Skip to content

Releases: luochen1990/secret-guard

Release list

v0.1.0 — initial public release

v0.1.0 — initial public release Latest
Latest

Choose a tag to compare

View all tags
@luochen1990 luochen1990 released this 23 Sep 12:52
Immutable release. Only release title and notes can be modified.
v0.1.0
50bbdf5

Initial public release.

Secret Guard is a lightweight local LLM gateway: outbound requests have their secrets replaced with equal-length, format-indistinguishable realistic mocks; responses are restored back to real values on the way in — the LLM never touches a real secret, while your agent tools keep working.

Outbound:  Agent tool ──real secret──►  secret-guard  ──realistic mock──►  LLM provider
Return:    local tools ◄──real secret──  secret-guard  ◄──mock reply────  LLM provider

Highlights

  • Provable redact/restore round-trip — every mock maps one-to-one to a real value; restore is the exact inverse of redact (streaming SSE and tool-call arguments included). Pinned by ~100 property-based tests (contracts.md).
  • Prefix-cache friendly — a secret's mock is deterministic and stable across turns, so provider prefix-cache hits (and your token bill) are unaffected.
  • Fail-safe degradation — on abnormal paths (unparsable responses, probe exhaustion), the default is to keep the mock or reject the request; real values never leak into failure bodies.
  • Cross-protocol translation — OpenAI ⇄ Anthropic ⇄ Responses (streaming included across the family), plus model-wildcard routing and plan-pool failover.
  • WebUI session audit — clustered conversation timeline showing exactly what the LLM saw, with mock locations highlighted; token/cost/cache-hit stats persisted locally.

Install

Linux x86_64 / ARM64 static binaries (musl, zero runtime dependencies):

curl -LO https://github.com/luochen1990/secret-guard/releases/download/v0.1.0/SHA256SUMS
sha256sum --check --ignore-missing SHA256SUMS   # verify before installing
tar -xzf secret-guard-0.1.0-$(uname -m)-linux-musl.tar.gz
sudo install secret-guard-0.1.0-*/secret-guard /usr/local/bin/

Or from source (cargo install --git https://github.com/luochen1990/secret-guard, rustc ≥ 1.96), or via Nix (nix run github:luochen1990/secret-guard).

Checksums

See the SHA256SUMS asset below. macOS/Windows: build from source (see the download page).

Docs

Quick start · Configuration reference · Comparison with alternatives

Assets 6
Loading