iris-security-sdk 0.2.18__tar.gz → 0.2.19__tar.gz

{iris_security_sdk-0.2.18 → iris_security_sdk-0.2.19}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: iris-security-sdk
-Version: 0.2.18
+Version: 0.2.19
 Summary: IRIS — AI Agent Governance SDK. Govern AI agents locally.
 Author-email: Gilbert Martin <gilbert@iris-security.io>
 License: Apache-2.0

{iris_security_sdk-0.2.18 → iris_security_sdk-0.2.19}/iris/__init__.py

@@ -47,7 +47,7 @@ from iris_core.evidence.vault import EvidenceVault
 from iris_core.cost.tracker import CostSummary, CostTracker, CostEntry
 from iris_core.cost.pricing import PricingRegistry
 
-__version__ = "0.2.18"
+__version__ = "0.2.19"
 
 AARM_ALIGNMENT = "designed-toward"  # AARM R1–R9 partial; not Core conformant
 AARM_VERSION = "1.0"

{iris_security_sdk-0.2.18 → iris_security_sdk-0.2.19}/iris/scan.py

@@ -116,11 +116,15 @@ def _iter_source_files(root: Path) -> list[Path]:
     return files
 
 
+_NON_WORKLOAD_DIR_NAMES = {"tests", "test", "demo", "demos", "examples", "example", "samples", "sample"}
+
+
 def _is_test_file(path: Path) -> bool:
-    """Test suites routinely embed sample field names/fixtures (fake ssns,
-    demo passport.yaml content, etc.) to exercise detection logic itself —
-    that sample data isn't evidence the workload actually handles it."""
-    if any(part in {"tests", "test"} for part in path.parts):
+    """Test suites and demo/example trees routinely embed sample field names
+    and fixtures (fake ssns, illustrative "ungoverned agent" code, etc.) to
+    exercise detection logic or teach a concept — that sample data isn't
+    evidence this workload itself handles it."""
+    if any(part in _NON_WORKLOAD_DIR_NAMES for part in path.parts):
         return True
     stem = path.stem
     return stem.startswith("test_") or stem.endswith("_test")

{iris_security_sdk-0.2.18 → iris_security_sdk-0.2.19}/iris_security_sdk.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: iris-security-sdk
-Version: 0.2.18
+Version: 0.2.19
 Summary: IRIS — AI Agent Governance SDK. Govern AI agents locally.
 Author-email: Gilbert Martin <gilbert@iris-security.io>
 License: Apache-2.0

{iris_security_sdk-0.2.18 → iris_security_sdk-0.2.19}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "iris-security-sdk"
-version = "0.2.18"
+version = "0.2.19"
 description = "IRIS — AI Agent Governance SDK. Govern AI agents locally."
 readme = "README.md"
 authors = [{ name = "Gilbert Martin", email = "gilbert@iris-security.io" }]

{iris_security_sdk-0.2.18 → iris_security_sdk-0.2.19}/tests/test_scan.py

@@ -123,3 +123,19 @@ def test_detect_workload_skips_data_category_matches_in_test_files(tmp_path: Pat
     )
     profile = detect_workload(str(tmp_path))
     assert profile["data_categories"] == []
+
+
+def test_detect_workload_skips_data_category_matches_in_demo_files(tmp_path: Path):
+    """Regression for the public iris-sdk repo's bundled demo/ tree: it
+    intentionally simulates an "ungoverned agent" with realistic-looking
+    field names to teach a sales demo — that's not evidence the SDK itself
+    handles real customer PII/PHI."""
+    demo_dir = tmp_path / "demo" / "customers" / "meridian_health" / "agents"
+    demo_dir.mkdir(parents=True)
+    (demo_dir / "patient_summarizer.py").write_text(
+        'def summarize_patient_record(patient_id: str, record: dict) -> str:\n'
+        '    return record.get("ssn")\n',
+        encoding="utf-8",
+    )
+    profile = detect_workload(str(tmp_path))
+    assert profile["data_categories"] == []