tftsr-devops_investigation/src-tauri/src
Shaun Arman abab5c3153 fix(security): enforce PII redaction before AI log transmission
analyze_logs() was reading the original log file from disk and sending its
full contents to external AI providers, completely bypassing the redaction
pipeline. The redacted flag in log_files and the .redacted file on disk were
written by apply_redactions() but never consulted on the read path.

Fix: query the redacted column alongside file_path. If the file has not been
redacted, return an error to the caller before any AI provider call is made.
When redacted, read from {path}.redacted instead of the original.

Adds redacted_path_for() helper and two unit tests covering the rejection
and happy-path cases.
2026-04-05 10:08:16 -05:00
..
ai fix(security): harden secret handling and audit integrity 2026-04-04 23:37:05 -05:00
audit fix(security): harden secret handling and audit integrity 2026-04-04 23:37:05 -05:00
commands fix(security): enforce PII redaction before AI log transmission 2026-04-05 10:08:16 -05:00
db fix(security): harden secret handling and audit integrity 2026-04-04 23:37:05 -05:00
docs feat: add custom_rest provider mode and rebrand application name 2026-04-04 15:35:58 -05:00
integrations fix(security): harden secret handling and audit integrity 2026-04-04 23:37:05 -05:00
ollama fix: provider routing uses provider_type, Active badge, fmt 2026-03-31 08:05:13 -05:00
pii fix(pii): remove lookahead from hostname regex, fix fmt in analysis test 2026-04-05 09:59:19 -05:00
lib.rs fix(security): harden secret handling and audit integrity 2026-04-04 23:37:05 -05:00
main.rs feat: initial implementation of TFTSR IT Triage & RCA application 2026-03-14 22:36:25 -05:00
state.rs feat: add custom_rest provider mode and rebrand application name 2026-04-04 15:35:58 -05:00