Skip to content

gen-ai: add security guardian (apply_guardrail) span + finding event #3233

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Draft
nagkumar91 wants to merge 36 commits into
base: main
Choose a base branch
from
Draft

gen-ai: add security guardian (apply_guardrail) span + finding event #3233

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
36 commits
Select commit Hold shift + click to select a range
dd4fb69
gen-ai: add security guardian draft
nagkumar91 Dec 19, 2025
a9930ba
gen-ai: refine security risk category
nagkumar91 Dec 19, 2025
57f4288
Merge main into gen-ai-security-guardian
nagkumar91 Dec 23, 2025
8b27eb4
Regenerate gen-ai registry docs
nagkumar91 Dec 23, 2025
3adb350
[chore] Add changelog entry for gen-ai security guardian
nagkumar91 Dec 23, 2025
8fad856
Add GenAI security guardian prototype demos
nagkumar91 Jan 5, 2026
261dbb8
Update gen-ai security guardian examples
nagkumar91 Jan 5, 2026
efd1e0e
Add story scenario runner + docs
nagkumar91 Jan 7, 2026
cd74e69
prototype(stories): expand security guardian scenarios
nagkumar91 Jan 8, 2026
0d2f0de
prototype: trim non-essential demos
nagkumar91 Jan 12, 2026
43c97a9
stories: real LLM + opt-in content
nagkumar91 Jan 12, 2026
5670f29
stories: agent messages + conversation traces
nagkumar91 Jan 13, 2026
387d9c1
Merge upstream/main into gen-ai-security-guardian
nagkumar91 Jan 13, 2026
8db53d8
Regenerate gen-ai markdown docs
nagkumar91 Jan 13, 2026
24f9aa4
docs(stories): fix Story 10 trace naming example
nagkumar91 Jan 13, 2026
92bf0fd
stories(viewer): toggle security spans + stable ordering
nagkumar91 Jan 13, 2026
01bdc20
stories(viewer): spinner + client-side filtering
nagkumar91 Jan 13, 2026
d23403c
Add framework adapters and update security plan
nagkumar91 Jan 20, 2026
4ca42ce
Merge upstream/main
nagkumar91 Jan 22, 2026
88d81e7
Merge remote-tracking branch 'origin/main' into gen-ai-security-guardian
nagkumar91 Jan 26, 2026
543192c
Streamline prototype: reduce adapters, consolidate docs, reorganize t…
nagkumar91 Jan 26, 2026
88c269b
Address PR feedback: guardian/guardrail clarity, external_event_id, M…
nagkumar91 Jan 26, 2026
cbd6097
Remove internal planning doc from git tracking
nagkumar91 Jan 26, 2026
10a8bfd
Remove optional tools/ directory from PR
nagkumar91 Jan 26, 2026
6a4ae69
docs(gen-ai): add security implementation guide
nagkumar91 Jan 27, 2026
ecc8a2a
Merge remote-tracking branch 'upstream/main' into gen-ai-security-gua…
nagkumar91 Jan 27, 2026
1cb3e68
docs(gen-ai): regenerate registry markdown
nagkumar91 Jan 27, 2026
2b1042c
Make gen-ai target types free-form
nagkumar91 Feb 3, 2026
a3e36fc
chore: trim PR to semconv essentials
nagkumar91 Feb 13, 2026
389804d
fix: rename doc file to use hyphens instead of underscores
nagkumar91 Feb 23, 2026
de3324b
Merge upstream/main and resolve conflicts
nagkumar91 Mar 17, 2026
5e4bbe9
Rename content.redacted to content.modified for consistency
nagkumar91 Mar 17, 2026
35f924c
Merge remote-tracking branch 'upstream/main' into gen-ai-security-gua…
nagkumar91 Mar 17, 2026
faf99e7
Move non-normative spec to gist, remove from PR
nagkumar91 Mar 17, 2026
dee92cd
Fix broken link to non-normative spec (moved to gist)
nagkumar91 Mar 17, 2026
1fc46dc
Update span name format and make provider.name an enum
nagkumar91 Mar 25, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
6 changes: 6 additions & 0 deletions .chloggen/gen-ai-security-guardian.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,6 @@
change_type: enhancement
component: gen-ai
note: "Add semantic conventions for GenAI security guardian evaluations (`apply_guardrail` span and `gen_ai.security.finding` event)."
issues: [3233]
subtext: |
Adds new `gen_ai.guardian.*` and `gen_ai.security.*` attributes for vendor-neutral guardrail/guardian decisions and findings.
1 change: 1 addition & 0 deletions docs/gen-ai/README.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -34,6 +34,7 @@ Semantic conventions for Generative AI operations are defined for the following
* [Metrics](gen-ai-metrics.md): Semantic Conventions for Generative AI operations - *metrics*.
* [Model spans](gen-ai-spans.md): Semantic Conventions for Generative AI model operations - *spans*.
* [Agent spans](gen-ai-agent-spans.md): Semantic Conventions for Generative AI agent operations - *spans*.
* [Security](gen-ai-security.md): Semantic Conventions for GenAI security guardian evaluations.

