@intutic/proxy 3.1.3 → 3.1.5
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +1 -1
- package/package.json +1 -1
package/README.md
CHANGED
|
@@ -32,7 +32,7 @@ request or response path:
|
|
|
32
32
|
| SOP injection | `sops.rs` | Resolve SOPs by role and inject their content into system prompts |
|
|
33
33
|
| Decision traffic | `decision_traffic.rs`, with `protocol/systemone.rs` and `protocol/decisions.rs` | Govern customer calls to decision models (`POST /v1/systemone`, `POST /v1/decisions`) like LLM calls: DLP on the state, the egress policy, and a version pin that refuses a moving model alias before the call; after it, abstentions under a floor and consequential calls are named in `x-intutic-decision-*` headers, the body unchanged. Each call is metered and written to the decision-traffic log |
|
|
34
34
|
| Decide rules | `decide/gateway.rs` | Ask the SOPs' `decide:` rules of the self-hosted decide engine (`~/.intutic/decide/engine.json`, `INTUTIC_DECIDE_*`): `on: tool_call` rules about each tool call in a response once the deterministic gates allowed it (`DECIDE_REFUSED`, `DECIDE_ESCALATED`), `on: response` rules about the complete response, written into it as a `VIOLATION` or `AMBIGUOUS` note. A rule enforces only under its effective rollout and a pin for the engine's model digest; otherwise it runs as shadow |
|
|
35
|
-
| Rule records | `plugins/response_gate.rs`, `plugins/anomaly/detectors.rs` | Withhold a tool call a qualified `requires_before:` (`action:run_tests[ok] -> …`) gates while its prerequisite is unmet (`PREREQUISITE_UNMET`), and a file-changing call outside `scope_paths` under `scope_paths_mode: enforce` (`OUT_OF_SCOPE`); re-ask a turn whose tool calls leave the declared plan under `plan_steps_mode: enforce` |
|
|
35
|
+
| Rule records | `plugins/response_gate.rs`, `plugins/anomaly/detectors.rs` | Withhold a tool call a qualified `requires_before:` (`action:run_tests[ok] -> …`) gates while its prerequisite is unmet (`PREREQUISITE_UNMET`), and a file-changing call outside `scope_paths` under `scope_paths_mode: enforce` (`OUT_OF_SCOPE`), and a shell command outside `allow_commands:` (`COMMAND_NOT_ALLOWED`); re-ask a turn whose tool calls leave the declared plan under `plan_steps_mode: enforce` |
|
|
36
36
|
| Reversibility lanes | `sops.rs`, `key_context.rs`, `proxy.rs` | Hold for review the actions in a lane an SOP's `closed_lanes:` (or the workspace's `closedLanes`) closes, as a `review_before:` action is held; under the workspace's `revertLane` setting, hold (`enforce`) or record as a shadowed hold (`shadow`) a reversible-wide action whose revert or rejection rate for the role is over the threshold. Workspace settings come from the control plane's key context |
|
|
37
37
|
| Node kinds | `node_kind.rs`, `plugins/anomaly/graph_detectors.rs` | Hold each agent-graph node to its kind (`node_kind:` SOP key, `x-intutic-node-kind` header): a `code` node may not call a model, a `gate` node may not write files, run shell commands or start a child agent, and a `worker` node may not start a child agent (`NODE_KIND_DENIED`). A header can only add limits |
|
|
38
38
|
| Context isolation | `plugins/anomaly/graph_detectors.rs` | Flag sibling workers handed nearly the same context; advisory by default, re-asks under `context_isolation: enforce` |
|