Commit History
-
feat(guardrails): add input guard, out_of_scope intent, and refusal handling
Rifqi Hafizuddin +1: Claude Fable 5Layered jailbreak/prompt-injection defense wired into ChatHandler.handle (covers the live v2 chat path). Closes the gap where the only defense was soft prompt text on one agent plus Azure's inconsistent content filter. - Input guard (src/agents/guard.py + prompts/input_guard.md): a cheap GPT-4o classifier screening injection/secrets/abuse BEFORE the router. Fail-open on guard error, fail-closed on detection; Azure content-filter trip = block. Swappable seam (local classifier now, Prompt Shields later). - out_of_scope router intent: deterministic canned refusal for off-topic / manipulation, no downstream LLM. Fixes the old no-refuse contradiction. - Content-filter error handling: clean refusal instead of leaking the raw Azure 400 blob. - Language-matched refusals (EN/ID), strict-refuse policy (src/agents/refusals.py). - Prompt hardening: instruction-hierarchy rule in guardrails.md. - Rate limit (30/min) on the v2 chat endpoint. - Eval regression cases (out_of_scope_*) in the …0bbc27b
-
/fix analysis + report_inputs and storage update (#9)
- fix(chat): drop ENABLE_SLOW_PATH flag + make chat persistence read-only (b8b76c4fb8db21de183cc6f80c0acba0d35bdad1) - [NOTICKET] feat(storage): read tabular Parquet from Supabase S3 via provider toggle (3f48226adaf2ed107a4eb2c0373cbb73fc62f552) Co-authored-by: Sofhia Az-Zahra <sofhiaazzhr@users.noreply.huggingface.co>079782d
-
/fix v2 chat stream api update to analyses_messages (#7)
- [NOTICKET] fix(db): reconcile analyses schema + migrate chat to analyses_messages (283eb0e4653acfe9311f42e3bb12d0490b8c9751)0066161 -
/fix message_id for chat/stream Endpoint (#6)
- [NOTICKET] refactor(api): server-mint message_id only; unwire v1 chat (729086150b982cbd747829074658bc798d8e18f4)d8e7745 -
feat/ Endpoint Restructure (#5)
- [KM-686] Unwire Non-AI Routers from Main + Swagger (0b2d6785801ecc4d58a32580b1a9ef6238059de2) - [NOTICKET] docs: pr/5 sprint tracker + endpoint-restructure contract + REPO_STATUS banner (ce7be178428cadf1884a77d3d1f1398dccf32f6e) - [KM-687] Add Dedicated /tools/help Endpoint + Regroup Tools List (a881d38851470bf685990fdb554417da4fc1eccd) - [KM-688] feat(api): v2 chat pilot + regroup report under /tools; adopt lead API contracts (ad2ce619b51c234a8cd1c3772417a9a542a9a40d) Co-authored-by: Sofhia Az-Zahra <sofhiaazzhr@users.noreply.huggingface.co>3bacc1d