Keysat
2e70b34592
Phase 1 Workstream D. Lets the Architect ground the thesis in REAL recurring LP objections without any LP identity reaching the Claude API. Layered, defense-in-depth, fail-closed by construction (docs/redaction-rehydration.md). backend/redaction/: - scrub.py: the leak-proof core. Drops Tier-1 (labelled/structured account/wire/SSN/ IBAN/SWIFT/passport, separator-tolerant); tokenizes known LP entities (dictionary from the canonical layer, unicode-folded + hyphen-extended) and structured PII (emails, scheme-less/social URLs, intl+ext phones, currency-cued amounts, ISO/worded/numeric/ quarter dates, addresses, bare long digit runs); pre-neutralizes injected [TYPE_N] strings; single-pass rehydrate; metadata-only audit logging (the pseudonym map is the de-anon key — local-only, never logged/sent). Hardened across THREE adversarial leak-hunts (worded/coded amounts, intl phones, NFD/ligature/zero-width names, slash/ comma SSN, SWIFT, alpha-prefixed accounts, substance-preserving false-positive fixes). - client.py: Boundary — one scrub/rehydrate contract, SCRUB_BACKEND=local (default) or gateway (Spark Control /scrub + /rehydrate). Fails closed (db_path required; dictionary build errors propagate; strict rehydrate returns tokenized-not-de-anon text). - test_scrub_leak.py, test_reidentification.py: golden-file leak + re-identification suites (synthetic only, guardrail #9), regression-locking every leak-hunt vector. backend/mcp/architect_grounding.py: the flow — retrieve (local) -> minimize-first (local Qwen) -> scrub (+ local-Qwen NER backstop for unknown names) -> Claude over the de-identified register only -> re-hydrate locally -> human review. FAILS CLOSED if the local model is unreachable or a hallucinated token appears. test_grounding_boundary.py proves nothing sensitive reaches Claude and the three fail-closed paths. server.py: POST /api/architect/ground (admin) wires retrieval -> ground_objections. docker_entrypoint.sh: SCRUB_BACKEND (default local). docs/spark-control-scrub-endpoints.md: the gateway handover spec (Option 1 — caller supplies the entity dictionary). Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
24 lines
1.0 KiB
TypeScript
24 lines
1.0 KiB
TypeScript
import { VersionGraph } from '@start9labs/start-sdk'
|
|
import { v_0_1_0_39 } from './v0.1.0.39'
|
|
import { v_0_1_0_40 } from './v0.1.0.40'
|
|
import { v_0_1_0_41 } from './v0.1.0.41'
|
|
import { v_0_1_0_42 } from './v0.1.0.42'
|
|
import { v_0_1_0_43 } from './v0.1.0.43'
|
|
import { v_0_1_0_44 } from './v0.1.0.44'
|
|
import { v_0_1_0_45 } from './v0.1.0.45'
|
|
import { v_0_1_0_46 } from './v0.1.0.46'
|
|
import { v_0_1_0_47 } from './v0.1.0.47'
|
|
import { v_0_1_0_48 } from './v0.1.0.48'
|
|
import { v_0_1_0_49 } from './v0.1.0.49'
|
|
import { v_0_1_0_50 } from './v0.1.0.50'
|
|
import { v_0_1_0_51 } from './v0.1.0.51'
|
|
import { v_0_1_0_52 } from './v0.1.0.52'
|
|
import { v_0_1_0_53 } from './v0.1.0.53'
|
|
import { v_0_1_0_54 } from './v0.1.0.54'
|
|
import { v_0_1_0_55 } from './v0.1.0.55'
|
|
|
|
export const versionGraph = VersionGraph.of({
|
|
current: v_0_1_0_55,
|
|
other: [v_0_1_0_39, v_0_1_0_40, v_0_1_0_41, v_0_1_0_42, v_0_1_0_43, v_0_1_0_44, v_0_1_0_45, v_0_1_0_46, v_0_1_0_47, v_0_1_0_48, v_0_1_0_49, v_0_1_0_50, v_0_1_0_51, v_0_1_0_52, v_0_1_0_53, v_0_1_0_54],
|
|
})
|