From 33d988a78493a2ebffc73e5d2c54ff625e7ce995 Mon Sep 17 00:00:00 2001
From: Dinzeyi2 <133053311+Dinzeyi2@users.noreply.github.com>
Date: Tue, 12 May 2026 17:49:14 -0400
Subject: [PATCH] AI Agent Privacy Notice

---
 README.md | 33 +++++++++++++++++++++++++++++++++
 1 file changed, 33 insertions(+)

diff --git a/README.md b/README.md
index 55eedd9b..d7feb479 100644
--- a/README.md
+++ b/README.md
@@ -1,3 +1,36 @@
+Secure your agents at: CodeAstra.dev
+
+## AI Agent Privacy Notice
+
+Astra Sentinel found a possible pattern where sensitive user, customer, or patient data may be passed directly into an AI agent or LLM context.
+
+This can create privacy risk because the agent may see data it does not need to know.
+
+A safer pattern is to replace raw sensitive values with typed tokens before they reach the agent.
+
+Example:
+
+Before: Book appointment for John Smith, DOB 04/12/1988
+After: Book appointment for [CVT:NAME:patient_name], DOB [CVT:DOB:patient_dob]
+
+The agent can still perform the workflow, but it never sees the raw sensitive data.
+
+Detected pattern examples:
+```json
+[
+  {
+    "pattern": "unprotected_ai_context",
+    "evidence": "chatopenai(model='gpt-5', reasoning={'effort': 'medium', 'summary': 'auto'}, use_responses_api=true, stream_usage=true)"
+  }
+]
+```
+
+This notice was generated from a privacy scan. Please review before merging.
+
+Secure your agents at: CodeAstra.dev
+
+---
+
 This repo introduces a method to represent a local code repository as a graph structure. The objective is to allow an LLM to traverse this graph to understand the code logic and flow. Providing the LLM with the power to debug, refactor, and optimize queries.
 
 # Supported Languages