Disabled Content Gates
Safety — internal content safety gate only
- No raw file content / OCR / PDF text to AI · no auto file summarization · no external URL fetch · no untrusted-text auto-injection · no signed URLs to AI.
- No raw text persistence — redacted preview only. Deterministic scanner; no AI call. Owner/admin gated.
These endpoints always return 403
Raw file content / OCR / PDF text to AI, auto file summarization, external URL fetch, untrusted-text auto-injection, signed URLs to AI and auto-promote-to-Knowledge are all disabled. Each attempt is logged as a SecurityEvent.
| Gate | Code | Test | Result |
|---|---|---|---|
| Raw file content to AI | RAW_FILE_CONTENT_TO_AI_DISABLED | — | |
| OCR to AI | OCR_TO_AI_DISABLED | — | |
| PDF text to AI | PDF_TEXT_TO_AI_DISABLED | — | |
| Auto file summarization | AUTO_FILE_SUMMARIZATION_DISABLED | — | |
| External URL fetch to AI | EXTERNAL_URL_FETCH_TO_AI_DISABLED | — | |
| Untrusted text auto-injection | UNTRUSTED_TEXT_AUTO_INJECTION_DISABLED | — | |
| Signed URL to AI | SIGNED_URL_TO_AI_DISABLED | — | |
| Auto-promote file text to Knowledge | AUTO_PROMOTE_FILE_TEXT_TO_KNOWLEDGE_DISABLED | — |