@highflame/policy 2.2.3 → 2.2.5

package/_schemas/sentry/templates/defaults/pii_advanced.cedar

@@ -0,0 +1,465 @@
+// =============================================================================
+// Comprehensive PII (Tier 3)
+// =============================================================================
+// Blocks every PII entity type — structural and contextual, sensitive and situational — one forbid rule per group so any individual type can be toggled off. High false-positive surface; opt-in.
+//
+// Sensitivity tiers and the structural (regex) / contextual (model) type
+// vocabulary are defined canonically in schemas/_shared/pii_taxonomy.json and
+// enforced by tools/lint-templates.
+//
+// Context keys consumed:
+//   - pii_types: Set<String>  (union of structural lowercase + contextual uppercase types)
+//
+// Category:  privacy
+// Namespace: Sentry
+// =============================================================================
+
+@id("privacy.block-pii-national-id-all")
+@name("Block national ID numbers (comprehensive)")
+@description("Blocks prompts, pastes, and file uploads that contain a national ID (SSN, passport, or driver's license).")
+@severity("high")
+@tags("category:privacy,threat:pii,detection:pattern,owasp:llm06")
+@reject_message("Content blocked: national identifier (SSN, passport, or driver's license) patterns detected.")
+forbid (
+    principal,
+    action in [Sentry::Action::"process_prompt", Sentry::Action::"paste_content", Sentry::Action::"upload_file"],
+    resource
+)
+when {
+    context has pii_types &&
+    (
+        context.pii_types.contains("ssn") ||
+        context.pii_types.contains("passport") ||
+        context.pii_types.contains("national_id") ||
+        context.pii_types.contains("drivers_license") ||
+        context.pii_types.contains("NATIONAL_ID")
+    )
+};
+
+@id("privacy.block-pii-credit-card-all")
+@name("Block credit card numbers (comprehensive)")
+@description("Blocks prompts, pastes, and file uploads that contain a credit card number.")
+@severity("critical")
+@tags("category:privacy,threat:pii,detection:pattern,compliance:pci-dss,owasp:llm06")
+@reject_message("Content blocked: credit card number patterns detected.")
+forbid (
+    principal,
+    action in [Sentry::Action::"process_prompt", Sentry::Action::"paste_content", Sentry::Action::"upload_file"],
+    resource
+)
+when {
+    context has pii_types &&
+    (
+        context.pii_types.contains("credit_card") ||
+        context.pii_types.contains("CREDIT_CARD")
+    )
+};
+
+@id("privacy.block-pii-bank-account-all")
+@name("Block bank account numbers (comprehensive)")
+@description("Blocks prompts, pastes, and file uploads that contain a bank account number (IBAN, SWIFT/BIC, or routing number).")
+@severity("critical")
+@tags("category:privacy,threat:pii,detection:pattern,owasp:llm06")
+@reject_message("Content blocked: bank account (IBAN) number patterns detected.")
+forbid (
+    principal,
+    action in [Sentry::Action::"process_prompt", Sentry::Action::"paste_content", Sentry::Action::"upload_file"],
+    resource
+)
+when {
+    context has pii_types &&
+    (
+        context.pii_types.contains("iban") ||
+        context.pii_types.contains("bank_account") ||
+        context.pii_types.contains("swift_bic") ||
+        context.pii_types.contains("aba_routing") ||
+        context.pii_types.contains("ACCOUNT_NUMBER")
+    )
+};
+
+@id("privacy.block-pii-medical-all")
+@name("Block medical identifiers (comprehensive)")
+@description("Blocks prompts, pastes, and file uploads that contain medical data (record number, MBI, NPI, or blood type).")
+@severity("medium")
+@tags("category:privacy,threat:pii,detection:pattern,compliance:hipaa,owasp:llm06")
+@reject_message("Content blocked: medical record identifier patterns detected.")
