curo1305
1448bb4650
feat(security): prompt injection scanner and API key redaction
...
- 15 regex patterns across 4 categories: instruction-override, role-switch,
jailbreak, exfiltration, credential-fishing
- scan_response() returns InjectionWarning list and logs to ~/.pyra/security.log
- redact_api_keys() strips sk-ant-, sk-, AIza patterns before display
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com >
2026-05-17 12:51:23 +02:00
curo1305
a96b540234
feat(security): vault wall, path guard, and utils
...
- utils/paths.py: pyra_home(), ensure_dir(), safe_chmod(), expand()
- security/boundaries.py: VaultAccessError, PyraSecurityError,
assert_safe_path() (called before every file read), check_vault_lock()
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com >
2026-05-17 12:48:50 +02:00