orfeas_lyra 0.6.0

data/app/views/lyra/flow/timeline.html.erb

@@ -0,0 +1,260 @@
+<style>
+  .lyra-timeline { font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, sans-serif; max-width: 1200px; margin: 0 auto; padding: 20px; }
+  .lyra-timeline h1 { color: #1a1a2e; border-bottom: 2px solid #4a4e69; padding-bottom: 10px; }
+  .lyra-timeline h2 { color: #4a4e69; margin-top: 30px; }
+  .lyra-timeline .back-link { display: inline-block; margin-bottom: 20px; color: #4a4e69; text-decoration: none; }
+  .lyra-timeline .back-link:hover { text-decoration: underline; }
+  .lyra-timeline .summary-cards { display: grid; grid-template-columns: repeat(auto-fill, minmax(180px, 1fr)); gap: 15px; margin: 20px 0; }
+  .lyra-timeline .summary-card { background: #fff; border: 1px solid #dee2e6; border-radius: 8px; padding: 15px; text-align: center; box-shadow: 0 2px 4px rgba(0,0,0,0.05); }
+  .lyra-timeline .summary-card .value { font-size: 28px; font-weight: 700; color: #1a1a2e; }
+  .lyra-timeline .summary-card .label { color: #6c757d; font-size: 13px; margin-top: 5px; }
+  .lyra-timeline .stats-grid { display: grid; grid-template-columns: repeat(auto-fill, minmax(300px, 1fr)); gap: 20px; margin-top: 20px; }
+  .lyra-timeline .stats-card { background: #fff; border: 1px solid #dee2e6; border-radius: 8px; padding: 20px; }
+  .lyra-timeline .stats-card h3 { margin: 0 0 15px 0; color: #1a1a2e; font-size: 16px; }
+  .lyra-timeline .stats-list { list-style: none; padding: 0; margin: 0; }
+  .lyra-timeline .stats-list li { display: flex; justify-content: space-between; padding: 8px 0; border-bottom: 1px solid #eee; }
+  .lyra-timeline .stats-list li:last-child { border-bottom: none; }
+  .lyra-timeline .stats-list .stat-name { color: #495057; }
+  .lyra-timeline .stats-list .stat-value { font-weight: 600; color: #1a1a2e; }
+  .lyra-timeline .events-list { margin-top: 20px; }
+  .lyra-timeline .event-card { background: #fff; border: 1px solid #dee2e6; border-radius: 8px; margin-bottom: 12px; overflow: hidden; }
+  .lyra-timeline .event-header { background: #f8f9fa; padding: 12px 15px; display: flex; justify-content: space-between; align-items: center; border-bottom: 1px solid #dee2e6; }
+  .lyra-timeline .event-header .operation { padding: 4px 10px; border-radius: 4px; font-size: 12px; font-weight: 600; text-transform: uppercase; }
+  .lyra-timeline .operation-created { background: #d4edda; color: #155724; }
+  .lyra-timeline .operation-updated { background: #fff3cd; color: #856404; }
+  .lyra-timeline .operation-destroyed { background: #f8d7da; color: #721c24; }
+  .lyra-timeline .event-header .timestamp { color: #6c757d; font-size: 13px; }
+  .lyra-timeline .event-body { padding: 15px; }
+  .lyra-timeline .event-meta { display: flex; flex-wrap: wrap; gap: 15px; margin-bottom: 10px; }
+  .lyra-timeline .event-meta-item { font-size: 13px; }
+  .lyra-timeline .event-meta-item .label { color: #6c757d; }
+  .lyra-timeline .event-meta-item .value { color: #1a1a2e; font-weight: 500; }
+  .lyra-timeline .changes-table { width: 100%; border-collapse: collapse; font-size: 13px; margin-top: 10px; }
+  .lyra-timeline .changes-table th { text-align: left; padding: 8px; background: #f8f9fa; border-bottom: 1px solid #dee2e6; }
+  .lyra-timeline .changes-table td { padding: 8px; border-bottom: 1px solid #eee; }
+  .lyra-timeline .pii-badge { background: #f8d7da; color: #721c24; padding: 2px 6px; border-radius: 3px; font-size: 11px; font-weight: 600; margin-left: 5px; }
