Skip to content

Add Privacy Guard middleware - #21

Merged
johnnygreco merged 85 commits into
mainfrom
johnny/feat/privacy-guard-v0
Jul 27, 2026
Merged

Add Privacy Guard middleware#21
johnnygreco merged 85 commits into
mainfrom
johnny/feat/privacy-guard-v0

Conversation

@johnnygreco

@johnnygreco johnnygreco commented Jul 22, 2026 •
edited
Loading

Copy link
Copy Markdown
Collaborator

Summary

Adds Privacy Guard, an OpenShell supervisor middleware for detecting, blocking,
or replacing sensitive entities in provider-bound UTF-8 request text before
credentials are attached.

Privacy Guard provides:

  • ordered entity-processing policies with detect, block, and replace
    actions;
  • a built-in Regex engine with inline or file-backed pattern catalogs;
  • a typed custom-engine extension API with application-owned resources;
  • a programmatic gRPC server and CLI;
  • bounded request processing, content-safe diagnostics, and actionable errors;
  • architecture, deployment, and custom-engine documentation; and
  • Python 3.11+ packaging and automated dependency auditing.

The implementation underwent focused QA and complete repository validation.
The current branch passes the supported Python and documentation CI checks.

@johnnygreco johnnygreco changed the title Add configurable Privacy Guard regex scanner Add Privacy Guard middleware Jul 22, 2026
johnnygreco added 21 commits July 22, 2026 22:23
@johnnygreco
Harden regex scanner configuration loading
61330d8
@johnnygreco
Improve Privacy Guard operator guidance
fe8e84a
@johnnygreco
Clarify regex scanner CLI configuration
c1a9a1d
@johnnygreco
Separate scanner-specific CLI options
e8d0abf
@johnnygreco
Address scanner CLI review feedback
b4a4a38
@johnnygreco
Adopt Typer for Privacy Guard CLI
d7e2510
@johnnygreco
Make built-in scanner help self-contained
9e3d14a
@johnnygreco
Rename built-in scanner config option
20f69ee
@johnnygreco
Harden Privacy Guard CLI bind failures
cfc086a
@johnnygreco
Add end-to-end regex scanner walkthrough
92dbf86
@johnnygreco
Standardize Privacy Guard example setup
e5233cb
@johnnygreco
Simplify example gateway setup
fd54837
@johnnygreco
Use OpenShell host alias in examples
f91bf49
@johnnygreco
Log Privacy Guard CLI startup
fe422d9
@johnnygreco
Fix example middleware endpoint
05d66fe
@johnnygreco
Document local gateway registration
1a295e8
@johnnygreco
Make example middleware reachable from sandboxes
bd2e32a
@johnnygreco
Disable telemetry in regex walkthrough
d008566
@johnnygreco
Add request pipeline debug logging
786c1ff
@johnnygreco
Merge remote-tracking branch 'origin/main' into johnny/feat/privacy-g…
a66f2b2 
…uard-v0

# Conflicts:
#	projects/README.md
@johnnygreco
Polish Privacy Guard documentation and workflows
d9482b2
@github-actions

github-actions Bot commented Jul 23, 2026 •
edited
Loading

Copy link
Copy Markdown

Documentation preview

The preview has been removed.

johnnygreco added 28 commits July 26, 2026 15:53
@johnnygreco
Unify Privacy Guard logging configuration
b4a4e46
@johnnygreco
Route Privacy Guard loggers through shared module
6cff82d
@johnnygreco
Add clear colored logging defaults
3a10551
@johnnygreco
Make logging color policy explicit
5f09d5d
@johnnygreco
test(privacy-guard): cover loopback gRPC flow (PG-014)
9eecfe6
@johnnygreco
fix(privacy-guard): accelerate scalar validation (PG-001)
4cc4d7e
@johnnygreco
fix(privacy-guard): bound and normalize transport config (PG-002 PG-003)
aa3d455
@johnnygreco
fix(privacy-guard): validate bound listen ports (PG-004)
d69d30b
@johnnygreco
fix(privacy-guard): secure diagnostic identifiers (PG-005)
e0ea80f
@johnnygreco
fix(privacy-guard): enforce engine lifecycle hooks (PG-007)
a118097
@johnnygreco
fix(privacy-guard): classify zero-width regex config (PG-006)
bb64fa3
@johnnygreco
fix(privacy-guard): single-flight processor builds (PG-008)
30d8572
@johnnygreco
fix(privacy-guard): verify release artifacts (PG-010 PG-011 PG-013)
f2bed78
@johnnygreco
fix(privacy-guard): bound prepared-state caches (PG-009)
12bfe1a
@johnnygreco
fix(privacy-guard): audit fixed test toolchain (PG-012)
4023108
@johnnygreco
fix(privacy-guard): close panel error gaps (PG-002 PG-004 PG-005)
a59b06d
@johnnygreco
fix(privacy-guard): resolve panel findings (PG-005 PG-006 PG-009)
24cca6d
@johnnygreco
fix(privacy-guard): preserve multi-catalog cache budget (PG-009)
b620d77
@johnnygreco
fix(privacy-guard): seed artifact environment (PG-010 PG-012)
a3d864c
@johnnygreco
refactor(privacy-guard): simplify cache ownership (PG-009)
451c859
@johnnygreco
refactor(privacy-guard): address review feedback
4bbfb08
@johnnygreco
refactor(privacy-guard): use one active policy (PG-008 PG-009)
96683e1
@johnnygreco
fix(privacy-guard): restore release artifact gate (PG-010 PG-011 PG-013)
aa0103c
@johnnygreco
chore(privacy-guard): keep release checks streamlined
00bc7fa
@johnnygreco
refactor(privacy-guard): call regex entries rules
8b6e89d
@johnnygreco
feat(privacy-guard): configure OpenShell gateway
a9ca19c
@johnnygreco
refactor(privacy-guard): simplify regex catalog loading
a05914b
@johnnygreco
ci(docs): require manual production publish
127c48a
@johnnygreco
johnnygreco marked this pull request as ready for review July 27, 2026 18:00
@johnnygreco
johnnygreco merged commit ff6c4cb into main Jul 27, 2026
9 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@johnnygreco