Open detection content · maintained by PipeLab
Pipelock Rules
Signed, versioned detection rules that extend Pipelock with community DLP, prompt-injection, and tool-poisoning coverage.
- Bundles
- Signed
- Verification
- Ed25519
- Loading
- Hot reload
- License
- Apache 2.0
From source to install
Every check must pass before a bundle is published
01 · Additive by design
New coverage without weakening the built-in scanners
Pipelock Rules adds DLP, prompt-injection, and tool-poisoning detections between binary releases. A bundle can add a detection. It can’t override or disable a built-in rule.
Every published bundle has a version and an Ed25519 signature. Pipelock verifies the signature against a trusted key before it loads the rules.
02 · Installed state
Pipelock records exactly which bundle it loaded
A successful install writes the bundle name, version, and digest to bundle.lock. The healthcare-phi-pii bundle installs separately from pipelock-community, so operators choose each bundle deliberately.
03 · Inspect it