Skip to content

Redteam scorecard counts and PII hard negatives; date of 0.14.0 - #85

Merged
stefanoferi merged 3 commits into
mainfrom
chore/redteam-followups
Oct 8, 2026
Merged

stefanoferi merged 3 commits into
mainfrom
chore/redteam-followups

Conversation

@stefanoferi

Copy link
Copy Markdown
Member

Closes #37.

  • Scorecard counts (redteam suite: non-blocking follow-ups from #29 review #37 "corpus size / reporting"): each cell of admina redteam --format md gives the recall followed by the detected and expected counts (89% (8/9)). A note under the table says the figures are indicative (a class often has one to three samples).
  • Label provenance (redteam suite: non-blocking follow-ups from #29 review #37): the same note, and MODEL_CARD §9, say that the labels of the corpora are assigned in this repository, not adjudicated by a third party.
  • PII hard negatives (redteam suite: non-blocking follow-ups from #29 review #37 "corpus edge cases"): eight hard_negative samples (an order number that fails the Luhn check, a version, an invoice number with a date, an ISBN, a build number, room and chapter numbers, two Italian reference codes). SHA256SUMS and the baseline are regenerated; only the PII false-positive counts change: Python 6/16 → 8/24, Rust 0/16 → 3/24, Presidio 9/16 → 12/24. Measured false positives: Rust CREDIT_CARD on the non-Luhn number and PHONE on the ISBN and the build number; spaCy and Presidio PERSON on the two Italian sentences. MODEL_CARD lists them.
  • Card samples (redteam suite: non-blocking follow-ups from #29 review #37): the four card numbers of the corpus pass the Luhn check; no change.
  • loop-en-009 (redteam suite: non-blocking follow-ups from #29 review #37): the counter_reset sample is labelled loop on purpose; MODEL_CARD §9 documents that the Python loop breaker (last-5 window) misses it and the Rust one (full window) catches it. No change.
  • CHANGELOG: [0.14.0] dated 2026-10-08, the day of the tag.

Baseline regenerated in the CI measurement modes (nlp:en_core_web_sm@3.8.0, presidio:2.2.363/en+it) with admina-core built from this tree (0.14.0); the gate passed against the committed baseline before the corpus change and passes against the new one. Full suite: 4555 passed.

v0.14.0 was tagged on 2026-10-08.
…scorecard

Each cell of admina redteam --format md gives the recall followed by the
detected and expected counts: samples for injection and loop, PII types
for the PII detector. A note under the table says that a class often has
one to three samples, so the figures are indicative, and that the labels
of the corpora are assigned in this repository.
Eight negative samples tagged hard_negative hold numbers and codes that
are not personal data: an order number that fails the Luhn check, a
version, an invoice number with a date, an ISBN, a build number, room and
chapter numbers, and two Italian reference codes. SHA256SUMS and the
baseline are regenerated; only the PII false-positive counts change
(Python 8/24, Rust 3/24, Presidio 12/24). MODEL_CARD lists the measured
false positives: CREDIT_CARD and PHONE from the Rust scanner, PERSON from
spaCy and Presidio on the Italian sentences. The [Unreleased] section of
CHANGELOG describes the scorecard counts and the hard negatives.
@stefanoferi
stefanoferi merged commit 56f5958 into main Oct 8, 2026
20 checks passed
@stefanoferi
stefanoferi deleted the chore/redteam-followups branch October 8, 2026 06:37
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

redteam suite: non-blocking follow-ups from #29 review

1 participant