@highflame/policy 2.2.3 → 2.2.5

package/_schemas/sentry/templates/defaults/pii.cedar

@@ -1,158 +1,164 @@
 // =============================================================================
-// PII Detection (Default)
+// Structural PII (Tier 1)
 // =============================================================================
-// Blocks personally identifiable information across messages and file uploads
-// using multi-layered detection: detector boolean, granular PII type
-// matching, ML classifier confidence, threat category aggregation, and bulk
-// exposure thresholds.
+// Blocks high-sensitivity identifiers that have a deterministic structure (SSNs, credit cards, IBANs, API keys) using fast regex pattern matching — high precision, low latency, few false positives. One forbid rule per identifier group.
 //
-// Paste-targeted PII rules live in clipboard.cedar.
+// Sensitivity tiers and the structural (regex) / contextual (model) type
+// vocabulary are defined canonically in schemas/_shared/pii_taxonomy.json and
+// enforced by tools/lint-templates.
 //
 // Context keys consumed:
-//   - pii_detected:      Bool
-//   - pii_types:         Set<String>
-//   - pii_count:         Long
-//   - pii_score:    Long (0-100)
-//   - detected_threats:  Set<String>
-//   - threat_categories: Set<String>
-//
-// Compliance:
-//   - PCI DSS 3.4/4.1, GDPR Art. 32, HIPAA §164.312, CCPA §1798.150
+//   - pii_types: Set<String>  (union of structural lowercase + contextual uppercase types)
 //
 // Category:  privacy
 // Namespace: Sentry
 // =============================================================================
 
-// ---------------------------------------------------------------------------
-// Section 1: Primary PII detection
-// ---------------------------------------------------------------------------
-
-@id("privacy.block-pii")
-@name("Block messages and uploads with PII")
-@description("Blocks process_prompt and upload_file when pii_detected is true.")
-@severity("critical")
-@tags("category:privacy,threat:pii,detection:rule,compliance:gdpr,owasp:llm06")
-@reject_message("Content blocked: personally identifiable information detected — remove before sending to AI services.")
-forbid (
-    principal,
-    action in [Sentry::Action::"process_prompt", Sentry::Action::"upload_file"],
-    resource
-)
-when {
-    context has pii_detected && context.pii_detected == true
-};
-
-// ---------------------------------------------------------------------------
-// Section 2: Granular PII type blocking
-// ---------------------------------------------------------------------------
-
-@id("privacy.block-credit-card")
-@name("Block credit card numbers")
-@description("Blocks process_prompt and upload_file when pii_types or detected_threats contains \"credit_card\".")
-@severity("critical")
-@tags("category:privacy,threat:pii,detection:pattern,compliance:pci-dss")
-@reject_message("Content blocked: credit card number patterns detected — PCI DSS prohibits raw PAN handling.")
+@id("privacy.block-pii-national-id")
+@name("Block national ID numbers (structural)")
+@description("Blocks prompts, pastes, and file uploads that contain a national ID (SSN, passport, or driver's license).")
+@severity("high")
+@tags("category:privacy,threat:pii,detection:pattern,owasp:llm06")
+@reject_message("Content blocked: national identifier (SSN, passport, or driver's license) patterns detected.")
 forbid (
     principal,
-    action in [Sentry::Action::"process_prompt", Sentry::Action::"upload_file"],
+    action in [Sentry::Action::"process_prompt", Sentry::Action::"paste_content", Sentry::Action::"upload_file"],
     resource
 )
 when {
-    (context has pii_types && context.pii_types.contains("credit_card")) ||
-    (context has detected_threats && context.detected_threats.contains("credit_card"))
+    context has pii_types &&
+    (
+        context.pii_types.contains("ssn") ||
+        context.pii_types.contains("passport") ||
+        context.pii_types.contains("national_id") ||
+        context.pii_types.contains("drivers_license")
+    )
 };
 
