@nebutra/ecosystem-safety

Public mirror for @nebutra/ecosystem-safety from Nebutra/Nebutra-Sailor.

This repository is generated from the Nebutra Sailor monorepo. Package releases are cut from the monorepo and mirrored here for discovery, standalone cloning, and contribution intake.

• Canonical source: packages/ai/ecosystem-safety in Nebutra/Nebutra-Sailor
• Package registry: npm and GitHub Packages
• Contributions: open issues or PRs here; maintainers port accepted changes back into the monorepo source package

---

Status: WIP

Shared public-disclosure safety primitives for Nebutra ecosystem packages.

This package owns deterministic sensitive-field scanning for surfaces that can publish founder data outside the private tenant boundary. Product packages still own their own state machines:

• @nebutra/idea-plaza decides whether an idea snapshot is surface, detail, or cloneable.
• @nebutra/founder-cemetery decides whether a memorial is private, community, or public and whether cooling-off/consent requirements are met.
• @nebutra/cofounder-match owns bilateral match consent and should not reuse memorial consent types.

Boundary

ecosystem-safety only answers: "Does this text contain obvious private fields, and has the caller declared an explicit redaction intent?"

It does not own moderation queues, legal policy, user consent, publish levels, identity verification, or registry transport.

Example

import { assertPublicDisclosureSafe } from "@nebutra/ecosystem-safety";

assertPublicDisclosureSafe({
  capability: "idea-plaza",
  content: "Contact alice@example.com",
  redactions: ["customers"],
});