+  .lyra-timeline .empty-state { text-align: center; padding: 40px; color: #6c757d; background: #fff; border: 1px solid #dee2e6; border-radius: 8px; }
+  .lyra-timeline .correlation-badge { background: #e9ecef; color: #495057; padding: 2px 8px; border-radius: 4px; font-size: 11px; font-family: monospace; }
+  .lyra-timeline .filter-bar { background: #fff; border: 1px solid #dee2e6; border-radius: 8px; padding: 15px 20px; margin-bottom: 20px; display: flex; gap: 15px; align-items: center; flex-wrap: wrap; }
+  .lyra-timeline .filter-bar label { font-size: 13px; color: #495057; font-weight: 500; }
+  .lyra-timeline .filter-bar select { padding: 6px 12px; border: 1px solid #dee2e6; border-radius: 4px; font-size: 13px; background: #fff; min-width: 150px; }
+  .lyra-timeline .filter-bar button { padding: 6px 16px; background: #4a4e69; color: #fff; border: none; border-radius: 4px; font-size: 13px; cursor: pointer; }
+  .lyra-timeline .filter-bar button:hover { background: #22223b; }
+  .lyra-timeline .filter-bar .clear-link { color: #6c757d; font-size: 13px; text-decoration: none; }
+  .lyra-timeline .filter-bar .clear-link:hover { text-decoration: underline; }
+  .lyra-timeline .filter-active { background: #fff3cd; border-color: #ffc107; }
+  .lyra-timeline .filter-count { font-size: 13px; color: #6c757d; }
+  .lyra-timeline .expandable { position: relative; }
+  .lyra-timeline .expandable .truncated { display: inline; }
+  .lyra-timeline .expandable .full { display: none; word-break: break-all; }
+  .lyra-timeline .expandable.expanded .truncated { display: none; }
+  .lyra-timeline .expandable.expanded .full { display: inline; }
+  .lyra-timeline .expand-link { color: #4a4e69; font-size: 11px; cursor: pointer; margin-left: 4px; text-decoration: underline; }
+  .lyra-timeline .expand-link:hover { color: #22223b; }
+</style>
+
+<script>
+  function toggleExpand(el) {
+    var container = el.closest('.expandable');
+    container.classList.toggle('expanded');
+    el.textContent = container.classList.contains('expanded') ? 'less' : 'more';
+  }
+</script>
+
+<div class="lyra-timeline">
+  <%= link_to "&larr; Back to Dashboard".html_safe, dashboard_path, class: "back-link" %>
+
+  <h1>Event Timeline</h1>
+  <p style="color: #6c757d; margin-bottom: 20px;">
+    Chronological view of all events captured by Lyra. Each event represents a CRUD operation
+    on a monitored model, including field changes and metadata like correlation IDs
+    for tracing related operations.
+  </p>
+
+  <h2 style="margin-top: 0;">Overview</h2>
+  <p style="color: #6c757d; font-size: 13px; margin-bottom: 15px;">
+    Summary of event activity. Each CRUD operation (Create, Update, Delete) on monitored models generates an event.
+  </p>
+  <div class="summary-cards">
+    <div class="summary-card">
+      <div class="value"><%= @statistics[:total_events] || @timeline.count %></div>
+      <div class="label">Total Events</div>
+    </div>
+    <% (@statistics[:operations] || {}).each do |op, count| %>
+      <div class="summary-card">
+        <div class="value"><%= count %></div>
+        <div class="label"><%= op.to_s.titleize %></div>
+      </div>
+    <% end %>
+    <div class="summary-card">
+      <div class="value"><%= @statistics[:users] || 0 %></div>
+      <div class="label">Unique Users</div>
+    </div>
+  </div>
+
+  <h2>Statistics</h2>
+  <p style="color: #6c757d; font-size: 13px; margin-bottom: 15px;">
+    Breakdown by model and privacy impact. Use this to identify which models are most active and which contain sensitive data.
