fix(guardrails): route PII validation through app runtime

[TheodoreSpeaks]

Summary

• Route PII guardrail validation through an authenticated app-runtime capability
• Keep manual and scheduled execution on the same validation path

Type of Change

• Bug fix

Testing

• 41 focused Vitest tests
• bun run lint
• Scoped app/auth type-check
• Block registry and 39 repository audits

Checklist

• Code follows project style guidelines
• Self-reviewed my changes
• Tests added/updated and passing
• No new warnings introduced
• I confirm that I have read and agree to the terms outlined in the Contributor License Agreement (CLA)

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

1 Skipped Deployment

Project	Deployment	Actions	Updated (UTC)
docs	Skipped		Aug 28, 2026 8:39pm

[greptile-apps]

Greptile Summary

The PR routes single-text PII guardrail validation through an authenticated app-runtime capability so foreground and scheduled execution use the same Presidio-reachable path.

• Adds a bounded, authenticated PII validation endpoint and shared request/response contracts.
• Adds a cross-runtime validation client with cancellation propagation and bounded response parsing.
• Preserves PII verdict metadata while converting non-abort capability failures into fail-closed results.
• Adds input, entity-count, and response-size limits around Presidio processing.

Confidence Score: 5/5

The PR appears safe to merge.

No blocking failure remains.

Important Files Changed

Filename	Overview
apps/sim/lib/internal/guardrails/operations.ts	Routes PII validation through the HTTP capability and converts non-abort failures into PII-shaped fail-closed results before the wrapper restores verdict metadata.
apps/sim/lib/guardrails/validation-client.ts	Implements the authenticated cross-runtime request with input validation, cancellation propagation, bounded response reads, and response-schema validation.
apps/sim/app/api/guardrails/pii/validate/route.ts	Adds an auth-before-parse app boundary that invokes Presidio validation with request cancellation and validates the returned contract.
apps/sim/lib/guardrails/validate_pii.ts	Adds strict Presidio response validation and bounded materialization while preserving fail-closed behavior.
apps/sim/lib/api/contracts/hotspots.ts	Defines strict bounded request and response schemas for the single-text PII capability.

Sequence Diagram

sequenceDiagram
  participant Runtime as Workflow runtime
  participant Client as PII validation client
  participant App as Authenticated app endpoint
  participant Presidio as Internal Presidio service
  Runtime->>Client: Validate text with cancellation signal
  Client->>App: POST /api/guardrails/pii/validate + internal JWT
  App->>App: Authenticate and validate bounded input
  App->>Presidio: Analyze and optionally anonymize
  Presidio-->>App: Bounded validation result
  App-->>Client: Schema-validated verdict
  Client-->>Runtime: PII result
  alt Non-abort capability failure
    Runtime->>Runtime: Return fail-closed PII verdict with original metadata
  end

Loading

_{Reviews (3): Last reviewed commit: "fix(guardrails): bound PII validation re..." | Re-trigger Greptile}

[TheodoreSpeaks]

@greptile

[cubic-dev-ai]

All reported issues were addressed across 7 files

<sub>Reply with feedback, questions, or to request a fix.

Fix all with cubic | Re-trigger cubic</sub>

[TheodoreSpeaks]

@greptile