@privacyscrubber/mcp-server 2.3.9 → 2.4.1

package/manifest.json

@@ -1,7 +1,7 @@
 {
   "manifest_version": "0.3",
   "name": "privacyscrubber/pii-masking-mcp",
-  "version": "2.3.9",
+  "version": "2.4.1",
   "description": "CISO-Approved Zero-Trust PII & Secrets Redaction MCP Server for Cursor, Windsurf, and Claude Desktop. Prevent API leaks and comply with HIPAA/SOC 2 locally.",
   "author": {
     "name": "PrivacyScrubber",
@@ -23,35 +23,111 @@
   "tools": [
     {
       "name": "sanitize_text",
-      "description": "Locally scrubs PII, secrets, and credentials (like API keys, passwords, emails, phones, names) from code, logs, or text. Replaces them with safe placeholders (e.g., [EMAIL_1], [API_KEY_1]). Keep your data secure before passing it to any LLM."
+      "description": "STEP 1: Call this first. Locally scrubs PII, secrets, and credentials from code, logs, or text. Replaces them with safe placeholders (e.g., [EMAIL_1], [API_KEY_1]). Keep your data secure before passing it to any LLM."
     },
     {
       "name": "reveal_text",
-      "description": "Replaces masked tokens (e.g., [EMAIL_1], [API_KEY_1]) in the LLM's response back with the original private data from the local volatile RAM-only session map."
+      "description": "STEP 3: Call this last. Restores masked tokens back with original private data from the local volatile RAM-only session map."
+    },
+    {
+      "name": "audit_context",
+      "description": "STEP 0 (Pre-Flight): Non-destructive security inspection of raw prompts or document chunks before sending to LLMs. Evaluates PII, secrets, risk severity, and triggered regulatory frameworks."
+    },
+    {
+      "name": "scrub_text",
+      "description": "Alias for sanitize_text."
     },
     {
       "name": "sanitize_file",
       "description": "Reads a local file, sanitizes its contents using the selected profile, and outputs the safe version for AI analysis. Securely keeps original identifiers in memory."
     },
+    {
+      "name": "scrub_file",
+      "description": "Alias for sanitize_file."
+    },
     {
       "name": "audit_directory_for_pii",
-      "description": "Audits a local directory or project tree for PII, secrets, and compliance vulnerabilities without sending data to any external server."
+      "description": "Scans a local directory for leaks of secrets, keys, and PII. Returns a structured security summary report."
+    },
+    {
+      "name": "redact_file",
+      "description": "In-place redaction of a local file. Replaces PII and secrets with tokens and saves the file with an optional safety backup."
+    },
+    {
+      "name": "create_default_config",
+      "description": "Creates a default privacyscrubber.json configuration file in current working directory."
     },
     {
       "name": "generate_compliance_report",
-      "description": "Generates a structured compliance report (GDPR, HIPAA, SOC 2, PCI DSS) and enterprise CISO audit receipt for the current session or workspace."
+      "description": "Generates an official Zero-Trust Compliance Audit Certificate (GDPR, HIPAA, EU AI Act, SOC 2) for the current MCP session."
     },
     {
       "name": "export_audit_log",
-      "description": "Exports a zero-knowledge immutable audit receipt verifying zero-egress data sanitization for compliance documentation."
+      "description": "Exports an immutable, tamper-evident audit log in SIEM standard formats (CEF, Syslog, JSONL) with zero plaintext PII leakage."
+    },
+    {
+      "name": "mark_false_positive",
+      "description": "Marks a previously detected token as a false positive, excluding it from future masking in the active session."
+    },
+    {
+      "name": "check_status",
+      "description": "Returns current PrivacyScrubber MCP tier, session usage, available profiles, and PRO upgrade instructions."
     },
     {
       "name": "guard_exec",
-      "description": "Sanitizes command line execution strings and arguments for autonomous AI agents prior to tool dispatch."
