Skip to content

gen-ai: move security guardian stories to separate draft#3434

Closed
nagkumar91 wants to merge 29 commits intoopen-telemetry:mainfrom
nagkumar91:gen-ai-security-guardian-stories
Closed

gen-ai: move security guardian stories to separate draft#3434
nagkumar91 wants to merge 29 commits intoopen-telemetry:mainfrom
nagkumar91:gen-ai-security-guardian-stories

Conversation

@nagkumar91
Copy link
Copy Markdown
Contributor

Summary

This draft PR contains the non-essential files moved out of #3233 to keep #3233 focused on minimal semconv/security spec scope.

Moved from #3233

  • prototype/**
  • .gitignore updates related to prototype/story work

Context

Split requested during review to reduce PR size and keep semconv spec changes in #3233 minimal.

nagkumar91 and others added 29 commits December 18, 2025 16:32
…ools

- Remove redundant files from git (kept locally): genai_guardrail_instrumentation_prototype.py, demo_chat.py, demo_tools.py
- Reduce framework adapters from 6 to 2 (keep LangChain + MCP, others preserved locally)
- Move trace viewer utilities to tools/ directory
- Consolidate README from 750+ lines to ~165 lines
- Update .gitignore to ignore archived files
…CP elicitation

- Clarify guardian vs guardrail semantics in registry.yaml:
  - gen_ai.guardian.* is for the evaluating service/component
  - gen_ai.security.policy.* is for configuration/policy identifiers
  - Added mapping guidance for AWS Bedrock, Azure Content Safety
- Add gen_ai.security.external_event_id attribute for SIEM correlation
- Add MCP elicitation guard methods:
  - guard_elicitation_request: guard outbound requests to user
  - guard_elicitation_response: guard user's input responses
- Regenerate markdown files from updated YAML

Addresses feedback from @habibam and @adityamehra
The advanced_agent_security_plan.md is a working document, not part of
the spec. The relevant information is now in prototype/README.md and
docs/gen-ai/gen-ai-security.md.
The trace viewer utilities are Azure-specific and add complexity
without being essential for validating the spec. They remain
available locally for development use.
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
@github-actions
Copy link
Copy Markdown

This PR has been labeled as stale due to lack of activity. It will be automatically closed if there is no further activity over the next 7 days.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant