llmfirewall-core 1.0.0__py3-none-any.whl

llmfirewall/__init__.py

@@ -0,0 +1,1041 @@
+"""LLMFirewall: A lightweight, provider-agnostic security layer for LLMs."""
+
+from typing import Any, Optional
+
+from llmfirewall.core.exceptions import (
+    BlockedOutputError,
+    BlockedPromptError,
+    ConfigurationError,
+    LLMFirewallError,
+)
+from llmfirewall.core.interfaces import (
+    BaseDetector,
+    BasePolicyEngine,
+    BaseRiskEngine,
+)
+from llmfirewall.core.models import (
+    Action,
+    AuditEvent,
+    DecisionAction,
+    Finding,
+    FirewallResult,
+    MAX_SCAN_TEXT_LENGTH,
+    PolicyDecision,
+    RiskScore,
+    ScanRequest,
+    ScanResult,
+    Severity,
+    ThreatType,
+)
+from llmfirewall.detectors.base import Detector
+from llmfirewall.detectors.collection import FindingCollection
+from llmfirewall.detectors.engine import DetectorEngine
+from llmfirewall.detectors.examples import KeywordDetector
+from llmfirewall.detectors.metadata import DetectorMetadata
+from llmfirewall.detectors.pii import PIIDetector
+from llmfirewall.detectors.prompt_injection import PromptInjectionDetector
+from llmfirewall.detectors.registry import DetectorRegistry, default_detector_registry
+from llmfirewall.config.models import (
+    AgentCapabilitiesConfig,
+    AuditConfig,
+    ContextBudgetConfig,
+    DependencySecurityConfig,
+    DetectorConfig,
+    FirewallConfig,
+    IngestionConfig,
+    IntegrationsConfig,
+    ModelSecurityConfig,
+    ObservabilityConfig,
+    PIIConfig,
+    PromptInjectionConfig,
+    RAGConfig,
+    RuntimeConfig,
+    RuntimeLimitsConfig,
+    SecretConfig,
+    SupplyChainConfig,
+    TelemetryConfig,
+)
+from llmfirewall.supply_chain import (
+    ConfigArtifact,
+    DependencyArtifact,
+    DependencyScanner,
+    DependencyScope,
+    DependencySourceType,
+    DeploymentMetadata,
+    IntegrityManager,
+    IntegrityResult,
+    IntegrityStatus,
+    ModelApprovalStatus,
+    ModelArtifact,
+    ModelFormat,
+    ModelLoadingGuard,
+    ModelManifest,
+    ModelProvenance,
+    ModelSecurityDecision,
+    ModelSecurityRegistry,
+    ModelSourceType,
+    ModelTrustLevel,
+    ModelVerifier,
+    OfflineVulnerabilityProvider,
+    PolicyArtifact,
+    PromptArtifact,
+    SecuritySnapshot,
+    SnapshotDiff,
+    VulnerabilityFinding,
+    VulnerabilityProvider,
+    compute_streaming_hash,
+    detect_model_format,
+    hash_configuration,
+    hash_policy_artifact,
+    hash_prompt_artifact,
+    is_unsafe_serialization,
+    sanitize_config_dict,
+)
+from llmfirewall.capabilities import (
+    ActionBudget,
+    ActionChain,
+    ActionClassification,
+    ActionDecision,
+    ActionDecisionStatus,
+    ActionRequest,
+    ApprovalProvider,
+    ApprovalRequest,
+    BudgetManager,
+    CallbackApprovalProvider,
+    Capability,
+    CapabilityEngine,
+    CapabilityGrant,
+    CapabilityRiskClass,
+    DEFAULT_CAPABILITIES,
+    DEFAULT_TOOL_CAPABILITY_MAP,
+    DelegationGrant,
+    DenyAllApprovalProvider,
+    MemoryApprovalProvider,
+    SideEffectType,
+)
+from llmfirewall.rag import (
+    CitationValidator,
+    ContextItem,
+    ContextOrchestrator,
+    ContextSecurityDecision,
+    DocumentIngestionResult,
+    DocumentIngestionScanner,
+    DocumentSecurityStatus,
+    InstructionAuthority,
+    MemorySecurityGuard,
+    QuarantineStore,
+    SecurityScanCache,