+      "description": "Zero-Trust Agentic Guard: Safely executes a shell/terminal command locally in isolated process, sanitizing stdout/stderr in volatile RAM before sending to LLM."
+    },
+    {
+      "name": "guard_read_file",
+      "description": "Zero-Trust Agentic Guard: Reads a sensitive local file (.env, config, source code) and sanitizes credentials and PII in volatile RAM."
+    },
+    {
+      "name": "guard_git_diff",
+      "description": "Zero-Trust Agentic Guard: Inspects unstaged or staged git diffs locally, sanitizing credentials and PII in RAM for safe AI commit generation or review."
+    },
+    {
+      "name": "guard_apply_patch",
+      "description": "Zero-Trust Agentic Guard: Reverses token placeholders in AI code, restoring authentic values from RAM directly to the target file on disk."
+    },
+    {
+      "name": "guard_unmask_args",
+      "description": "Zero-Trust Agentic Guard: Detokenizes parameters, JSON objects, or arguments in local RAM before dispatching to local tools or APIs."
+    },
+    {
+      "name": "guard_session_info",
+      "description": "Zero-Trust Agentic Guard: Returns diagnostic metrics on active in-memory sessions and memory footprint with zero plaintext leakage."
+    },
+    {
+      "name": "guard_session_reset",
+      "description": "Zero-Trust Agentic Guard: Explicitly purges the in-memory token map for a specific session_id or all sessions upon task completion."
+    },
+    {
+      "name": "guard_rag_chunk",
+      "description": "Zero-Trust Agentic Guard: Sanitizes document chunks before sending to embedding models or vector databases (Chroma, Pinecone, Qdrant)."
+    },
+    {
+      "name": "guard_rag_restore",
+      "description": "Zero-Trust Agentic Guard: Re-hydrates retrieved vector search results by restoring token placeholders with authentic data from RAM."
+    },
+    {
+      "name": "create_agent_rules",
+      "description": "Zero-Trust Agentic Guard: Scaffolds CISO-grade AI Agent Rules in workspace (.cursorrules, .windsurfrules, CLAUDE.md, copilot-instructions.md)."
     },
     {
       "name": "generate_procurement_memo",
-      "description": "Generates a comprehensive CISO/DPO enterprise procurement memo and ROI business case for PrivacyScrubber TEAMS/SDK licensing."
+      "description": "Zero-Trust Enterprise Procurement: Generates an executive-ready Procurement & ROI Memorandum for CISOs, DPOs, and VP of Engineering."
+    },
+    {
+      "name": "secure_ai_workflow",
+      "description": "Zero-Trust Data Sanitization workflow instruction to automatically scrub PII before processing data."
+    },
+    {
+      "name": "safe_redaction_workflow",
+      "description": "Instructions for using the redact_file tool safely with QA checks."
+    },
+    {
+      "name": "agentic_guard_instructions",
+      "description": "Zero-Trust Agentic Guard instructions for autonomous AI agents (Cursor, Windsurf, Claude Code)."
     }
   ],
   "user_config": {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@privacyscrubber/mcp-server",
-  "version": "2.3.9",
+  "version": "2.4.1",
   "mcpName": "io.github.moxno/privacyscrubber-mcp",
   "description": "CISO-Approved Zero-Trust PII & Secrets Redaction MCP Server for Cursor, Windsurf, and Claude Desktop. Prevent API leaks and comply with HIPAA/SOC 2 locally.",
   "main": "index.js",
@@ -35,7 +35,8 @@
   "scripts": {
     "start": "node index.js",
     "build": "node -e \"const fs=require('fs'); if(fs.existsSync('../scripts/build-mcp.js')) require('child_process').execSync('node ../scripts/build-mcp.js', {stdio:'inherit'}); else console.log('MCP assets are pre-built.');\"",
-    "test": "node test-mcp.js && node test-mcp-deep.js",
+    "test": "node test-mcp.js && node test-mcp-deep.js && node test-mcp-streaming.js",
+    "test:stream": "node test-mcp-streaming.js",
     "prepublishOnly": "npm test"
   },
   "dependencies": {