+  </p>
+  <div class="stats-grid">
+    <% if (@statistics[:models] || {}).any? %>
+      <div class="stats-card">
+        <h3>Events by Model</h3>
+        <ul class="stats-list">
+          <% (@statistics[:models] || {}).each do |model, count| %>
+            <li>
+              <span class="stat-name"><%= model %></span>
+              <span class="stat-value"><%= count %></span>
+            </li>
+          <% end %>
+        </ul>
+      </div>
+    <% end %>
+
+    <% if @privacy_impact[:pii_categories]&.any? %>
+      <div class="stats-card">
+        <h3>Privacy Impact</h3>
+        <ul class="stats-list">
+          <li>
+            <span class="stat-name">PII Categories</span>
+            <span class="stat-value"><%= @privacy_impact[:pii_categories].count %></span>
+          </li>
+          <li>
+            <span class="stat-name">Total PII Fields</span>
+            <span class="stat-value"><%= @privacy_impact[:total_pii_fields] || 0 %></span>
+          </li>
+          <li>
+            <span class="stat-name">Sensitive Data</span>
+            <span class="stat-value"><%= @privacy_impact[:sensitive_data_present] ? 'Yes' : 'No' %></span>
+          </li>
+        </ul>
+      </div>
+    <% end %>
+  </div>
+
+  <h2>Recent Events</h2>
+  <p style="color: #6c757d; font-size: 13px; margin-bottom: 15px;">
+    Individual events with full change details. Use filters to narrow down by model or operation type.
+    <% if pam_dsl_available? %>
+      Events with <span class="pii-badge" style="display: inline;">PII</span> badge contain personally identifiable information.
+    <% end %>
+  </p>
+
+  <% has_filters = @filter_model.present? || @filter_operation.present? %>
+  <div class="filter-bar <%= 'filter-active' if has_filters %>">
+    <%= form_tag(timeline_path, method: :get) do %>
+      <label>Model:</label>
+      <%= select_tag :model,
+            options_for_select([['All Models', '']] + @available_models.map { |m| [m, m] }, @filter_model),
+            onchange: 'this.form.submit()' %>
+
+      <label>Operation:</label>
+      <%= select_tag :operation,
+            options_for_select([['All Operations', '']] + @available_operations.map { |o| [o.to_s.titleize, o] }, @filter_operation),
+            onchange: 'this.form.submit()' %>
+
+      <% if has_filters %>
+        <%= link_to 'Clear filters', timeline_path, class: 'clear-link' %>
+        <span class="filter-count">Showing <%= @timeline.count %> events</span>
+      <% end %>
+    <% end %>
+  </div>
+
+  <% if @timeline.any? %>
+    <div class="events-list">
+      <% @timeline.first(50).each do |event| %>
+        <div class="event-card">
+          <div class="event-header">
+            <div>
+              <span class="operation operation-<%= event[:operation] %>"><%= event[:operation] %></span>
+              <strong style="margin-left: 10px;"><%= event[:model_class] %>#<%= event[:model_id] %></strong>
+              <% if event[:pii_fields]&.any? %>
+                <span class="pii-badge">PII</span>
+              <% end %>
+            </div>
+            <span class="timestamp"><%= event[:timestamp] %></span>
+          </div>
+          <div class="event-body">
+            <div class="event-meta">
+              <div class="event-meta-item">
+                <span class="label">Event ID: </span>
+                <span class="value" style="font-family: monospace; font-size: 11px;"><%= event[:event_id] %></span>
+              </div>
+              <% if event[:correlation_id] %>
+                <div class="event-meta-item">
+                  <span class="label">Correlation: </span>
+                  <span class="correlation-badge"><%= event[:correlation_id] %></span>
+                </div>
+              <% end %>
+              <% if event[:user_action] %>
+                <div class="event-meta-item">
+                  <span class="label">Action: </span>
+                  <span class="value"><%= event[:user_action] %></span>
+                </div>
+              <% end %>
+            </div>
+
+            <% if event[:changes].present? && event[:changes].any? %>
+              <table class="changes-table">
+                <thead>
+                  <tr>
+                    <th>Field</th>
+                    <th>Old Value</th>
+                    <th>New Value</th>
+                  </tr>
+                </thead>
+                <tbody>
+                  <% event[:changes].each do |field, (old_val, new_val)| %>
+                    <tr>
+                      <td>
+                        <strong><%= field %></strong>
+                        <% if event[:pii_fields]&.key?(field.to_sym) || event[:pii_fields]&.key?(field.to_s) %>
+                          <% pii_info = event[:pii_fields][field.to_sym] || event[:pii_fields][field.to_s] %>
+                          <span class="pii-badge" title="<%= pii_info[:type].to_s.titleize %> - PII"><%= pii_info[:type] %></span>
+                        <% end %>
+                      </td>
+                      <td>
+                        <% old_str = old_val.to_s %>
+                        <% if old_str.length > 40 %>
+                          <span class="expandable">
+                            <span class="truncated"><%= truncate(old_str, length: 40) %></span>
+                            <span class="full"><%= old_str %></span>
+                            <a class="expand-link" onclick="toggleExpand(this)">more</a>
+                          </span>
+                        <% else %>
+                          <%= old_str %>
+                        <% end %>
+                      </td>
+                      <td>
+                        <% new_str = new_val.to_s %>
+                        <% if new_str.length > 40 %>
+                          <span class="expandable">
+                            <span class="truncated"><%= truncate(new_str, length: 40) %></span>
+                            <span class="full"><%= new_str %></span>
+                            <a class="expand-link" onclick="toggleExpand(this)">more</a>
+                          </span>
+                        <% else %>
+                          <%= new_str %>
+                        <% end %>
+                      </td>
+                    </tr>
+                  <% end %>
+                </tbody>
+              </table>
+            <% end %>
+          </div>
+        </div>
+      <% end %>
+    </div>
+    <% if @timeline.count > 50 %>
+      <p style="text-align: center; color: #6c757d; margin-top: 20px;">
+        Showing 50 of <%= @timeline.count %> events. Use the JSON API for full data.
