@highflame/policy 2.2.4 → 2.2.5

package/dist/guardrails-defaults.gen.js

@@ -171,60 +171,260 @@ when {
 };
 `;
 const GUARDRAILS_PRIVACY_DEFAULTS_CEDAR = `// =============================================================================
-// PII Detection (Default)
+// Structural PII (Tier 1)
 // =============================================================================
-// Blocks LLM responses that contain personally identifiable information,
-// with a stricter rule for the most sensitive PII types (SSN, credit card,
-// passport).
+// Blocks high-sensitivity identifiers that have a deterministic structure (SSNs, credit cards, IBANs, API keys) using fast regex pattern matching — high precision, low latency, few false positives. One forbid rule per identifier group.
 //
-// Context keys consumed:
-//   - pii_detected:  Bool
-//   - pii_types:     Set<String>
-//   - direction:     String ("input" | "output")
+// Sensitivity tiers and the structural (regex) / contextual (model) type
+// vocabulary are defined canonically in schemas/_shared/pii_taxonomy.json and
+// enforced by tools/lint-templates.
 //
-// Compliance:
-//   - GDPR, HIPAA, PCI-DSS (depending on data classification)
+// Context keys consumed:
+//   - pii_types: Set<String>  (union of structural lowercase + contextual uppercase types)
 //
 // Category:  privacy
 // Namespace: Guardrails
 // =============================================================================
 
-@id("privacy.block-pii-output")
-@name("Block PII in outputs")
-@description("Blocks process_prompt outputs when pii_detected is true.")
+@id("privacy.block-pii-national-id")
+@name("Block national ID numbers (structural)")
+@description("Blocks prompts, tool calls, and file reads/writes that contain a national ID (SSN, passport, or driver's license).")
 @severity("high")
-@tags("category:privacy,threat:pii,detection:rule,surface:process-prompt,compliance:gdpr")
-@reject_message("Response blocked: personally identifiable information was detected in the output.")
+@tags("category:privacy,threat:pii,detection:pattern,owasp:llm06")
+@reject_message("Content blocked: national identifier (SSN, passport, or driver's license) patterns detected.")
 forbid (
     principal,
-    action == Guardrails::Action::"process_prompt",
+    action in [Guardrails::Action::"process_prompt", Guardrails::Action::"call_tool", Guardrails::Action::"read_file", Guardrails::Action::"write_file"],
     resource
 )
 when {
-    context has pii_detected && context.pii_detected == true &&
-    context has direction && context.direction == "output"
+    context has pii_types &&
+    (
+        context.pii_types.contains("ssn") ||
+        context.pii_types.contains("passport") ||
+        context.pii_types.contains("national_id") ||
+        context.pii_types.contains("drivers_license")
+    )
 };
 
-@id("privacy.block-pii-sensitive")
-@name("Block sensitive PII types in outputs")
-@description("Blocks process_prompt outputs when pii_types contains SSN, credit_card, or passport.")
+@id("privacy.block-pii-credit-card")
+@name("Block credit card numbers (structural)")
+@description("Blocks prompts, tool calls, and file reads/writes that contain a credit card number.")
 @severity("critical")
-@tags("category:privacy,threat:pii,detection:rule,surface:process-prompt,compliance:gdpr,compliance:hipaa,compliance:pci-dss")
-@reject_message("Response blocked: highly sensitive PII (SSN, credit card, or passport) was detected.")
+@tags("category:privacy,threat:pii,detection:pattern,compliance:pci-dss,owasp:llm06")
+@reject_message("Content blocked: credit card number patterns detected.")
 forbid (
     principal,
-    action == Guardrails::Action::"process_prompt",
+    action in [Guardrails::Action::"process_prompt", Guardrails::Action::"call_tool", Guardrails::Action::"read_file", Guardrails::Action::"write_file"],
+    resource
+)
+when {
+    context has pii_types && context.pii_types.contains("credit_card")
+};
+
+@id("privacy.block-pii-bank-account")
+@name("Block bank account numbers (structural)")
+@description("Blocks prompts, tool calls, and file reads/writes that contain a bank account number (IBAN, SWIFT/BIC, or routing number).")
+@severity("critical")
+@tags("category:privacy,threat:pii,detection:pattern,owasp:llm06")
+@reject_message("Content blocked: bank account (IBAN) number patterns detected.")
+forbid (
+    principal,
+    action in [Guardrails::Action::"process_prompt", Guardrails::Action::"call_tool", Guardrails::Action::"read_file", Guardrails::Action::"write_file"],
     resource
 )
 when {
-    context has direction && context.direction == "output" &&
     context has pii_types &&
     (
-        context.pii_types.contains("ssn") ||
-        context.pii_types.contains("credit_card") ||
-        context.pii_types.contains("passport")
+        context.pii_types.contains("iban") ||
+        context.pii_types.contains("bank_account") ||
+        context.pii_types.contains("swift_bic") ||
+        context.pii_types.contains("aba_routing")
+    )
+};
+
+@id("privacy.block-pii-medical")
+@name("Block medical identifiers (structural)")
+@description("Blocks prompts, tool calls, and file reads/writes that contain medical data (record number, MBI, NPI, or blood type).")
+@severity("medium")
+@tags("category:privacy,threat:pii,detection:pattern,compliance:hipaa,owasp:llm06")
+@reject_message("Content blocked: medical record identifier patterns detected.")
+forbid (
+    principal,
+    action in [Guardrails::Action::"process_prompt", Guardrails::Action::"call_tool", Guardrails::Action::"read_file", Guardrails::Action::"write_file"],
+    resource
+)
+when {
+    context has pii_types &&
+    (
+        context.pii_types.contains("medical_record") ||
+        context.pii_types.contains("patient_record") ||
+        context.pii_types.contains("medicare_beneficiary_id") ||
+        context.pii_types.contains("npi") ||
+        context.pii_types.contains("medical_term") ||
+        context.pii_types.contains("blood_type")
+    )
+};
+
+@id("privacy.block-pii-tax-id")
+@name("Block tax identifiers (structural)")
+@description("Blocks prompts, tool calls, and file reads/writes that contain a tax ID (ITIN, EIN, or PTIN).")
+@severity("high")
+@tags("category:privacy,threat:pii,detection:pattern,owasp:llm06")
+@reject_message("Content blocked: tax identifier (ITIN or EIN) patterns detected.")
+forbid (
+    principal,
+    action in [Guardrails::Action::"process_prompt", Guardrails::Action::"call_tool", Guardrails::Action::"read_file", Guardrails::Action::"write_file"],
+    resource
+)
+when {
+    context has pii_types &&
+    (
+        context.pii_types.contains("itin") ||
+        context.pii_types.contains("ein") ||
+        context.pii_types.contains("ptin")
+    )
+};
+
+@id("privacy.block-pii-credential")
+@name("Block credentials (structural)")
+@description("Blocks prompts, tool calls, and file reads/writes that contain a credential or secret (API key, token, password hash, or private key).")
+@severity("critical")
+@tags("category:privacy,threat:pii,detection:pattern,owasp:llm06")
+@reject_message("Content blocked: credential or API key patterns detected.")
