New audit-trail.mjs writes structured events to LLM_SECURITY_AUDIT_LOG path. Integrated into post-session-guard at 6 warning emission points: trifecta, escalation-after-input, data flow, volume threshold, slow-burn, behavioral drift. No-op when env var not set — zero overhead for existing users. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com> |
||
|---|---|---|
| .. | ||
| audit-trail.test.mjs | ||
| bash-normalize.test.mjs | ||
| distribution-stats.test.mjs | ||
| git-clone-sandbox.test.mjs | ||
| injection-patterns.test.mjs | ||
| mcp-description-cache.test.mjs | ||
| output.test.mjs | ||
| severity.test.mjs | ||
| string-utils.test.mjs | ||