+      </p>
+    <% end %>
+  <% else %>
+    <div class="empty-state">
+      <p>No events found in the timeline.</p>
+      <p>Events will appear here as CRUD operations are performed on monitored models.</p>
+    </div>
+  <% end %>
+</div>

data/app/views/lyra/privacy/pii_detection.html.erb

@@ -0,0 +1,148 @@
+<style>
+  .lyra-pii-detection { font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, sans-serif; max-width: 1200px; margin: 0 auto; padding: 20px; }
+  .lyra-pii-detection h1 { color: #1a1a2e; border-bottom: 2px solid #4a4e69; padding-bottom: 10px; }
+  .lyra-pii-detection h2 { color: #4a4e69; margin-top: 30px; }
+  .lyra-pii-detection .summary-cards { display: grid; grid-template-columns: repeat(auto-fill, minmax(200px, 1fr)); gap: 20px; margin: 20px 0; }
+  .lyra-pii-detection .summary-card { background: #fff; border: 1px solid #dee2e6; border-radius: 8px; padding: 20px; text-align: center; box-shadow: 0 2px 4px rgba(0,0,0,0.05); }
+  .lyra-pii-detection .summary-card .value { font-size: 36px; font-weight: 700; color: #1a1a2e; }
+  .lyra-pii-detection .summary-card .label { color: #6c757d; font-size: 14px; margin-top: 5px; }
+  .lyra-pii-detection .pii-category { background: #fff; border: 1px solid #dee2e6; border-radius: 8px; margin-bottom: 15px; overflow: hidden; }
+  .lyra-pii-detection .pii-category-header { background: #f8f9fa; padding: 15px 20px; border-bottom: 1px solid #dee2e6; display: flex; justify-content: space-between; align-items: center; }
+  .lyra-pii-detection .pii-category-header h3 { margin: 0; color: #1a1a2e; font-size: 16px; }
+  .lyra-pii-detection .pii-category-header .count { background: #4a4e69; color: #fff; padding: 4px 12px; border-radius: 12px; font-size: 12px; }
+  .lyra-pii-detection .pii-fields { padding: 15px 20px; }
+  .lyra-pii-detection .pii-field { display: flex; align-items: center; padding: 10px 0; border-bottom: 1px solid #eee; flex-wrap: wrap; gap: 8px; }
+  .lyra-pii-detection .pii-field:last-child { border-bottom: none; }
+  .lyra-pii-detection .field-name { font-weight: 500; color: #1a1a2e; min-width: 150px; }
+  .lyra-pii-detection .field-model { background: #e9ecef; color: #495057; padding: 2px 8px; border-radius: 4px; font-size: 12px; }
+  .lyra-pii-detection .field-occurrences { color: #6c757d; font-size: 13px; margin-left: auto; }
+  .lyra-pii-detection .badge-sensitive { background: #f8d7da; color: #721c24; }
+  .lyra-pii-detection .badge-contact { background: #cce5ff; color: #004085; }
+  .lyra-pii-detection .badge-identifier { background: #fff3cd; color: #856404; }
+  .lyra-pii-detection .back-link { display: inline-block; margin-bottom: 20px; color: #4a4e69; text-decoration: none; }
+  .lyra-pii-detection .back-link:hover { text-decoration: underline; }
+  .lyra-pii-detection .empty-state { text-align: center; padding: 40px; color: #6c757d; }
+  .lyra-pii-detection .category-badges { display: flex; gap: 8px; flex-wrap: wrap; margin-top: 15px; }
+  .lyra-pii-detection .category-badge { padding: 6px 12px; border-radius: 6px; font-size: 13px; font-weight: 500; }
+  .lyra-pii-detection .sample-value { font-family: monospace; background: #f8f9fa; padding: 2px 6px; border-radius: 3px; font-size: 12px; color: #495057; }