+    SourceProvenance,
+)
+from llmfirewall.integrations import (
+    FirewallIntegration,
+    IntegrationRegistry,
+    SecurityViolation,
+    protect,
+)
+from llmfirewall.runtime import (
+    ContentItem,
+    GenericProviderAdapter,
+    HookPipeline,
+    LLMMessage,
+    LLMProviderAdapter,
+    LLMRequest,
+    LLMResponse,
+    LoopGuard,
+    RuntimeBoundary,
+    RuntimeContext,
+    RuntimeDecision,
+    RuntimeEngine,
+    RuntimeEventType,
+    RuntimeHook,
+    RuntimeLimitExceeded,
+    RuntimeSecurityError,
+    RuntimeSecurityState,
+    RuntimeSession,
+    TrustLevel,
+)
+from llmfirewall.observability import (
+    AnomalyEvent,
+    DecisionTrace,
+    DecisionTraceStep,
+    EventFilter,
+    EventSeverity,
+    EventStore,
+    InMemoryEventStore,
+    JSONLEventStore,
+    SQLiteEventStore,
+    SecurityEvent,
+    SecurityEventType,
+    SecurityIntelligenceEngine,
+    export_events_csv,
+    export_events_json,
+    export_events_jsonl,
+    export_prometheus_metrics,
+    hash_content,
+)
+from llmfirewall.detectors.secrets import SecretDetector
+from llmfirewall.firewall import Firewall
+from llmfirewall.policy.config import (
+    LogicalOperator,
+    Policy,
+    PolicyConfig,
+    PolicyRule,
+    PolicyValidationError,
+    RuleCondition,
+)
+from llmfirewall.policy.engine import ACTION_PRECEDENCE, PolicyEngine, get_default_policy
+from llmfirewall.policy.redaction_config import RedactionConfig
+from llmfirewall.policy.redactor import SafeRedactor, default_redactor, redact_text_spans
+from llmfirewall.audit import AuditLogger, default_audit_logger
+from llmfirewall.telemetry import (
+    InMemoryTelemetrySink,
+    MetricSummary,
+    MetricsCollector,
+    NoOpTelemetry,
+    TelemetryEvent,
+    TelemetryEventType,
+    TelemetrySink,
+)
+from llmfirewall.risk.config import RiskConfig
+from llmfirewall.risk.engine import RiskEngine
+from llmfirewall.tools import (
+    ArgumentLimits,
+    ToolCall,
+    ToolDefinition,
+    ToolPermission,
+    ToolRegistry,
+    ToolResult,
+    ToolSecurityDecision,
+    ToolSecurityEngine,
+    default_tool_registry,
+    inspect_command_safety,
+    inspect_sql_safety,
+    validate_argument_limits,
+    validate_json_schema,
+    validate_path_safety,
+    validate_url_safety,
+)
+from llmfirewall.eval import (
+    AgentAdapter,
+    AgentCapabilityGenerator,
+    AssertionType,
+    AttackCategory,
+    BoundedFuzzer,
+    BUILTIN_SUITES,
+    CallableAdapter,
+    DeclarativeAssertion,
+    ErrorCategory,
+    EvaluationTarget,
+    FirewallAdapter,
+    FirewallTarget,
+    HTTPTargetAdapter,
+    MockAdapter,
+    MockToolRegistry,
+    PIIGenerator,
+    PromptInjectionGenerator,
+    RAGAdapter,
+    RAGPoisoningGenerator,
+    SecretGenerator,
+    SecurityCoverage,
+    SecurityDetectionCoverage,
+    SecurityEvaluationEngine,
+    SecurityEvaluationReport,
+    SecurityFinding,
+    SecurityMetrics,
+    SecurityObservation,
+    SecurityTest,
+    SecurityTestCase,
+    SecurityTestGenerator,
+    SecurityTestResult,
+    SecurityTestSuite,
+    TargetAdapter,
+    TargetType,
+    TestOrchestrator,
+    TestStatus,
+    ToolSecurityGenerator,
+    create_mutations,
+    evaluate_assertion,
+    evaluate_assertions,
+    format_html_report,
+    format_human_report,
+    format_json_report,
+    format_junit_report,
