systemprompt-security 0.32.2

Security infrastructure for systemprompt.io AI governance: JWT, OAuth2 token extraction, scope enforcement, ChaCha20-Poly1305 secret encryption, the four-layer tool-call governance pipeline, and the unified authz decision plane (deny-overrides resolver + AuthzDecisionHook) shared by gateway and MCP enforcement.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19

//! The four built-in governance policies.
//!
//! Each registers itself with the [`super::registry`] under a stable id and is
//! enabled by [`super::GovernanceConfig::defaults`]:
//!
//! | id | denies with |
//! |----|-------------|
//! | `secret_scan` | [`DenyReason::SecretLeak`][crate::authz::DenyReason::SecretLeak] |
//! | `scope_check` | [`DenyReason::ScopeViolation`][crate::authz::DenyReason::ScopeViolation] |
//! | `tool_blocklist` | [`DenyReason::ToolBlocked`][crate::authz::DenyReason::ToolBlocked] |
//! | `rate_limit` | [`DenyReason::RateLimitExceeded`][crate::authz::DenyReason::RateLimitExceeded] |
//!
//! Copyright (c) systemprompt.io — Business Source License 1.1.
//! See <https://systemprompt.io> for licensing details.

mod rate_limit;
mod scope_check;
mod secret_scan;
mod tool_blocklist;