Cerbi.Serilog.GovernanceAnalyzer 1.1.2

Cerbi.Serilog.Governance

🔒 Real-time governance enforcement for Serilog using Cerbi — the structured logging validator for modern .NET systems.

🚀 What It Does

Cerbi helps enforce logging safety, structure, and compliance in real time.

📁 Enforces required/forbidden fields 🔒 Blocks logs with unsafe values 🏛️ Validates enums and field types 🚧 Supports relaxed logging bypass (logger.Relax()) 📈 Enriches logs with governance tags (optional) 🔍 Works with any Serilog sink (Console, File, Seq, etc.)

📆 NuGet Packages

• ⚙️ Serilog Plugin: Cerbi.Serilog.Governance
• 🔧 Core Validator: Cerbi.Governance.Runtime
• 🌐 Full suite and docs: https://cerbi.io
• 🪵 Logging library: CerbiStream

⚡ Quick Start

1️⃣ Install the Serilog plugin

dotnet add package Cerbi.Serilog.Governance

2️⃣ Create cerbi_governance.json

{
  "EnforcementMode": "Strict",
  "LoggingProfiles": {
    "Orders": {
      "RequireTopic": false,
      "AllowedTopics": ["Orders", "Users"],
      "FieldSeverities": {
        "userId": "Required",
        "email": "Required",
        "password": "Forbidden"
      },
      "FieldEnums": {
        "Status": ["Pending", "Approved", "Rejected"]
      },
      "AllowRelax": true
    }
  }
}

3️⃣ Configure Serilog with Cerbi filtering

using Cerbi.Serilog.Governance;

Log.Logger = new LoggerConfiguration()
    .Filter.WithCerbiGovernanceFiltering(options =>
    {
        options.Profile = "Orders";
        options.ConfigPath = "cerbi_governance.json";
    })
    .WriteTo.Console()
    .CreateLogger();

📝 Example Log Calls

✅ Valid Log

logger
    .ForContext("userId", "abc123")
    .ForContext("email", "user@example.com")
    .ForContext("Status", "Approved")
    .Information("Order submitted");

❌ Missing Required Field (blocked)

logger
    .ForContext("email", "user@example.com")
    .Information("Missing userId");

❌ Forbidden Field (blocked)

logger
    .ForContext("userId", "abc123")
    .ForContext("email", "user@example.com")
    .ForContext("password", "supersecret")
    .Information("Attempted login");

🧪 Relaxed Logging (bypass)

logger
    .Relax()
    .ForContext("email", "test@example.com")
    .Information("Non-compliant, but allowed in Relax mode");

Relaxed logs are not blocked, but are tagged as GovernanceRelaxed: true.

📤 Console Output Example

{
  "userId": "abc123",
  "email": "user@example.com",
  "Status": "Approved"
}

If enriched with governance:

{
  "GovernanceProfileUsed": "Orders",
  "GovernanceViolations": [],
  "GovernanceRelaxed": false
}

🧐 Notes

• [CerbiTopic] support is planned once the runtime exposes Validate(..., callerType) or Evaluate(...).
• Use .Enrich.WithCerbiGovernanceTagging(...) if you want to annotate logs without filtering them.

📌 See Also

• 🔍 Cerbi homepage: https://cerbi.io
• 📋 CerbiStream logging library: https://www.nuget.org/packages/CerbiStream
• 🧰 Roslyn Analyzer: Cerbi.Governance

💼 Why Use CerbiStream?

While Cerbi.Serilog.Governance adds runtime enforcement to Serilog, CerbiStream offers:

• Built-in support for governance decorators like [CerbiTopic("...")]
• Source generator + analyzer enforcement for compile-time rules
• Flexible multi-sink fallback (file, blob, queue)
• Real-time enforcement + tagging built into logger API

Use CerbiStream if you want governance baked directly into your logging library with rich metadata routing and enterprise compliance controls.

Made with ❤️ by Cerbi