Disabled AI Context Gates
Safety — internal AI context gate only
- No automatic injection · single-run owner/admin approval only · exact knowledge versions referenced.
- No public publishing · no raw file ingestion · no unapproved/draft knowledge · output is internal only.
- Runs through TALMENTO's own AI gateway (FAKE/deterministic by default). Payment/public launch unaffected.
These endpoints always return 403
Automatic workflow injection, public context publishing and file-content ingestion are disabled. Each attempt is logged as a SecurityEvent.
| Gate | Code | Test | Result |
|---|---|---|---|
| Auto-enable workflow injection | AUTO_CONTEXT_INJECTION_DISABLED | — | |
| Public context publishing | PUBLIC_CONTEXT_PUBLISHING_DISABLED | — | |
| File content ingestion | FILE_CONTENT_CONTEXT_INGESTION_DISABLED | — |