[jira] [Created] (RANGER-5705) Ranger Copilot — Governance-Grade AI Assistant for Apache Ranger

["Yunye Zhang (Jira)" <ji...@apache.org>]

Yunye Zhang created RANGER-5705:
-----------------------------------

             Summary: Ranger Copilot — Governance-Grade AI Assistant for Apache Ranger
                 Key: RANGER-5705
                 URL: https://issues.apache.org/jira/browse/RANGER-5705
             Project: Ranger
          Issue Type: New Feature
          Components: Ranger
    Affects Versions: 2.6.0
            Reporter: Yunye Zhang
            Assignee: Yunye Zhang


Introduce a new, side-car Maven module — **`ranger-copilot`** — that turns
Apache Ranger into an assisted-governance platform. Copilot runs as an
independent Spring Boot 3.x service (no changes to `security-admin`), reads
policy metadata via Ranger REST, reads audit records through a pluggable
**`AuditSource`** abstraction with two implementations — direct
Elasticsearch (default, required for aggregation-based baselines) and
Ranger REST (`/service/xaudit/access_audit`) fallback for deployments
without direct ES access — and combines **deterministic detectors** with
an **LLM reasoning layer** to produce explainable, auditable, revertible
suggestions. Every AI output lands in a `PENDING` suggestion queue and is
only applied to Ranger after an administrator approves it — with a full
before/after policy snapshot and one-click rollback.

The Epic delivers **six child issues** — one bootstrap plus five feature
sub-tasks — and can be merged incrementally: each sub-task carries an
independently-testable MVP and is gated behind a feature flag. The six
child issues are:

| Child issue | Scope |
|-------------|----------------------------------------------------------------------------------------------------------------------------------------------|
| SUB-00 | **Bootstrap** — module skeleton, `LlmClient` / `AuditSource` / `PasswordDecoder` SPIs, `SuggestionWorkflowService` state machine, DDL. |
| SUB-01 | **Audit Intelligence** — ES-backed anomaly detection + LLM explanation. |
| SUB-02 | **Policy Recommendation** — least-privilege mining from audit aggregations. |
| SUB-03 | **Policy Governance** — redundancy / conflict / stale / risky-pattern detection. |
| SUB-04 | **NL2Policy** — natural-language authoring via LLM → JSON Schema → Ranger `dryRun`. |
| SUB-05 | **Automated Response** — Webhook / mail / ticketing adapters on confidence-gated events. |



--
This message was sent by Atlassian Jira
(v8.20.10#820010)