LEYER
Device / macbook-pro-04
—
Policy engine
| Rule | Match expression | Action | Hits | State |
|---|---|---|---|---|
BLOCK_UNVETTED_HOSTS Deny AI traffic to hosts outside the approved provider registry. | host NOT IN registry.approved | 1,284 | ||
FLAG_SENSITIVE_DATA Flag prompts whose metadata matches PII or credential signatures. | signal IN (pii-pattern, credential-shape) | 642 | ||
BLOCK_SOCIAL_GENAI Deny generative AI embedded inside social platforms. | category = social-ai | 418 | ||
FLAG_LARGE_EGRESS Flag outbound payloads above 2 MB to any external model. | direction = out AND bytes > 2MB | 231 | ||
LOG_EXTERNAL_TRAFFIC Record metadata for every external AI request. Never blocks. | host != node.internal | 142,892 | ||
BLOCK_CODE_EGRESS Deny payloads matching the source-code fingerprint heuristic. | signal = source-code-fingerprint | 0 |
Changing a rule re-classifies the entire captured stream immediately.