@highflame/policy 2.2.31 → 2.2.32

package/_schemas/agent_ops/templates/ported/data-protection/data_protection_defaults.cedar

@@ -0,0 +1,57 @@
+// =============================================================================
+// Secrets Detection (Default)
+// =============================================================================
+// Blocks content containing API keys, tokens, credentials, or other secrets
+// across LLM prompts, tool calls, and file operations.
+//
+// Context keys consumed:
+//   - secrets_detected: Bool
+//   - secret_count:     Long
+//   - secret_types:     Set<String>
+//
+// Compliance:
+//   - OWASP LLM06
+//
+// Category:  data-protection
+// Namespace: AgentOps
+// =============================================================================
+
+@id("data-protection.block-secrets")
+@name("Block secrets")
+@description("Blocks process_prompt, call_tool, read_file, and write_file when secrets_detected is true.")
+@severity("critical")
+@tags("category:data-protection,threat:secrets,detection:rule,owasp:llm06")
+@reject_message("Request blocked: secrets or credentials were detected in the content.")
+forbid (
+    principal,
+    action in [
+        AgentOps::Action::"process_prompt",
+        AgentOps::Action::"call_tool",
+        AgentOps::Action::"read_file",
+        AgentOps::Action::"write_file"
+    ],
+    resource
+)
+when {
+    context has secrets_detected && context.secrets_detected == true
+};
+
+@id("data-protection.block-secrets-bulk")
+@name("Block secrets (bulk)")
+@description("Blocks process_prompt, call_tool, read_file, and write_file when secret_count >= 3.")
+@severity("critical")
+@tags("category:data-protection,threat:secrets,threat:exfiltration,detection:aggregate,owasp:llm06")
+@reject_message("Request blocked: multiple distinct secrets were detected — possible credential dump.")
+forbid (
+    principal,
+    action in [
+        AgentOps::Action::"process_prompt",
+        AgentOps::Action::"call_tool",
+        AgentOps::Action::"read_file",
+        AgentOps::Action::"write_file"
+    ],
+    resource
+)
+when {
+    context has secret_count && context.secret_count >= 3
+};

package/_schemas/agent_ops/templates/ported/data-protection/privacy_advanced_pii.cedar

@@ -0,0 +1,465 @@
+// =============================================================================
+// Comprehensive PII (Tier 3)
+// =============================================================================
+// Blocks every PII entity type — structural and contextual, sensitive and situational — one forbid rule per group so any individual type can be toggled off. High false-positive surface; opt-in.
+//
+// Sensitivity tiers and the structural (regex) / contextual (model) type
+// vocabulary are defined canonically in schemas/_shared/pii_taxonomy.json and
+// enforced by tools/lint-templates.
+//
+// Context keys consumed:
+//   - pii_types: Set<String>  (union of structural lowercase + contextual uppercase types)
+//
+// Category:  privacy
+// Namespace: AgentOps
+// =============================================================================
+
+@id("privacy.block-pii-national-id-all")
+@name("Block national ID numbers (comprehensive)")
+@description("Blocks prompts, tool calls, and file reads/writes that contain a national ID (SSN, passport, or driver's license).")
+@severity("high")
+@tags("category:privacy,threat:pii,detection:pattern,owasp:llm06")
+@reject_message("Content blocked: national identifier (SSN, passport, or driver's license) patterns detected.")
+forbid (
+    principal,
+    action in [AgentOps::Action::"process_prompt", AgentOps::Action::"call_tool", AgentOps::Action::"read_file", AgentOps::Action::"write_file"],
+    resource
+)
+when {
+    context has pii_types &&
+    (
+        context.pii_types.contains("ssn") ||
+        context.pii_types.contains("passport") ||
+        context.pii_types.contains("national_id") ||
+        context.pii_types.contains("drivers_license") ||
+        context.pii_types.contains("NATIONAL_ID")
+    )
+};
+
+@id("privacy.block-pii-credit-card-all")
+@name("Block credit card numbers (comprehensive)")
+@description("Blocks prompts, tool calls, and file reads/writes that contain a credit card number.")
