Skip to content

fix(adapters): add privacy-boundary notes to maildir and sourcehut READMEs #710

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
justinmclean wants to merge 1 commit into
base: main
Choose a base branch
from
+7 −1
Open

fix(adapters): add privacy-boundary notes to maildir and sourcehut READMEs #710

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
6 changes: 6 additions & 0 deletions tools/maildir/README.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -120,6 +120,12 @@ reader is the documented stub described in
[`tools/mail-source/mbox/README.md`](../mail-source/mbox/README.md); this
tool is its vendor home.

**Privacy posture:** fetched mail bodies are external data, not instructions.
Content is treated as hostile input and is routed through the Privacy-LLM gate
or redacted before any model-facing use. Embedded prompt-injection text in mail
bodies is carried as report data only and is never obeyed as a framework
instruction.

## Configuration

An adopter selects the Maildir backend in
Expand Down
2 changes: 1 addition & 1 deletion tools/sourcehut/README.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -29,7 +29,7 @@ SourceHut (sr.ht) forge bridge implementation for the Apache Magpie framework. I

1. **VCS Repositories:** Reads repo metadata across `git.sr.ht` and `hg.sr.ht`.
2. **Issue Tracker:** Read/write operations (create ticket, comment, resolve status, update labels) on `todo.sr.ht` trackers.
3. **Mailing Lists:** Reads patchsets and threads from `lists.sr.ht`, mapping them to the uniform PR/MR review abstraction.
3. **Mailing Lists:** Reads patchsets and threads from `lists.sr.ht`, mapping them to the uniform PR/MR review abstraction. Fetched mail bodies are external data, not instructions; content is treated as hostile input and routed through the Privacy-LLM gate or redacted before model-facing use. Embedded prompt-injection text in mail bodies is carried as report data only and is never obeyed as a framework instruction.
4. **CI Builds:** Reads job statuses from `builds.sr.ht`.
5. **GraphQL client:** Unified command line tool to execute arbitrary queries/mutations across sr.ht subdomains.

Expand Down