-@id("privacy.block-ssn")
-@name("Block Social Security Numbers")
-@description("Blocks process_prompt and upload_file when pii_types or detected_threats contains \"ssn\".")
+@id("privacy.block-pii-credit-card")
+@name("Block credit card numbers (structural)")
+@description("Blocks prompts, pastes, and file uploads that contain a credit card number.")
 @severity("critical")
-@tags("category:privacy,threat:pii,detection:pattern,compliance:gdpr")
-@reject_message("Content blocked: Social Security Number patterns detected.")
+@tags("category:privacy,threat:pii,detection:pattern,compliance:pci-dss,owasp:llm06")
+@reject_message("Content blocked: credit card number patterns detected.")
 forbid (
     principal,
-    action in [Sentry::Action::"process_prompt", Sentry::Action::"upload_file"],
+    action in [Sentry::Action::"process_prompt", Sentry::Action::"paste_content", Sentry::Action::"upload_file"],
     resource
 )
 when {
-    (context has pii_types && context.pii_types.contains("ssn")) ||
-    (context has detected_threats && context.detected_threats.contains("ssn"))
+    context has pii_types && context.pii_types.contains("credit_card")
 };
 
-@id("privacy.block-passport")
-@name("Block passport numbers")
-@description("Blocks process_prompt and upload_file when pii_types contains \"passport\".")
+@id("privacy.block-pii-bank-account")
+@name("Block bank account numbers (structural)")
+@description("Blocks prompts, pastes, and file uploads that contain a bank account number (IBAN, SWIFT/BIC, or routing number).")
 @severity("critical")
-@tags("category:privacy,threat:pii,detection:pattern,compliance:gdpr")
-@reject_message("Content blocked: passport number patterns detected.")
+@tags("category:privacy,threat:pii,detection:pattern,owasp:llm06")
+@reject_message("Content blocked: bank account (IBAN) number patterns detected.")
 forbid (
     principal,
-    action in [Sentry::Action::"process_prompt", Sentry::Action::"upload_file"],
+    action in [Sentry::Action::"process_prompt", Sentry::Action::"paste_content", Sentry::Action::"upload_file"],
     resource
 )
 when {
-    context has pii_types && context.pii_types.contains("passport")
+    context has pii_types &&
+    (
+        context.pii_types.contains("iban") ||
+        context.pii_types.contains("bank_account") ||
+        context.pii_types.contains("swift_bic") ||
+        context.pii_types.contains("aba_routing")
+    )
 };
 
-@id("privacy.block-iban")
-@name("Block bank account numbers")
-@description("Blocks process_prompt and upload_file when pii_types contains \"iban\".")
-@severity("critical")
-@tags("category:privacy,threat:pii,detection:pattern,compliance:gdpr,compliance:pci-dss")
-@reject_message("Content blocked: bank account number (IBAN) patterns detected.")
+@id("privacy.block-pii-medical")
+@name("Block medical identifiers (structural)")
+@description("Blocks prompts, pastes, and file uploads that contain medical data (record number, MBI, NPI, or blood type).")
+@severity("medium")
+@tags("category:privacy,threat:pii,detection:pattern,compliance:hipaa,owasp:llm06")
+@reject_message("Content blocked: medical record identifier patterns detected.")
 forbid (
     principal,
-    action in [Sentry::Action::"process_prompt", Sentry::Action::"upload_file"],
+    action in [Sentry::Action::"process_prompt", Sentry::Action::"paste_content", Sentry::Action::"upload_file"],
     resource
 )
 when {
-    context has pii_types && context.pii_types.contains("iban")
+    context has pii_types &&
+    (
+        context.pii_types.contains("medical_record") ||
+        context.pii_types.contains("patient_record") ||
+        context.pii_types.contains("medicare_beneficiary_id") ||
+        context.pii_types.contains("npi") ||
+        context.pii_types.contains("medical_term") ||
+        context.pii_types.contains("blood_type")
+    )
 };
 
