systemprompt-security 0.21.1

Security infrastructure for systemprompt.io AI governance: JWT, OAuth2 token extraction, scope enforcement, ChaCha20-Poly1305 secret encryption, the four-layer tool-call governance pipeline, and the unified authz decision plane (deny-overrides resolver + AuthzDecisionHook) shared by gateway and MCP enforcement.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18

//! Unified tool-use governance plane.
//!
//! This module defines the shared types and trait that every tool-call
//! governance policy in the system implements. It is consumed by the
//! template's policy chain (secret scan, scope check, blocklist, rate limit)
//! and produces the same typed [`crate::authz::types::Decision`] the
//! user→entity resolver returns — so a single audit shape and a single CLI view
//! cover both planes.
//!
//! Copyright (c) systemprompt.io — Business Source License 1.1.
//! See <https://systemprompt.io> for licensing details.

pub mod types;

pub use types::{
    AgentScope, GovernanceChain, GovernancePolicy, McpToolInput, PolicyContext, RateLimitWindow,
    SecretLocation,
};