Skip to content

fix(C08): split 8.1.5 canary provisioning from canary alerting#838

Open
RicoKomenda wants to merge 1 commit into
OWASP:mainfrom
RicoKomenda:fix/793-c08-canary
Open

fix(C08): split 8.1.5 canary provisioning from canary alerting#838
RicoKomenda wants to merge 1 commit into
OWASP:mainfrom
RicoKomenda:fix/793-c08-canary

Conversation

@RicoKomenda
Copy link
Copy Markdown
Collaborator

Closes part of #793.

8.1.5 bundled two independently testable concerns:

  • 8.1.5: canary records exist, are uniquely marked, and contain no real sensitive content
  • 8.1.6 (new): a high-severity alert is generated whenever a canary is selected by retrieval, matched by similarity search, or passed to the model as context

Former 8.1.6 (retrieval anomaly detection) renumbered to 8.1.7.

8.1.5 bundled provisioning (records exist, are marked, contain no real
data) with detection (generate alert when triggered). Split into:
- 8.1.5: canary record existence and marking
- 8.1.6: high-severity alert on any canary detection event
Former 8.1.6 (retrieval anomaly detection) renumbered to 8.1.7.
@RicoKomenda RicoKomenda requested review from jmanico and ottosulin May 31, 2026 20:11
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant