Commit Graph

51 Commits

Author SHA1 Message Date
Michael Neale 0d0d130d96 refactor(computercontroller): remove automation_script, web_scrape, and cache tools (#11198) 2026-08-14 13:30:46 +00:00
Jasper dc77984832 fix: normalize critical command patterns (#10989) 2026-08-11 01:56:16 +00:00
filip 66051ec7d2 Cache-safe request assembly: append-only turn context and declared cache semantics (#11022) 2026-08-07 03:08:49 +00:00
Douwe Osinga ca52cce628 Unrolled agent loop (#9574)
Signed-off-by: Douwe Osinga <douwe@squareup.com>
Co-authored-by: Douwe Osinga <douwe@squareup.com>
Co-authored-by: Douwe M Osinga <douwe@sidewalklabs.com>
Co-authored-by: Claude Fable 5 <noreply@anthropic.com>
2026-08-06 22:32:44 +00:00
dorien-koelemeijer 20bb609c68 Revert "feat(security): chunk command-classifier input with overlapping windows" (#10416) (#10870) 2026-08-01 06:21:46 +00:00
Jasper 331bb911a9 fix(security): preserve adversary tool arguments (#10529) 2026-07-27 16:26:39 -04:00
dorien-koelemeijer 9aa03bff20 feat(security): chunk command-classifier input with overlapping windows (#10416) 2026-07-15 09:10:27 +00:00
Jack Amadeo fe7f16b727 Remove session_id from provider streaming trait methods (#9984) 2026-06-29 22:04:58 +00:00
Jack Amadeo 35711b8691 provider refactor: don't require a model config to create a provider (#9953)
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
2026-06-23 23:18:07 +00:00
dorien-koelemeijer 8b5a7b8f8e feat(security): unified OTLP logging schema for cross-tool detection (#9713) 2026-06-12 04:32:37 +00:00
dorien-koelemeijer 390dfb8c78 feat(security): Re-adjust pattern-based detection for prompt injection detection confidence scores (#9690) 2026-06-10 00:41:05 +00:00
dorien-koelemeijer f52d717dce feat(security): enable prompt injection mitigation by default for internal users via non-overridable env vars (#9612) 2026-06-10 00:13:29 +00:00
dorien-koelemeijer 030dbb0c51 feat(security): Add directionality to egress logging (#9546) 2026-06-02 18:44:38 +00:00
dorien-koelemeijer ca26f01d3a [Prompt injection mitigation] Update pattern-based detection to reduce FPs (#9350) 2026-05-21 00:56:17 +00:00
dorien-koelemeijer 826cce0257 Prompt injection mitigation: update pattern-based detection (#9198) 2026-05-14 02:19:48 +00:00
Rodolfo Olivieri 826a437d08 chore: replace lazy_static with std::sync::LazyLock (#8815)
Signed-off-by: Rodolfo Olivieri <rolivier@redhat.com>
2026-05-11 22:47:31 +00:00
dorien-koelemeijer a0fa5f5791 Update patterns for pattern-based command injection (#8546) 2026-04-30 03:21:26 +00:00
Lifei Zhou 96fa25bce8 fix: remove defaults yaml (#8854) 2026-04-27 21:57:32 +00:00
dorien-koelemeijer 2e529b7497 Add prompt injection mitigation logging back (#8518) 2026-04-14 00:44:49 +00:00
dorien-koelemeijer dc249f7b62 feat(security): add egress logging inspector (#8149) 2026-04-01 00:59:28 +00:00
dorien-koelemeijer 6d25161b19 Remove unused tool call json in logs (#8147) 2026-03-27 03:09:14 +00:00
Michael Neale 754c214df4 feat: adversarial agent for preventing leaking of info and more (#7948) 2026-03-17 06:38:45 +00:00
dorien-koelemeijer 6d6c6b3228 More logging for command injection classifier model training (#7779) 2026-03-11 13:03:18 +00:00
Adrian Cole b4546f62d9 fix: restore smart-approve mode (#7690)
Signed-off-by: Adrian Cole <adrian@tetrate.io>
2026-03-06 15:45:23 +00:00
Jack Amadeo 325bf396af Update to rmcp 1.1.0 (#7619)
