|
|
17
|
+
- **No verdict refuses**: a rule stopped by either limit, or one that traps or returns something that is not a verdict, refuses the request with `GOVERNANCE_UNAVAILABLE`, whatever the fail setting
|
|
17
18
|
- **Isolation**: Each plugin runs in a dedicated WASM store
|
|
18
19
|
|
|
19
20
|
### Plugin Chain
|
|
@@ -25,7 +26,7 @@ The proxy processes every request through an ordered plugin chain:
|
|
|
25
26
|
| Budget Gate | Enforce per-ticket and per-team token budgets |
|
|
26
27
|
| DLP Gate | Block or redact sensitive data (secrets, PII, credentials) |
|
|
27
28
|
| PCAS Gate | Prior Consent and Autonomy Scope enforcement |
|
|
28
|
-
|
|
|
29
|
+
| Response Cache | Replay the answer to an identical request (exact match, Valkey), or to a reworded plain-text question in the same context (semantic match, TurboVec) |
|
|
29
30
|
| SOP Prompt Injector | Inject workspace governance SOPs into system prompts |
|
|
30
31
|
|
|
31
32
|
### Model Selection
|
|
@@ -56,10 +57,10 @@ The proxy processes every request through an ordered plugin chain:
|
|
|
56
57
|
|
|
57
58
|
### Security & Observability
|
|
58
59
|
|
|
59
|
-
- **DLP scanner**: Pattern-based and entropy-based secret detection
|
|
60
|
+
- **DLP scanner**: Pattern-based and entropy-based secret detection, plus validated PII detectors for payment cards (Luhn), IBANs (mod 97) and US Social Security numbers (issued ranges), on by default, and email addresses and phone numbers, off by default. `dlp.detectors` in the proxy config sets each detector's action, and a connected workspace's `piiDetectors` setting sets a baseline the local config may only make stricter. See [PII detectors](https://docs.intutic.ai/guide/policies#pii-detectors)
|
|
60
61
|
- **Code skeleton extraction**: Uses `tree-sitter` and `syn` for AST-level code analysis
|
|
61
62
|
- **Token counting**: Accurate pre-flight token estimation via `tiktoken-rs`
|
|
62
|
-
- **Telemetry**: OpenTelemetry OTLP export for traces and metrics — a `SpanExporter` and `SdkMeterProvider` ship in `src/main.rs`, with the exported instrument set declared in `src/metrics.rs` (snip compaction histograms, egress counters, policy refusals).
|
|
63
|
+
- **Telemetry**: OpenTelemetry OTLP export for traces and metrics — a `SpanExporter` and `SdkMeterProvider` ship in `src/main.rs`, with the exported instrument set declared in `src/metrics.rs` (snip compaction histograms, egress counters, policy refusals). No logs pipeline
|
|
63
64
|
|
|
64
65
|
## Dependencies
|
|
65
66
|
|