+forbid (
+    principal,
+    action in [Sentry::Action::"process_prompt", Sentry::Action::"paste_content", Sentry::Action::"upload_file"],
+    resource
+)
+when {
+    context has pii_types &&
+    (
+        context.pii_types.contains("medical_record") ||
+        context.pii_types.contains("patient_record") ||
+        context.pii_types.contains("medicare_beneficiary_id") ||
+        context.pii_types.contains("npi") ||
+        context.pii_types.contains("medical_term") ||
+        context.pii_types.contains("blood_type") ||
+        context.pii_types.contains("MEDICAL")
+    )
+};
+
+@id("privacy.block-pii-tax-id-all")
+@name("Block tax identifiers (comprehensive)")
+@description("Blocks prompts, pastes, and file uploads that contain a tax ID (ITIN, EIN, or PTIN).")
+@severity("high")
+@tags("category:privacy,threat:pii,detection:pattern,owasp:llm06")
+@reject_message("Content blocked: tax identifier (ITIN or EIN) patterns detected.")
+forbid (
+    principal,
+    action in [Sentry::Action::"process_prompt", Sentry::Action::"paste_content", Sentry::Action::"upload_file"],
+    resource
+)
+when {
+    context has pii_types &&
+    (
+        context.pii_types.contains("itin") ||
+        context.pii_types.contains("ein") ||
+        context.pii_types.contains("ptin")
+    )
+};
+
+@id("privacy.block-pii-credential-all")
+@name("Block credentials (comprehensive)")
+@description("Blocks prompts, pastes, and file uploads that contain a credential or secret (API key, token, password hash, or private key).")
+@severity("critical")
+@tags("category:privacy,threat:pii,detection:pattern,owasp:llm06")
+@reject_message("Content blocked: credential or API key patterns detected.")
+forbid (
+    principal,
+    action in [Sentry::Action::"process_prompt", Sentry::Action::"paste_content", Sentry::Action::"upload_file"],
+    resource
+)
+when {
+    context has pii_types &&
+    (
+        context.pii_types.contains("aws_access_key") ||
+        context.pii_types.contains("api_key") ||
+        context.pii_types.contains("jwt_token") ||
+        context.pii_types.contains("encryption_key") ||
+        context.pii_types.contains("http_basic_auth") ||
+        context.pii_types.contains("gcp_credential") ||
+        context.pii_types.contains("gcp_api_key") ||
+        context.pii_types.contains("gcp_signed_policy") ||
+        context.pii_types.contains("session_cookie") ||
+        context.pii_types.contains("oauth_token") ||
+        context.pii_types.contains("tls_certificate") ||
+        context.pii_types.contains("password_hash") ||
+        context.pii_types.contains("csrf_token") ||
+        context.pii_types.contains("CREDENTIAL")
+    )
+};
+
+@id("privacy.block-pii-crypto-all")
+@name("Block cryptocurrency addresses (comprehensive)")
+@description("Blocks prompts, pastes, and file uploads that contain a cryptocurrency wallet address.")
+@severity("high")
+@tags("category:privacy,threat:pii,detection:pattern,owasp:llm06")
+@reject_message("Content blocked: cryptocurrency wallet address patterns detected.")
+forbid (
+    principal,
+    action in [Sentry::Action::"process_prompt", Sentry::Action::"paste_content", Sentry::Action::"upload_file"],
+    resource
+)
+when {
+    context has pii_types &&
+    (
+        context.pii_types.contains("bitcoin_address") ||
+        context.pii_types.contains("ethereum_address")
+    )
+};
+
+@id("privacy.block-pii-names-all")
+@name("Block personal names (comprehensive)")
+@description("Blocks prompts, pastes, and file uploads that contain a personal name.")
+@severity("low")
+@tags("category:privacy,threat:pii,detection:pattern,owasp:llm06")
+@reject_message("Content blocked: personal name patterns detected.")
+forbid (
+    principal,
+    action in [Sentry::Action::"process_prompt", Sentry::Action::"paste_content", Sentry::Action::"upload_file"],
+    resource
+)
+when {
+    context has pii_types &&
+    (
+        context.pii_types.contains("person_name") ||
+        context.pii_types.contains("PERSON")
+    )
+};
+
+@id("privacy.block-pii-email-all")
+@name("Block email addresses (comprehensive)")
+@description("Blocks prompts, pastes, and file uploads that contain an email address.")