-@id("privacy.block-pii-bulk")
-@name("Block bulk PII exposure")
-@description("Blocks process_prompt and upload_file when pii_count >= 3.")
-@severity("critical")
-@tags("category:privacy,threat:pii,threat:exfiltration,detection:aggregate,compliance:gdpr")
-@reject_message("Content blocked: 3+ PII items detected — bulk personal data must not be shared with AI services.")
+@id("privacy.block-pii-tax-id")
+@name("Block tax identifiers (structural)")
+@description("Blocks prompts, pastes, and file uploads that contain a tax ID (ITIN, EIN, or PTIN).")
+@severity("high")
+@tags("category:privacy,threat:pii,detection:pattern,owasp:llm06")
+@reject_message("Content blocked: tax identifier (ITIN or EIN) patterns detected.")
 forbid (
     principal,
-    action in [Sentry::Action::"process_prompt", Sentry::Action::"upload_file"],
+    action in [Sentry::Action::"process_prompt", Sentry::Action::"paste_content", Sentry::Action::"upload_file"],
     resource
 )
 when {
-    context has pii_count && context.pii_count >= 3
+    context has pii_types &&
+    (
+        context.pii_types.contains("itin") ||
+        context.pii_types.contains("ein") ||
+        context.pii_types.contains("ptin")
+    )
 };
 
-// ---------------------------------------------------------------------------
-// Section 3: ML classifier and aggregation
-// ---------------------------------------------------------------------------
-
-@id("privacy.block-pii-ml")
-@name("Block high-confidence PII (ML)")
-@description("Blocks process_prompt and upload_file when pii_score >= 80.")
+@id("privacy.block-pii-credential")
+@name("Block credentials (structural)")
+@description("Blocks prompts, pastes, and file uploads that contain a credential or secret (API key, token, password hash, or private key).")
 @severity("critical")
-@tags("category:privacy,threat:pii,detection:ml,compliance:gdpr,compliance:hipaa")
-@reject_message("Content blocked: the ML classifier detected personally identifiable information with high confidence.")
+@tags("category:privacy,threat:pii,detection:pattern,owasp:llm06")
+@reject_message("Content blocked: credential or API key patterns detected.")
 forbid (
     principal,
-    action in [Sentry::Action::"process_prompt", Sentry::Action::"upload_file"],
+    action in [Sentry::Action::"process_prompt", Sentry::Action::"paste_content", Sentry::Action::"upload_file"],
     resource
 )
 when {
-    context has pii_score && context.pii_score >= 80
+    context has pii_types &&
+    (
+        context.pii_types.contains("aws_access_key") ||
+        context.pii_types.contains("api_key") ||
+        context.pii_types.contains("jwt_token") ||
+        context.pii_types.contains("encryption_key") ||
+        context.pii_types.contains("http_basic_auth") ||
+        context.pii_types.contains("gcp_credential") ||
+        context.pii_types.contains("gcp_api_key") ||
+        context.pii_types.contains("gcp_signed_policy") ||
+        context.pii_types.contains("session_cookie") ||
+        context.pii_types.contains("oauth_token") ||
+        context.pii_types.contains("tls_certificate") ||
+        context.pii_types.contains("password_hash") ||
+        context.pii_types.contains("csrf_token")
+    )
 };
 
-@id("privacy.block-pii-category")
-@name("Block PII threat category")
-@description("Blocks process_prompt and upload_file when threat_categories contains \"pii\".")
+@id("privacy.block-pii-crypto")
+@name("Block cryptocurrency addresses (structural)")
+@description("Blocks prompts, pastes, and file uploads that contain a cryptocurrency wallet address.")
 @severity("high")
-@tags("category:privacy,threat:pii,detection:aggregate,compliance:gdpr")
-@reject_message("Content blocked: threat scanners aggregated a PII threat category.")
+@tags("category:privacy,threat:pii,detection:pattern,owasp:llm06")
+@reject_message("Content blocked: cryptocurrency wallet address patterns detected.")
 forbid (
     principal,
-    action in [Sentry::Action::"process_prompt", Sentry::Action::"upload_file"],
+    action in [Sentry::Action::"process_prompt", Sentry::Action::"paste_content", Sentry::Action::"upload_file"],
     resource
 )
 when {
-    context has threat_categories && context.threat_categories.contains("pii")
+    context has pii_types &&
+    (
+        context.pii_types.contains("bitcoin_address") ||
+        context.pii_types.contains("ethereum_address")
+    )
 };