Firewall outcomes

prediction is the authoritative BENIGN or MALICIOUS verdict. For malicious results, typed outcome constants on BlockResult provide optional detail for application routing. The backend wire fields are prediction, primary_outcome, outcome_scores, detector_scores, and detector_counts. Handler functions such as continueNormally and redactAndSuppress in these examples belong to your application.

Prerequisites

Initialize the SDK client for your runtime and classify a boundary.

The routing example below checks the TypeScript governance verdict. Python and Go also expose typed governance decisions in direct classification results. In effective Block mode, Python and Go raise blocking errors; TypeScript callers must enforce the returned verdict themselves.

Outcome taxonomy

Continue only when prediction is benign and no applicable governance policy blocks the request. For malicious results, route the primary outcome using this table. Block by default if the outcome is missing or unrecognized.

Outcome	Meaning	Recommended action
`benign`	No harmful outcome detected. Check `prediction` for the verdict.	Continue if governance policy also allows the request.
`information_disclosure`	Exposure of private data, documents, internal context, logs, or other non-secret sensitive information.	Block or require review before returning private data.
`secret_exposure`	Exposure of credentials, tokens, keys, cookies, passwords, or other secrets.	Redact or suppress secret-bearing content.
`control_abuse`	Misuse of authorized tools or user privileges without a stronger outcome.	Deny the action and request explicit confirmation.
`system_compromise`	Privilege escalation, takeover, persistence, lateral movement, or hostile code execution.	Block, record a security event, and escalate.
`service_disruption`	Downtime, lockout, degradation, resource exhaustion, cost spikes, or destructive activity.	Block destructive or disruptive actions.

Route a TypeScript result

import { HookLabel, Outcome } from "@silmaril-security/sdk"

const result = await fw.classify(text, {
  hook: HookLabel.TOOL_RESPONSE,
  toolName: "read_file",
})

if (result.governance?.action === "block") {
  return denyByPolicy(result)
}

if (result.prediction === "BENIGN") {
  return continueNormally(result)
}

switch (result.primaryOutcome) {
  case Outcome.SecretExposure:
    return redactAndSuppress(result)
  case Outcome.InformationDisclosure:
    return requireReviewBeforeReturningPrivateData(result)
  case Outcome.ControlAbuse:
    return denyAndRequestExplicitConfirmation(result)
  case Outcome.SystemCompromise:
    securityLog(result)
    return blockAndEscalate(result)
  case Outcome.ServiceDisruption:
    return blockDestructiveOrDisruptiveAction(result)
  default:
    return blockByDefault(result)
}

fw is the TypeScript client.

Expected result

A benign prediction invokes your continue handler. A governance-policy block is denied before the prediction is checked. A malicious prediction invokes the matching outcome handler, or the default blocking handler when no outcome matches.

Start

Concepts

SDKs

AI gateways

Integrations

Deployment

MacOS

Prerequisites

Outcome taxonomy

Route a TypeScript result

Expected result

​Prerequisites

​Outcome taxonomy

​Route a TypeScript result

​Expected result

Prerequisites

Outcome taxonomy

Route a TypeScript result

Expected result