+@severity("critical")
+@tags("category:privacy,threat:pii,detection:pattern,compliance:pci-dss,owasp:llm06")
+@reject_message("Content blocked: credit card number patterns detected.")
+forbid (
+    principal,
+    action in [AgentOps::Action::"process_prompt", AgentOps::Action::"call_tool", AgentOps::Action::"read_file", AgentOps::Action::"write_file"],
+    resource
+)
+when {
+    context has pii_types &&
+    (
+        context.pii_types.contains("credit_card") ||
+        context.pii_types.contains("CREDIT_CARD")
+    )
+};
+
+@id("privacy.block-pii-bank-account-all")
+@name("Block bank account numbers (comprehensive)")
+@description("Blocks prompts, tool calls, and file reads/writes that contain a bank account number (IBAN, SWIFT/BIC, or routing number).")
+@severity("critical")
+@tags("category:privacy,threat:pii,detection:pattern,owasp:llm06")
+@reject_message("Content blocked: bank account (IBAN) number patterns detected.")
+forbid (
+    principal,
+    action in [AgentOps::Action::"process_prompt", AgentOps::Action::"call_tool", AgentOps::Action::"read_file", AgentOps::Action::"write_file"],
+    resource
+)
+when {
+    context has pii_types &&
+    (
+        context.pii_types.contains("iban") ||
+        context.pii_types.contains("bank_account") ||
+        context.pii_types.contains("swift_bic") ||
+        context.pii_types.contains("aba_routing") ||
+        context.pii_types.contains("ACCOUNT_NUMBER")
+    )
+};
+
+@id("privacy.block-pii-medical-all")
+@name("Block medical identifiers (comprehensive)")
+@description("Blocks prompts, tool calls, and file reads/writes that contain medical data (record number, MBI, NPI, or blood type).")
+@severity("medium")
+@tags("category:privacy,threat:pii,detection:pattern,compliance:hipaa,owasp:llm06")
+@reject_message("Content blocked: medical record identifier patterns detected.")
+forbid (
+    principal,
+    action in [AgentOps::Action::"process_prompt", AgentOps::Action::"call_tool", AgentOps::Action::"read_file", AgentOps::Action::"write_file"],
+    resource
+)
+when {
+    context has pii_types &&
+    (
+        context.pii_types.contains("medical_record") ||
+        context.pii_types.contains("patient_record") ||
+        context.pii_types.contains("medicare_beneficiary_id") ||
+        context.pii_types.contains("npi") ||
+        context.pii_types.contains("medical_term") ||
+        context.pii_types.contains("blood_type") ||
+        context.pii_types.contains("MEDICAL")
+    )
+};
+
+@id("privacy.block-pii-tax-id-all")
+@name("Block tax identifiers (comprehensive)")
+@description("Blocks prompts, tool calls, and file reads/writes that contain a tax ID (ITIN, EIN, or PTIN).")
+@severity("high")
+@tags("category:privacy,threat:pii,detection:pattern,owasp:llm06")
+@reject_message("Content blocked: tax identifier (ITIN or EIN) patterns detected.")
+forbid (
+    principal,
+    action in [AgentOps::Action::"process_prompt", AgentOps::Action::"call_tool", AgentOps::Action::"read_file", AgentOps::Action::"write_file"],
+    resource
+)
+when {
+    context has pii_types &&
+    (
+        context.pii_types.contains("itin") ||
+        context.pii_types.contains("ein") ||
+        context.pii_types.contains("ptin")
+    )
+};
+
+@id("privacy.block-pii-credential-all")
+@name("Block credentials (comprehensive)")
+@description("Blocks prompts, tool calls, and file reads/writes that contain a credential or secret (API key, token, password hash, or private key).")
+@severity("critical")
+@tags("category:privacy,threat:pii,detection:pattern,owasp:llm06")
+@reject_message("Content blocked: credential or API key patterns detected.")
