Identity Guard
Runtime filter (Layer 3) catches LLM outputs that leak model/provider/legacy-persona tokens and rewrites them. Counter is per-process and resets on PM2 restart.
0 leaks caught and rewritten
The runtime filter intercepted these — users never saw them. Investigate the system prompt and worker personalities to harden Layer 2.
Leaks by token
Process-local counter — restart resets to 0Loading…
The three-layer defense lives in
olivier.personality.ts (Layer 2), identity-guard.service.ts (Layer 3), and the check-identity-leaks.js CI gate. Each leak is also logged with context to ELK for forensic review.