CerbiStream.GovernanceAnalyzer 1.1.8

CerbiStream Governance Analyzer

🛡️ CerbiStream Governance Analyzer

CerbiStream-GovernanceAnalyzer is a high-performance, plugin-extensible governance engine for structured logging in .NET. It enables both runtime enforcement and compile-time analysis (via Roslyn Analyzer) to ensure logging consistency, security, and observability compliance.

✅ What’s New?

• 🔄 Live Reloading of JSON governance configs
• 🧠 Plugin Architecture — inject dynamic validation rules (per environment, compliance, etc.)
• 🥉 Per-field Type & Enum Enforcement (Roslyn-only)
• ❌ DisallowedFields Support (Roslyn-only)
• 🔐 Governance Modes: Permissive, WarnOnly, Strict
• 📊 Impact Scoring for governance violations (coming soon)
• 🔍 Roslyn Analyzer to catch issues at build-time

📦 Installation

dotnet add package CerbiStream.GovernanceAnalyzer

🔥 Why Use CerbiStream-GovernanceAnalyzer?

• Compile-Time Log Validation – Prevents misformatted logs before deployment.
• Structured Logging Enforcement – Ensures consistent log structures across teams.
• Customizable Rules via JSON – Allows organizations to define mandatory fields for logs.
• Seamless Integration with CerbiStream – Works alongside CerbiStream for log governance.
• Lightweight & Fast – Runs at build time, avoiding runtime performance impact.

🚀 How It Works

1. Governance via JSON Profiles

• Runtime only enforces EncryptionSettings (e.g., AES, Base64).
• Compile-time (Roslyn) enforcement includes:
  • Required / Forbidden fields
  • Field types and enums
  • Encryption validation

2. Build-Time Roslyn Enforcement

• Validates log usage against governance profile during compilation.
• Fails build if required fields are missing or forbidden fields are present.

// Valid log
logger.LogInformation("User login successful | UserId: {UserId}", userId);

// Invalid log (missing required UserId)
logger.LogInformation("User login successful"); // ❌ Build fails

3. Runtime Use (Optional)

var isValid = GovernanceHelper.TryValidate("PIILog", logData, out var errors);
if (!isValid)
{
    Console.WriteLine("Governance violations:");
    errors.ForEach(Console.WriteLine);
}

🔧 Runtime Enforcement Summary

📃 Config Format (Simplified)

{
  "EnforcementMode": "Strict",
  "LoggingProfiles": {
    "PIILog": {
      "AllowedLevels": ["Information", "Error"],
      "FieldSeverities": {
        "userId": "Required",
        "ssn": "Forbidden"
      },
      "FieldTypes": {
        "userId": "Guid"
      },
      "EncryptionSettings": {
        "Mode": "AES",
        "FieldSeverity": "Required"
      }
    }
  }
}

👁️ Plugin Support

You can inject custom logic to extend governance enforcement:

public class TeamIdPlugin : ICustomGovernancePlugin
{
    public bool Validate(string profile, Dictionary<string, object> logData, out List<string> failures, out int impactScore)
    {
        failures = new();
        impactScore = 0;

        if (logData.TryGetValue("Environment", out var env) &&
            env?.ToString() == "Production" &&
            !logData.ContainsKey("TeamId"))
        {
            failures.Add("MissingField: TeamId is required in Production");
            impactScore = 5;
            return false;
        }

        return true;
    }
}

🚧 Governance Analyzer Goals

📅 Roadmap

• 🔄 Roslyn-based preview tooling
• 📊 CerbIQ impact scoring dashboard integration
• 📈 Governance metrics via CerbiShield
• 🚧 Plugin SDK + CI integrations

📢 License & Contact

• License: MIT
• NuGet: GovernanceAnalyzer
• Website: cerbi.systems
• Contact: hello@cerbi.io

Secure. Structured. Compliant. CerbiStream Governance Analyzer