+    format_sarif_report,
+    get_agent_capability_suite,
+    get_builtin_security_test_cases,
+    get_configuration_integrity_suite,
+    get_core_firewall_suite,
+    get_full_red_team_suite,
+    get_memory_security_suite,
+    get_pii_suite,
+    get_prompt_injection_suite,
+    get_rag_security_suite,
+    get_regression_suite,
+    get_secret_suite,
+    get_supply_chain_suite,
+    get_tool_security_suite,
+)
+from llmfirewall.governance import (
+    BaselineCategory,
+    BaselineDiff,
+    EvidenceArtifactRecord,
+    EvidenceManifest,
+    FindingStatus,
+    GateEvaluationResult,
+    GateType,
+    GovernanceDecision,
+    GovernanceEngine,
+    GovernanceFinding,
+    GovernanceMetrics,
+    GovernanceOverride,
+    GovernancePolicy,
+    GovernanceResult,
+    ReasonCode,
+    ReleaseProfile,
+    SecurityBaseline,
+    SecurityChangeClassification,
+    SecurityEvidence,
+    SecurityGate,
+    SecurityGateFailure,
+    SecurityReleaseManifest,
+    SecurityWaiver,
+    format_governance_human,
+    format_governance_json,
+    format_governance_sarif,
+)
+from llmfirewall.graph import (
+    BlastRadiusResult,
+    ControlCoverageItem,
+    ControlCoverageResult,
+    ControlStatus,
+    GraphDiff,
+    GraphMetrics,
+    GraphPath,
+    GraphSnapshot,
+    GraphStore,
+    InMemoryGraphStore,
+    KnowledgeGraph,
+    Node,
+    NodeType,
+    Relationship,
+    RelationshipType,
+    SQLiteGraphStore,
+    SecurityDiff,
+    SecurityImpactResult,
+    format_blast_radius_human,
+    format_coverage_human,
+    format_graph_diff_human,
+    format_impact_human,
+    format_node_show_human,
+    format_path_human,
+)
+from llmfirewall.attack_graph import (
+    AttackEvidence,
+    AttackGraph,
+    AttackGraphDiff,
+    AttackGraphMetrics,
+    AttackGraphSnapshot,
+    AttackNode,
+    AttackPath,
+    AttackRule,
+    AttackRuleRegistry,
+    AttackStep,
+    AttackTechnique,
+    AttackTechniqueRegistry,
+    ConfidenceLevel,
+    ControlEffectiveness,
+    EntryPoint,
+    EntryPointType,
+    EvidenceType,
+    MitigationStatus,
+    PathStatus,
+    PreconditionEvaluator,
+    STANDARD_RULES,
+    ThreatModel,
+    TrustBoundary,
+    default_technique_registry,
+    format_attack_graph_sarif,
+    format_attack_paths_human,
+    format_attack_paths_json,
+    format_threat_model_human,
+)
+from llmfirewall.inventory import (
+    Asset,
+    AssetConflict,
+    AssetExposure,
+    AssetInventory,
+    AssetProvenance,
+    AssetSource,
+    AssetStatus,
+    AssetType,
+    CodeDiscoveryProvider,
+    ConfigDiscoveryProvider,
+    DependencyDiscoveryProvider,
+    DiscoveryConfidence,
+    DiscoveryEngine,
+    DiscoveryProvider,
+    DiscoveryResult,
+    DiscoveryStatus,
+    EnvironmentDiscoveryProvider,
+    ImportDiscoveryProvider,
+    InventoryDiff,
+    InventoryMetrics,
+    InventorySnapshot,
+    ManualDiscoveryProvider,
+    RuntimeDiscoveryProvider,
+    format_asset_show_human,
+    format_discovery_result_human,
+    format_discovery_result_json,
+    format_inventory_diff_human,
+    format_inventory_json,
+    format_inventory_list_human,
+    normalize_asset_id,
+    sanitize_metadata_secrets,
+)
+from llmfirewall.spm import (
+    AttackSurfaceRecord,
+    ControlPostureRecord,
+    ControlPresence,
+    PostureDiff,
+    PostureDimension,
+    PostureEngine,
+    PostureMetrics,
