Struct DlpCfg 

pub struct DlpCfg {

    pub mode: String,
    pub redact_style: String,
    pub scan_request: bool,
    pub scan_response: bool,
    pub stream_redact: bool,
    pub reversible: bool,
    pub detect_email: bool,
    pub detect_credit_card: bool,
    pub luhn_validate_credit_card: bool,
    pub detect_secrets: bool,
    pub detect_ssn: bool,
    pub detect_phone: bool,
    pub detect_iban: bool,
    pub detect_high_entropy: bool,
    pub detect_prompt_injection: bool,
    pub entropy_min_len: usize,
    pub entropy_threshold: f64,
    pub gazetteer_terms: Vec<String>,
    pub custom_patterns: Vec<String>,
    pub ner: NerCfg,
}

Edge-DLP settings ([llm.dlp]). When mode is not off, request and/or response bodies are scanned for PII and secrets; the mode decides what happens on a finding (report / block / redact). See crate::dlp.

Fields

mode: String

off | report | block | redact. Default off.

redact_style: String

How a span is rewritten in redact mode: full ([REDACTED:<cat>], default) | mask (keep last 4) | hash (stable opaque token). See crate::dlp::RedactStyle.

scan_request: bool

Scan the inbound request body (the prompt). Default true.

scan_response: bool

Scan the (buffered) response body and, in report mode, streamed frames. Default true.

stream_redact: bool

In redact mode, also rewrite streamed SSE frames (not just buffered bodies). Deterministic detectors only — NER never runs on the stream. Off by default: streaming redaction can only rewrite spans the carry buffer fully contains, so enable it deliberately. See crate::dlp.

reversible: bool

Reversible masking (redact mode only). When on, an inbound finding is replaced with a stable placeholder token (<edgeguard-<cat>-<n>>) instead of an irreversible [REDACTED] tag, and the placeholder→original map is kept for the request so the response is unmasked (buffered and streamed) back to the original value. The provider never sees the PII; the client gets its own data back — the round-trip an unmask keyed on shared state gets wrong. Off by default. When on, the response is unmasked rather than re-scanned/redacted (restore, not detect).

detect_email: bool

Built-in detectors.

detect_credit_card: bool

Detect card numbers. Pair with luhn_validate_credit_card to require a valid checksum, which removes most false positives from ordinary long digit strings.

luhn_validate_credit_card: bool

Require the Luhn checksum before flagging a digit run as a card (cuts false positives). Default true.

detect_secrets: bool

AWS keys, provider-style xx-… keys, and private-key blocks.

detect_ssn: bool

US SSN (NNN-NN-NNNN). Default true.

detect_phone: bool

Phone numbers. Off by default — false-positives on ordinary numeric runs.

detect_iban: bool

IBAN account numbers. Off by default — false-positives on uppercase+digit tokens.

detect_high_entropy: bool

High-entropy token sweep (catch-all). Off by default — can false-positive.

detect_prompt_injection: bool

Prompt-injection / jailbreak heuristics for agent traffic (a small, high-precision built-in deny set — “ignore previous instructions”, “reveal your system prompt”, etc.), reported under the prompt_injection category. Off by default (opt-in, report-first) since instructions to a model are legitimate traffic; enable and watch the counter before moving to block.

entropy_min_len: usize

Minimum token length the entropy sweep considers.

entropy_threshold: f64

Per-character Shannon-entropy threshold (bits) for the entropy sweep.

gazetteer_terms: Vec<String>

Dictionary deny-list: literal terms matched case-insensitively (Aho-Corasick), reported under the gazetteer category. The fast, many-term path for known names / codenames / identifiers.

custom_patterns: Vec<String>

Extra regexes (linear-time regex syntax), all reported under the custom category.

ner: NerCfg

Optional ML NER family ([llm.dlp.ner]). Requires the ner cargo feature; catches person/address/org spans regex can’t. See NerCfg.

Trait Implementations

impl Clone for DlpCfg

fn clone(&self) -> DlpCfg

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for DlpCfg

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for DlpCfg

fn default() -> Self

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for DlpCfg

where DlpCfg: Default,

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.