+forbid (
+    principal,
+    action in [AgentOps::Action::"process_prompt", AgentOps::Action::"call_tool", AgentOps::Action::"read_file", AgentOps::Action::"write_file"],
+    resource
+)
+when {
+    context has pii_types &&
+    (
+        context.pii_types.contains("aws_access_key") ||
+        context.pii_types.contains("api_key") ||
+        context.pii_types.contains("jwt_token") ||
+        context.pii_types.contains("encryption_key") ||
+        context.pii_types.contains("http_basic_auth") ||
+        context.pii_types.contains("gcp_credential") ||
+        context.pii_types.contains("gcp_api_key") ||
+        context.pii_types.contains("gcp_signed_policy") ||
+        context.pii_types.contains("session_cookie") ||
+        context.pii_types.contains("oauth_token") ||
+        context.pii_types.contains("tls_certificate") ||
+        context.pii_types.contains("password_hash") ||
+        context.pii_types.contains("csrf_token") ||
+        context.pii_types.contains("CREDENTIAL")
+    )
+};
+
+@id("privacy.block-pii-crypto-all")
+@name("Block cryptocurrency addresses (comprehensive)")
+@description("Blocks prompts, tool calls, and file reads/writes that contain a cryptocurrency wallet address.")
+@severity("high")
+@tags("category:privacy,threat:pii,detection:pattern,owasp:llm06")
+@reject_message("Content blocked: cryptocurrency wallet address patterns detected.")
+forbid (
+    principal,
+    action in [AgentOps::Action::"process_prompt", AgentOps::Action::"call_tool", AgentOps::Action::"read_file", AgentOps::Action::"write_file"],
+    resource
+)
+when {
+    context has pii_types &&
+    (
+        context.pii_types.contains("bitcoin_address") ||
+        context.pii_types.contains("ethereum_address")
+    )
+};
+
+@id("privacy.block-pii-names-all")
+@name("Block personal names (comprehensive)")
+@description("Blocks prompts, tool calls, and file reads/writes that contain a personal name.")
+@severity("low")
+@tags("category:privacy,threat:pii,detection:pattern,owasp:llm06")
+@reject_message("Content blocked: personal name patterns detected.")
+forbid (
+    principal,
+    action in [AgentOps::Action::"process_prompt", AgentOps::Action::"call_tool", AgentOps::Action::"read_file", AgentOps::Action::"write_file"],
+    resource
+)
+when {
+    context has pii_types &&
+    (
+        context.pii_types.contains("person_name") ||
+        context.pii_types.contains("PERSON")
+    )
+};
+
+@id("privacy.block-pii-email-all")
+@name("Block email addresses (comprehensive)")
+@description("Blocks prompts, tool calls, and file reads/writes that contain an email address.")
+@severity("medium")
+@tags("category:privacy,threat:pii,detection:pattern,owasp:llm06")
+@reject_message("Content blocked: email address patterns detected.")
+forbid (
+    principal,
+    action in [AgentOps::Action::"process_prompt", AgentOps::Action::"call_tool", AgentOps::Action::"read_file", AgentOps::Action::"write_file"],
+    resource
+)
+when {
+    context has pii_types &&
+    (
+        context.pii_types.contains("email") ||
+        context.pii_types.contains("EMAIL_ADDRESS")
+    )
+};
+
+@id("privacy.block-pii-phone-all")
+@name("Block phone numbers (comprehensive)")
+@description("Blocks prompts, tool calls, and file reads/writes that contain a phone number.")
+@severity("medium")
+@tags("category:privacy,threat:pii,detection:pattern,owasp:llm06")
+@reject_message("Content blocked: phone number patterns detected.")
+forbid (
+    principal,
+    action in [AgentOps::Action::"process_prompt", AgentOps::Action::"call_tool", AgentOps::Action::"read_file", AgentOps::Action::"write_file"],
+    resource
+)
+when {
+    context has pii_types &&
+    (
+        context.pii_types.contains("phone") ||
+        context.pii_types.contains("PHONE_NUMBER")
+    )
+};
+
+@id("privacy.block-pii-datetime-all")
+@name("Block dates and times (comprehensive)")
+@description("Blocks prompts, tool calls, and file reads/writes that contain a date or time (date of birth, timestamp, or card expiry).")
+@severity("medium")
+@tags("category:privacy,threat:pii,detection:pattern,owasp:llm06")
+@reject_message("Content blocked: date or time patterns detected.")
