4b6817381b
CI (OpenClaw E2E) / openclaw test (push) Has been cancelled
CI / coverage-report (push) Has been cancelled
CI / test-kubernetes (push) Has been cancelled
CI / should-run-thorough (push) Has been cancelled
CI / test-thorough (cloudwatch-demo) (push) Has been cancelled
CI / test-thorough (flink-ecs) (push) Has been cancelled
CI / test-thorough (upstream-lambda) (push) Has been cancelled
CI / test-thorough (prefect-ecs-fargate) (push) Has been cancelled
Release / build-binaries (zip, opensre.exe, onefile, windows-latest, windows-x64) (push) Has been cancelled
Benchmark image — build + push to ECR (any adapter) / build + push (push) Has been cancelled
CI / quality (ubuntu-latest) (push) Has been cancelled
CI / test (tools-runtime) (push) Has been cancelled
CI / test (e2e-general) (push) Has been cancelled
CI / test (cli-runtime) (push) Has been cancelled
CI / test (e2e-provider-and-openclaw) (push) Has been cancelled
CI / test (integrations-and-misc) (push) Has been cancelled
Release / verify (push) Has been cancelled
Release / build-python-dist (push) Has been cancelled
Release / build-binaries (tar.gz, opensre, onedir, macos-15-intel, darwin-x64) (push) Has been cancelled
Release / build-binaries (tar.gz, opensre, onedir, macos-latest, darwin-arm64) (push) Has been cancelled
Release / build-binaries (tar.gz, opensre, onedir, ubuntu-22.04, linux-x64) (push) Has been cancelled
Release / publish-release (push) Has been cancelled
Release / publish-main-release (push) Has been cancelled
Interactive Shell Live (PR + post-merge) / turn-checks (no-LLM) (push) Has been cancelled
CodeQL / Analyze (python) (push) Has been cancelled
Interactive Shell Live (PR + post-merge) / turn-live shard ${{ matrix.shard_index }} (push) Has been cancelled
Release / prepare (push) Has been cancelled
Release / build-binaries (tar.gz, opensre, onedir, ubuntu-22.04-arm, linux-arm64) (push) Has been cancelled
Synthetic Deterministic Tests / Synthetic offline (deterministic) (push) Has been cancelled
26 lines
874 B
Python
26 lines
874 B
Python
"""Reversible masking of sensitive infrastructure identifiers.
|
|
|
|
Replaces pod names, cluster names, hostnames, account ids, service names,
|
|
IP addresses, and emails with stable placeholders (``<POD_0>``, ``<CLUSTER_1>``)
|
|
before sending text to external LLMs, and restores the originals in any
|
|
user-facing output. Complementary to ``platform/guardrails`` which performs
|
|
one-way redaction for hard-block rules.
|
|
|
|
Activated per operator by ``OPENSRE_MASK_ENABLED=true``. Off by default.
|
|
"""
|
|
|
|
from __future__ import annotations
|
|
|
|
from platform.masking.context import MaskingContext
|
|
from platform.masking.detectors import DetectedIdentifier, find_identifiers
|
|
from platform.masking.policy import ALL_KINDS, IdentifierKind, MaskingPolicy
|
|
|
|
__all__ = [
|
|
"ALL_KINDS",
|
|
"DetectedIdentifier",
|
|
"IdentifierKind",
|
|
"MaskingContext",
|
|
"MaskingPolicy",
|
|
"find_identifiers",
|
|
]
|