CalvinBackup/gstack
1
0
Fork 0
mirror of https://github.com/garrytan/gstack.git synced 2026-09-21 20:30:47 +02:00
Code Issues Packages Projects Releases Wiki Activity

refactor: remove prompt-injection ML classifier

Browse Source 
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
This commit is contained in:
Sinabina
2026-07-21 14:40:31 -07:00
co-authored by Claude Opus 4.8
parent d596232248
commit b6a007a7e3
25 changed files with 12 additions and 3126 deletions
Download Patch File Download Diff File Expand all files Collapse all files
browse/src/security.ts
+5 -9
View File
@@ -3,20 +3,16 @@
*
* This file contains the PURE-STRING / ML-FREE parts of the security stack.
* Safe to import from the compiled `browse/dist/browse` binary because it
* does not load onnxruntime-node or other native modules.
* does not load onnxruntime-node or other native modules. The ML prompt-
* injection classifier (and its in-browser sidebar/terminal caller) was
* removed; only these page-content layers remain.
*
* ML classifier code lives in `security-classifier.ts`, which is only
* imported from `sidebar-agent.ts` (runs as non-compiled bun script).
*
* Layering (see CEO plan 2026-04-19-prompt-injection-guard.md):
* Layering:
* L1-L3: content-security.ts (existing, datamarking / DOM strip / URL blocklist)
* L4: ML content classifier (TestSavantAI via security-classifier.ts)
* L4b: ML transcript classifier (Haiku via security-classifier.ts)
* L5: Canary (this module — inject + check)
* L6: Threshold aggregation (this module — combineVerdict)
*
* Cross-process state lives at ~/.gstack/security/session-state.json
* (per eng review finding 1.2 — server.ts and sidebar-agent.ts are different processes).
* Cross-process state lives at ~/.gstack/security/session-state.json.
*/
import { randomBytes, createHash } from 'crypto';