+forbid (
+    principal,
+    action in [AgentOps::Action::"process_prompt", AgentOps::Action::"call_tool", AgentOps::Action::"read_file", AgentOps::Action::"write_file"],
+    resource
+)
+when {
+    context has pii_types &&
+    (
+        context.pii_types.contains("date_of_birth") ||
+        context.pii_types.contains("date_time") ||
+        context.pii_types.contains("time") ||
+        context.pii_types.contains("card_expiry") ||
+        context.pii_types.contains("DATE_TIME")
+    )
+};
+
+@id("privacy.block-pii-url-all")
+@name("Block URLs (comprehensive)")
+@description("Blocks prompts, tool calls, and file reads/writes that contain a URL.")
+@severity("low")
+@tags("category:privacy,threat:pii,detection:pattern,owasp:llm06")
+@reject_message("Content blocked: URL patterns detected.")
+forbid (
+    principal,
+    action in [AgentOps::Action::"process_prompt", AgentOps::Action::"call_tool", AgentOps::Action::"read_file", AgentOps::Action::"write_file"],
+    resource
+)
+when {
+    context has pii_types &&
+    (
+        context.pii_types.contains("url") ||
+        context.pii_types.contains("URL")
+    )
+};
+
+@id("privacy.block-pii-location-all")
+@name("Block locations (comprehensive)")
+@description("Blocks prompts, tool calls, and file reads/writes that contain a location (street address, postal code, or military address).")
+@severity("low")
+@tags("category:privacy,threat:pii,detection:pattern,owasp:llm06")
+@reject_message("Content blocked: street address or location patterns detected.")
+forbid (
+    principal,
+    action in [AgentOps::Action::"process_prompt", AgentOps::Action::"call_tool", AgentOps::Action::"read_file", AgentOps::Action::"write_file"],
+    resource
+)
+when {
+    context has pii_types &&
+    (
+        context.pii_types.contains("street_address") ||
+        context.pii_types.contains("zip_code") ||
+        context.pii_types.contains("military_address") ||
+        context.pii_types.contains("LOCATION")
+    )
+};
+
+@id("privacy.block-pii-organization-all")
+@name("Block organization names (comprehensive)")
+@description("Blocks prompts, tool calls, and file reads/writes that contain an organization name.")
+@severity("low")
+@tags("category:privacy,threat:pii,detection:pattern,owasp:llm06")
+@reject_message("Content blocked: organization name patterns detected.")
+forbid (
+    principal,
+    action in [AgentOps::Action::"process_prompt", AgentOps::Action::"call_tool", AgentOps::Action::"read_file", AgentOps::Action::"write_file"],
+    resource
+)
+when {
+    context has pii_types &&
+    (
+        context.pii_types.contains("organization") ||
+        context.pii_types.contains("ORGANIZATION")
+    )
+};
+
+@id("privacy.block-pii-occupation-all")
+@name("Block occupations (comprehensive)")
+@description("Blocks prompts, tool calls, and file reads/writes that contain an occupation.")
+@severity("low")
+@tags("category:privacy,threat:pii,detection:pattern,owasp:llm06")
+@reject_message("Content blocked: occupation patterns detected.")
+forbid (
+    principal,
+    action in [AgentOps::Action::"process_prompt", AgentOps::Action::"call_tool", AgentOps::Action::"read_file", AgentOps::Action::"write_file"],
+    resource
+)
+when {
+    context has pii_types &&
+    (
+        context.pii_types.contains("occupation") ||
+        context.pii_types.contains("OCCUPATION")
+    )
+};
+
+@id("privacy.block-pii-username-all")
+@name("Block usernames (comprehensive)")
+@description("Blocks prompts, tool calls, and file reads/writes that contain a username.")
+@severity("low")
+@tags("category:privacy,threat:pii,detection:pattern,owasp:llm06")
+@reject_message("Content blocked: username patterns detected.")
+forbid (
+    principal,
+    action in [AgentOps::Action::"process_prompt", AgentOps::Action::"call_tool", AgentOps::Action::"read_file", AgentOps::Action::"write_file"],
+    resource
+)
+when {
+    context has pii_types &&
+    (
+        context.pii_types.contains("username") ||
+        context.pii_types.contains("USERNAME")
+    )
+};
+
+@id("privacy.block-pii-employee-customer-id-all")
+@name("Block employee or customer IDs (comprehensive)")
+@description("Blocks prompts, tool calls, and file reads/writes that contain an employee or customer ID.")
