From 88dec91d09cbe3a8fb76040deef3fa21d744b455 Mon Sep 17 00:00:00 2001 From: root Date: Tue, 23 Jun 2026 00:56:40 +0000 Subject: [PATCH] =?UTF-8?q?sec(pii):=20REDACT=5FPII=5FMODE=3Dalways=20?= =?UTF-8?q?=E2=80=94=20anonymize=20all=20gateway=20traffic=20incl.=20local?= =?UTF-8?q?=20Ollama?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- CHANGELOG_PENDING.md | 1 + 1 file changed, 1 insertion(+) diff --git a/CHANGELOG_PENDING.md b/CHANGELOG_PENDING.md index 94ce896..3b4256e 100644 --- a/CHANGELOG_PENDING.md +++ b/CHANGELOG_PENDING.md @@ -21,3 +21,4 @@ {"d":"2026-04-06","t":"FIX","m":"TIP: Reset 298 stale details_verified flags (reach_label empty). Runtime check in dashboard: dVer gated on non-empty reach_label. Wrong image cleared for O.Czz8HG.z.R."} {"d":"2026-04-06","t":"FIX","m":"TIP comparable prices: treat reach_meters=0 same as NULL in API query — 800G OSFP FS.com prices now visible on Flexoptix product pages."} {"d":"2026-06-12","t":"FEAT","m":"MAGATAMA guard scan API exposed at /v1/guard (POST /scan, GET /health): Layer-3 injection defense (pattern catalog + optional LLM judge) callable standalone by internal clients (first consumer: Flightdeck). Verdicts: clear/review/blocked with findings; always scans even when inline INJECTION_DEFENSE_MODE=off."} +{"d":"2026-06-22","t":"SEC","m":"PII-Redaktion REDACT_PII_MODE: cloud_only -> always. Jetzt wird ALLER non-exempt Traffic anonymisiert, auch bei lokalem Ollama-Ziel (Laptop spricht via /v1/chat/completions). redactPii (Stage-A: email/IBAN/CC/phone/IP/...) + redactPersonNamesAsync (Presidio+GLiNER-Sidecar :8701) laufen in executeCompletion -> gilt fuer ALLE Routen (chat/completions, messages, responses, completion). Verifiziert: caller laptop-test -> EMAIL_001+IBAN_001+PERSON maskiert vor Modell+Logs. .env-Backup .env.bak-*-pre-pii-always."}