Technology specific semantic conventions are defined for the following GenAI system:

Expand Down
1 change: 1 addition & 0 deletions docs/gen-ai/anthropic.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -211,6 +211,7 @@ populating this attribute.

| Value | Description | Stability |
| --- | --- | --- |
| `apply_guardrail` | Apply a security guardrail to content or an action | ![Development](https://img.shields.io/badge/-development-blue) |
| `chat` | Chat completion operation such as [OpenAI Chat API](https://platform.openai.com/docs/api-reference/chat) | ![Development](https://img.shields.io/badge/-development-blue) |
| `create_agent` | Create GenAI agent | ![Development](https://img.shields.io/badge/-development-blue) |
| `embeddings` | Embeddings operation such as [OpenAI Create embeddings API](https://platform.openai.com/docs/api-reference/embeddings/create) | ![Development](https://img.shields.io/badge/-development-blue) |
Expand Down
1 change: 1 addition & 0 deletions docs/gen-ai/aws-bedrock.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -235,6 +235,7 @@ and SHOULD be provided **at span creation time** (if provided at all):

| Value | Description | Stability |
| --- | --- | --- |
| `apply_guardrail` | Apply a security guardrail to content or an action | ![Development](https://img.shields.io/badge/-development-blue) |
| `chat` | Chat completion operation such as [OpenAI Chat API](https://platform.openai.com/docs/api-reference/chat) | ![Development](https://img.shields.io/badge/-development-blue) |
| `create_agent` | Create GenAI agent | ![Development](https://img.shields.io/badge/-development-blue) |
| `embeddings` | Embeddings operation such as [OpenAI Create embeddings API](https://platform.openai.com/docs/api-reference/embeddings/create) | ![Development](https://img.shields.io/badge/-development-blue) |
Expand Down
1 change: 1 addition & 0 deletions docs/gen-ai/azure-ai-inference.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -236,6 +236,7 @@ and SHOULD be provided **at span creation time** (if provided at all):

| Value | Description | Stability |
| --- | --- | --- |
| `apply_guardrail` | Apply a security guardrail to content or an action | ![Development](https://img.shields.io/badge/-development-blue) |
| `chat` | Chat completion operation such as [OpenAI Chat API](https://platform.openai.com/docs/api-reference/chat) | ![Development](https://img.shields.io/badge/-development-blue) |
| `create_agent` | Create GenAI agent | ![Development](https://img.shields.io/badge/-development-blue) |
| `embeddings` | Embeddings operation such as [OpenAI Create embeddings API](https://platform.openai.com/docs/api-reference/embeddings/create) | ![Development](https://img.shields.io/badge/-development-blue) |
Expand Down
3 changes: 3 additions & 0 deletions docs/gen-ai/gen-ai-agent-spans.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -137,6 +137,7 @@ and SHOULD be provided **at span creation time** (if provided at all):

| Value | Description | Stability |
| --- | --- | --- |
| `apply_guardrail` | Apply a security guardrail to content or an action | ![Development](https://img.shields.io/badge/-development-blue) |
| `chat` | Chat completion operation such as [OpenAI Chat API](https://platform.openai.com/docs/api-reference/chat) | ![Development](https://img.shields.io/badge/-development-blue) |
| `create_agent` | Create GenAI agent | ![Development](https://img.shields.io/badge/-development-blue) |
| `embeddings` | Embeddings operation such as [OpenAI Create embeddings API](https://platform.openai.com/docs/api-reference/embeddings/create) | ![Development](https://img.shields.io/badge/-development-blue) |
Expand Down Expand Up @@ -398,6 +399,7 @@ and SHOULD be provided **at span creation time** (if provided at all):