+  .lyra-pii-detection .expandable { position: relative; }
+  .lyra-pii-detection .expandable .truncated { display: inline; }
+  .lyra-pii-detection .expandable .full { display: none; word-break: break-all; }
+  .lyra-pii-detection .expandable.expanded .truncated { display: none; }
+  .lyra-pii-detection .expandable.expanded .full { display: inline; }
+  .lyra-pii-detection .expand-link { color: #4a4e69; font-size: 11px; cursor: pointer; margin-left: 4px; text-decoration: underline; }
+  .lyra-pii-detection .expand-link:hover { color: #22223b; }
+</style>
+
+<script>
+  function toggleExpand(el) {
+    var container = el.closest('.expandable');
+    container.classList.toggle('expanded');
+    el.textContent = container.classList.contains('expanded') ? 'less' : 'more';
+  }
+</script>
+
+<div class="lyra-pii-detection">
+  <%= link_to "&larr; Back to Dashboard".html_safe, dashboard_path, class: "back-link" %>
+
+  <h1>PII Detection</h1>
+  <p style="color: #6c757d; margin-bottom: 20px;">
+    Automatically detects Personally Identifiable Information (PII) in your event store.
+    Fields like email, phone, address, and financial data are identified and categorized
+    for GDPR compliance tracking.
+  </p>
+
+  <h2 style="margin-top: 0;">Overview</h2>
+  <p class="section-desc" style="color: #6c757d; font-size: 13px; margin-bottom: 15px;">
+    Key metrics about PII in your event store. Higher numbers may indicate increased GDPR compliance requirements.
+  </p>
+  <div class="summary-cards">
+    <div class="summary-card">
+      <div class="value"><%= @total_events %></div>
+      <div class="label">Total Events</div>
+    </div>
+    <div class="summary-card">
+      <div class="value"><%= @events_with_pii %></div>
+      <div class="label">Events with PII</div>
+    </div>
+    <div class="summary-card">
+      <div class="value"><%= @pii_categories.count %></div>
+      <div class="label">PII Categories</div>
+    </div>
+    <div class="summary-card">
+      <div class="value"><%= @pii_inventory.values.sum { |v| v.is_a?(Array) ? v.count : 0 } %></div>
+      <div class="label">Total PII Occurrences</div>
+    </div>
+  </div>
+
+  <% if @sensitive_pii.any? || @contact_pii.any? %>
+    <h2>PII Summary</h2>
+    <p class="section-desc" style="color: #6c757d; font-size: 13px; margin-bottom: 15px;">
+      Categories of PII found. <span style="background: #f8d7da; padding: 2px 6px; border-radius: 3px;">Red</span> indicates sensitive data requiring extra protection.
+      <span style="background: #cce5ff; padding: 2px 6px; border-radius: 3px;">Blue</span> indicates contact information.
+    </p>
+    <div class="category-badges">
+      <% @sensitive_pii.each do |cat| %>
+        <span class="category-badge badge-sensitive"><%= cat.to_s.titleize %></span>
+      <% end %>
+      <% @contact_pii.each do |cat| %>
+        <span class="category-badge badge-contact"><%= cat.to_s.titleize %></span>
+      <% end %>
+    </div>
+  <% end %>
+
+  <h2>PII Inventory by Category</h2>
+  <p class="section-desc" style="color: #6c757d; font-size: 13px; margin-bottom: 15px;">
+    Detailed breakdown of each PII field detected, grouped by category. Shows the field name, model, sample value, and occurrence count.