+@severity("medium")
+@tags("category:privacy,threat:pii,detection:pattern,owasp:llm06")
+@reject_message("Content blocked: email address patterns detected.")
+forbid (
+    principal,
+    action in [Sentry::Action::"process_prompt", Sentry::Action::"paste_content", Sentry::Action::"upload_file"],
+    resource
+)
+when {
+    context has pii_types &&
+    (
+        context.pii_types.contains("email") ||
+        context.pii_types.contains("EMAIL_ADDRESS")
+    )
+};
+
+@id("privacy.block-pii-phone-all")
+@name("Block phone numbers (comprehensive)")
+@description("Blocks prompts, pastes, and file uploads that contain a phone number.")
+@severity("medium")
+@tags("category:privacy,threat:pii,detection:pattern,owasp:llm06")
+@reject_message("Content blocked: phone number patterns detected.")
+forbid (
+    principal,
+    action in [Sentry::Action::"process_prompt", Sentry::Action::"paste_content", Sentry::Action::"upload_file"],
+    resource
+)
+when {
+    context has pii_types &&
+    (
+        context.pii_types.contains("phone") ||
+        context.pii_types.contains("PHONE_NUMBER")
+    )
+};
+
+@id("privacy.block-pii-datetime-all")
+@name("Block dates and times (comprehensive)")
+@description("Blocks prompts, pastes, and file uploads that contain a date or time (date of birth, timestamp, or card expiry).")
+@severity("medium")
+@tags("category:privacy,threat:pii,detection:pattern,owasp:llm06")
+@reject_message("Content blocked: date or time patterns detected.")
+forbid (
+    principal,
+    action in [Sentry::Action::"process_prompt", Sentry::Action::"paste_content", Sentry::Action::"upload_file"],
+    resource
+)
+when {
+    context has pii_types &&
+    (
+        context.pii_types.contains("date_of_birth") ||
+        context.pii_types.contains("date_time") ||
+        context.pii_types.contains("time") ||
+        context.pii_types.contains("card_expiry") ||
+        context.pii_types.contains("DATE_TIME")
+    )
+};
+
+@id("privacy.block-pii-url-all")
+@name("Block URLs (comprehensive)")
+@description("Blocks prompts, pastes, and file uploads that contain a URL.")
+@severity("low")
+@tags("category:privacy,threat:pii,detection:pattern,owasp:llm06")
+@reject_message("Content blocked: URL patterns detected.")
+forbid (
+    principal,
+    action in [Sentry::Action::"process_prompt", Sentry::Action::"paste_content", Sentry::Action::"upload_file"],
+    resource
+)
+when {
+    context has pii_types &&
+    (
+        context.pii_types.contains("url") ||
+        context.pii_types.contains("URL")
+    )
+};
+
+@id("privacy.block-pii-location-all")
+@name("Block locations (comprehensive)")
+@description("Blocks prompts, pastes, and file uploads that contain a location (street address, postal code, or military address).")
+@severity("low")
+@tags("category:privacy,threat:pii,detection:pattern,owasp:llm06")
+@reject_message("Content blocked: street address or location patterns detected.")
+forbid (
+    principal,
+    action in [Sentry::Action::"process_prompt", Sentry::Action::"paste_content", Sentry::Action::"upload_file"],
+    resource
+)
+when {
+    context has pii_types &&
+    (
+        context.pii_types.contains("street_address") ||
+        context.pii_types.contains("zip_code") ||
+        context.pii_types.contains("military_address") ||
+        context.pii_types.contains("LOCATION")
+    )
+};
+
+@id("privacy.block-pii-organization-all")
+@name("Block organization names (comprehensive)")
+@description("Blocks prompts, pastes, and file uploads that contain an organization name.")
+@severity("low")
+@tags("category:privacy,threat:pii,detection:pattern,owasp:llm06")
+@reject_message("Content blocked: organization name patterns detected.")
