Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion docs/changelog.mdx
Original file line number Diff line number Diff line change
Expand Up @@ -25,7 +25,7 @@ Product updates and release notes for Intercept.
- **Full history redaction.** PII Redactor redacts every user message on every step, including history replayed from a conversation store.
- **Streamed runs blocked.** Tool Approval Guard now blocks streamed runs.

The SDK still stores the original prompt and builds the conversation title from it. Middleware can not redact either.
The SDK still stores the original prompt and builds the conversation title from it. Middleware cannot redact either.
</Update>

<Update label="September 26, 2026" description="v0.3.2" tags={["Patch", "Dependencies"]}>
Expand Down
2 changes: 1 addition & 1 deletion docs/guides/security-notes.mdx
Original file line number Diff line number Diff line change
Expand Up @@ -96,7 +96,7 @@ It does not scan:
- attachments sent alongside the prompt
- the model's response text

It can not change what the SDK stores. The conversation store keeps the original prompt, and the SDK builds the conversation title from it.
It cannot change what the SDK stores. The conversation store keeps the original prompt, and the SDK builds the conversation title from it.

This matters most for indirect prompt injection. If a tool fetches a web page, reads a document, or queries a record that contains injected instructions, that content is handed to the model without passing through Intercept.

Expand Down
2 changes: 1 addition & 1 deletion docs/middleware/pii-redactor.mdx
Original file line number Diff line number Diff line change
Expand Up @@ -474,7 +474,7 @@ The Laravel AI SDK runs agent middleware once for each generation step. A run th
A change to the step history applies to that step only. The middleware therefore redacts or masks every user message in the history on every step. This includes earlier turns that the SDK replays from a conversation store. It logs and blocks once, on the step that starts the turn.

<Warning>
The SDK stores the original prompt in the conversation store, and it builds the conversation title from that prompt. Middleware can not change either. Redaction keeps PII away from the AI provider, not away from your conversation tables.
The SDK stores the original prompt in the conversation store, and it builds the conversation title from that prompt. Middleware cannot change either. Redaction keeps PII away from the AI provider, not away from your conversation tables.
</Warning>

## Tool approval resumes
Expand Down
Loading