Security Pipeline

n-gram point cloud → Betti numbers β₀/β₁. Detects structural anomalies invisible to regex. Runs in <2ms.

Depth-3 recursive decode: base64, hex, ROT13, Caesar, word-split, UUencode, Unicode homoglyphs.

15 regex patterns (AWS, JWT, Stripe, GitHub, SSH) + Shannon entropy scan. Zero plaintext in memory.

Rule-based semantic analyser. Compound risk escalation: 3+ MEDIUM signals → HIGH verdict.

MiniLM embeddings → Poincaré ball. 70% cosine + 30% hyperbolic distance blend. Adversarial suffix stripping.

Bayesian DAG over 5 evidence nodes. Pearl do-calculus backdoor correction. Gray-zone requests get causal reasoning.

URL phishing detection + social engineering pattern matching. Covers pretexting, authority spoofing, urgency.

Redis sliding window rate scorer. Shadow ban at score ≥ 0.75. Three strategies: gaslight, delay, standard.

CPT drift gate rejects calibration updates shifting any parameter >25% from prior. Prevents coordinated poisoning.

PII masking with Fernet-encrypted vault, HMAC-SHA256 reverse map. No plaintext stored in memory or logs.

Progressive streaming with 400-char fast-scan buffer → live-emit. Drop-in replacement for OpenAI clients.