| Value | Description | Stability |
| --- | --- | --- |
| `apply_guardrail` | Apply a security guardrail to content or an action | ![Development](https://img.shields.io/badge/-development-blue) |
| `chat` | Chat completion operation such as [OpenAI Chat API](https://platform.openai.com/docs/api-reference/chat) | ![Development](https://img.shields.io/badge/-development-blue) |
| `create_agent` | Create GenAI agent | ![Development](https://img.shields.io/badge/-development-blue) |
| `embeddings` | Embeddings operation such as [OpenAI Create embeddings API](https://platform.openai.com/docs/api-reference/embeddings/create) | ![Development](https://img.shields.io/badge/-development-blue) |
Expand Down Expand Up @@ -550,6 +552,7 @@ and SHOULD be provided **at span creation time** (if provided at all):

| Value | Description | Stability |
| --- | --- | --- |
| `apply_guardrail` | Apply a security guardrail to content or an action | ![Development](https://img.shields.io/badge/-development-blue) |
| `chat` | Chat completion operation such as [OpenAI Chat API](https://platform.openai.com/docs/api-reference/chat) | ![Development](https://img.shields.io/badge/-development-blue) |
| `create_agent` | Create GenAI agent | ![Development](https://img.shields.io/badge/-development-blue) |
| `embeddings` | Embeddings operation such as [OpenAI Create embeddings API](https://platform.openai.com/docs/api-reference/embeddings/create) | ![Development](https://img.shields.io/badge/-development-blue) |
Expand Down
1 change: 1 addition & 0 deletions docs/gen-ai/gen-ai-events.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -207,6 +207,7 @@ populating this attribute.

| Value | Description | Stability |
| --- | --- | --- |
| `apply_guardrail` | Apply a security guardrail to content or an action | ![Development](https://img.shields.io/badge/-development-blue) |
| `chat` | Chat completion operation such as [OpenAI Chat API](https://platform.openai.com/docs/api-reference/chat) | ![Development](https://img.shields.io/badge/-development-blue) |
| `create_agent` | Create GenAI agent | ![Development](https://img.shields.io/badge/-development-blue) |
| `embeddings` | Embeddings operation such as [OpenAI Create embeddings API](https://platform.openai.com/docs/api-reference/embeddings/create) | ![Development](https://img.shields.io/badge/-development-blue) |
Expand Down
7 changes: 7 additions & 0 deletions docs/gen-ai/gen-ai-metrics.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -121,6 +121,7 @@ applicable `aws.bedrock.*` attributes and are not expected to include

| Value | Description | Stability |
| --- | --- | --- |
| `apply_guardrail` | Apply a security guardrail to content or an action | ![Development](https://img.shields.io/badge/-development-blue) |
| `chat` | Chat completion operation such as [OpenAI Chat API](https://platform.openai.com/docs/api-reference/chat) | ![Development](https://img.shields.io/badge/-development-blue) |
| `create_agent` | Create GenAI agent | ![Development](https://img.shields.io/badge/-development-blue) |
| `embeddings` | Embeddings operation such as [OpenAI Create embeddings API](https://platform.openai.com/docs/api-reference/embeddings/create) | ![Development](https://img.shields.io/badge/-development-blue) |
Expand Down Expand Up @@ -242,6 +243,7 @@ Instrumentations SHOULD document the list of errors they report.