+forbid (
+    principal,
+    action in [Sentry::Action::"process_prompt", Sentry::Action::"paste_content", Sentry::Action::"upload_file"],
+    resource
+)
+when {
+    context has pii_types &&
+    (
+        context.pii_types.contains("organization") ||
+        context.pii_types.contains("ORGANIZATION")
+    )
+};
+
+@id("privacy.block-pii-occupation-all")
+@name("Block occupations (comprehensive)")
+@description("Blocks prompts, pastes, and file uploads that contain an occupation.")
+@severity("low")
+@tags("category:privacy,threat:pii,detection:pattern,owasp:llm06")
+@reject_message("Content blocked: occupation patterns detected.")
+forbid (
+    principal,
+    action in [Sentry::Action::"process_prompt", Sentry::Action::"paste_content", Sentry::Action::"upload_file"],
+    resource
+)
+when {
+    context has pii_types &&
+    (
+        context.pii_types.contains("occupation") ||
+        context.pii_types.contains("OCCUPATION")
+    )
+};
+
+@id("privacy.block-pii-username-all")
+@name("Block usernames (comprehensive)")
+@description("Blocks prompts, pastes, and file uploads that contain a username.")
+@severity("low")
+@tags("category:privacy,threat:pii,detection:pattern,owasp:llm06")
+@reject_message("Content blocked: username patterns detected.")
+forbid (
+    principal,
+    action in [Sentry::Action::"process_prompt", Sentry::Action::"paste_content", Sentry::Action::"upload_file"],
+    resource
+)
+when {
+    context has pii_types &&
+    (
+        context.pii_types.contains("username") ||
+        context.pii_types.contains("USERNAME")
+    )
+};
+
+@id("privacy.block-pii-employee-customer-id-all")
+@name("Block employee or customer IDs (comprehensive)")
+@description("Blocks prompts, pastes, and file uploads that contain an employee or customer ID.")
+@severity("medium")
+@tags("category:privacy,threat:pii,detection:pattern,owasp:llm06")
+@reject_message("Content blocked: employee or customer identifier patterns detected.")
+forbid (
+    principal,
+    action in [Sentry::Action::"process_prompt", Sentry::Action::"paste_content", Sentry::Action::"upload_file"],
+    resource
+)
+when {
+    context has pii_types &&
+    (
+        context.pii_types.contains("employee_id") ||
+        context.pii_types.contains("customer_id") ||
+        context.pii_types.contains("EMPLOYEE_ID") ||
+        context.pii_types.contains("CUSTOMER_ID")
+    )
+};
+
+@id("privacy.block-pii-device-id-all")
+@name("Block device and network identifiers (comprehensive)")
+@description("Blocks prompts, pastes, and file uploads that contain a device or network identifier (IP, MAC, IMEI, or UUID).")
+@severity("medium")
+@tags("category:privacy,threat:pii,detection:pattern,owasp:llm06")
+@reject_message("Content blocked: device or network identifier patterns detected.")
+forbid (
+    principal,
+    action in [Sentry::Action::"process_prompt", Sentry::Action::"paste_content", Sentry::Action::"upload_file"],
+    resource
+)
+when {
+    context has pii_types &&
+    (
+        context.pii_types.contains("device_id") ||
+        context.pii_types.contains("ip_address") ||
+        context.pii_types.contains("ipv6_address") ||
+        context.pii_types.contains("imei") ||
+        context.pii_types.contains("device_serial") ||
+        context.pii_types.contains("mac_address") ||
+        context.pii_types.contains("user_agent") ||
+        context.pii_types.contains("serial_number") ||
+        context.pii_types.contains("uuid") ||
+        context.pii_types.contains("DEVICE_ID")
+    )
+};
+
+@id("privacy.block-pii-vehicle-all")
+@name("Block vehicle identifiers (comprehensive)")
+@description("Blocks prompts, pastes, and file uploads that contain a vehicle identifier (VIN or license plate).")
+@severity("medium")
+@tags("category:privacy,threat:pii,detection:pattern,owasp:llm06")
+@reject_message("Content blocked: vehicle identifier (VIN or plate) patterns detected.")
