Skip to content

feat(safety): Google GenAI + Bedrock VCR safety cassettes (Phase T3) - #15

Merged
manas-fortifyroot merged 1 commit into
fr-v0.52.6.xfrom
google-bedrock-cassettes
Apr 1, 2026
Merged

feat(safety): Google GenAI + Bedrock VCR safety cassettes (Phase T3)#15
manas-fortifyroot merged 1 commit into
fr-v0.52.6.xfrom
google-bedrock-cassettes

Conversation

@manas-fortifyroot

Copy link
Copy Markdown

Summary

  • Add 9 VCR safety cassette tests for Google GenAI (test_safety_cassettes.py) — recorded against gemini-2.5-flash
  • Add 9 VCR safety cassette tests for AWS Bedrock (tests/traces/test_safety_cassettes.py) — recorded against anthropic.claude-3-haiku-20240307-v1:0 via Converse API
  • 18 cassette YAML files total, all replaying cleanly without API keys

Safety rule coverage per provider:

Rule Type Example Tested
RegEx PII.email, PCI.credit_card Prompt masking
List PII.competitor_org (4 orgs) Prompt masking
UDF custom_compliance (2 codenames) Prompt masking
Completion PII.email in LLM response Completion masking
Streaming PII in streamed prompt Prompt masking
ALLOW action Email + CC detected, not masked Findings recorded

Three-mode verification (zero failures):

Mode Google GenAI Bedrock
--fr 27 passed 25 passed
--cassettes 11 passed 84 passed
--all 32 passed 100 passed

North-star: All new files — zero modifications to existing TL-owned files.

Test plan

  • ./scripts/run-tests.sh --all --package '*google*generative*' — 32 pass
  • ./scripts/run-tests.sh --all --package '*bedrock*' — 100 pass
  • grep -rE "AKIA|AIza|Bearer" tests/**/cassettes/test_safety_cassettes/ — no secret leaks

Added FR-owned safety cassette tests for Google GenAI and AWS Bedrock
instrumentation packages. Each package gets 9 tests covering all 3
safety rule types (RegEx, List, UDF), both MASK and ALLOW actions,
prompt + completion + streaming safety, recorded against real APIs.

Google GenAI: gemini-2.5-flash via Google AI Studio.
Bedrock: anthropic.claude-3-haiku via AWS Bedrock Converse API
@manas-fortifyroot
manas-fortifyroot merged commit 94bb444 into fr-v0.52.6.x Apr 1, 2026
9 checks passed
@manas-fortifyroot
manas-fortifyroot deleted the google-bedrock-cassettes branch April 1, 2026 11:38
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant