4 Commits

Author	SHA1	Message	Date
didericis-claude	12805444e2	revert: restore simple O(n*m) proximity check ... The input lists are bounded by the number of phrase patterns (5+5), so the sorted-scan optimization added complexity for no practical benefit. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-06-05 21:05:52 +00:00
didericis-claude	6d8c4d62bf	perf(dlp): replace O(n*m) proximity check with O(n log n) sorted scan ... Sort all match positions and scan linearly instead of checking every a-b pair. Early-exits on overlap (gap=0) or once the gap drops below the threshold. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-06-05 21:01:56 +00:00
didericis-claude	abcb336e7c	fix(dlp): rework naive injection to proximity-based disclosure+jailbreak ... Token detection is already handled by the token_patterns detector running separately — calling it again from scan_naive_injection was redundant. New logic: - Warn on any disclosure phrase - Warn on any jailbreak phrase - Block when both appear within 500 chars of each other Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-06-05 20:34:21 +00:00
didericis-claude	726713d081	feat(egress): implement PRD 0053 — DLP addon with Gateway API matches ... Replace path_allowlist with Gateway API HTTPRoute match vocabulary (paths, methods, headers with AND/OR semantics) and add DLP scanning to the egress proxy: - Token pattern detection (AWS, GitHub, Anthropic, OpenAI, Stripe, JWT) - Known secret detection (EGRESS_TOKEN_* with base64/URL/hex variants) - Naive prompt injection detection (disclosure + credential, jailbreak) - Per-route DLP configuration via manifest dlp block - Inbound response scanning with block/warn severity Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-06-05 19:53:23 +00:00