Enum ExfiltrationEvent 

pub enum ExfiltrationEvent {
    MarkdownImageBlocked {
        url: String,
    },
    SuspiciousToolUrl {
        url: String,
        tool_name: ToolName,
    },
    MemoryWriteGuarded {
        reason: String,
    },
}

An exfiltration event detected by ExfiltrationGuard.

Events are advisory: they are logged, counted, and returned to the caller for further action. The guard itself never panics or blocks the agent loop.

Examples

use zeph_sanitizer::exfiltration::{ExfiltrationGuard, ExfiltrationEvent};
use zeph_config::ExfiltrationGuardConfig;

let guard = ExfiltrationGuard::new(ExfiltrationGuardConfig::default());
let (cleaned, events) = guard.scan_output("![t](https://evil.com/pixel.gif)");
assert_eq!(events.len(), 1);
assert!(matches!(&events[0], ExfiltrationEvent::MarkdownImageBlocked { url } if url.contains("evil.com")));

Variants

MarkdownImageBlocked

A markdown image with an external URL was stripped from LLM output.

Fields

url: String

SuspiciousToolUrl

A tool call argument contained a URL that appeared in untrusted flagged content.

Fields

url: String

tool_name: ToolName

MemoryWriteGuarded

A memory write was intercepted because the content had injection flags.

Fields

reason: String

Trait Implementations

impl Clone for ExfiltrationEvent

fn clone(&self) -> ExfiltrationEvent

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for ExfiltrationEvent

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl PartialEq for ExfiltrationEvent

fn eq(&self, other: &ExfiltrationEvent) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl StructuralPartialEq for ExfiltrationEvent