+    PostureRule,
+    PostureRuleContext,
+    PostureRuleRegistry,
+    PostureSnapshot,
+    PostureState,
+    SecurityGap,
+    SecurityGapStatus,
+    SecurityPosture,
+    TestCoverageRecord,
+    TestFreshness,
+    format_posture_diff_human,
+    format_posture_human,
+    format_posture_json,
+    format_posture_sarif,
+    format_posture_summary_human,
+    sanitize_posture_metadata,
+)
+from llmfirewall.compliance import (
+    AI_SECURITY_BASELINE_CONTROLS,
+    ApplicabilityStatus,
+    ComplianceControl,
+    ComplianceDiff,
+    ComplianceEngine,
+    ComplianceEvidence,
+    ComplianceException,
+    ComplianceFramework,
+    ComplianceGap,
+    ComplianceMetrics,
+    ComplianceRule,
+    ComplianceRuleContext,
+    ComplianceRuleRegistry,
+    ComplianceSnapshot,
+    ControlAssessment,
+    ControlCatalog,
+    ControlMapping,
+    ControlState,
+    CrossFrameworkMapping,
+    ComplianceEvidenceType,
+    EvidenceValidity,
+    ExceptionStatus,
+    MappingType,
+    RemediationStatus,
+    STANDARD_COMPLIANCE_RULES,
+    format_compliance_human,
+    format_compliance_json,
+    format_compliance_yaml,
+    format_control_detail_human,
+    format_diff_human,
+    format_evidence_human,
+    format_gaps_human,
+    sanitize_compliance_metadata,
+)
+from llmfirewall.risk import (
+    RiskAssessment,
+    RiskDiff,
+    RiskFactor,
+    RiskFactorType,
+    RiskHistoryEntry,
+    RiskLevel,
+    RiskPrioritizationEngine,
+    RiskSnapshot,
+    RiskTreatment,
+    RiskUncertainty,
+    format_risk_detail_human,
+    format_risk_diff_human,
+    format_risk_human,
+    format_risk_json,
+    format_risk_yaml,
+)
+from llmfirewall.incidents import (
+    AbnormalAgentBehaviorRule,
+    EvidenceItem,
+    IncidentAction,
+    IncidentActionRecord,
+    IncidentCandidate,
+    IncidentDetectionRule,
+    IncidentError,
+    IncidentManager,
+    IncidentSeverity,
+    IncidentStatus,
+    PolicyBypassRule,
+    PromptInjectionFollowedByPrivilegedToolRule,
+    RepeatedUnauthorizedToolCallsRule,
+    SecretExposureRule,
+    SecurityEvent,
+    SecurityEventType,
+    SecurityIncident,
+    TimelineEntry,
+    compute_evidence_hash,
+    format_incident_detail_human,
+    format_incident_timeline_human,
+    format_incidents_table_human,
+    generate_post_incident_report,
+    get_default_incident_rules,
+)
+from llmfirewall.protection import (
+    FailBehavior,
+    LLMFirewallMiddleware,
+    PolicyDecision,
+    PolicyMode,
+    ProtectionAuditEntry,
+    ProtectionPolicy,
+    ProtectionRule,
+    RateLimitRule,
+    RateLimiter,
+    ProtectionCondition,
+    RuntimeDecision,
+    RuntimeProtectionEngine,
+    RuntimeRequest,
+    SecurityBlockError,
+    get_default_production_policy,
+    protect,
+    protect_tool,
+)
+from llmfirewall._version import __version__
+
+
+class Scanner:
+    """Convenience public scanner class for analyzing inputs and requests."""
+
+    def __init__(self, firewall: Optional[Firewall] = None) -> None:
+        self.firewall = firewall or Firewall()
+
+    def scan(self, text: str, **kwargs: Any) -> ScanResult:
+        """Scans text for prompt injection, secrets, PII, and security threats."""
+        return self.firewall.scan(text, **kwargs)
+
+    def scan_request(self, request: ScanRequest) -> ScanResult:
+        """Scans a structured ScanRequest."""
