nsaspy/zara-plugins

Discord: public-output privacy filter for sensitive operator data #30

New issue

Closed

opened 2026-09-01 01:48:36 +00:00 by lost-rob0t · 0 comments

lost-rob0t commented

2026-09-01 01:48:36 +00:00

(Migrated from github.com)

Add a defense-in-depth public-output privacy layer for Discord responses. At minimum, mark Discord turns as public/untrusted, suppress obvious memory-dump/operator-profile disclosures, never echo hidden account/user metadata by default, and provide a fail-closed response when the model attempts to disclose protected/private data. This is not a replacement for Zara core principal/tool capability isolation (#251), but should reduce leakage until that lands.

Add a defense-in-depth public-output privacy layer for Discord responses. At minimum, mark Discord turns as public/untrusted, suppress obvious memory-dump/operator-profile disclosures, never echo hidden account/user metadata by default, and provide a fail-closed response when the model attempts to disclose protected/private data. This is not a replacement for Zara core principal/tool capability isolation (#251), but should reduce leakage until that lands.

nsaspy closed this issue

2026-09-08 02:02:51 +00:00

nsaspy referenced this issue from a pull request that will close it,

2026-09-08 02:20:11 +00:00

Security: filter Discord public output for private-data leaks #491

Sign in to join this conversation.

No labels

good first issue

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference

nsaspy/zara-plugins#30

No description provided.