+@severity("medium")
+@tags("category:privacy,threat:pii,detection:pattern,owasp:llm06")
+@reject_message("Content blocked: employee or customer identifier patterns detected.")
+forbid (
+    principal,
+    action in [AgentOps::Action::"process_prompt", AgentOps::Action::"call_tool", AgentOps::Action::"read_file", AgentOps::Action::"write_file"],
+    resource
+)
+when {
+    context has pii_types &&
+    (
+        context.pii_types.contains("employee_id") ||
+        context.pii_types.contains("customer_id") ||
+        context.pii_types.contains("EMPLOYEE_ID") ||
+        context.pii_types.contains("CUSTOMER_ID")
+    )
+};
+
+@id("privacy.block-pii-device-id-all")
+@name("Block device and network identifiers (comprehensive)")
+@description("Blocks prompts, tool calls, and file reads/writes that contain a device or network identifier (IP, MAC, IMEI, or UUID).")
+@severity("medium")
+@tags("category:privacy,threat:pii,detection:pattern,owasp:llm06")
+@reject_message("Content blocked: device or network identifier patterns detected.")
+forbid (
+    principal,
+    action in [AgentOps::Action::"process_prompt", AgentOps::Action::"call_tool", AgentOps::Action::"read_file", AgentOps::Action::"write_file"],
+    resource
+)
+when {
+    context has pii_types &&
+    (
+        context.pii_types.contains("device_id") ||
+        context.pii_types.contains("ip_address") ||
+        context.pii_types.contains("ipv6_address") ||
+        context.pii_types.contains("imei") ||
+        context.pii_types.contains("device_serial") ||
+        context.pii_types.contains("mac_address") ||
+        context.pii_types.contains("user_agent") ||
+        context.pii_types.contains("serial_number") ||
+        context.pii_types.contains("uuid") ||
+        context.pii_types.contains("DEVICE_ID")
+    )
+};
+
+@id("privacy.block-pii-vehicle-all")
+@name("Block vehicle identifiers (comprehensive)")
+@description("Blocks prompts, tool calls, and file reads/writes that contain a vehicle identifier (VIN or license plate).")
+@severity("medium")
+@tags("category:privacy,threat:pii,detection:pattern,owasp:llm06")
+@reject_message("Content blocked: vehicle identifier (VIN or plate) patterns detected.")
+forbid (
+    principal,
+    action in [AgentOps::Action::"process_prompt", AgentOps::Action::"call_tool", AgentOps::Action::"read_file", AgentOps::Action::"write_file"],
+    resource
+)
+when {
+    context has pii_types &&
+    (
+        context.pii_types.contains("vin") ||
+        context.pii_types.contains("license_plate") ||
+        context.pii_types.contains("VEHICLE_IDENTIFIER")
+    )
+};
+
+@id("privacy.block-pii-financial-all")
+@name("Block financial amounts (comprehensive)")
+@description("Blocks prompts, tool calls, and file reads/writes that contain a financial amount or transaction ID.")
+@severity("medium")
+@tags("category:privacy,threat:pii,detection:pattern,owasp:llm06")
+@reject_message("Content blocked: salary or financial amount patterns detected.")
+forbid (
+    principal,
+    action in [AgentOps::Action::"process_prompt", AgentOps::Action::"call_tool", AgentOps::Action::"read_file", AgentOps::Action::"write_file"],
+    resource
+)
+when {
+    context has pii_types &&
+    (
+        context.pii_types.contains("salary") ||
+        context.pii_types.contains("financial_amount") ||
+        context.pii_types.contains("transaction_id") ||
+        context.pii_types.contains("FINANCIAL")
+    )
+};
+
+@id("privacy.block-pii-sensitive-attribute-all")
+@name("Block sensitive attributes (comprehensive)")
+@description("Blocks prompts, tool calls, and file reads/writes that contain a sensitive personal attribute (ethnicity, religion, age, etc.).")