+        return self.firewall.scan_request(request)
+
+
+__all__ = [
+
+    # Master Firewall Orchestrator & Configuration
+    "Firewall",
+    "FirewallConfig",
+    "ObservabilityConfig",
+    "IntegrationsConfig",
+    "RuntimeConfig",
+    "RuntimeLimitsConfig",
+    "DetectorConfig",
+    "PromptInjectionConfig",
+    "PIIConfig",
+    "SecretConfig",
+    "AuditConfig",
+    "TelemetryConfig",
+    # Models & Enums
+    "ThreatType",
+    "Severity",
+    "Action",
+    "DecisionAction",
+    "Finding",
+    "RiskScore",
+    "PolicyDecision",
+    "ScanRequest",
+    "ScanResult",
+    "FirewallResult",
+    "AuditEvent",
+    "MAX_SCAN_TEXT_LENGTH",
+    # Detector Architecture
+    "Detector",
+    "DetectorMetadata",
+    "DetectorEngine",
+    "FindingCollection",
+    "DetectorRegistry",
+    "default_detector_registry",
+    # Concrete Detectors
+    "PromptInjectionDetector",
+    "PIIDetector",
+    "SecretDetector",
+    "KeywordDetector",
+    # Risk Engine
+    "RiskEngine",
+    "RiskConfig",
+    # Policy Engine & Policy-as-Code
+    "Policy",
+    "PolicyEngine",
+    "PolicyConfig",
+    "PolicyRule",
+    "RuleCondition",
+    "LogicalOperator",
+    "PolicyValidationError",
+    "get_default_policy",
+    "RedactionConfig",
+    "SafeRedactor",
+    "default_redactor",
+    "ACTION_PRECEDENCE",
+    "redact_text_spans",
+    # Audit Logging
+    "AuditLogger",
+    "default_audit_logger",
+    # Observability & Security Telemetry
+    "TelemetryEvent",
+    "TelemetryEventType",
+    "TelemetrySink",
+    "NoOpTelemetry",
+    "InMemoryTelemetrySink",
+    "MetricsCollector",
+    "MetricSummary",
+    # Interfaces & Base
+    "BaseDetector",
+    "BaseRiskEngine",
+    "BasePolicyEngine",
+    # Exceptions
+    "LLMFirewallError",
+    "ConfigurationError",
+    "BlockedPromptError",
+    "BlockedOutputError",
+    # Agent & Tool Security (Phase 22)
+    "ToolCall",
+    "ToolResult",
+    "ToolPermission",
+    "ToolSecurityDecision",
+    "ToolDefinition",
+    "ToolRegistry",
+    "default_tool_registry",
+    "ToolSecurityEngine",
+    "ArgumentLimits",
+    "validate_argument_limits",
+    "validate_json_schema",
+    "validate_url_safety",
+    "validate_path_safety",
+    "inspect_command_safety",
+    "inspect_sql_safety",
+    # AI Security Evaluation & Red-Team Engine (Phase 23)
+    "SecurityEvaluationEngine",
+    "SecurityTestCase",
+    "SecurityTestResult",
+    "SecurityMetrics",
+    "SecurityDetectionCoverage",
+    "SecurityEvaluationReport",
+    "AttackCategory",
+    "TargetType",
+    "EvaluationTarget",
+    "FirewallTarget",
+    "get_builtin_security_test_cases",
+    "create_mutations",
+    "format_human_report",
+    "format_json_report",
+    "format_sarif_report",
+    "format_junit_report",
+    # Production Observability & Security Intelligence (Phase 24)
+    "SecurityEvent",
+    "SecurityEventType",
+    "EventSeverity",
+    "DecisionTrace",
+    "DecisionTraceStep",
+    "AnomalyEvent",
+    "hash_content",
+    "EventStore",
+    "InMemoryEventStore",
+    "JSONLEventStore",
+    "SQLiteEventStore",
+    "EventFilter",
+    "SecurityIntelligenceEngine",
+    "export_prometheus_metrics",
+    "export_events_json",
+    "export_events_jsonl",
+    "export_events_csv",
+    # Framework & Ecosystem Integrations (Phase 25)
+    "IntegrationsConfig",
+    "FirewallIntegration",
+    "IntegrationRegistry",
+    "SecurityViolation",
+    "protect",
+    # LLM & Agent Runtime Protection (Phase 26)
+    "RuntimeEngine",
+    "RuntimeSession",
+    "LoopGuard",
+    "RuntimeContext",
+    "RuntimeBoundary",
+    "TrustLevel",
+    "RuntimeEventType",
+    "RuntimeSecurityError",
+    "RuntimeLimitExceeded",
+    "RuntimeSecurityState",
+    "ContentItem",
+    "LLMMessage",
+    "LLMRequest",
+    "LLMResponse",
+    "RuntimeDecision",
+    "RuntimeHook",
+    "HookPipeline",
+    "LLMProviderAdapter",
+    "GenericProviderAdapter",
+    # Advanced RAG & Context Security (Phase 27)
+    "RAGConfig",
+    "IngestionConfig",
+    "ContextBudgetConfig",
+    "DocumentSecurityStatus",
+    "InstructionAuthority",
+    "SourceProvenance",
+    "ContextItem",
+    "DocumentIngestionResult",
+    "ContextSecurityDecision",
+    "SecurityScanCache",
+    "QuarantineStore",
+    "DocumentIngestionScanner",
+    "ContextOrchestrator",
+    "MemorySecurityGuard",
+    "CitationValidator",
+    # AI Supply-Chain & Model Security (Phase 28)
+    "SupplyChainConfig",
+    "ModelSecurityConfig",
+    "DependencySecurityConfig",
+    "ModelSourceType",
+    "ModelTrustLevel",
+    "ModelApprovalStatus",
+    "ModelFormat",
+    "IntegrityStatus",
+    "DependencyScope",
+    "DependencySourceType",
+    "ModelArtifact",
+    "ModelProvenance",
+    "IntegrityResult",
+    "ModelSecurityDecision",
+    "DependencyArtifact",
+    "VulnerabilityFinding",
+    "ConfigArtifact",
+    "PromptArtifact",
+    "PolicyArtifact",
+    "DeploymentMetadata",
+    "SnapshotDiff",
+    "SecuritySnapshot",
+    "ModelVerifier",
+    "ModelLoadingGuard",
+    "compute_streaming_hash",
+    "detect_model_format",
+    "is_unsafe_serialization",
+    "HASH_CHUNK_SIZE",
+    "ModelManifest",
+    "ModelSecurityRegistry",
+    "DependencyScanner",
+    "VulnerabilityProvider",
+    "OfflineVulnerabilityProvider",
+    "IntegrityManager",
+    "hash_configuration",
+    "hash_policy_artifact",
+    "hash_prompt_artifact",
+    "sanitize_config_dict",
+    # Agent Capability Security & Action Control (Phase 29)
+    "AgentCapabilitiesConfig",
+    "ActionClassification",
+    "SideEffectType",
+    "CapabilityRiskClass",
+    "ActionDecisionStatus",
+    "Capability",
+    "CapabilityGrant",
+    "DelegationGrant",
+    "ActionBudget",
+    "ActionRequest",
+    "ApprovalRequest",
+    "ActionDecision",
+    "ActionChain",
+    "ApprovalProvider",
+    "DenyAllApprovalProvider",
+    "CallbackApprovalProvider",
+    "MemoryApprovalProvider",
+    "BudgetManager",
+    "CapabilityEngine",
+    "DEFAULT_CAPABILITIES",
+    "DEFAULT_TOOL_CAPABILITY_MAP",
+    # Continuous AI Security Testing & Red-Team Engine (Phase 30)
+    "TestOrchestrator",
+    "SecurityTest",
+    "SecurityObservation",
+    "SecurityFinding",
+    "SecurityCoverage",
+    "TestStatus",
+    "ErrorCategory",
+    "AssertionType",
+    "DeclarativeAssertion",
+    "TargetAdapter",
+    "FirewallAdapter",
+    "MockAdapter",
+    "HTTPTargetAdapter",
+    "CallableAdapter",
+    "AgentAdapter",
+    "RAGAdapter",
+    "MockToolRegistry",
+    "SecurityTestSuite",
+    "BUILTIN_SUITES",
+    "SecurityTestGenerator",
+    "PromptInjectionGenerator",
+    "PIIGenerator",
+    "SecretGenerator",
+    "ToolSecurityGenerator",
+    "AgentCapabilityGenerator",
+    "RAGPoisoningGenerator",
+    "BoundedFuzzer",
+    "evaluate_assertion",