+forbid (
+    principal,
+    action in [Sentry::Action::"process_prompt", Sentry::Action::"paste_content", Sentry::Action::"upload_file"],
+    resource
+)
+when {
+    context has pii_types &&
+    (
+        context.pii_types.contains("vin") ||
+        context.pii_types.contains("license_plate") ||
+        context.pii_types.contains("VEHICLE_IDENTIFIER")
+    )
+};
+
+@id("privacy.block-pii-financial-all")
+@name("Block financial amounts (comprehensive)")
+@description("Blocks prompts, pastes, and file uploads that contain a financial amount or transaction ID.")
+@severity("medium")
+@tags("category:privacy,threat:pii,detection:pattern,owasp:llm06")
+@reject_message("Content blocked: salary or financial amount patterns detected.")
+forbid (
+    principal,
+    action in [Sentry::Action::"process_prompt", Sentry::Action::"paste_content", Sentry::Action::"upload_file"],
+    resource
+)
+when {
+    context has pii_types &&
+    (
+        context.pii_types.contains("salary") ||
+        context.pii_types.contains("financial_amount") ||
+        context.pii_types.contains("transaction_id") ||
+        context.pii_types.contains("FINANCIAL")
+    )
+};
+
+@id("privacy.block-pii-sensitive-attribute-all")
+@name("Block sensitive attributes (comprehensive)")
+@description("Blocks prompts, pastes, and file uploads that contain a sensitive personal attribute (ethnicity, religion, age, etc.).")
+@severity("high")
+@tags("category:privacy,threat:pii,detection:pattern,owasp:llm06")
+@reject_message("Content blocked: sensitive attribute (ethnicity, religion, etc.) patterns detected.")
+forbid (
+    principal,
+    action in [Sentry::Action::"process_prompt", Sentry::Action::"paste_content", Sentry::Action::"upload_file"],
+    resource
+)
+when {
+    context has pii_types &&
+    (
+        context.pii_types.contains("ethnicity") ||
+        context.pii_types.contains("religion") ||
+        context.pii_types.contains("sexual_orientation") ||
+        context.pii_types.contains("political_affiliation") ||
+        context.pii_types.contains("nationality") ||
+        context.pii_types.contains("age") ||
+        context.pii_types.contains("gender") ||
+        context.pii_types.contains("marital_status") ||
+        context.pii_types.contains("education_level") ||
+        context.pii_types.contains("employment_status") ||
+        context.pii_types.contains("SENSITIVE_ATTRIBUTE")
+    )
+};

package/_schemas/sentry/templates/defaults/pii_model.cedar

@@ -0,0 +1,90 @@
+// =============================================================================
+// Contextual PII (Tier 2)
+// =============================================================================
+// Blocks the same high-sensitivity identifier groups inferred from surrounding context by the ML PII model — catches unstructured or novel PII the structural patterns miss (higher recall). Requires the pii_model detector.
+//
+// Sensitivity tiers and the structural (regex) / contextual (model) type
+// vocabulary are defined canonically in schemas/_shared/pii_taxonomy.json and
+// enforced by tools/lint-templates.
+//
+// Context keys consumed:
+//   - pii_types: Set<String>  (union of structural lowercase + contextual uppercase types)
+//
+// Category:  privacy
+// Namespace: Sentry
+// =============================================================================
+
+@id("privacy.block-pii-national-id-model")
+@name("Block national ID numbers (contextual)")
+@description("Blocks prompts, pastes, and file uploads that contain a national ID (SSN, passport, or driver's license).")
+@severity("high")
+@tags("category:privacy,threat:pii,detection:ml,owasp:llm06")
+@reject_message("Content blocked: national identifier (SSN, passport, or driver's license) patterns detected.")
+forbid (
+    principal,
+    action in [Sentry::Action::"process_prompt", Sentry::Action::"paste_content", Sentry::Action::"upload_file"],
+    resource
+)
+when {
+    context has pii_types && context.pii_types.contains("NATIONAL_ID")
+};
+
+@id("privacy.block-pii-credit-card-model")
+@name("Block credit card numbers (contextual)")
+@description("Blocks prompts, pastes, and file uploads that contain a credit card number.")
