Skip to content

Commit d1b09e1

Browse files
committed
updated taint analysis dev docs
Signed-off-by: Ambrish Rawat <[email protected]>
1 parent f5a666e commit d1b09e1

File tree

1 file changed

+7
-7
lines changed

1 file changed

+7
-7
lines changed

docs/dev/taint_analysis.md

Lines changed: 7 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -30,8 +30,8 @@ output = ModelOutputThunk.from_generation(
3030
```
3131

3232
This method automatically sets the security level:
33-
- If taint sources are found `SecLevel.tainted_by(first_source)`
34-
- If no taint sources `SecLevel.none()`
33+
- If taint sources are found -> `SecLevel.tainted_by(first_source)`
34+
- If no taint sources -> `SecLevel.none()`
3535

3636
## Taint Source Analysis
3737

@@ -85,10 +85,10 @@ if component._meta["_security"].is_tainted():
8585

8686
## Key Features
8787

88-
- **Immutable security**: Security levels set at construction time
89-
- **Recursive taint analysis**: Deep analysis of Component parts, shallow analysis of context
90-
- **Taint source tracking**: Know exactly which CBlock/Component tainted content
91-
- **Capability integration**: Fine-grained access control for classified content
92-
- **Non-mutating operations**: Sanitize/declassify create new objects
88+
- **Immutable security**: security levels set at construction time
89+
- **Recursive taint analysis**: deep analysis of Component parts, shallow analysis of context
90+
- **Taint source tracking**: know exactly which CBlock/Component tainted content
91+
- **Capability integration**: fine-grained access control for classified content
92+
- **Non-mutating operations**: sanitize/declassify create new objects
9393

9494
This creates a security model that addresses both data exfiltration and injection vulnerabilities while enabling future IAM integration.

0 commit comments

Comments
 (0)