]> git.99rst.org Git - sgasser-llm-shield.git/commit
git.99rst.org / sgasser-llm-shield.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: a7b8acf)
Limit masking scans to input roles (#115)
authorStefan Gasser <redacted>
Tue, 23 Jun 2026 18:52:25 +0000 (20:52 +0200)
committerGitHub <redacted>
Tue, 23 Jun 2026 18:52:25 +0000 (20:52 +0200)
commit43bb64f1c136f1256c4dadc4e3508d74fe96220f
treed8c0a9412a18174e913b7253f07bd256dd7d54aatree
parenta7b8acf0fdb6da9187fdaf237fe0c20ba0fde419commit | diff
Limit masking scans to input roles (#115)

Default PII and secrets detection to scan only user-controlled roles (user, tool, function, mcp) instead of every message role. Infer per-span roles in the Codex and Anthropic extractors so harness-injected context (environment_context, system-reminder, Codex AGENTS.md) and system/assistant content stay unscanned.

Restrict the dashboard preview to scanned roles after masking.
25 files changed:
config.example.yaml diff | blob | history
docs/concepts/mask-mode.mdx diff | blob | history
docs/configuration/logging.mdx diff | blob | history
docs/configuration/pii-detection.mdx diff | blob | history
docs/configuration/secrets-detection.mdx diff | blob | history
src/config.test.ts diff | blob | history
src/config.ts diff | blob | history
src/masking/extractors/anthropic.ts diff | blob | history
src/masking/extractors/codex.test.ts [new file with mode: 0644] blob
src/masking/extractors/codex.ts diff | blob | history
src/masking/service.test.ts [new file with mode: 0644] blob
src/masking/service.ts diff | blob | history
src/pii/detect.test.ts diff | blob | history
src/pii/detect.ts diff | blob | history
src/routes/anthropic.ts diff | blob | history
src/routes/api.ts diff | blob | history
src/routes/codex.test.ts diff | blob | history
src/routes/codex.ts diff | blob | history
src/routes/openai.ts diff | blob | history
src/secrets/detect.test.ts diff | blob | history
src/secrets/detect.ts diff | blob | history
src/services/log-content.test.ts diff | blob | history
src/services/log-content.ts diff | blob | history
src/utils/content.test.ts [deleted file] blob | history
src/utils/content.ts diff | blob | history
git clone https://git.99rst.org/PROJECT