llm-kernel 0.29.0

Foundation library for Rust AI-native apps — provider catalog, LLM client, MCP server, search, telemetry, and safety
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34

//! Data-loss-prevention (DLP) primitives.
//!
//! Layered detection for outbound LLM traffic:
//! - **L1** [`scan()`] — deterministic regex scan (secrets, Korean PII,
//!   filesystem paths) returning byte spans, categories, severity, and an
//!   overall [`Sensitivity`].
//! - **L2** [`fingerprint`] (feature `dlp-fingerprint`) — cosine-match
//!   outbound content against registered sensitive-document embeddings.
//! - **L3** [`ContentClassifier`](classifier::ContentClassifier) — trait for
//!   an optional local classifier on ambiguous cases.
//! - **Policy** [`policy::lookup`] — map a provider
//!   [`DataPolicy`] + [`Sensitivity`] to a [`PolicyAction`].
//!
//! ```
//! use llm_kernel::dlp::{Sensitivity, scan};
//!
//! let report = scan("Authorization: Bearer abcdefghijklmnopqrstuvwxyz012345");
//! assert!(report.sensitivity >= Sensitivity::Confidential);
//! ```

/// L3 — optional local classifier for ambiguous content.
pub mod classifier;
/// Policy resolution — `DataPolicy` + `Sensitivity` → `PolicyAction`.
pub mod policy;
/// L1 — deterministic content scan.
pub mod scan;

/// L2 — fingerprint matching of registered sensitive documents.
#[cfg(feature = "dlp-fingerprint")]
pub mod fingerprint;

pub use crate::provider::policy::Sensitivity;
pub use policy::{DataPolicy, ImagePolicy, PolicyAction, PolicyThreshold, lookup};
pub use scan::{Finding, FindingCategory, ScanReport, Severity, Span, apply_redactions, scan};