+  </p>
+
+  <% if @pii_inventory.any? %>
+    <% @pii_inventory.each do |category, occurrences| %>
+      <% next unless occurrences.is_a?(Array) && occurrences.any? %>
+      <%
+        # Group by field and model_class to show unique field/model combinations
+        grouped = occurrences.group_by { |o| [o[:field] || o['field'], o[:model_class] || o['model_class']] }
+        badge_class = case category
+          when :ssn, :credit_card, :health, :biometric then 'badge-sensitive'
+          when :email, :phone, :address then 'badge-contact'
+          else 'badge-identifier'
+        end
+      %>
+      <div class="pii-category">
+        <div class="pii-category-header">
+          <h3>
+            <span class="field-model <%= badge_class %>"><%= category.to_s.titleize %></span>
+          </h3>
+          <span class="count"><%= occurrences.count %> occurrence<%= occurrences.count != 1 ? 's' : '' %></span>
+        </div>
+        <div class="pii-fields">
+          <% grouped.each do |(field, model_class), items| %>
+            <div class="pii-field">
+              <span class="field-name"><%= field %></span>
+              <span class="field-model"><%= model_class || 'Unknown' %></span>
+              <% sample = items.first[:value] || items.first['value'] %>
+              <% if sample.present? %>
+                <% sample_str = sample.to_s %>
+                <% if sample_str.length > 30 %>
+                  <span class="sample-value expandable">
+                    <span class="truncated"><%= truncate(sample_str, length: 30) %></span>
+                    <span class="full"><%= sample_str %></span>
+                    <a class="expand-link" onclick="toggleExpand(this)">more</a>
+                  </span>
+                <% else %>
+                  <span class="sample-value"><%= sample_str %></span>
+                <% end %>
+              <% end %>
+              <span class="field-occurrences"><%= items.count %> occurrence<%= items.count != 1 ? 's' : '' %></span>
+            </div>
+          <% end %>
+        </div>
+      </div>
+    <% end %>
+  <% else %>
+    <div class="empty-state">
+      <p>No PII detected in the event store.</p>
+      <p>This could mean your data doesn't contain personal information, or the PII detection patterns may need adjustment.</p>
+    </div>
+  <% end %>
+</div>

data/app/views/lyra/privacy/policy.html.erb

@@ -0,0 +1,188 @@
+<style>
+  .lyra-policy { font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, sans-serif; max-width: 1200px; margin: 0 auto; padding: 20px; }
+  .lyra-policy h1 { color: #1a1a2e; border-bottom: 2px solid #4a4e69; padding-bottom: 10px; }
+  .lyra-policy h2 { color: #4a4e69; margin-top: 30px; }
+  .lyra-policy h3 { color: #495057; margin-top: 20px; font-size: 16px; }
+  .lyra-policy .back-link { display: inline-block; margin-bottom: 20px; color: #4a4e69; text-decoration: none; }
+  .lyra-policy .back-link:hover { text-decoration: underline; }
+  .lyra-policy .policy-card { background: #fff; border: 1px solid #dee2e6; border-radius: 8px; margin-bottom: 20px; overflow: hidden; }
+  .lyra-policy .policy-header { background: #f8f9fa; padding: 15px 20px; border-bottom: 1px solid #dee2e6; display: flex; justify-content: space-between; align-items: center; }
+  .lyra-policy .policy-header h3 { margin: 0; font-size: 18px; }
+  .lyra-policy .policy-header .badge { padding: 4px 12px; border-radius: 4px; font-size: 12px; font-weight: 600; }
+  .lyra-policy .policy-header .badge-default { background: #d4edda; color: #155724; }
+  .lyra-policy .policy-body { padding: 20px; }
+  .lyra-policy .section { margin-bottom: 25px; }
+  .lyra-policy .section:last-child { margin-bottom: 0; }
+  .lyra-policy .field-grid { display: grid; grid-template-columns: repeat(auto-fill, minmax(280px, 1fr)); gap: 15px; }
+  .lyra-policy .field-item { background: #f8f9fa; border: 1px solid #e9ecef; border-radius: 6px; padding: 12px 15px; }
+  .lyra-policy .field-item .field-name { font-weight: 600; color: #1a1a2e; margin-bottom: 5px; }
+  .lyra-policy .field-item .field-meta { display: flex; gap: 8px; flex-wrap: wrap; }
+  .lyra-policy .field-item .field-meta span { font-size: 11px; padding: 2px 8px; border-radius: 3px; }
+  .lyra-policy .type-badge { background: #cce5ff; color: #004085; }
+  .lyra-policy .sensitivity-internal { background: #d4edda; color: #155724; }
+  .lyra-policy .sensitivity-confidential { background: #fff3cd; color: #856404; }
