From d538faeac997978cf14d62c218e216de69067b74 Mon Sep 17 00:00:00 2001 From: BB-AI-Arena <85533977+BB-AI-Arena@users.noreply.github.com> Date: Wed, 12 Aug 2026 13:17:07 -0500 Subject: [PATCH] highlight WAF protection in README --- README.md | 3 +++ 1 file changed, 3 insertions(+) diff --git a/README.md b/README.md index 44980b9..347d580 100644 --- a/README.md +++ b/README.md @@ -19,6 +19,9 @@ +> [!TIP] +> **WAF-protected by default.** The Docker deployment puts the official **OWASP ModSecurity Core Rule Set 4.25 LTS** in blocking mode in front of every published Intent Gate API route. The backend has no host port, while SQL injection probes, unsupported methods, malformed JSON, and oversized payloads are rejected at the edge. [Explore the WAF design and tuning guide →](docs/WAF.md) + > [!IMPORTANT] > User Intent AI Security is an early proof of concept, not a standalone security boundary. Reliable enforcement requires integration at a command broker, shell host, agent tool API, container runtime, or privileged-operation choke point that cannot be bypassed.