Co-authored-by: Alex Hancock <alexhancock@block.xyz>
2026-03-06 02:40:52 +00:00
Bradley Axen ced5c1b108 feat: simplify developer extension (#7466)
Co-authored-by: Alex Hancock <alexhancock@block.xyz>
2026-02-26 11:30:36 +00:00
dorien-koelemeijer e32720fcfb Fix: Minor logging uplift for debugging of prompt injection mitigation (#7195) 2026-02-17 23:23:50 +00:00
Adrian Cole 4a5848ea76 fix(otel): use monotonic_counter prefix and support temporality env var (#7234)
Signed-off-by: Adrian Cole <adrian@tetrate.io>
2026-02-16 21:45:15 +00:00
dorien-koelemeijer 5b15593e0a Fix: Only send command content to command injection classifier (excluding part of tool call dict) (#7082) 2026-02-09 22:09:12 +00:00
dorien-koelemeijer a3be331fe6 Fix: Small update UI settings prompt injection (#6830) 2026-01-30 12:57:55 +07:00
dorien-koelemeijer 66e4a1a43c Different approach to determining final confidence level of prompt injection evaluation outcomes (#6729) 2026-01-29 07:41:54 +07:00
dorien-koelemeijer e9024b7c19 Logging uplift for model training purposes (command injection model) [Small change] (#6330) 2026-01-27 12:25:11 +07:00
dorien-koelemeijer 3dae12765f BERT-based command injection detection in tool calls (#6599) 2026-01-27 10:46:02 +07:00
Alex Hancock 8233f0afac chore: upgrade to rmcp 0.14.0 (#6674) 2026-01-23 14:52:43 -05:00
Alex Hancock 4191826569 chore: upgrade rmcp (#6516) 2026-01-16 12:09:51 -05:00
Adrian Cole 7d4a6bd8ff feat(goose-acp): enable parallel sessions with isolated agent state (#6392)
Signed-off-by: Adrian Cole <adrian@tetrate.io>
2026-01-14 14:19:17 -08:00
dorien-koelemeijer 8a9b090aa8 Fix: Small update in how ML-based prompt injection determines final result (#6439) 2026-01-13 08:20:40 +10:00
dorien-koelemeijer 3d415fc1ea Update confidence levels prompt injection detection to reduce false positive rates (#6390)
Signed-off-by: Dorien Koelemeijer <dkoelemeijer@squareup.com>
2026-01-08 15:51:53 +10:00
dorien-koelemeijer 9dc548ee2f Add ML-based prompt injection detection (#5623) 2026-01-08 11:55:59 +10:00
Douwe Osinga 85aee9c5b7 MCP Apps Plumbing (#6286)
Co-authored-by: Douwe Osinga <douwe@squareup.com>
2026-01-05 10:34:52 -05:00
Rabi Mishra fc8a4b4adf fix(google): Fix 400 Bad Request error with Gemini 3 thought signatures (#6035)
Signed-off-by: rabi <ramishra@redhat.com>
2025-12-17 08:38:46 -05:00
dorien-koelemeijer 469f99f9c9 Update vars to be capitalised to be in line with other variables in config file (#6085) 2025-12-11 16:12:45 -08:00
Salvatore Testa cfdf01567d fix: support Gemini 3's thought signatures (#5806)
Signed-off-by: Salvatore Testa <sal@withpersona.com>
2025-11-20 16:28:27 +11:00
dorien-koelemeijer 387d76c5ff Update prompt injection detection metrics (due to errors exporting to datadog) (#5692) 2025-11-14 08:40:29 +10:00
dorien-koelemeijer 786e7084b7 Set up Datadog metrics for prompt injection detection (#5385) 2025-10-28 09:11:34 +10:00
dorien-koelemeijer e6a5692656 Feat: Add prompt injection detection settings UI + update logging (#4651) 2025-10-03 09:01:37 -04:00
Alex Hancock cb0eca9966 alexhancock/mcp-crate-cleanup (#4885) 2025-09-29 17:00:17 -04:00
Alex Hancock b9ba8dca29 Revert "Internal MCP Crate Cleanup (#4800)" (#4883) 2025-09-29 14:21:30 -04:00
Alex Hancock 146cf3185a Internal MCP Crate Cleanup (#4800) 2025-09-29 10:39:43 -04:00
Jack Amadeo 757ceb6109 chore: turn clippy on for test code (#4817) 2025-09-26 00:06:07 -04:00