mirror of
https://github.com/BerriAI/litellm.git
synced 2026-09-07 08:26:10 +00:00
74050e03c5
* fix(guardrails): add fail-open mode to CrowdStrike AIDR guardrail Add a fail_on_error param (default True, preserving existing behaviour) to the CrowdStrike AIDR guardrail, mirroring model_armor and generic_guardrail_api. When fail_on_error=False the guard fails open only on server errors (5xx) and connectivity failures, so the request proceeds unmodified. Caller-controlled 4xx responses and result.blocked policy blocks always fail closed. The applied-guardrails header is recorded even on the fail-open path. * fix(guardrails): fail open AIDR 4xx * refactor(guardrails): isolate AIDR fail-open * style(guardrails): format AIDR fail-open * ci: satisfy unit workflow timeout invariant * refactor(guardrails): accept AIDR mappings * test(guardrails): inject AIDR HTTP client * fix(guardrails): harden AIDR fail-open against delivered verdicts and record fail-open status Reads the blocked verdict from the raw body before guard_output validation so schema drift or a changed verdict type cannot fail open past a delivered block. A transformed response that cannot be parsed fails closed so delivered redactions are never dropped. Fail-open runs record guardrail_status guardrail_failed_to_respond with timings instead of success. Restores the fail-open behavior tests dropped mid-PR and reverts the payload Mapping widening * test(guardrails): cover fail_on_error wiring and fail-closed default for CrowdStrike AIDR * chore(guardrails): annotate the transformed-drift detail payload for the LIT002 budget --------- Co-authored-by: abrekhov <abrekhov@users.noreply.github.com> Co-authored-by: mateo-berri <277851410+mateo-berri@users.noreply.github.com> |
||
|---|---|---|
| .. | ||
| guardrail_hooks | ||
| test_content_filter_path_traversal.py | ||
| test_content_utils.py | ||
| test_custom_code_security.py | ||
| test_deferred_guardrail_logging.py | ||
| test_guardrail_coverage.py | ||
| test_guardrail_endpoints.py | ||
| test_guardrail_registry.py | ||
| test_init_guardrails.py | ||
| test_llm_as_a_judge.py | ||
| test_mcp_jwt_signer.py | ||
| test_pillar_guardrails.py | ||
| test_prompt_security_guardrails.py | ||
| test_qostodian_nexus_guardrail.py | ||
| test_usage_endpoints.py | ||
| test_usage_tracking.py | ||