rene.fichtmueller/llm-gateway
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix(pii): presidio sidecar language misconfig — stops silent name-redaction fail-open

Browse Source
This commit is contained in:
root 2026-06-23 01:09:06 +00:00
parent 88dec91d09
commit 912f796e1f
1 changed files with 1 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
CHANGELOG_PENDING.md
View File

@ -22,3 +22,4 @@
{"d":"2026-04-06","t":"FIX","m":"TIP comparable prices: treat reach_meters=0 same as NULL in API query — 800G OSFP FS.com prices now visible on Flexoptix product pages."} {"d":"2026-04-06","t":"FIX","m":"TIP comparable prices: treat reach_meters=0 same as NULL in API query — 800G OSFP FS.com prices now visible on Flexoptix product pages."}
{"d":"2026-06-12","t":"FEAT","m":"MAGATAMA guard scan API exposed at /v1/guard (POST /scan, GET /health): Layer-3 injection defense (pattern catalog + optional LLM judge) callable standalone by internal clients (first consumer: Flightdeck). Verdicts: clear/review/blocked with findings; always scans even when inline INJECTION_DEFENSE_MODE=off."} {"d":"2026-06-12","t":"FEAT","m":"MAGATAMA guard scan API exposed at /v1/guard (POST /scan, GET /health): Layer-3 injection defense (pattern catalog + optional LLM judge) callable standalone by internal clients (first consumer: Flightdeck). Verdicts: clear/review/blocked with findings; always scans even when inline INJECTION_DEFENSE_MODE=off."}
{"d":"2026-06-22","t":"SEC","m":"PII-Redaktion REDACT_PII_MODE: cloud_only -> always. Jetzt wird ALLER non-exempt Traffic anonymisiert, auch bei lokalem Ollama-Ziel (Laptop spricht via /v1/chat/completions). redactPii (Stage-A: email/IBAN/CC/phone/IP/...) + redactPersonNamesAsync (Presidio+GLiNER-Sidecar :8701) laufen in executeCompletion -> gilt fuer ALLE Routen (chat/completions, messages, responses, completion). Verifiziert: caller laptop-test -> EMAIL_001+IBAN_001+PERSON maskiert vor Modell+Logs. .env-Backup .env.bak-*-pre-pii-always."} {"d":"2026-06-22","t":"SEC","m":"PII-Redaktion REDACT_PII_MODE: cloud_only -> always. Jetzt wird ALLER non-exempt Traffic anonymisiert, auch bei lokalem Ollama-Ziel (Laptop spricht via /v1/chat/completions). redactPii (Stage-A: email/IBAN/CC/phone/IP/...) + redactPersonNamesAsync (Presidio+GLiNER-Sidecar :8701) laufen in executeCompletion -> gilt fuer ALLE Routen (chat/completions, messages, responses, completion). Verifiziert: caller laptop-test -> EMAIL_001+IBAN_001+PERSON maskiert vor Modell+Logs. .env-Backup .env.bak-*-pre-pii-always."}
{"d":"2026-06-23","t":"FIX","m":"Presidio-Sidecar (:8701, PII-Namen-NER Backend) Sprach-Misconfig behoben: RecognizerRegistry war ['en'], AnalyzerEngine ['de','en'] -> Misconfigured engine-Errors liessen manche /analyze-Calls fehlschlagen -> Namen wurden bei diesen Requests NICHT redigiert (silent fail-open leak). Fix /opt/presidio-sidecar/main.py: RecognizerRegistry(supported_languages=[de,en]) + load_predefined_recognizers(languages=[de,en]). Restart + pm2 save. Verifiziert: 0 neue Misconfig-Errors, deutsches PERSON/LOC/ORG zuverlaessig (E2E ueber Gateway redactedTokens+names). Backup main.py.bak-*-pre-langfix. HINWEIS: Sidecar /opt/presidio-sidecar ist NICHT git-versioniert."}