> ## Documentation Index
> Fetch the complete documentation index at: https://docs.jaasskills.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Rule catalog

> 19 rules, 9 categories, each citing an industry source

| Category                     | Derives from                                           |
| ---------------------------- | ------------------------------------------------------ |
| SECRET                       | gitleaks / trufflehog patterns, CWE-798                |
| SIZE                         | Package-size heuristics                                |
| CODE\_SAFETY                 | CWE-95, CWE-78, CWE-502                                |
| PROMPT\_SAFETY               | OWASP Top 10 for LLM Applications 2025 — LLM01, LLM07  |
| PERMISSIONS                  | OWASP LLM06                                            |
| LICENSING                    | FOSSA / SPDX license categories                        |
| SUPPLY\_CHAIN                | OSSF Scorecard — Pinned-Dependencies, Binary-Artifacts |
| PRIVACY                      | Microsoft Presidio PII entity taxonomy                 |
| COMPLIANCE / CONTENT\_SAFETY | Regulatory & content-policy heuristics                 |

## Design constraints

* **No network calls** — no CVE/malware-database lookups, no telemetry. Every rule is evaluable fully offline, deterministically, from the package's own files.
* **No ML, no entropy scoring** — regex, size thresholds, set/count arithmetic, and local edit-distance only.
* **Must not fire on a well-formed, benign package** — every rule is checked against a realistic valid-fixture package in the service's own test suite before it ships, to keep WARN-level false positives low enough to stay useful signal.

## Resilience

The guardrails service being temporarily unreachable never takes the rest of the registry down. Its catalog is fetched on demand per-request, not cached at startup, so search, sharing, and auth stay fully available. Only the specific routes that need it — draft validate/publish, the tenant guardrail-policy endpoints, `/api/v1/guardrails` — return `503 GUARDRAILS_SERVICE_UNAVAILABLE` if it's down.