mirror of
https://github.com/BerriAI/litellm.git
synced 2026-08-28 05:25:59 +00:00
74050e03c5
* fix(guardrails): add fail-open mode to CrowdStrike AIDR guardrail Add a fail_on_error param (default True, preserving existing behaviour) to the CrowdStrike AIDR guardrail, mirroring model_armor and generic_guardrail_api. When fail_on_error=False the guard fails open only on server errors (5xx) and connectivity failures, so the request proceeds unmodified. Caller-controlled 4xx responses and result.blocked policy blocks always fail closed. The applied-guardrails header is recorded even on the fail-open path. * fix(guardrails): fail open AIDR 4xx * refactor(guardrails): isolate AIDR fail-open * style(guardrails): format AIDR fail-open * ci: satisfy unit workflow timeout invariant * refactor(guardrails): accept AIDR mappings * test(guardrails): inject AIDR HTTP client * fix(guardrails): harden AIDR fail-open against delivered verdicts and record fail-open status Reads the blocked verdict from the raw body before guard_output validation so schema drift or a changed verdict type cannot fail open past a delivered block. A transformed response that cannot be parsed fails closed so delivered redactions are never dropped. Fail-open runs record guardrail_status guardrail_failed_to_respond with timings instead of success. Restores the fail-open behavior tests dropped mid-PR and reverts the payload Mapping widening * test(guardrails): cover fail_on_error wiring and fail-closed default for CrowdStrike AIDR * chore(guardrails): annotate the transformed-drift detail payload for the LIT002 budget --------- Co-authored-by: abrekhov <abrekhov@users.noreply.github.com> Co-authored-by: mateo-berri <277851410+mateo-berri@users.noreply.github.com> |
||
|---|---|---|
| .. | ||
| litellm-dashboard | ||
| Dockerfile | ||
| nginx.conf | ||