[tommasobolis]

Closes #1183

Summary

• Exception: ContentSafetyBlocked.provider is a stable slug: azure-content-safety, bedrock-guardrails, google-model-armor or crowdstrike-aidr. The slug sits next to the display name in _CONTENT_SAFETY_VENDORS, and content_safety_reject() returns (provider, vendor, categories). The message text is unchanged.
• Span: refusal spans gain donkey.policy.provider (the slug) and donkey.policy.categories (a string array of flagged categories). The constants are DONKEY_POLICY_PROVIDER and DONKEY_POLICY_CATEGORIES in core/telemetry.py, added to __all__. build_genai_attributes takes them as policy_provider and policy_categories.
• Generic naming: _policy_detail in transport/policy.py keys on the attribute, not the class. Any refusal that carries provider reports it, with categories when they're non-empty. When the federated-guardrail types (refusals: type the Akamai federated guardrail verdict #313, refusals: detect the F5 Guardrails block, which returns HTTP 200 #1177) set those two fields, they get the same span attributes with no transport change. A PII or budget refusal emits neither attribute.
• Ratchet: errors.py (1031) and telemetry.py (630) stay at their ceilings. I offset the growth by rewrapping docstrings and comments to the 100-column limit, so no wording was dropped.
• Docs: updated telemetry.mdx (the attribute list plus a paragraph on grouping refusals by provider) and errors.mdx, then regenerated website/public.

Tests

• One per reject.content-safety-* fixture (Azure, Bedrock, Model Armor, CrowdStrike AIDR):
  • .provider and .categories on the exception;
  • both span attributes through DonkeyAsyncClient.
• A PII refusal emits no donkey.policy.provider or donkey.policy.categories. PIIDetected has no .provider.
• build_genai_attributes covers the new keys and leaves them out when unset.
• Gate: nox -s typecheck-and-lint test-3.11 new-dependencies commit-identities passes locally.

Follow-up

The live acceptance telemetry group asserts only donkey.policy.type=content_safety. It still passes, and asserting donkey.policy.provider live is a small follow-up there.

🤖 Generated with Claude Code