gfg-adr-detection

A packaged, importable build of ADR Detection from uber/ADR, maintained by Global Fashion Group for internal use and published so it can be installed with pip rather than cloned.

Not affiliated with or endorsed by Uber. This is a modified redistribution under the Apache License 2.0; the original copyright and LICENSE are retained. For the upstream project, its paper and its benchmark, go to github.com/uber/ADR.

⚠️ Not a general-purpose library

ADR Detection is a research artifact. Several of its dependencies are pinned to exact versions for benchmark reproducibility and carry known CVEs, which upstream documents and accepts under an isolated threat model. Run it in a container, VM or dedicated host — not alongside your application.

It is also unusually heavy: the dependency closure includes torch, transformers and the LangChain stack, and its hard == pins will conflict with most other packages. Install it into a dedicated virtualenv.

What this package changes

Upstream resolves its runtime data relative to __file__, three directories up — which is the source tree in a checkout, and site-packages once installed. The practical effect was that an installed copy discovered zero MCP context providers and silently degraded from two detection tiers to one, with no error. This build fixes that and the related path assumptions:

• context providers resolve from inside the package (ADR_CONTEXT_PROVIDERS_DIR overrides; the original layout is still honoured for source checkouts)
• the reasoning workspace is relocatable via ADR_WORKSPACE_ROOT, instead of being created inside site-packages
• MCP servers launch with sys.executable rather than uv run, which resolved an unrelated environment when installed as a wheel
• the import package is adr_guardrail, not guardrail, which PyPI already assigns to an unrelated project
• the dependency axios is dropped — it is a JavaScript library, and the PyPI project of that name is unrelated to it and to ADR
• the 16 MB benchmark corpus is not shipped, so the source-code context provider is disabled by default (enable_source_code: false)

Install

python -m venv .venv && .venv/bin/pip install gfg-adr-detection

Requires Python 3.10–3.12.

Use

from adr_guardrail.adr_agent.adr_baseline import ADRBaseline

detector = ADRBaseline(config_data=config, benchmark_type="adr_bench")
verdict = detector.analyze_conversation(messages).to_dict()

config is the parsed config_detector.yaml structure documented upstream. The high-precision tier shells out to the Claude CLI, which refuses to run as root — so give the container an unprivileged user.

Licence

Apache-2.0, as the original. See LICENSE.