What was added recently
This page lists what you can see or use in Palveron today, with the date it was added.
Company names and places: a setting per project
By default, company names and places are sent in clear text. For each project you can have them masked at all times. Addresses with a house number appear as their own category, "Address".
Every AI service in Shadow AI
Under Shadow AI the app shows the AI service list page by page, with filters by level, category and search. Entries found automatically are marked "unverified".
Trace Explorer: a label for prompts sent with a justification
Prompts sent in clear text with a justification carry a short label in the list of the Trace Explorer, in every view. The box on the transmitted content names the categories that went in clear text.
Sending with a justification in the Browser Guard
Person names and contact details can be sent in clear text after a justification; credentials, payment data, social security, tax and ID numbers, dates of birth, IP addresses and dates, as well as every other detected category, stay masked. The Trace Explorer shows what went in clear text.
Shadow AI: translated categories, protected CSV export
The categories of AI services appear translated; an unknown category reads "Category not assigned". The CSV export separates with semicolons and is protected against injected formulas.
Emergency stop per project
The emergency stop halts a project: Palveron then rejects every request made with the project key. Reading, investigating and changing rules remain possible; the stop is lifted as a whole.
Approving MCP servers
Approving an MCP server decides about its tools: each tool gets a rule with the approving person as its author. A server can be approved only after a successful scan.
Rules that observe or enforce
Every rule has a mode: it enforces or only observes. The list of rules shows the mode, and an observed hit is recorded with its evidence.
Protection against manipulation names its rule
When the protection against manipulation attempts (prompt injection) blocks a request, the record names the rule that applied.
OpenClaw package published
The package @palveron/agent-shield is published on npm. The command palveron shield init connects OpenClaw agents to Palveron.