Add per-profile anti-spam throttle overrides for AI Profiles - #110
Merged
Conversation
Reshape PromptSecurityProfileSettings to anti-spam throttle-only (max messages/window, message window, max anonymous sessions/window, anonymous session window). Each unset value falls back to the site-wide PromptSecurityOptions default so AI Profiles and templates can raise or lower quotas per use case. High-level input/output security guards remain global-only. - Honor per-profile overrides in DefaultChatRateLimiter (already) and DefaultChatSessionStartRateLimiter (now); keep guards global in DefaultPromptSecurityService and SecurityPromptOrchestrationHandler. - Expose the 4 override fields on the Blazor and MVC AI Profile and Template create/edit forms. - Add unit coverage for override (raise/lower), disable, and partial fallback (one field overridden, the other inherited from the site). - Update prompt-security and ai-profiles docs plus the changelog. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> Copilot-Session: 1ebd38d1-431b-47c2-a8c9-f40236a5df35
Add "?" help icons with hover explanations next to every Prompt Security setting on the site settings pages and next to the four per-profile throttle override fields on the AI Profile and AI Profile Template forms. Applied consistently across both the Blazor.Web and Mvc.Web hosts, matching the existing Bootstrap tooltip convention (bi-question-circle + data-bs-toggle). Also wire up the Bootstrap tooltip initializer on the MVC admin settings page. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> Copilot-Session: 1ebd38d1-431b-47c2-a8c9-f40236a5df35
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Reshape PromptSecurityProfileSettings to anti-spam throttle-only (max messages/window, message window, max anonymous sessions/window, anonymous session window). Each unset value falls back to the site-wide PromptSecurityOptions default so AI Profiles and templates can raise or lower quotas per use case. High-level input/output security guards remain global-only.
Copilot-Session: 1ebd38d1-431b-47c2-a8c9-f40236a5df35