+forbid (
+    principal,
+    action in [Guardrails::Action::"process_prompt", Guardrails::Action::"call_tool", Guardrails::Action::"read_file", Guardrails::Action::"write_file"],
+    resource
+)
+when {
+    context has pii_types &&
+    (
+        context.pii_types.contains("aws_access_key") ||
+        context.pii_types.contains("api_key") ||
+        context.pii_types.contains("jwt_token") ||
+        context.pii_types.contains("encryption_key") ||
+        context.pii_types.contains("http_basic_auth") ||
+        context.pii_types.contains("gcp_credential") ||
+        context.pii_types.contains("gcp_api_key") ||
+        context.pii_types.contains("gcp_signed_policy") ||
+        context.pii_types.contains("session_cookie") ||
+        context.pii_types.contains("oauth_token") ||
+        context.pii_types.contains("tls_certificate") ||
+        context.pii_types.contains("password_hash") ||
+        context.pii_types.contains("csrf_token")
     )
 };
+
+@id("privacy.block-pii-crypto")
+@name("Block cryptocurrency addresses (structural)")
+@description("Blocks prompts, tool calls, and file reads/writes that contain a cryptocurrency wallet address.")
+@severity("high")
+@tags("category:privacy,threat:pii,detection:pattern,owasp:llm06")
+@reject_message("Content blocked: cryptocurrency wallet address patterns detected.")
+forbid (
+    principal,
+    action in [Guardrails::Action::"process_prompt", Guardrails::Action::"call_tool", Guardrails::Action::"read_file", Guardrails::Action::"write_file"],
+    resource
+)
+when {
+    context has pii_types &&
+    (
+        context.pii_types.contains("bitcoin_address") ||
+        context.pii_types.contains("ethereum_address")
+    )
+};
+`;
+const GUARDRAILS_PRIVACY_PII_MODEL_CEDAR = `// =============================================================================
+// Contextual PII (Tier 2)
+// =============================================================================
+// Blocks the same high-sensitivity identifier groups inferred from surrounding context by the ML PII model — catches unstructured or novel PII the structural patterns miss (higher recall). Requires the pii_model detector.
+//
+// Sensitivity tiers and the structural (regex) / contextual (model) type
+// vocabulary are defined canonically in schemas/_shared/pii_taxonomy.json and
+// enforced by tools/lint-templates.
+//
+// Context keys consumed:
+//   - pii_types: Set<String>  (union of structural lowercase + contextual uppercase types)
+//
+// Category:  privacy
+// Namespace: Guardrails
+// =============================================================================
+
+@id("privacy.block-pii-national-id-model")
+@name("Block national ID numbers (contextual)")
+@description("Blocks prompts, tool calls, and file reads/writes that contain a national ID (SSN, passport, or driver's license).")
+@severity("high")
+@tags("category:privacy,threat:pii,detection:ml,owasp:llm06")
+@reject_message("Content blocked: national identifier (SSN, passport, or driver's license) patterns detected.")
+forbid (
+    principal,
+    action in [Guardrails::Action::"process_prompt", Guardrails::Action::"call_tool", Guardrails::Action::"read_file", Guardrails::Action::"write_file"],
+    resource
+)
+when {
+    context has pii_types && context.pii_types.contains("NATIONAL_ID")
+};
+
+@id("privacy.block-pii-credit-card-model")
+@name("Block credit card numbers (contextual)")
+@description("Blocks prompts, tool calls, and file reads/writes that contain a credit card number.")
+@severity("critical")
+@tags("category:privacy,threat:pii,detection:ml,compliance:pci-dss,owasp:llm06")
+@reject_message("Content blocked: credit card number patterns detected.")
+forbid (
+    principal,
+    action in [Guardrails::Action::"process_prompt", Guardrails::Action::"call_tool", Guardrails::Action::"read_file", Guardrails::Action::"write_file"],
+    resource
+)
+when {
+    context has pii_types && context.pii_types.contains("CREDIT_CARD")
+};
+
+@id("privacy.block-pii-bank-account-model")
+@name("Block bank account numbers (contextual)")
+@description("Blocks prompts, tool calls, and file reads/writes that contain a bank account number (IBAN, SWIFT/BIC, or routing number).")
+@severity("critical")
+@tags("category:privacy,threat:pii,detection:ml,owasp:llm06")
+@reject_message("Content blocked: bank account (IBAN) number patterns detected.")
+forbid (
+    principal,
+    action in [Guardrails::Action::"process_prompt", Guardrails::Action::"call_tool", Guardrails::Action::"read_file", Guardrails::Action::"write_file"],
+    resource
+)
+when {
+    context has pii_types && context.pii_types.contains("ACCOUNT_NUMBER")
+};
+
+@id("privacy.block-pii-medical-model")
+@name("Block medical identifiers (contextual)")
+@description("Blocks prompts, tool calls, and file reads/writes that contain medical data (record number, MBI, NPI, or blood type).")
+@severity("medium")
+@tags("category:privacy,threat:pii,detection:ml,compliance:hipaa,owasp:llm06")
+@reject_message("Content blocked: medical record identifier patterns detected.")
+forbid (
+    principal,
+    action in [Guardrails::Action::"process_prompt", Guardrails::Action::"call_tool", Guardrails::Action::"read_file", Guardrails::Action::"write_file"],
+    resource
+)
+when {
+    context has pii_types && context.pii_types.contains("MEDICAL")
+};
+
+@id("privacy.block-pii-credential-model")
+@name("Block credentials (contextual)")
+@description("Blocks prompts, tool calls, and file reads/writes that contain a credential or secret (API key, token, password hash, or private key).")
+@severity("critical")
+@tags("category:privacy,threat:pii,detection:ml,owasp:llm06")
+@reject_message("Content blocked: credential or API key patterns detected.")
+forbid (
+    principal,
+    action in [Guardrails::Action::"process_prompt", Guardrails::Action::"call_tool", Guardrails::Action::"read_file", Guardrails::Action::"write_file"],
+    resource
+)
+when {
+    context has pii_types && context.pii_types.contains("CREDENTIAL")
+};
 `;
 const GUARDRAILS_TRUST_SAFETY_TOXICITY_CEDAR = `// =============================================================================
 // Toxicity & Content Moderation (Default)
@@ -972,42 +1172,6 @@ when {
     context has jailbreak_score && context.jailbreak_score >= 66
 };
 `;
-const GUARDRAILS_PRIVACY_CHAT_BLOCK_PII_CEDAR = `// =============================================================================
-// Chat Assistant — Privacy
-// =============================================================================
-// PII protection for customer-facing chatbots. Blocks PII in both directions
-// (input + output) across prompts, tool calls, and file operations.
-//
-// Context keys consumed:
-//   - pii_detected: Bool
-//
-// Compliance:
-//   - GDPR Art. 32, HIPAA, PCI-DSS
-//
-// Category:  privacy
-// Namespace: Guardrails
-// =============================================================================
-
-@id("privacy.chat-block-pii")
-@name("Block PII in chat (both directions)")
-@description("Blocks process_prompt, call_tool, read_file, and write_file when pii_detected is true.")
-@severity("high")
-@tags("category:privacy,threat:pii,detection:rule,compliance:gdpr,compliance:hipaa")
-@reject_message("Request blocked: personally identifiable information was detected.")