| Value | Description | Stability |
| --- | --- | --- |
| `apply_guardrail` | Apply a security guardrail to content or an action | ![Development](https://img.shields.io/badge/-development-blue) |
| `chat` | Chat completion operation such as [OpenAI Chat API](https://platform.openai.com/docs/api-reference/chat) | ![Development](https://img.shields.io/badge/-development-blue) |
| `create_agent` | Create GenAI agent | ![Development](https://img.shields.io/badge/-development-blue) |
| `embeddings` | Embeddings operation such as [OpenAI Create embeddings API](https://platform.openai.com/docs/api-reference/embeddings/create) | ![Development](https://img.shields.io/badge/-development-blue) |
Expand Down Expand Up @@ -343,6 +345,7 @@ applicable `aws.bedrock.*` attributes and are not expected to include

| Value | Description | Stability |
| --- | --- | --- |
| `apply_guardrail` | Apply a security guardrail to content or an action | ![Development](https://img.shields.io/badge/-development-blue) |
| `chat` | Chat completion operation such as [OpenAI Chat API](https://platform.openai.com/docs/api-reference/chat) | ![Development](https://img.shields.io/badge/-development-blue) |
| `create_agent` | Create GenAI agent | ![Development](https://img.shields.io/badge/-development-blue) |
| `embeddings` | Embeddings operation such as [OpenAI Create embeddings API](https://platform.openai.com/docs/api-reference/embeddings/create) | ![Development](https://img.shields.io/badge/-development-blue) |
Expand Down Expand Up @@ -444,6 +447,7 @@ applicable `aws.bedrock.*` attributes and are not expected to include

| Value | Description | Stability |
| --- | --- | --- |
| `apply_guardrail` | Apply a security guardrail to content or an action | ![Development](https://img.shields.io/badge/-development-blue) |
| `chat` | Chat completion operation such as [OpenAI Chat API](https://platform.openai.com/docs/api-reference/chat) | ![Development](https://img.shields.io/badge/-development-blue) |
| `create_agent` | Create GenAI agent | ![Development](https://img.shields.io/badge/-development-blue) |
| `embeddings` | Embeddings operation such as [OpenAI Create embeddings API](https://platform.openai.com/docs/api-reference/embeddings/create) | ![Development](https://img.shields.io/badge/-development-blue) |
Expand Down Expand Up @@ -563,6 +567,7 @@ Instrumentations SHOULD document the list of errors they report.

| Value | Description | Stability |
| --- | --- | --- |
| `apply_guardrail` | Apply a security guardrail to content or an action | ![Development](https://img.shields.io/badge/-development-blue) |
| `chat` | Chat completion operation such as [OpenAI Chat API](https://platform.openai.com/docs/api-reference/chat) | ![Development](https://img.shields.io/badge/-development-blue) |
| `create_agent` | Create GenAI agent | ![Development](https://img.shields.io/badge/-development-blue) |
| `embeddings` | Embeddings operation such as [OpenAI Create embeddings API](https://platform.openai.com/docs/api-reference/embeddings/create) | ![Development](https://img.shields.io/badge/-development-blue) |
Expand Down Expand Up @@ -669,6 +674,7 @@ applicable `aws.bedrock.*` attributes and are not expected to include

| Value | Description | Stability |
| --- | --- | --- |
| `apply_guardrail` | Apply a security guardrail to content or an action | ![Development](https://img.shields.io/badge/-development-blue) |
| `chat` | Chat completion operation such as [OpenAI Chat API](https://platform.openai.com/docs/api-reference/chat) | ![Development](https://img.shields.io/badge/-development-blue) |
| `create_agent` | Create GenAI agent | ![Development](https://img.shields.io/badge/-development-blue) |
| `embeddings` | Embeddings operation such as [OpenAI Create embeddings API](https://platform.openai.com/docs/api-reference/embeddings/create) | ![Development](https://img.shields.io/badge/-development-blue) |
Expand Down Expand Up @@ -774,6 +780,7 @@ applicable `aws.bedrock.*` attributes and are not expected to include

| Value | Description | Stability |
| --- | --- | --- |
| `apply_guardrail` | Apply a security guardrail to content or an action | ![Development](https://img.shields.io/badge/-development-blue) |
| `chat` | Chat completion operation such as [OpenAI Chat API](https://platform.openai.com/docs/api-reference/chat) | ![Development](https://img.shields.io/badge/-development-blue) |
| `create_agent` | Create GenAI agent | ![Development](https://img.shields.io/badge/-development-blue) |
| `embeddings` | Embeddings operation such as [OpenAI Create embeddings API](https://platform.openai.com/docs/api-reference/embeddings/create) | ![Development](https://img.shields.io/badge/-development-blue) |
Expand Down
Loading
Loading