+@severity("high")
+@tags("category:privacy,threat:pii,detection:pattern,owasp:llm06")
+@reject_message("Content blocked: sensitive attribute (ethnicity, religion, etc.) patterns detected.")
+forbid (
+    principal,
+    action in [AgentOps::Action::"process_prompt", AgentOps::Action::"call_tool", AgentOps::Action::"read_file", AgentOps::Action::"write_file"],
+    resource
+)
+when {
+    context has pii_types &&
+    (
+        context.pii_types.contains("ethnicity") ||
+        context.pii_types.contains("religion") ||
+        context.pii_types.contains("sexual_orientation") ||
+        context.pii_types.contains("political_affiliation") ||
+        context.pii_types.contains("nationality") ||
+        context.pii_types.contains("age") ||
+        context.pii_types.contains("gender") ||
+        context.pii_types.contains("marital_status") ||
+        context.pii_types.contains("education_level") ||
+        context.pii_types.contains("employment_status") ||
+        context.pii_types.contains("SENSITIVE_ATTRIBUTE")
+    )
+};

package/_schemas/agent_ops/templates/ported/data-protection/privacy_defaults.cedar

@@ -0,0 +1,164 @@
+// =============================================================================
+// Structural PII (Tier 1)
+// =============================================================================
+// Blocks high-sensitivity identifiers that have a deterministic structure (SSNs, credit cards, IBANs, API keys) using fast regex pattern matching — high precision, low latency, few false positives. One forbid rule per identifier group.
+//
+// Sensitivity tiers and the structural (regex) / contextual (model) type
+// vocabulary are defined canonically in schemas/_shared/pii_taxonomy.json and
+// enforced by tools/lint-templates.
+//
+// Context keys consumed:
+//   - pii_types: Set<String>  (union of structural lowercase + contextual uppercase types)
+//
+// Category:  privacy
+// Namespace: AgentOps
+// =============================================================================
+
+@id("privacy.block-pii-national-id")
+@name("Block national ID numbers (structural)")
+@description("Blocks prompts, tool calls, and file reads/writes that contain a national ID (SSN, passport, or driver's license).")
+@severity("high")
+@tags("category:privacy,threat:pii,detection:pattern,owasp:llm06")
+@reject_message("Content blocked: national identifier (SSN, passport, or driver's license) patterns detected.")
+forbid (
+    principal,
+    action in [AgentOps::Action::"process_prompt", AgentOps::Action::"call_tool", AgentOps::Action::"read_file", AgentOps::Action::"write_file"],
+    resource
+)
+when {
+    context has pii_types &&
+    (
+        context.pii_types.contains("ssn") ||
+        context.pii_types.contains("passport") ||
+        context.pii_types.contains("national_id") ||
+        context.pii_types.contains("drivers_license")
+    )
+};
+
+@id("privacy.block-pii-credit-card")
+@name("Block credit card numbers (structural)")
+@description("Blocks prompts, tool calls, and file reads/writes that contain a credit card number.")
+@severity("critical")
+@tags("category:privacy,threat:pii,detection:pattern,compliance:pci-dss,owasp:llm06")
+@reject_message("Content blocked: credit card number patterns detected.")
+forbid (
+    principal,
+    action in [AgentOps::Action::"process_prompt", AgentOps::Action::"call_tool", AgentOps::Action::"read_file", AgentOps::Action::"write_file"],
+    resource
+)
+when {
+    context has pii_types && context.pii_types.contains("credit_card")
+};
+
+@id("privacy.block-pii-bank-account")
+@name("Block bank account numbers (structural)")
+@description("Blocks prompts, tool calls, and file reads/writes that contain a bank account number (IBAN, SWIFT/BIC, or routing number).")
+@severity("critical")
+@tags("category:privacy,threat:pii,detection:pattern,owasp:llm06")
+@reject_message("Content blocked: bank account (IBAN) number patterns detected.")
