headroom/tests/test_toin_retention.py
Tejas Chopra 8cd138039e
fix(toin): bound private query and pattern retention
Fix TOIN privacy leakage and unbounded retention (#2926, #2886).
2026-08-11 16:10:39 -07:00

100 lines
3.3 KiB
Python

"""Regression tests for TOIN privacy and bounded retention."""
from __future__ import annotations
import json
from headroom.telemetry.backends.filesystem import FileSystemTOINBackend
from headroom.telemetry.models import ToolSignature
from headroom.telemetry.toin import TOINConfig, ToolIntelligenceNetwork
def _signature(index: int) -> ToolSignature:
return ToolSignature.from_items([{f"field_{index}": "x"}])
def test_free_form_queries_are_not_persisted() -> None:
toin = ToolIntelligenceNetwork(TOINConfig(storage_path=""))
assert toin._anonymize_query_pattern("show me the contents of /private/secret.txt") is None
assert toin._anonymize_query_pattern("status:error AND user:john") == "status:* user:*"
toin.record_retrieval(
"signature",
retrieval_type="search",
query="show me the contents of /private/secret.txt",
)
pattern = toin.get_pattern("signature")
assert pattern is not None
assert pattern.query_pattern_frequency == {}
def test_query_pattern_length_is_bounded() -> None:
toin = ToolIntelligenceNetwork(TOINConfig(storage_path=""))
assert toin._anonymize_query_pattern("field:" + "x" * 1000) == "field:*"
assert toin._anonymize_query_pattern(" ".join(f"field{i}:x" for i in range(200))) is None
def test_pattern_table_evicts_old_low_sample_patterns() -> None:
config = TOINConfig(storage_path="", max_patterns=2)
toin = ToolIntelligenceNetwork(config)
for index in range(3):
toin.record_compression(
tool_signature=_signature(index),
original_count=10,
compressed_count=5,
original_tokens=100,
compressed_tokens=50,
strategy="test",
)
assert len(toin._patterns) == 2
assert _signature(0).structure_hash not in {
pattern.tool_signature_hash for pattern in toin._patterns.values()
}
def test_legacy_raw_query_keys_are_removed_on_load(tmp_path) -> None:
path = tmp_path / "toin.json"
payload = {
"version": "2.0",
"patterns": {
"unknown|unknown|abc": {
"tool_signature_hash": "abc",
"query_pattern_frequency": {
"raw prompt containing secret source code": 4,
"status:* user:*": 2,
},
"common_query_patterns": [
"raw prompt containing secret source code",
"status:* user:*",
],
}
},
}
path.write_text(json.dumps(payload), encoding="utf-8")
toin = ToolIntelligenceNetwork(TOINConfig(storage_path=str(path)))
pattern = next(iter(toin._patterns.values()))
assert pattern.query_pattern_frequency == {"status:* user:*": 2}
assert pattern.common_query_patterns == ["status:* user:*"]
def test_filesystem_backend_writes_compact_json(tmp_path) -> None:
path = tmp_path / "toin.json"
FileSystemTOINBackend(str(path)).save({"patterns": {"a": {"value": 1}}})
assert "\n" not in path.read_text(encoding="utf-8")
assert " " not in path.read_text(encoding="utf-8")
def test_filesystem_backend_skips_oversized_store(tmp_path) -> None:
path = tmp_path / "toin.json"
path.write_text("x" * 100, encoding="utf-8")
backend = FileSystemTOINBackend(str(path), max_load_bytes=10)
assert backend.load() == {}
assert path.exists()