+@severity("critical")
+@tags("category:privacy,threat:pii,detection:ml,compliance:pci-dss,owasp:llm06")
+@reject_message("Content blocked: credit card number patterns detected.")
+forbid (
+    principal,
+    action in [Sentry::Action::"process_prompt", Sentry::Action::"paste_content", Sentry::Action::"upload_file"],
+    resource
+)
+when {
+    context has pii_types && context.pii_types.contains("CREDIT_CARD")
+};
+
+@id("privacy.block-pii-bank-account-model")
+@name("Block bank account numbers (contextual)")
+@description("Blocks prompts, pastes, and file uploads that contain a bank account number (IBAN, SWIFT/BIC, or routing number).")
+@severity("critical")
+@tags("category:privacy,threat:pii,detection:ml,owasp:llm06")
+@reject_message("Content blocked: bank account (IBAN) number patterns detected.")
+forbid (
+    principal,
+    action in [Sentry::Action::"process_prompt", Sentry::Action::"paste_content", Sentry::Action::"upload_file"],
+    resource
+)
+when {
+    context has pii_types && context.pii_types.contains("ACCOUNT_NUMBER")
+};
+
+@id("privacy.block-pii-medical-model")
+@name("Block medical identifiers (contextual)")
+@description("Blocks prompts, pastes, and file uploads that contain medical data (record number, MBI, NPI, or blood type).")
+@severity("medium")
+@tags("category:privacy,threat:pii,detection:ml,compliance:hipaa,owasp:llm06")
+@reject_message("Content blocked: medical record identifier patterns detected.")
+forbid (
+    principal,
+    action in [Sentry::Action::"process_prompt", Sentry::Action::"paste_content", Sentry::Action::"upload_file"],
+    resource
+)
+when {
+    context has pii_types && context.pii_types.contains("MEDICAL")
+};
+
+@id("privacy.block-pii-credential-model")
+@name("Block credentials (contextual)")
+@description("Blocks prompts, pastes, and file uploads that contain a credential or secret (API key, token, password hash, or private key).")
+@severity("critical")
+@tags("category:privacy,threat:pii,detection:ml,owasp:llm06")
+@reject_message("Content blocked: credential or API key patterns detected.")
+forbid (
+    principal,
+    action in [Sentry::Action::"process_prompt", Sentry::Action::"paste_content", Sentry::Action::"upload_file"],
+    resource
+)
+when {
+    context has pii_types && context.pii_types.contains("CREDENTIAL")
+};

package/_schemas/sentry/templates/templates.json

@@ -69,7 +69,13 @@
       "category": "semantic",
       "file": "defaults/semantic.cedar",
       "severity": "critical",
-      "tags": ["category:semantic", "threat:injection", "threat:jailbreak", "owasp:llm01", "owasp:llm02"]
+      "tags": [
+        "category:semantic",
+        "threat:injection",
+        "threat:jailbreak",
+        "owasp:llm01",
+        "owasp:llm02"
+      ]
     },
     {
       "id": "trust-safety.defaults",
@@ -78,7 +84,13 @@
       "category": "trust-safety",
       "file": "defaults/content_safety.cedar",
       "severity": "critical",
-      "tags": ["category:trust-safety", "threat:harmful", "threat:hate-speech", "compliance:eu-ai-act", "compliance:iso-42001"]
+      "tags": [
+        "category:trust-safety",
+        "threat:harmful",
+        "threat:hate-speech",
+        "compliance:eu-ai-act",
+        "compliance:iso-42001"
+      ]
     },
     {
       "id": "data-protection.defaults",
@@ -91,30 +103,71 @@
     },
     {
       "id": "privacy.defaults",
-      "name": "PII Detection",
-      "description": "Block credit card numbers, SSNs, passport/IBAN, and other PII across messages and file uploads.",
+      "name": "Structural PII",
+      "description": "Block well-formatted sensitive identifiers — SSNs, credit cards, IBANs, API keys — via fast deterministic pattern matching. High precision, low latency, few false positives; use as the always-on baseline.",