-forbid (
-    principal,
-    action in [
-        Guardrails::Action::"process_prompt",
-        Guardrails::Action::"call_tool",
-        Guardrails::Action::"read_file",
-        Guardrails::Action::"write_file"
-    ],
-    resource
-)
-when {
-    context has pii_detected && context.pii_detected == true
-};
-`;
 const GUARDRAILS_TRUST_SAFETY_CHAT_ASSISTANT_CEDAR = `// =============================================================================
 // Chat Assistant — Trust & Safety
 // =============================================================================
@@ -1526,70 +1690,6 @@ when {
     context has pattern_type && context.pattern_type == "destructive_sequence"
 };
 `;
-const GUARDRAILS_PRIVACY_DATA_PIPELINE_CEDAR = `// =============================================================================
-// Data Pipeline — Privacy
-// =============================================================================
-// Strict PII protection for RAG pipelines and data processing agents.
-// Zero-tolerance for sensitive PII types — data pipelines must not leak PII.
-//
-// Context keys consumed:
-//   - pii_detected: Bool
-//   - pii_types:    Set<String>
-//
-// Compliance:
-//   - GDPR Art. 32, HIPAA §164.312, PCI DSS 3.4
-//
-// Category:  privacy
-// Namespace: Guardrails
-// =============================================================================
-
-@id("privacy.data-pipeline-block-pii")
-@name("Block PII in data pipeline")
-@description("Blocks process_prompt, call_tool, read_file, and write_file when pii_detected is true.")
-@severity("critical")
-@tags("category:privacy,threat:pii,detection:rule,compliance:gdpr,compliance:hipaa")
-@reject_message("Request blocked: PII detected in a data pipeline — pipelines must not process or leak personal data.")
-forbid (
-    principal,
-    action in [
-        Guardrails::Action::"process_prompt",
-        Guardrails::Action::"call_tool",
-        Guardrails::Action::"read_file",
-        Guardrails::Action::"write_file"
-    ],
-    resource
-)
-when {
-    context has pii_detected && context.pii_detected == true
-};
-
-@id("privacy.data-pipeline-block-pii-sensitive")
-@name("Block sensitive PII types in data pipeline")
-@description("Blocks process_prompt, call_tool, read_file, and write_file when pii_types contains SSN, credit_card, passport, medical_id, or tax_id.")
-@severity("critical")
-@tags("category:privacy,threat:pii,detection:rule,compliance:gdpr,compliance:hipaa,compliance:pci-dss")
-@reject_message("Request blocked: highly sensitive PII (SSN, credit card, passport, medical ID, or tax ID) detected in a data pipeline.")
-forbid (
-    principal,
-    action in [
-        Guardrails::Action::"process_prompt",
-        Guardrails::Action::"call_tool",
-        Guardrails::Action::"read_file",
-        Guardrails::Action::"write_file"
-    ],
-    resource
-)
-when {
-    context has pii_types &&
-    (
-        context.pii_types.contains("ssn") ||
-        context.pii_types.contains("credit_card") ||
-        context.pii_types.contains("passport") ||
-        context.pii_types.contains("medical_id") ||
-        context.pii_types.contains("tax_id")
-    )
-};
-`;
 const GUARDRAILS_DATA_PROTECTION_DATA_PIPELINE_CEDAR = `// =============================================================================
 // Data Pipeline — Data Protection (Secrets)
 // =============================================================================
@@ -2624,67 +2724,469 @@ when {
 };
 `;
 const GUARDRAILS_PRIVACY_ADVANCED_PII_CEDAR = `// =============================================================================
-// Advanced Detection — PII
+// Comprehensive PII (Tier 3)
 // =============================================================================
-// Layered PII detection: bulk exposure threshold, ML classifier confidence,
-// and file-operation blocking. Goes beyond the boolean pii_detected flag.
+// Blocks every PII entity type — structural and contextual, sensitive and situational — one forbid rule per group so any individual type can be toggled off. High false-positive surface; opt-in.
 //
-// Context keys consumed:
-//   - pii_count:      Long
-//   - pii_score: Long (0-100)
-//   - pii_detected:   Bool
+// Sensitivity tiers and the structural (regex) / contextual (model) type
+// vocabulary are defined canonically in schemas/_shared/pii_taxonomy.json and
+// enforced by tools/lint-templates.
 //
-// Compliance:
-//   - PCI DSS 3.4, GDPR Art. 32, HIPAA §164.312, CCPA §1798.150
-//   - NIST 800-53 SI-4
+// Context keys consumed:
+//   - pii_types: Set<String>  (union of structural lowercase + contextual uppercase types)
 //
 // Category:  privacy
 // Namespace: Guardrails
 // =============================================================================
 
-@id("privacy.advanced-block-pii-bulk")
-@name("Block bulk PII exposure")
-@description("Blocks process_prompt and call_tool when pii_count >= 3.")
+@id("privacy.block-pii-national-id-all")
+@name("Block national ID numbers (comprehensive)")
+@description("Blocks prompts, tool calls, and file reads/writes that contain a national ID (SSN, passport, or driver's license).")
+@severity("high")
+@tags("category:privacy,threat:pii,detection:pattern,owasp:llm06")
+@reject_message("Content blocked: national identifier (SSN, passport, or driver's license) patterns detected.")
+forbid (
+    principal,
+    action in [Guardrails::Action::"process_prompt", Guardrails::Action::"call_tool", Guardrails::Action::"read_file", Guardrails::Action::"write_file"],
+    resource
+)
+when {
+    context has pii_types &&
+    (
+        context.pii_types.contains("ssn") ||
+        context.pii_types.contains("passport") ||
+        context.pii_types.contains("national_id") ||
+        context.pii_types.contains("drivers_license") ||
+        context.pii_types.contains("NATIONAL_ID")
+    )
+};
+
+@id("privacy.block-pii-credit-card-all")
+@name("Block credit card numbers (comprehensive)")
+@description("Blocks prompts, tool calls, and file reads/writes that contain a credit card number.")
 @severity("critical")
-@tags("category:privacy,threat:pii,threat:exfiltration,detection:aggregate,compliance:gdpr,compliance:pci-dss")
-@reject_message("Content blocked: 3+ PII items detected — bulk exposure indicates data dump or exfiltration.")
+@tags("category:privacy,threat:pii,detection:pattern,compliance:pci-dss,owasp:llm06")
+@reject_message("Content blocked: credit card number patterns detected.")
 forbid (
     principal,
-    action in [Guardrails::Action::"process_prompt", Guardrails::Action::"call_tool"],
+    action in [Guardrails::Action::"process_prompt", Guardrails::Action::"call_tool", Guardrails::Action::"read_file", Guardrails::Action::"write_file"],
     resource
 )
 when {
-    context has pii_count && context.pii_count >= 3
+    context has pii_types &&
+    (
+        context.pii_types.contains("credit_card") ||
+        context.pii_types.contains("CREDIT_CARD")
+    )
 };
 
-@id("privacy.advanced-block-pii-ml")
-@name("Block high-confidence PII (ML)")
-@description("Blocks process_prompt and call_tool when pii_score >= 80.")
+@id("privacy.block-pii-bank-account-all")
+@name("Block bank account numbers (comprehensive)")
+@description("Blocks prompts, tool calls, and file reads/writes that contain a bank account number (IBAN, SWIFT/BIC, or routing number).")
 @severity("critical")
-@tags("category:privacy,threat:pii,detection:ml,compliance:gdpr,compliance:hipaa")
-@reject_message("Content blocked: the ML classifier detected personally identifiable information with high confidence.")
+@tags("category:privacy,threat:pii,detection:pattern,owasp:llm06")
+@reject_message("Content blocked: bank account (IBAN) number patterns detected.")
 forbid (
     principal,
-    action in [Guardrails::Action::"process_prompt", Guardrails::Action::"call_tool"],
+    action in [Guardrails::Action::"process_prompt", Guardrails::Action::"call_tool", Guardrails::Action::"read_file", Guardrails::Action::"write_file"],
+    resource
+)
+when {
+    context has pii_types &&
+    (
+        context.pii_types.contains("iban") ||
+        context.pii_types.contains("bank_account") ||
+        context.pii_types.contains("swift_bic") ||
+        context.pii_types.contains("aba_routing") ||
+        context.pii_types.contains("ACCOUNT_NUMBER")
+    )
+};
+
+@id("privacy.block-pii-medical-all")
+@name("Block medical identifiers (comprehensive)")
+@description("Blocks prompts, tool calls, and file reads/writes that contain medical data (record number, MBI, NPI, or blood type).")
+@severity("medium")
+@tags("category:privacy,threat:pii,detection:pattern,compliance:hipaa,owasp:llm06")
+@reject_message("Content blocked: medical record identifier patterns detected.")
+forbid (
+    principal,
+    action in [Guardrails::Action::"process_prompt", Guardrails::Action::"call_tool", Guardrails::Action::"read_file", Guardrails::Action::"write_file"],
+    resource
+)
+when {
+    context has pii_types &&
+    (
+        context.pii_types.contains("medical_record") ||
+        context.pii_types.contains("patient_record") ||
+        context.pii_types.contains("medicare_beneficiary_id") ||
+        context.pii_types.contains("npi") ||
+        context.pii_types.contains("medical_term") ||
+        context.pii_types.contains("blood_type") ||
+        context.pii_types.contains("MEDICAL")
+    )
+};
+
+@id("privacy.block-pii-tax-id-all")
+@name("Block tax identifiers (comprehensive)")
+@description("Blocks prompts, tool calls, and file reads/writes that contain a tax ID (ITIN, EIN, or PTIN).")
+@severity("high")
+@tags("category:privacy,threat:pii,detection:pattern,owasp:llm06")
+@reject_message("Content blocked: tax identifier (ITIN or EIN) patterns detected.")
+forbid (
+    principal,
+    action in [Guardrails::Action::"process_prompt", Guardrails::Action::"call_tool", Guardrails::Action::"read_file", Guardrails::Action::"write_file"],
+    resource
+)
+when {
+    context has pii_types &&
+    (
+        context.pii_types.contains("itin") ||
+        context.pii_types.contains("ein") ||
+        context.pii_types.contains("ptin")
+    )
+};
+
+@id("privacy.block-pii-credential-all")
+@name("Block credentials (comprehensive)")
+@description("Blocks prompts, tool calls, and file reads/writes that contain a credential or secret (API key, token, password hash, or private key).")
+@severity("critical")
+@tags("category:privacy,threat:pii,detection:pattern,owasp:llm06")
+@reject_message("Content blocked: credential or API key patterns detected.")
+forbid (
+    principal,
+    action in [Guardrails::Action::"process_prompt", Guardrails::Action::"call_tool", Guardrails::Action::"read_file", Guardrails::Action::"write_file"],
+    resource
+)
+when {
+    context has pii_types &&
+    (
+        context.pii_types.contains("aws_access_key") ||
+        context.pii_types.contains("api_key") ||
+        context.pii_types.contains("jwt_token") ||
+        context.pii_types.contains("encryption_key") ||
+        context.pii_types.contains("http_basic_auth") ||
+        context.pii_types.contains("gcp_credential") ||
+        context.pii_types.contains("gcp_api_key") ||
+        context.pii_types.contains("gcp_signed_policy") ||
+        context.pii_types.contains("session_cookie") ||
+        context.pii_types.contains("oauth_token") ||
+        context.pii_types.contains("tls_certificate") ||
+        context.pii_types.contains("password_hash") ||
+        context.pii_types.contains("csrf_token") ||
+        context.pii_types.contains("CREDENTIAL")
+    )
+};
+
+@id("privacy.block-pii-crypto-all")
+@name("Block cryptocurrency addresses (comprehensive)")
+@description("Blocks prompts, tool calls, and file reads/writes that contain a cryptocurrency wallet address.")
+@severity("high")
+@tags("category:privacy,threat:pii,detection:pattern,owasp:llm06")
+@reject_message("Content blocked: cryptocurrency wallet address patterns detected.")
+forbid (
+    principal,
+    action in [Guardrails::Action::"process_prompt", Guardrails::Action::"call_tool", Guardrails::Action::"read_file", Guardrails::Action::"write_file"],
+    resource
+)
+when {
+    context has pii_types &&
+    (
+        context.pii_types.contains("bitcoin_address") ||
+        context.pii_types.contains("ethereum_address")
+    )
+};
+
+@id("privacy.block-pii-names-all")
+@name("Block personal names (comprehensive)")
+@description("Blocks prompts, tool calls, and file reads/writes that contain a personal name.")
+@severity("low")
+@tags("category:privacy,threat:pii,detection:pattern,owasp:llm06")
+@reject_message("Content blocked: personal name patterns detected.")
+forbid (
+    principal,
+    action in [Guardrails::Action::"process_prompt", Guardrails::Action::"call_tool", Guardrails::Action::"read_file", Guardrails::Action::"write_file"],
+    resource
+)
+when {
+    context has pii_types &&
+    (
+        context.pii_types.contains("person_name") ||
+        context.pii_types.contains("PERSON")
+    )
+};
+
+@id("privacy.block-pii-email-all")
+@name("Block email addresses (comprehensive)")
+@description("Blocks prompts, tool calls, and file reads/writes that contain an email address.")
+@severity("medium")
+@tags("category:privacy,threat:pii,detection:pattern,owasp:llm06")
+@reject_message("Content blocked: email address patterns detected.")
+forbid (
+    principal,
+    action in [Guardrails::Action::"process_prompt", Guardrails::Action::"call_tool", Guardrails::Action::"read_file", Guardrails::Action::"write_file"],
+    resource
+)
+when {
+    context has pii_types &&
+    (
+        context.pii_types.contains("email") ||
+        context.pii_types.contains("EMAIL_ADDRESS")
+    )
+};
+
+@id("privacy.block-pii-phone-all")
+@name("Block phone numbers (comprehensive)")
+@description("Blocks prompts, tool calls, and file reads/writes that contain a phone number.")
+@severity("medium")
+@tags("category:privacy,threat:pii,detection:pattern,owasp:llm06")
+@reject_message("Content blocked: phone number patterns detected.")