+  .lyra-policy .sensitivity-restricted { background: #f8d7da; color: #721c24; }
+  .lyra-policy .purpose-item { background: #fff; border: 1px solid #e9ecef; border-radius: 6px; padding: 15px; margin-bottom: 10px; }
+  .lyra-policy .purpose-item h4 { margin: 0 0 8px 0; color: #1a1a2e; font-size: 15px; }
+  .lyra-policy .purpose-item p { margin: 0 0 10px 0; color: #6c757d; font-size: 13px; }
+  .lyra-policy .purpose-item .legal-basis { display: inline-block; background: #e9ecef; padding: 3px 10px; border-radius: 4px; font-size: 12px; color: #495057; }
+  .lyra-policy .purpose-item .required-fields { margin-top: 10px; font-size: 12px; color: #6c757d; }
+  .lyra-policy .retention-table { width: 100%; border-collapse: collapse; }
+  .lyra-policy .retention-table th { background: #f8f9fa; padding: 10px 15px; text-align: left; border-bottom: 1px solid #dee2e6; font-weight: 600; }
+  .lyra-policy .retention-table td { padding: 10px 15px; border-bottom: 1px solid #eee; }
+  .lyra-policy .retention-table tr:last-child td { border-bottom: none; }
+  .lyra-policy .empty-state { text-align: center; padding: 40px; color: #6c757d; background: #f8f9fa; border: 1px solid #dee2e6; border-radius: 8px; }
+  .lyra-policy .summary-cards { display: grid; grid-template-columns: repeat(auto-fill, minmax(150px, 1fr)); gap: 15px; margin: 20px 0; }
+  .lyra-policy .summary-card { background: #fff; border: 1px solid #dee2e6; border-radius: 8px; padding: 15px; text-align: center; }
+  .lyra-policy .summary-card .value { font-size: 28px; font-weight: 700; color: #1a1a2e; }
+  .lyra-policy .summary-card .label { color: #6c757d; font-size: 12px; margin-top: 5px; }
+</style>
+
+<div class="lyra-policy">
+  <%= link_to "&larr; Back to Dashboard".html_safe, dashboard_path, class: "back-link" %>
+
+  <h1>Privacy Policy (PAM DSL)</h1>
+  <p style="color: #6c757d; margin-bottom: 20px;">
+    Privacy Access Management policies defined using PAM DSL. These policies control data access,
+    define PII field types, processing purposes, and data retention rules.
+  </p>
+
+  <% if !@pam_dsl_available %>
+    <div class="empty-state" style="background: #fff3cd; border-color: #ffc107;">
+      <h3>PAM DSL Not Available</h3>
+      <p>Privacy policy features require PAM DSL to be installed.</p>
+      <p style="margin-top: 15px; font-size: 13px;">
+        Add <code>gem 'pam_dsl'</code> to your Gemfile and run <code>bundle install</code>.
+      </p>
+    </div>
+  <% elsif @policies.any? %>
+    <h2 style="margin-top: 0;">Registered Policies</h2>
+    <p style="color: #6c757d; font-size: 13px; margin-bottom: 15px;">
+      Overview of all privacy policies defined in the application.
+    </p>
+
+    <% @policies.each do |name, policy| %>
+      <div class="policy-card">
+        <div class="policy-header">
+          <h3><%= name.to_s.titleize %></h3>
+          <% if @default_policy_name&.to_sym == name %>
+            <span class="badge badge-default">Default Policy</span>
+          <% end %>
+        </div>
+        <div class="policy-body">
+          <% policy_data = policy.respond_to?(:to_h) ? policy.to_h : {} %>
+
+          <div class="summary-cards">
+            <div class="summary-card">
+              <div class="value"><%= policy.respond_to?(:fields) ? policy.fields.count : 0 %></div>
+              <div class="label">PII Fields</div>
+            </div>
+            <div class="summary-card">
+              <div class="value"><%= policy.respond_to?(:purposes) ? policy.purposes.count : 0 %></div>
+              <div class="label">Purposes</div>
+            </div>
+            <div class="summary-card">
+              <div class="value"><%= policy.respond_to?(:sensitive_fields) ? policy.sensitive_fields.count : 0 %></div>
+              <div class="label">Sensitive Fields</div>
+            </div>
+            <div class="summary-card">
+              <div class="value"><%= policy.respond_to?(:restricted_fields) ? policy.restricted_fields.count : 0 %></div>
+              <div class="label">Restricted Fields</div>
+            </div>
+          </div>
+
+          <% if policy.respond_to?(:fields) && policy.fields.any? %>
+            <div class="section">
+              <h3>PII Fields</h3>
+              <p style="color: #6c757d; font-size: 13px; margin-bottom: 15px;">
+                Fields containing personally identifiable information with their type and sensitivity level.
