Victor Vargas
07d1840e7e
NetworkPolicy validates scheme/host and re-validates resolved IPs at dial time and on redirects (DNS-rebinding defense), with cloud metadata endpoints always blocked. Redact masks known credential shapes (OpenAI/ Anthropic/GitHub/AWS/Slack/Google keys, PEM blocks, JWTs) in tool output. WrapUntrusted fences fetched web content against prompt injection, paired with UntrustedContentInstruction for the system prompt. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com> |
||
|---|---|---|
| .. | ||
| agent | ||
| config | ||
| llm | ||
| persona | ||
| rag | ||
| tools | ||