+forbid (
+    principal,
+    action in [Guardrails::Action::"process_prompt", Guardrails::Action::"call_tool", Guardrails::Action::"read_file", Guardrails::Action::"write_file"],
+    resource
+)
+when {
+    context has pii_types &&
+    (
+        context.pii_types.contains("phone") ||
+        context.pii_types.contains("PHONE_NUMBER")
+    )
+};
+
+@id("privacy.block-pii-datetime-all")
+@name("Block dates and times (comprehensive)")
+@description("Blocks prompts, tool calls, and file reads/writes that contain a date or time (date of birth, timestamp, or card expiry).")
+@severity("medium")
+@tags("category:privacy,threat:pii,detection:pattern,owasp:llm06")
+@reject_message("Content blocked: date or time patterns detected.")
+forbid (
+    principal,
+    action in [Guardrails::Action::"process_prompt", Guardrails::Action::"call_tool", Guardrails::Action::"read_file", Guardrails::Action::"write_file"],
+    resource
+)
+when {
+    context has pii_types &&
+    (
+        context.pii_types.contains("date_of_birth") ||
+        context.pii_types.contains("date_time") ||
+        context.pii_types.contains("time") ||
+        context.pii_types.contains("card_expiry") ||
+        context.pii_types.contains("DATE_TIME")
+    )
+};
+
+@id("privacy.block-pii-url-all")
+@name("Block URLs (comprehensive)")
+@description("Blocks prompts, tool calls, and file reads/writes that contain a URL.")
+@severity("low")
+@tags("category:privacy,threat:pii,detection:pattern,owasp:llm06")
+@reject_message("Content blocked: URL patterns detected.")
+forbid (
+    principal,
+    action in [Guardrails::Action::"process_prompt", Guardrails::Action::"call_tool", Guardrails::Action::"read_file", Guardrails::Action::"write_file"],
+    resource
+)
+when {
+    context has pii_types &&
+    (
+        context.pii_types.contains("url") ||
+        context.pii_types.contains("URL")
+    )
+};
+
+@id("privacy.block-pii-location-all")
+@name("Block locations (comprehensive)")
+@description("Blocks prompts, tool calls, and file reads/writes that contain a location (street address, postal code, or military address).")
+@severity("low")
+@tags("category:privacy,threat:pii,detection:pattern,owasp:llm06")
+@reject_message("Content blocked: street address or location patterns detected.")
+forbid (
+    principal,
+    action in [Guardrails::Action::"process_prompt", Guardrails::Action::"call_tool", Guardrails::Action::"read_file", Guardrails::Action::"write_file"],
+    resource
+)
+when {
+    context has pii_types &&
+    (
+        context.pii_types.contains("street_address") ||
+        context.pii_types.contains("zip_code") ||
+        context.pii_types.contains("military_address") ||
+        context.pii_types.contains("LOCATION")
+    )
+};
+
+@id("privacy.block-pii-organization-all")
+@name("Block organization names (comprehensive)")
+@description("Blocks prompts, tool calls, and file reads/writes that contain an organization name.")
+@severity("low")
+@tags("category:privacy,threat:pii,detection:pattern,owasp:llm06")
+@reject_message("Content blocked: organization name patterns detected.")
+forbid (
+    principal,
+    action in [Guardrails::Action::"process_prompt", Guardrails::Action::"call_tool", Guardrails::Action::"read_file", Guardrails::Action::"write_file"],
     resource
 )
 when {
-    context has pii_score && context.pii_score >= 80
+    context has pii_types &&
+    (
+        context.pii_types.contains("organization") ||
+        context.pii_types.contains("ORGANIZATION")
+    )
 };
 
-@id("privacy.advanced-block-pii-file-ops")
-@name("Block PII in file operations")
-@description("Blocks read_file and write_file when pii_detected is true.")
+@id("privacy.block-pii-occupation-all")
+@name("Block occupations (comprehensive)")
+@description("Blocks prompts, tool calls, and file reads/writes that contain an occupation.")
+@severity("low")
+@tags("category:privacy,threat:pii,detection:pattern,owasp:llm06")
+@reject_message("Content blocked: occupation patterns detected.")
+forbid (
+    principal,
+    action in [Guardrails::Action::"process_prompt", Guardrails::Action::"call_tool", Guardrails::Action::"read_file", Guardrails::Action::"write_file"],
+    resource
+)
+when {
+    context has pii_types &&
+    (
+        context.pii_types.contains("occupation") ||
+        context.pii_types.contains("OCCUPATION")
+    )
+};
+
+@id("privacy.block-pii-username-all")
+@name("Block usernames (comprehensive)")
+@description("Blocks prompts, tool calls, and file reads/writes that contain a username.")
+@severity("low")
+@tags("category:privacy,threat:pii,detection:pattern,owasp:llm06")
+@reject_message("Content blocked: username patterns detected.")
+forbid (
+    principal,
+    action in [Guardrails::Action::"process_prompt", Guardrails::Action::"call_tool", Guardrails::Action::"read_file", Guardrails::Action::"write_file"],
+    resource
+)
+when {
+    context has pii_types &&
+    (
+        context.pii_types.contains("username") ||
+        context.pii_types.contains("USERNAME")
+    )
+};
+
+@id("privacy.block-pii-employee-customer-id-all")
+@name("Block employee or customer IDs (comprehensive)")
+@description("Blocks prompts, tool calls, and file reads/writes that contain an employee or customer ID.")
+@severity("medium")
+@tags("category:privacy,threat:pii,detection:pattern,owasp:llm06")
+@reject_message("Content blocked: employee or customer identifier patterns detected.")
+forbid (
+    principal,
+    action in [Guardrails::Action::"process_prompt", Guardrails::Action::"call_tool", Guardrails::Action::"read_file", Guardrails::Action::"write_file"],
+    resource
+)
+when {
+    context has pii_types &&
+    (
+        context.pii_types.contains("employee_id") ||
+        context.pii_types.contains("customer_id") ||
+        context.pii_types.contains("EMPLOYEE_ID") ||
+        context.pii_types.contains("CUSTOMER_ID")
+    )
+};
+
+@id("privacy.block-pii-device-id-all")
+@name("Block device and network identifiers (comprehensive)")
+@description("Blocks prompts, tool calls, and file reads/writes that contain a device or network identifier (IP, MAC, IMEI, or UUID).")
+@severity("medium")
+@tags("category:privacy,threat:pii,detection:pattern,owasp:llm06")
+@reject_message("Content blocked: device or network identifier patterns detected.")
+forbid (
+    principal,
+    action in [Guardrails::Action::"process_prompt", Guardrails::Action::"call_tool", Guardrails::Action::"read_file", Guardrails::Action::"write_file"],
+    resource
+)
+when {
+    context has pii_types &&
+    (
+        context.pii_types.contains("device_id") ||
+        context.pii_types.contains("ip_address") ||
+        context.pii_types.contains("ipv6_address") ||
+        context.pii_types.contains("imei") ||
+        context.pii_types.contains("device_serial") ||
+        context.pii_types.contains("mac_address") ||
+        context.pii_types.contains("user_agent") ||
+        context.pii_types.contains("serial_number") ||
+        context.pii_types.contains("uuid") ||
+        context.pii_types.contains("DEVICE_ID")
+    )
+};
+
+@id("privacy.block-pii-vehicle-all")
+@name("Block vehicle identifiers (comprehensive)")
+@description("Blocks prompts, tool calls, and file reads/writes that contain a vehicle identifier (VIN or license plate).")
