[P1] Implement capture policy engine and sensitive-context exclusions #17

New issue

Closed

opened 2026-07-18 00:00:28 +00:00 by lost-rob0t · 0 comments

lost-rob0t commented

2026-07-18 00:00:28 +00:00

(Migrated from github.com)

Goal

Decide whether capture is permitted before taking or storing a frame.

Requirements

Rules for application/class, title pattern, workspace/group, URL domain, full-screen state, metadata source, time window, and manual privacy mode.
Default-deny rules for password managers, authentication dialogs, lock screens, terminals marked sensitive, and configured pentesting tools/workspaces.
Separate decisions for screenshot capture, metadata capture, OCR, indexing, summarization, and remote-provider eligibility.
Explainable decisions with sanitized reason codes.
Rule precedence and conflict resolution must be deterministic.
Policy reload is atomic and does not retroactively expose denied data.

Acceptance criteria

A denied pre-capture context produces no screenshot.
Post-capture policy uncertainty rejects the frame before persistence.
Tests cover precedence, regex denial-of-service resistance, malformed rules, and conservative fallback behavior.
Users can temporarily mark the current window/workspace as sensitive through the control interface.

Depends on

## Goal Decide whether capture is permitted before taking or storing a frame. ## Requirements - Rules for application/class, title pattern, workspace/group, URL domain, full-screen state, metadata source, time window, and manual privacy mode. - Default-deny rules for password managers, authentication dialogs, lock screens, terminals marked sensitive, and configured pentesting tools/workspaces. - Separate decisions for screenshot capture, metadata capture, OCR, indexing, summarization, and remote-provider eligibility. - Explainable decisions with sanitized reason codes. - Rule precedence and conflict resolution must be deterministic. - Policy reload is atomic and does not retroactively expose denied data. ## Acceptance criteria - A denied pre-capture context produces no screenshot. - Post-capture policy uncertainty rejects the frame before persistence. - Tests cover precedence, regex denial-of-service resistance, malformed rules, and conservative fallback behavior. - Users can temporarily mark the current window/workspace as sensitive through the control interface. ## Depends on - #6 - #13 - #14 - #15 - #16