+              </p>
+              <div class="field-grid">
+                <% policy.fields.each do |field_name, field| %>
+                  <div class="field-item">
+                    <div class="field-name"><%= field_name %></div>
+                    <div class="field-meta">
+                      <span class="type-badge"><%= field.respond_to?(:type) ? field.type : 'unknown' %></span>
+                      <% sensitivity = field.respond_to?(:sensitivity) ? field.sensitivity : :internal %>
+                      <span class="sensitivity-<%= sensitivity %>"><%= sensitivity.to_s.titleize %></span>
+                    </div>
+                  </div>
+                <% end %>
+              </div>
+            </div>
+          <% end %>
+
+          <% if policy.respond_to?(:purposes) && policy.purposes.any? %>
+            <div class="section">
+              <h3>Processing Purposes</h3>
+              <p style="color: #6c757d; font-size: 13px; margin-bottom: 15px;">
+                Legal bases and purposes for processing personal data under GDPR.
+              </p>
+              <% policy.purposes.each do |purpose_name, purpose| %>
+                <div class="purpose-item">
+                  <h4><%= purpose_name.to_s.titleize %></h4>
+                  <% if purpose.respond_to?(:description) && purpose.description.present? %>
+                    <p><%= purpose.description %></p>
+                  <% end %>
+                  <% if purpose.respond_to?(:legal_basis) %>
+                    <span class="legal-basis">Legal Basis: <%= purpose.legal_basis.to_s.titleize %></span>
+                  <% end %>
+                  <% if purpose.respond_to?(:required_fields) && purpose.required_fields.any? %>
+                    <div class="required-fields">
+                      <strong>Required fields:</strong> <%= purpose.required_fields.join(', ') %>
+                    </div>
+                  <% end %>
+                </div>
+              <% end %>
+            </div>
+          <% end %>
+
+          <% if policy.respond_to?(:retention_policy) %>
+            <% retention = policy.retention_policy %>
+            <% if retention.respond_to?(:rules) && retention.rules.any? %>
+              <div class="section">
+                <h3>Data Retention</h3>
+                <p style="color: #6c757d; font-size: 13px; margin-bottom: 15px;">
+                  How long personal data is retained before deletion or anonymization.
+                </p>
+                <table class="retention-table">
+                  <thead>
+                    <tr>
+                      <th>Model</th>
+                      <th>Retention Period</th>
+                      <th>On Expiry</th>
+                    </tr>
+                  </thead>
+                  <tbody>
+                    <% if retention.respond_to?(:default_duration) && retention.default_duration %>
+                      <tr>
+                        <td><em>Default</em></td>
+                        <td><%= retention.default_duration.inspect %></td>
+                        <td>Delete</td>
+                      </tr>
+                    <% end %>
+                    <% retention.rules.each do |rule| %>
+                      <tr>
+                        <td><%= rule.respond_to?(:model_class) ? rule.model_class : 'Unknown' %></td>
+                        <td><%= rule.respond_to?(:duration) ? rule.duration.inspect : 'N/A' %></td>
+                        <td><%= rule.respond_to?(:deletion_strategy) ? rule.deletion_strategy.to_s.titleize : 'Delete' %></td>
+                      </tr>
+                    <% end %>
+                  </tbody>
+                </table>
+              </div>
+            <% end %>
+          <% end %>
+        </div>
+      </div>
+    <% end %>
+  <% else %>
+    <div class="empty-state">
+      <h3>No Privacy Policies Defined</h3>
+      <p>Use PAM DSL to define privacy policies for your application.</p>
+      <p style="margin-top: 15px; font-size: 13px;">
+        Add <code>PamDsl.define_policy :my_policy do ... end</code> in an initializer.
+      </p>
+    </div>
+  <% end %>
+</div>