+@severity("medium")
+@tags("category:privacy,threat:pii,detection:pattern,owasp:llm06")
+@reject_message("Content blocked: vehicle identifier (VIN or plate) patterns detected.")
+forbid (
+    principal,
+    action in [Guardrails::Action::"process_prompt", Guardrails::Action::"call_tool", Guardrails::Action::"read_file", Guardrails::Action::"write_file"],
+    resource
+)
+when {
+    context has pii_types &&
+    (
+        context.pii_types.contains("vin") ||
+        context.pii_types.contains("license_plate") ||
+        context.pii_types.contains("VEHICLE_IDENTIFIER")
+    )
+};
+
+@id("privacy.block-pii-financial-all")
+@name("Block financial amounts (comprehensive)")
+@description("Blocks prompts, tool calls, and file reads/writes that contain a financial amount or transaction ID.")
+@severity("medium")
+@tags("category:privacy,threat:pii,detection:pattern,owasp:llm06")
+@reject_message("Content blocked: salary or financial amount patterns detected.")
+forbid (
+    principal,
+    action in [Guardrails::Action::"process_prompt", Guardrails::Action::"call_tool", Guardrails::Action::"read_file", Guardrails::Action::"write_file"],
+    resource
+)
+when {
+    context has pii_types &&
+    (
+        context.pii_types.contains("salary") ||
+        context.pii_types.contains("financial_amount") ||
+        context.pii_types.contains("transaction_id") ||
+        context.pii_types.contains("FINANCIAL")
+    )
+};
+
+@id("privacy.block-pii-sensitive-attribute-all")
+@name("Block sensitive attributes (comprehensive)")
+@description("Blocks prompts, tool calls, and file reads/writes that contain a sensitive personal attribute (ethnicity, religion, age, etc.).")
 @severity("high")
-@tags("category:privacy,threat:pii,detection:rule,compliance:gdpr")
-@reject_message("File operation blocked: personally identifiable information detected in file content.")
+@tags("category:privacy,threat:pii,detection:pattern,owasp:llm06")
+@reject_message("Content blocked: sensitive attribute (ethnicity, religion, etc.) patterns detected.")
 forbid (
     principal,
-    action in [Guardrails::Action::"read_file", Guardrails::Action::"write_file"],
+    action in [Guardrails::Action::"process_prompt", Guardrails::Action::"call_tool", Guardrails::Action::"read_file", Guardrails::Action::"write_file"],
     resource
 )
 when {
-    context has pii_detected && context.pii_detected == true
+    context has pii_types &&
+    (
+        context.pii_types.contains("ethnicity") ||
+        context.pii_types.contains("religion") ||
+        context.pii_types.contains("sexual_orientation") ||
+        context.pii_types.contains("political_affiliation") ||
+        context.pii_types.contains("nationality") ||
+        context.pii_types.contains("age") ||
+        context.pii_types.contains("gender") ||
+        context.pii_types.contains("marital_status") ||
+        context.pii_types.contains("education_level") ||
+        context.pii_types.contains("employment_status") ||
+        context.pii_types.contains("SENSITIVE_ATTRIBUTE")
+    )
 };
 `;
 const GUARDRAILS_SECURITY_ADVANCED_BLOCK_CRITICAL_SEVERITY_CEDAR = `// =============================================================================
@@ -2900,12 +3402,21 @@ export const GUARDRAILS_TEMPLATES = [
     },
     {
         id: 'privacy.defaults',
-        name: 'PII Detection',
-        description: 'Block LLM outputs containing PII, with a stricter rule for SSN, credit card, and passport numbers.',
+        name: 'Structural PII',
+        description: 'Block well-formatted sensitive identifiers — SSNs, credit cards, IBANs, API keys — via fast deterministic pattern matching. High precision, low latency, few false positives; use as the always-on baseline.',
         category: 'privacy',
         cedarText: GUARDRAILS_PRIVACY_DEFAULTS_CEDAR,
         severity: 'critical',
-        tags: ['category:privacy', 'threat:pii', 'compliance:gdpr', 'compliance:hipaa', 'compliance:pci-dss'],
+        tags: ['category:privacy', 'threat:pii', 'detection:pattern', 'compliance:pci-dss', 'compliance:hipaa'],
+    },
+    {
+        id: 'privacy.pii-model',
+        name: 'Contextual PII',
+        description: 'Block the same sensitive identifiers when the ML model infers them from surrounding context — catches unstructured or novel PII the structural patterns miss. Higher recall; requires the pii_model detector.',
+        category: 'privacy',
+        cedarText: GUARDRAILS_PRIVACY_PII_MODEL_CEDAR,
+        severity: 'critical',
+        tags: ['category:privacy', 'threat:pii', 'detection:ml', 'compliance:pci-dss', 'compliance:hipaa'],
     },
     {
         id: 'trust-safety.toxicity',
@@ -2979,15 +3490,6 @@ export const GUARDRAILS_TEMPLATES = [
         severity: 'high',
         tags: ['category:security', 'threat:injection', 'threat:jailbreak', 'detection:ml'],
     },
-    {
-        id: 'privacy.chat-block-pii',
-        name: 'Chat Assistant — Privacy',
-        description: 'Block PII in both user inputs and assistant outputs for chat applications.',
-        category: 'privacy',
-        cedarText: GUARDRAILS_PRIVACY_CHAT_BLOCK_PII_CEDAR,
-        severity: 'high',
-        tags: ['category:privacy', 'threat:pii', 'compliance:gdpr'],
-    },
     {
         id: 'trust-safety.chat-assistant',
         name: 'Chat Assistant — Trust & Safety',
@@ -3042,15 +3544,6 @@ export const GUARDRAILS_TEMPLATES = [
         severity: 'critical',
         tags: ['category:agent-security', 'threat:tool-poisoning', 'threat:indirect-injection', 'threat:exfiltration', 'owasp:asi01', 'owasp:asi04'],
     },
-    {
-        id: 'privacy.data-pipeline',
-        name: 'Data Pipeline — Privacy',
-        description: 'Strict PII protection with zero tolerance for sensitive PII types in data pipelines.',
-        category: 'privacy',
-        cedarText: GUARDRAILS_PRIVACY_DATA_PIPELINE_CEDAR,
-        severity: 'critical',
-        tags: ['category:privacy', 'threat:pii', 'compliance:gdpr', 'compliance:hipaa'],
-    },
     {
         id: 'data-protection.data-pipeline',
         name: 'Data Pipeline — Secrets',
@@ -3152,12 +3645,12 @@ export const GUARDRAILS_TEMPLATES = [
     },
     {
         id: 'privacy.advanced-pii',
-        name: 'Advanced Detection — PII',
-        description: 'Bulk PII exposure threshold, ML classifier confidence, and file-operation blocking.',
+        name: 'Comprehensive PII',
+        description: 'Block every PII type — structural and contextual, sensitive and situational. Situational entities (names, locations, dates, etc.) are real PII but appear in ordinary text, so this tier flags often; one forbid rule per entity lets you disable the ones you don\'t need. Opt-in for strict environments.',
         category: 'privacy',
         cedarText: GUARDRAILS_PRIVACY_ADVANCED_PII_CEDAR,
         severity: 'critical',
-        tags: ['category:privacy', 'threat:pii', 'threat:exfiltration', 'detection:ml', 'compliance:gdpr'],
+        tags: ['category:privacy', 'threat:pii', 'detection:pattern', 'compliance:pci-dss', 'compliance:hipaa'],
     },
     {
         id: 'security.advanced-block-critical-severity',
@@ -3267,16 +3760,44 @@ export const GUARDRAILS_TEMPLATES_JSON = `{
       "category": "security",
       "file": "defaults/injection.cedar",
       "severity": "high",
-      "tags": ["category:security", "threat:injection", "threat:jailbreak", "detection:ml", "owasp:llm01", "owasp:llm02"]
+      "tags": [
+        "category:security",
+        "threat:injection",
+        "threat:jailbreak",
+        "detection:ml",
+        "owasp:llm01",
+        "owasp:llm02"
+      ]
     },
     {
       "id": "privacy.defaults",
-      "name": "PII Detection",
-      "description": "Block LLM outputs containing PII, with a stricter rule for SSN, credit card, and passport numbers.",
+      "name": "Structural PII",
+      "description": "Block well-formatted sensitive identifiers — SSNs, credit cards, IBANs, API keys — via fast deterministic pattern matching. High precision, low latency, few false positives; use as the always-on baseline.",
       "category": "privacy",
       "file": "defaults/pii.cedar",
       "severity": "critical",
-      "tags": ["category:privacy", "threat:pii", "compliance:gdpr", "compliance:hipaa", "compliance:pci-dss"]
+      "tags": [
+        "category:privacy",
+        "threat:pii",
+        "detection:pattern",
+        "compliance:pci-dss",
+        "compliance:hipaa"
+      ]
+    },
+    {
+      "id": "privacy.pii-model",
+      "name": "Contextual PII",
+      "description": "Block the same sensitive identifiers when the ML model infers them from surrounding context — catches unstructured or novel PII the structural patterns miss. Higher recall; requires the pii_model detector.",
+      "category": "privacy",
+      "file": "defaults/pii_model.cedar",
+      "severity": "critical",
+      "tags": [
+        "category:privacy",
+        "threat:pii",
+        "detection:ml",
+        "compliance:pci-dss",
+        "compliance:hipaa"
+      ]
     },
     {
       "id": "trust-safety.toxicity",
@@ -3285,7 +3806,13 @@ export const GUARDRAILS_TEMPLATES_JSON = `{
       "category": "trust-safety",
       "file": "defaults/toxicity.cedar",
       "severity": "critical",
-      "tags": ["category:trust-safety", "threat:harmful", "threat:hate-speech", "detection:ml", "compliance:eu-ai-act"]
+      "tags": [
+        "category:trust-safety",
+        "threat:harmful",
+        "threat:hate-speech",
+        "detection:ml",
+        "compliance:eu-ai-act"
+      ]
     },
     {
       "id": "agent-security.tool-risk",
@@ -3294,7 +3821,12 @@ export const GUARDRAILS_TEMPLATES_JSON = `{
       "category": "agent-security",
       "file": "defaults/tool_risk.cedar",
       "severity": "critical",
-      "tags": ["category:agent-security", "threat:command-injection", "owasp:llm06", "owasp:asi02"]
+      "tags": [
+        "category:agent-security",
+        "threat:command-injection",
+        "owasp:llm06",
+        "owasp:asi02"
+      ]
     },
     {
       "id": "agent-security.defaults",
@@ -3303,7 +3835,15 @@ export const GUARDRAILS_TEMPLATES_JSON = `{
       "category": "agent-security",
       "file": "defaults/agentic_safety.cedar",
       "severity": "critical",
-      "tags": ["category:agent-security", "threat:loop", "threat:exfiltration", "threat:tool-poisoning", "threat:rug-pull", "owasp:asi01", "owasp:asi04"]
+      "tags": [
+        "category:agent-security",
+        "threat:loop",
+        "threat:exfiltration",
+        "threat:tool-poisoning",
+        "threat:rug-pull",
+        "owasp:asi01",
+        "owasp:asi04"
+      ]
     },
     {
       "id": "security.patterns",
@@ -3312,7 +3852,14 @@ export const GUARDRAILS_TEMPLATES_JSON = `{
       "category": "security",
       "file": "defaults/security_patterns.cedar",
       "severity": "critical",
-      "tags": ["category:security", "threat:command-injection", "threat:sql-injection", "threat:path-traversal", "detection:pattern", "mitre:t1059"]
+      "tags": [
+        "category:security",
+        "threat:command-injection",
+        "threat:sql-injection",
+        "threat:path-traversal",
+        "detection:pattern",
+        "mitre:t1059"
+      ]
     },
     {
       "id": "trust-safety.semantic",
@@ -3321,7 +3868,13 @@ export const GUARDRAILS_TEMPLATES_JSON = `{
       "category": "trust-safety",
       "file": "defaults/semantic.cedar",
       "severity": "critical",
-      "tags": ["category:trust-safety", "threat:harmful", "detection:ml", "compliance:eu-ai-act", "compliance:iso-42001"]
+      "tags": [
+        "category:trust-safety",
+        "threat:harmful",
+        "detection:ml",
+        "compliance:eu-ai-act",
+        "compliance:iso-42001"
+      ]
     },
     {
       "id": "agent-identity.defaults",
@@ -3348,16 +3901,12 @@ export const GUARDRAILS_TEMPLATES_JSON = `{
       "category": "security",
       "file": "profiles/chat_assistant/security.cedar",
       "severity": "high",
-      "tags": ["category:security", "threat:injection", "threat:jailbreak", "detection:ml"]
-    },
-    {
-      "id": "privacy.chat-block-pii",
-      "name": "Chat Assistant — Privacy",
-      "description": "Block PII in both user inputs and assistant outputs for chat applications.",
-      "category": "privacy",
-      "file": "profiles/chat_assistant/privacy.cedar",
-      "severity": "high",
-      "tags": ["category:privacy", "threat:pii", "compliance:gdpr"]
+      "tags": [
+        "category:security",
+        "threat:injection",
+        "threat:jailbreak",
+        "detection:ml"
+      ]
     },
     {
       "id": "trust-safety.chat-assistant",
@@ -3366,7 +3915,11 @@ export const GUARDRAILS_TEMPLATES_JSON = `{
       "category": "trust-safety",
       "file": "profiles/chat_assistant/trust_safety.cedar",
       "severity": "critical",
-      "tags": ["category:trust-safety", "threat:harmful", "compliance:eu-ai-act"]
+      "tags": [
+        "category:trust-safety",
+        "threat:harmful",
+        "compliance:eu-ai-act"
+      ]
     },
     {
       "id": "data-protection.code-block-write-secrets",
@@ -3384,7 +3937,11 @@ export const GUARDRAILS_TEMPLATES_JSON = `{
       "category": "security",
       "file": "profiles/code_agent/encoding.cedar",
       "severity": "critical",
-      "tags": ["category:security", "threat:invisible-chars", "threat:injection"]
+      "tags": [
+        "category:security",
+        "threat:invisible-chars",
+        "threat:injection"
