tftsr-devops_investigation/src-tauri/src/commands
Shaun Arman abab5c3153 fix(security): enforce PII redaction before AI log transmission
analyze_logs() was reading the original log file from disk and sending its
full contents to external AI providers, completely bypassing the redaction
pipeline. The redacted flag in log_files and the .redacted file on disk were
written by apply_redactions() but never consulted on the read path.

Fix: query the redacted column alongside file_path. If the file has not been
redacted, return an error to the caller before any AI provider call is made.
When redacted, read from {path}.redacted instead of the original.

Adds redacted_path_for() helper and two unit tests covering the rejection
and happy-path cases.
2026-04-05 10:08:16 -05:00
..
ai.rs fix(security): enforce PII redaction before AI log transmission 2026-04-05 10:08:16 -05:00
analysis.rs fix(pii): remove lookahead from hostname regex, fix fmt in analysis test 2026-04-05 09:59:19 -05:00
db.rs fix(security): harden secret handling and audit integrity 2026-04-04 23:37:05 -05:00
docs.rs fix(security): harden secret handling and audit integrity 2026-04-04 23:37:05 -05:00
integrations.rs fix(security): harden secret handling and audit integrity 2026-04-04 23:37:05 -05:00
mod.rs feat: initial implementation of TFTSR IT Triage & RCA application 2026-03-14 22:36:25 -05:00
system.rs style: apply rustfmt output for clippy-related edits 2026-04-04 15:10:17 -05:00