2003214 - Phase 2 POC - Part 2: Implement Security Logger

Status: RESOLVED FIXED

(Core :: Machine Learning: General, enhancement)

Description

[Randy Concepcion]

NOTES

• Please refer to Jira Ticket for more details: https://mozilla-hub.atlassian.net/browse/GENAI-2395
• This is dependent/builds on https://phabricator.services.mozilla.com/D274523

Acceptance Criteria

• All policy decisions logged to NDJSON file with correct schema, including hashed sensitive data
• Log file created at <profile>/aiwindow/security/audit.log
• Size-based log rotation works correctly (10 MB limit, single .old backup)
• Logger respects browser.aiwindow.security.logging.enabled pref
• Logging is non-blocking

Comment 1

[Randy Concepcion]

Attachment: Bug 2003214 - Add security audit logger to AI Window security layer r?tarek,#ai-ondevice-reviewers

Implements NDJSON-based security audit logging for policy decisions with:

• Hash.sys.mjs: SHA-256 hashing for privacy-preserving logs
• SecurityLogger.sys.mjs: File logging with size-based rotation (10 MB)
• Pref-gated via browser.aiwindow.security.logging.enabled
• Sensitive fields (URLs, args) hashed before writing to disk
• All policy decisions logged (allow, deny, kill switch, no policies)

Comment 2

[Pulsebot]

Pushed by [e-mail]:
https://github.com/mozilla-firefox/firefox/commit/a8d061235f78
https://hg.mozilla.org/integration/autoland/rev/dcae6c3a140b
Add security audit logger to AI Window security layer r=ai-ondevice-reviewers,gregtatum

Comment 3

[Iulian Moraru]

https://hg.mozilla.org/mozilla-central/rev/dcae6c3a140b