+forbid (
+    principal,
+    action in [AgentOps::Action::"process_prompt", AgentOps::Action::"call_tool", AgentOps::Action::"read_file", AgentOps::Action::"write_file"],
+    resource
+)
+when {
+    context has pii_types &&
+    (
+        context.pii_types.contains("iban") ||
+        context.pii_types.contains("bank_account") ||
+        context.pii_types.contains("swift_bic") ||
+        context.pii_types.contains("aba_routing")
+    )
+};
+
+@id("privacy.block-pii-medical")
+@name("Block medical identifiers (structural)")
+@description("Blocks prompts, tool calls, and file reads/writes that contain medical data (record number, MBI, NPI, or blood type).")
+@severity("medium")
+@tags("category:privacy,threat:pii,detection:pattern,compliance:hipaa,owasp:llm06")
+@reject_message("Content blocked: medical record identifier patterns detected.")
+forbid (
+    principal,
+    action in [AgentOps::Action::"process_prompt", AgentOps::Action::"call_tool", AgentOps::Action::"read_file", AgentOps::Action::"write_file"],
+    resource
+)
+when {
+    context has pii_types &&
+    (
+        context.pii_types.contains("medical_record") ||
+        context.pii_types.contains("patient_record") ||
+        context.pii_types.contains("medicare_beneficiary_id") ||
+        context.pii_types.contains("npi") ||
+        context.pii_types.contains("medical_term") ||
+        context.pii_types.contains("blood_type")
+    )
+};
+
+@id("privacy.block-pii-tax-id")
+@name("Block tax identifiers (structural)")
+@description("Blocks prompts, tool calls, and file reads/writes that contain a tax ID (ITIN, EIN, or PTIN).")
+@severity("high")
+@tags("category:privacy,threat:pii,detection:pattern,owasp:llm06")
+@reject_message("Content blocked: tax identifier (ITIN or EIN) patterns detected.")
+forbid (
+    principal,
+    action in [AgentOps::Action::"process_prompt", AgentOps::Action::"call_tool", AgentOps::Action::"read_file", AgentOps::Action::"write_file"],
+    resource
+)
+when {
+    context has pii_types &&
+    (
+        context.pii_types.contains("itin") ||
+        context.pii_types.contains("ein") ||
+        context.pii_types.contains("ptin")
+    )
+};
+
+@id("privacy.block-pii-credential")
+@name("Block credentials (structural)")
+@description("Blocks prompts, tool calls, and file reads/writes that contain a credential or secret (API key, token, password hash, or private key).")
+@severity("critical")
+@tags("category:privacy,threat:pii,detection:pattern,owasp:llm06")
+@reject_message("Content blocked: credential or API key patterns detected.")
+forbid (
+    principal,
+    action in [AgentOps::Action::"process_prompt", AgentOps::Action::"call_tool", AgentOps::Action::"read_file", AgentOps::Action::"write_file"],
+    resource
+)
+when {
+    context has pii_types &&
+    (
+        context.pii_types.contains("aws_access_key") ||
+        context.pii_types.contains("api_key") ||
+        context.pii_types.contains("jwt_token") ||
+        context.pii_types.contains("encryption_key") ||
+        context.pii_types.contains("http_basic_auth") ||
+        context.pii_types.contains("gcp_credential") ||
+        context.pii_types.contains("gcp_api_key") ||
+        context.pii_types.contains("gcp_signed_policy") ||
+        context.pii_types.contains("session_cookie") ||
+        context.pii_types.contains("oauth_token") ||
+        context.pii_types.contains("tls_certificate") ||
+        context.pii_types.contains("password_hash") ||
+        context.pii_types.contains("csrf_token")
+    )
+};
+
+@id("privacy.block-pii-crypto")
+@name("Block cryptocurrency addresses (structural)")
+@description("Blocks prompts, tool calls, and file reads/writes that contain a cryptocurrency wallet address.")
+@severity("high")
+@tags("category:privacy,threat:pii,detection:pattern,owasp:llm06")
+@reject_message("Content blocked: cryptocurrency wallet address patterns detected.")
+forbid (
+    principal,
+    action in [AgentOps::Action::"process_prompt", AgentOps::Action::"call_tool", AgentOps::Action::"read_file", AgentOps::Action::"write_file"],
+    resource
+)
+when {
+    context has pii_types &&
+    (
+        context.pii_types.contains("bitcoin_address") ||
+        context.pii_types.contains("ethereum_address")
+    )
+};