= "healthcare"
= "1.0.0"
= "HIPAA-aligned: strict redaction plus PHI identifiers, no web fetches, 6-year audit expectation"
= "strict-redaction"
[]
= ["ctx_url_read"]
= 12000
# HIPAA documentation-retention expectation (6 years).
= 2190
[]
# US Social Security numbers (grouped or contiguous, with separators).
= '\b\d{3}-\d{2}-\d{4}\b'
# Medical record numbers as commonly labeled in fixtures/logs.
= '(?i)\b(mrn|medical[ _-]?record[ _-]?(no|number|id))\b[ :=#]*[A-Z0-9-]{5,}'
# US health-insurance member ids as labeled fields.
= '(?i)\b(member|subscriber|policy)[ _-]?(no|number|id)\b[ :=#]*[A-Z0-9-]{5,}'
# Labeled dates of birth (date formats vary; the label anchors the match).
= '(?i)\b(dob|date[ _-]?of[ _-]?birth)\b[ :=#]*\d{1,4}[-/.]\d{1,2}[-/.]\d{1,4}'
# US National Provider Identifier as a labeled field.
= '(?i)\bnpi\b[ :=#]*\d{10}\b'
[]
# Inbound DLP (GL #675): PHI is redacted from tool output before it reaches the
# model (HIPAA minimum-necessary); prompt-injection in retrieved content is an
# attack on integrity and is refused.
= "redact"
= "block"
[]
# Output DLP (GL #676): block agent writes/actions that carry detected secrets
# or PHI, and bound the write/action rate.
= true
= 120