       "category": "privacy",
       "file": "defaults/pii.cedar",
       "severity": "critical",
-      "tags": ["category:privacy", "threat:pii", "compliance:pci-dss", "compliance:gdpr", "compliance:hipaa"]
+      "tags": [
+        "category:privacy",
+        "threat:pii",
+        "detection:pattern",
+        "compliance:pci-dss",
+        "compliance:hipaa"
+      ]
+    },
+    {
+      "id": "privacy.pii-model",
+      "name": "Contextual PII",
+      "description": "Block the same sensitive identifiers when the ML model infers them from surrounding context — catches unstructured or novel PII the structural patterns miss. Higher recall; requires the pii_model detector.",
+      "category": "privacy",
+      "file": "defaults/pii_model.cedar",
+      "severity": "critical",
+      "tags": [
+        "category:privacy",
+        "threat:pii",
+        "detection:ml",
+        "compliance:pci-dss",
+        "compliance:hipaa"
+      ]
+    },
+    {
+      "id": "privacy.advanced-pii",
+      "name": "Comprehensive PII",
+      "description": "Block every PII type — structural and contextual, sensitive and situational. Situational entities (names, locations, dates, etc.) are real PII but appear in ordinary text, so this tier flags often; one forbid rule per entity lets you disable the ones you don't need. Opt-in for strict environments.",
+      "category": "privacy",
+      "file": "defaults/pii_advanced.cedar",
+      "severity": "critical",
+      "tags": [
+        "category:privacy",
+        "threat:pii",
+        "detection:pattern",
+        "compliance:pci-dss",
+        "compliance:hipaa"
+      ]
     },
     {
-      "id": "file-safety.defaults",
+      "id": "file-safety.block-upload-secrets",
       "name": "File & Attachment Safety",
-      "description": "Block file uploads containing secrets or PII in document content.",
+      "description": "Block file uploads containing secrets in document content.",
       "category": "file-safety",
       "file": "defaults/file_safety.cedar",
       "severity": "critical",
-      "tags": ["category:file-safety", "threat:secrets", "threat:pii"]
+      "tags": ["category:file-safety", "threat:secrets"]
     },
     {
       "id": "clipboard.defaults",
       "name": "Clipboard Policy",
-      "description": "Block all-paste, paste-with-secrets, paste-with-PII, encoded payload pastes, and pastes with invisible characters.",
+      "description": "Block all-paste, paste-with-secrets, encoded payload pastes, and pastes with invisible characters. PII pastes are handled by the privacy.* templates.",
       "category": "clipboard",
       "file": "defaults/clipboard.cedar",
       "severity": "critical",
-      "tags": ["category:clipboard", "threat:secrets", "threat:pii", "threat:encoded-payload", "threat:invisible-chars"]
+      "tags": [
+        "category:clipboard",
+        "threat:secrets",
+        "threat:encoded-payload",
+        "threat:invisible-chars"
+      ]
     },
     {
       "id": "organization.block-session-threat-escalation",
@@ -123,7 +176,11 @@
       "category": "organization",
       "file": "defaults/organization.cedar",
       "severity": "high",
-      "tags": ["category:organization", "detection:aggregate", "posture:catch-all"]
+      "tags": [
+        "category:organization",
+        "detection:aggregate",
+        "posture:catch-all"
+      ]
     }
   ]
 }

package/dist/ai_gateway-defaults.gen.d.ts

@@ -2,7 +2,7 @@
  * AiGateway policy category identifiers.
  * Maps to UI tab names in Studio.
  */
-export type AiGatewayCategory = 'semantic' | 'tools' | 'agent-security' | 'data-protection' | 'organization';
+export type AiGatewayCategory = 'semantic' | 'tools' | 'agent-security' | 'data-protection' | 'privacy' | 'organization';
 /**
  * Category metadata for UI display.
  */