Enterprise Guardrails

// SkyAIApp Enterprise - Security Configuration
import { SkyAI } from '@skyaiapp/sdk';

const client = new SkyAI({
  apiKey: process.env.SKYAI_API_KEY,
  
  // Enterprise security settings
  enterprise: {
    // SSO/SAML configuration
    sso: {
      provider: "okta",
      domain: "mycompany.okta.com",
      enforced: true,  // All users must use SSO
    },
    
    // PII detection and handling
    pii: {
      detection: {
        enabled: true,
        types: ["email", "phone", "ssn", "credit_card", "address"],
      },
      action: "redact",  // "redact" | "block" | "alert"
      alertWebhook: "https://mycompany.com/security-alerts",
    },
    
    // Data residency
    dataResidency: {
      region: "eu-west-1",  // Data stays in EU
      replication: false,   // No cross-region replication
    },
    
    // Audit logging
    auditLog: {
      enabled: true,
      retention: "7y",  // 7 year retention for compliance
      export: {
        destination: "s3://mycompany-audit-logs/skyai/",
        format: "json",
      },
      siem: {
        provider: "splunk",
        endpoint: "https://splunk.mycompany.com/api",
      },
    },
    
    // Access control
    rbac: {
      defaultRole: "viewer",
      customRoles: [
        {
          name: "ml-engineer",
          permissions: ["models:read", "models:deploy", "traces:read"],
        },
      ],
    },
  },
});

// All API calls now enforce enterprise policies
const response = await client.chat.completions.create({
  model: "gpt-5.5",
  messages: [{ role: "user", content: userInput }],
  // PII in userInput will be automatically detected and handled
});