+    "evaluate_assertions",
+    "format_html_report",
+    "get_core_firewall_suite",
+    "get_prompt_injection_suite",
+    "get_pii_suite",
+    "get_secret_suite",
+    "get_tool_security_suite",
+    "get_agent_capability_suite",
+    "get_rag_security_suite",
+    "get_memory_security_suite",
+    "get_supply_chain_suite",
+    "get_configuration_integrity_suite",
+    "get_regression_suite",
+    "get_full_red_team_suite",
+    # AI Security Governance, Security Gates & Continuous Assurance (Phase 31)
+    "GovernanceDecision",
+    "ReasonCode",
+    "GateEvaluationResult",
+    "GovernanceResult",
+    "GateType",
+    "SecurityGate",
+    "FindingStatus",
+    "GovernanceFinding",
+    "SecurityWaiver",
+    "BaselineCategory",
+    "BaselineDiff",
+    "SecurityBaseline",
+    "EvidenceArtifactRecord",
+    "EvidenceManifest",
+    "SecurityReleaseManifest",
+    "SecurityEvidence",
+    "SecurityChangeClassification",
+    "ReleaseProfile",
+    "GovernancePolicy",
+    "GovernanceEngine",
+    "GovernanceOverride",
+    "SecurityGateFailure",
+    "GovernanceMetrics",
+    "format_governance_human",
+    "format_governance_json",
+    "format_governance_sarif",
+    # AI Security Knowledge Graph (Phase 32)
+    "KnowledgeGraph",
+    "GraphMetrics",
+    "GraphStore",
+    "InMemoryGraphStore",
+    "SQLiteGraphStore",
+    "Node",
+    "NodeType",
+    "Relationship",
+    "RelationshipType",
+    "GraphPath",
+    "GraphSnapshot",
+    "GraphDiff",
+    "SecurityDiff",
+    "SecurityImpactResult",
+    "BlastRadiusResult",
+    "ControlCoverageItem",
+    "ControlCoverageResult",
+    "ControlStatus",
+    "format_impact_human",
+    "format_blast_radius_human",
+    "format_coverage_human",
+    "format_graph_diff_human",
+    "format_node_show_human",
+    "format_path_human",
+    # Attack Graph & AI Threat Modeling (Phase 33)
+    "AttackGraph",
+    "AttackGraphMetrics",
+    "PathStatus",
+    "EvidenceType",
+    "MitigationStatus",
+    "ControlEffectiveness",
+    "EntryPointType",
+    "ConfidenceLevel",
+    "AttackEvidence",
+    "AttackTechnique",
+    "AttackNode",
+    "AttackStep",
+    "AttackPath",
+    "TrustBoundary",
+    "EntryPoint",
+    "ThreatModel",
+    "AttackGraphSnapshot",
+    "AttackGraphDiff",
+    "AttackTechniqueRegistry",
+    "default_technique_registry",
+    "AttackRule",
+    "AttackRuleRegistry",
+    "PreconditionEvaluator",
+    "STANDARD_RULES",
+    "format_attack_paths_human",
+    "format_threat_model_human",
+    "format_attack_paths_json",
+    "format_attack_graph_sarif",
+    # AI Asset Inventory & Discovery (Phase 34)
+    "Asset",
+    "AssetType",
+    "AssetStatus",
+    "AssetSource",
+    "DiscoveryConfidence",
+    "DiscoveryStatus",
+    "AssetProvenance",
+    "AssetConflict",
+    "DiscoveryResult",
+    "InventorySnapshot",
+    "InventoryDiff",
+    "AssetExposure",
+    "AssetInventory",
+    "DiscoveryEngine",
+    "InventoryMetrics",
+    "normalize_asset_id",
+    "sanitize_metadata_secrets",
+    "DiscoveryProvider",
+    "ConfigDiscoveryProvider",
+    "EnvironmentDiscoveryProvider",
+    "DependencyDiscoveryProvider",
+    "CodeDiscoveryProvider",
+    "ImportDiscoveryProvider",
+    "RuntimeDiscoveryProvider",
+    "ManualDiscoveryProvider",
+    "format_inventory_list_human",
+    "format_asset_show_human",
+    "format_discovery_result_human",
+    "format_inventory_diff_human",
