AHj <dZddlmZmZddlmZmZGddZy)z Compliance checker for EU AI Act and GDPR regulations. Provides guardrail-agnostic compliance validation based on guardrail modes and execution results rather than specific guardrail names. )DictList)ComplianceCheckRequestComplianceCheckResultceZdZdZdefdZdedeefdZ deede fdZ deede fd Z de fd Zde fd Zde fd Zde fd Zde fdZde fdZdee fdZdee fdZy)ComplianceCheckera% Validates compliance with EU AI Act and GDPR regulations. Uses guardrail-agnostic checks based on: - Whether any guardrails ran - Guardrail execution mode (pre-call, post-call, etc.) - Whether guardrails intervened/blocked content - Completeness of audit records datac<||_|jxsg|_y)N)r guardrail_information guardrails)selfr s W/root/tools/cai/cai_env/lib/python3.12/site-packages/litellm/proxy/compliance_checks.py__init__zComplianceChecker.__init__s 44:modereturncg}|jD]C}|jd}||dk(r|j|-||k(s3|j|E|S)z Get all guardrails that ran in a specific mode. If a guardrail doesn't have a mode specified, it's treated as pre-call (the most common case). guardrail_modepre_call)r getappend)r rresultgg_modes r_get_guardrails_by_modez)ComplianceChecker._get_guardrails_by_modes] !AUU+,F~$*"4 a 4 a  ! rr cB|D]}|jdd}|dvsyy)z;Check if any guardrail intervened (blocked/masked content).guardrail_status)guardrail_intervenedfailedblockedTFr)r r rstatuss r_has_guardrail_interventionz-ComplianceChecker._has_guardrail_intervention0s3 AUU-r2FFF rc,|sytd|DS)z4Check if all guardrails passed (no issues detected).Fc3DK|]}|jddk(yw)rsuccessNr").0rs r z;ComplianceChecker._all_guardrails_passed..<sNa155+, 9Ns )all)r r s r_all_guardrails_passedz(ComplianceChecker._all_guardrails_passed8sN:NNNrct|jdkD}tdd||rt|jdSdS)z-Art. 9: Check if any guardrails were applied.rzGuardrails appliedzArt. 9z guardrail(s) appliedzNo guardrails applied check_namearticlepasseddetail)lenr r)r has_guardrailss r_check_art_9_guardrails_appliedz1ComplianceChecker._check_art_9_guardrails_applied@sVT__-1$+!"t'((=>  -  rc|jd}t|dkD}tdd||rt|dSdS)zr2r rrjoinr has_user has_model has_timestampr3audit_completemissings r_check_art_12_audit_completez.ComplianceChecker._check_art_12_audit_complete] ))*) TYY001 T__-1!TiTMTn NN9 % NN7 # NN; ' NN. /$.!"4  !7!3 45  rc|jd}t|dkD}tdd||rt|dSdS)z9Art. 32: Check if data protection was applied (pre-call).rrzData protection appliedzArt. 32z# pre-call guardrail(s) protect dataz#No pre-call data protection appliedr-r6r7s r_check_art_32_data_protectionz/ComplianceChecker._check_art_32_data_protection|sa":::F./!3 $0 *+,,OP  ;  rc|jd}|j|}|j|}|xs|}|rd}n|rd}nd}tdd||S)z4Art. 5(1)(c): Check if sensitive data was protected.rz.Guardrail intervened to protect sensitive datazNo sensitive data detectedz0No pre-call guardrails to protect sensitive datazSensitive data protectedz Art. 5(1)(c)r-)rr$r+r)r r8has_intervention all_passeddata_protectedr1s r(_check_art_5_1c_sensitive_data_protectedz:ComplianceChecker._check_art_5_1c_sensitive_data_protectedsn":::F;;r?r@zArt. 30rArBrCr-rDrGs r_check_art_30_audit_completez.ComplianceChecker._check_art_30_audit_completerNrc`|j|j|jgS)a Check EU AI Act compliance. Returns: List of compliance check results for: - Art. 9: Guardrails applied - Art. 5: Content screened before LLM (pre-call screening) - Art. 12: Audit record complete )r4r:rMr s rcheck_eu_ai_actz!ComplianceChecker.check_eu_ai_acts2  0 0 2  . . 0  - - /  rc`|j|j|jgS)a Check GDPR compliance. Returns: List of compliance check results for: - Art. 32: Data protection applied (pre-call screening) - Art. 5(1)(c): Sensitive data protected - Art. 30: Audit record complete )rPrUrWrYs r check_gdprzComplianceChecker.check_gdprs2  . . 0  9 9 ;  - - /  rN)__name__ __module__ __qualname____doc__rrstrrrrrEr$r+rr4r:rMrPrUrWrZr\rrrrs;3;CDJ"d4jTOdOO  1F    /D   .C >  /D   :O * .C > &;!<  D!67 rrN)r`typingrr(litellm.types.proxy.compliance_endpointsrrrrbrrres  M M r