+      ]
     },
     {
       "id": "security.code-agent-path-security",
@@ -3402,7 +3959,12 @@ export const GUARDRAILS_TEMPLATES_JSON = `{
       "category": "agent-security",
       "file": "profiles/code_agent/agentic_security.cedar",
       "severity": "critical",
-      "tags": ["category:agent-security", "threat:exfiltration", "threat:loop", "owasp:llm06"]
+      "tags": [
+        "category:agent-security",
+        "threat:exfiltration",
+        "threat:loop",
+        "owasp:llm06"
+      ]
     },
     {
       "id": "agent-security.code-agent-supply-chain",
@@ -3411,16 +3973,14 @@ export const GUARDRAILS_TEMPLATES_JSON = `{
       "category": "agent-security",
       "file": "profiles/code_agent/supply_chain.cedar",
       "severity": "critical",
-      "tags": ["category:agent-security", "threat:tool-poisoning", "threat:indirect-injection", "threat:exfiltration", "owasp:asi01", "owasp:asi04"]
-    },
-    {
-      "id": "privacy.data-pipeline",
-      "name": "Data Pipeline — Privacy",
-      "description": "Strict PII protection with zero tolerance for sensitive PII types in data pipelines.",
-      "category": "privacy",
-      "file": "profiles/data_pipeline/privacy.cedar",
-      "severity": "critical",
-      "tags": ["category:privacy", "threat:pii", "compliance:gdpr", "compliance:hipaa"]
+      "tags": [
+        "category:agent-security",
+        "threat:tool-poisoning",
+        "threat:indirect-injection",
+        "threat:exfiltration",
+        "owasp:asi01",
+        "owasp:asi04"
+      ]
     },
     {
       "id": "data-protection.data-pipeline",
@@ -3456,7 +4016,12 @@ export const GUARDRAILS_TEMPLATES_JSON = `{
       "category": "agent-identity",
       "file": "profiles/multi_agent/agent_trust.cedar",
       "severity": "critical",
-      "tags": ["category:agent-identity", "scope:per-agent", "owasp:llm01", "owasp:llm02"]
+      "tags": [
+        "category:agent-identity",
+        "scope:per-agent",
+        "owasp:llm01",
+        "owasp:llm02"
+      ]
     },
     {
       "id": "agent-identity.multi-agent-safety",
@@ -3465,7 +4030,13 @@ export const GUARDRAILS_TEMPLATES_JSON = `{
       "category": "agent-identity",
       "file": "profiles/multi_agent/agent_safety.cedar",
       "severity": "critical",
-      "tags": ["category:agent-identity", "scope:per-agent", "threat:pii", "threat:secrets", "threat:injection"]
+      "tags": [
+        "category:agent-identity",
+        "scope:per-agent",
+        "threat:pii",
+        "threat:secrets",
+        "threat:injection"
+      ]
     },
     {
       "id": "agent-identity.a2a-cross-origin",
@@ -3474,7 +4045,12 @@ export const GUARDRAILS_TEMPLATES_JSON = `{
       "category": "agent-identity",
       "file": "profiles/a2a_security/cross_origin.cedar",
       "severity": "critical",
-      "tags": ["category:agent-identity", "threat:supply-chain", "owasp:llm08", "owasp:asi03"]
+      "tags": [
+        "category:agent-identity",
+        "threat:supply-chain",
+        "owasp:llm08",
+        "owasp:asi03"
+      ]
     },
     {
       "id": "agent-identity.a2a-inter-agent-injection",
@@ -3483,7 +4059,12 @@ export const GUARDRAILS_TEMPLATES_JSON = `{
       "category": "agent-identity",
       "file": "profiles/a2a_security/inter_agent_injection.cedar",
       "severity": "critical",
-      "tags": ["category:agent-identity", "threat:indirect-injection", "threat:encoded-payload", "owasp:llm01"]
+      "tags": [
+        "category:agent-identity",
+        "threat:indirect-injection",
+        "threat:encoded-payload",
+        "owasp:llm01"
+      ]
     },
     {
       "id": "agent-identity.a2a-supply-chain",
@@ -3492,7 +4073,13 @@ export const GUARDRAILS_TEMPLATES_JSON = `{
       "category": "agent-identity",
       "file": "profiles/a2a_security/supply_chain.cedar",
       "severity": "critical",
-      "tags": ["category:agent-identity", "threat:tool-poisoning", "threat:rug-pull", "threat:exfiltration", "owasp:asi04"]
+      "tags": [
+        "category:agent-identity",
+        "threat:tool-poisoning",
+        "threat:rug-pull",
+        "threat:exfiltration",
+        "owasp:asi04"
+      ]
     },
     {
       "id": "agent-identity.a2a-identity-enforcement",
@@ -3501,7 +4088,12 @@ export const GUARDRAILS_TEMPLATES_JSON = `{
       "category": "agent-identity",
       "file": "profiles/a2a_security/identity_enforcement.cedar",
       "severity": "critical",
-      "tags": ["category:agent-identity", "threat:spoofing", "scope:per-agent", "owasp:asi04"]
+      "tags": [
+        "category:agent-identity",
+        "threat:spoofing",
+        "scope:per-agent",
+        "owasp:asi04"
+      ]
     },
     {
       "id": "agent-identity.a2a-escalation",
@@ -3510,7 +4102,12 @@ export const GUARDRAILS_TEMPLATES_JSON = `{
       "category": "agent-identity",
       "file": "profiles/a2a_security/escalation_detection.cedar",
       "severity": "critical",
-      "tags": ["category:agent-identity", "threat:escalation", "scope:per-agent", "owasp:llm01"]
+      "tags": [
+        "category:agent-identity",
+        "threat:escalation",
+        "scope:per-agent",
+        "owasp:llm01"
+      ]
     },
     {
       "id": "data-protection.advanced-secrets",
@@ -3523,12 +4120,18 @@ export const GUARDRAILS_TEMPLATES_JSON = `{
     },
     {
       "id": "privacy.advanced-pii",
-      "name": "Advanced Detection — PII",
-      "description": "Bulk PII exposure threshold, ML classifier confidence, and file-operation blocking.",
+      "name": "Comprehensive PII",
+      "description": "Block every PII type — structural and contextual, sensitive and situational. Situational entities (names, locations, dates, etc.) are real PII but appear in ordinary text, so this tier flags often; one forbid rule per entity lets you disable the ones you don't need. Opt-in for strict environments.",
       "category": "privacy",
       "file": "profiles/advanced_detection/pii.cedar",
       "severity": "critical",
-      "tags": ["category:privacy", "threat:pii", "threat:exfiltration", "detection:ml", "compliance:gdpr"]
+      "tags": [
+        "category:privacy",
+        "threat:pii",
+        "detection:pattern",
+        "compliance:pci-dss",
+        "compliance:hipaa"
+      ]
     },
     {
       "id": "security.advanced-block-critical-severity",
@@ -3546,7 +4149,12 @@ export const GUARDRAILS_TEMPLATES_JSON = `{
       "category": "agent-security",
       "file": "param_validation.cedar",
       "severity": "high",
-      "tags": ["category:agent-security", "surface:call-tool", "aarm:r3", "posture:deny-default"]
+      "tags": [
+        "category:agent-security",
+        "surface:call-tool",
+        "aarm:r3",
+        "posture:deny-default"
+      ]
     }
   ]
 }