+    "format_inventory_json",
+    "format_discovery_result_json",
+    # AI Security Posture Management (Phase 35)
+    "PostureEngine",
+    "PostureMetrics",
+    "PostureState",
+    "PostureDimension",
+    "ControlPresence",
+    "SecurityGapStatus",
+    "TestFreshness",
+    "ControlPostureRecord",
+    "TestCoverageRecord",
+    "AttackSurfaceRecord",
+    "SecurityGap",
+    "SecurityPosture",
+    "PostureSnapshot",
+    "PostureDiff",
+    "PostureRule",
+    "PostureRuleContext",
+    "PostureRuleRegistry",
+    "format_posture_human",
+    "format_posture_summary_human",
+    "format_posture_diff_human",
+    "format_posture_json",
+    "format_posture_sarif",
+    "sanitize_posture_metadata",
+    # AI Security Compliance & Control Mapping (Phase 36)
+    "ControlState",
+    "ApplicabilityStatus",
+    "ComplianceEvidenceType",
+    "EvidenceValidity",
+    "RemediationStatus",
+    "ExceptionStatus",
+    "MappingType",
+    "ComplianceControl",
+    "ComplianceFramework",
+    "ComplianceEvidence",
+    "ComplianceException",
+    "ComplianceGap",
+    "ControlAssessment",
+    "ControlMapping",
+    "CrossFrameworkMapping",
+    "ComplianceSnapshot",
+    "ComplianceDiff",
+    "sanitize_compliance_metadata",
+    "ControlCatalog",
+    "AI_SECURITY_BASELINE_CONTROLS",
+    "ComplianceRuleContext",
+    "ComplianceRule",
+    "ComplianceRuleRegistry",
+    "STANDARD_COMPLIANCE_RULES",
+    "ComplianceEngine",
+    "ComplianceMetrics",
+    "format_compliance_human",
+    "format_control_detail_human",
+    "format_gaps_human",
+    "format_evidence_human",
+    "format_compliance_json",
+    "format_compliance_yaml",
+    # AI Security Risk & Prioritization (Phase 37)
+    "RiskPrioritizationEngine",
+    "RiskAssessment",
+    "RiskLevel",
+    "RiskUncertainty",
+    "RiskTreatment",
+    "RiskFactor",
+    "RiskFactorType",
+    "RiskSnapshot",
+    "RiskDiff",
+    "RiskHistoryEntry",
+    "format_risk_human",
+    "format_risk_detail_human",
+    "format_risk_diff_human",
+    "format_risk_json",
+    "format_risk_yaml",
+    # AI Security Incident Response & Investigation (Phase 38)
+    "SecurityEvent",
+    "SecurityEventType",
+    "SecurityIncident",
+    "IncidentSeverity",
+    "IncidentStatus",
+    "IncidentAction",
+    "IncidentActionRecord",
+    "EvidenceItem",
+    "TimelineEntry",
+    "compute_evidence_hash",
+    "IncidentManager",
+    "IncidentError",
+    "IncidentDetectionRule",
+    "IncidentCandidate",
+    "RepeatedUnauthorizedToolCallsRule",
+    "PromptInjectionFollowedByPrivilegedToolRule",
+    "SecretExposureRule",
+    "PolicyBypassRule",
+    "AbnormalAgentBehaviorRule",
+    "get_default_incident_rules",
+    "format_incidents_table_human",
+    "format_incident_detail_human",
+    "format_incident_timeline_human",
+    "generate_post_incident_report",
+    # AI Security Runtime Protection & Policy Enforcement (Phase 39)
+    "RuntimeProtectionEngine",
+    "PolicyDecision",
+    "PolicyMode",
+    "FailBehavior",
+    "RuntimeRequest",
+    "RuntimeDecision",
+    "ProtectionAuditEntry",
+    "ProtectionPolicy",
+    "ProtectionRule",
+    "ProtectionCondition",
+    "RateLimitRule",
+    "RateLimiter",
+    "get_default_production_policy",
+    "protect",
+    "protect_tool",
+    "LLMFirewallMiddleware",
+    "SecurityBlockError",
+    # Production Hardening & v1.0 Public API (Phase 40)
+    "Scanner",
+]
+