package/pii-masking-run.js

@@ -27,7 +27,7 @@ const cmdIndex = args.indexOf("--");
 
 if (args.includes("--version") || args.includes("-v")) {
   const pkgPath = path.resolve(__dirname, './package.json');
-  let version = '2.2.10';
+  let version = '2.4.1';
   try { version = JSON.parse(fs.readFileSync(pkgPath, 'utf8')).version; } catch (_) {}
   console.log(`ps-guard / pii-masking-run v${version} (PrivacyScrubber MCP)`);
   process.exit(0);
@@ -89,18 +89,35 @@ const colors = {
 };
 
 const DEVOPS_SECRETS_DETECTOR = [
-  { name: 'AWS Credentials', regex: /\b(?:AKIA|ASIA|AGPA|AIDA|AROA|AIPA)[A-Z0-9]{16}\b/g },
-  { name: 'JSON Web Token (JWT)', regex: /\beyJ[a-zA-Z0-9_-]+\.[a-zA-Z0-9_-]+\.[a-zA-Z0-9_-]+\b/g },
-  { name: 'API Token/Key (GitHub/Slack/NPM)', regex: /\b(?:ghp|gho|ghu|ghs|ghr|glpat|npm|xox[baprs])[-_][A-Za-z0-9_]{10,}\b/g },
-  { name: 'Stripe API Key', regex: /\b(?:[rs]k)_(?:test|live)_[a-zA-Z0-9]{24,}\b/g },
-  { name: 'OpenAI Project API Key', regex: /\b(?:sk|pk)-(?:proj-)?[a-zA-Z0-9_-]{16,}\b/gi },
-  { name: 'Database Connection URI', regex: /\b(?:postgres(?:ql)?|mysql|mongodb(?:\+srv)?|redis|amqp|mssql):\/\/[^\s"']+/gi },
-  { name: 'Embedded Credentials URI', regex: /\b(?:https?|s?ftp):\/\/[a-zA-Z0-9_.%+-]+:[^\s/@:"']+@[a-zA-Z0-9_.-]+(?::\d+)?(?:\/[^\s"']*)?/gi },
-  { name: 'URL Query Parameter Secret', regex: /(?<=[?&](?:api_key|apikey|access_token|client_secret|auth_token|token|secret|password|private_key)=)[^\s"'\x26#)>]{8,}/gi },
-  { name: 'Bearer / Auth Header Token', regex: /(?<=\b(?:Bearer|Token)\s+)[a-zA-Z0-9_\-\.~+/=]{16,}\b/gi },
-  { name: 'Database/API Secret', regex: /\b(DB|POSTGRES|REDIS|MYSQL|AWS|SECRET|PASSWORD|TOKEN|API|KEY)[A-Z0-9_]*\s*[:=]\s*[^ \t\r\n"']{8,}\b/gi },
-  { name: 'Private Cryptographic Key (PEM Block)', regex: /-----BEGIN (?:RSA |EC |PGP |DSA |OPENSSH |ENCRYPTED )?PRIVATE KEY(?: BLOCK)?-----[\s\S]{10,8192}?-----END (?:RSA |EC |PGP |DSA |OPENSSH |ENCRYPTED )?PRIVATE KEY(?: BLOCK)?-----/g },
-  { name: 'Private Cryptographic Key (Header)', regex: /-----BEGIN (?:RSA |EC |PGP |DSA |OPENSSH |ENCRYPTED )?PRIVATE KEY(?: BLOCK)?-----/g }
+    { name: 'AWS Credentials', regex: /\b(?:AKIA|ASIA|AGPA|AIDA|AROA|AIPA)[A-Z0-9]{12,28}\b/g, label: 'AWS_KEY' },
+    { name: 'Google Cloud / Gemini API Key', regex: /\bAIza[0-9A-Za-z_-]{35}\b/g, label: 'API_TOKEN' },
+    { name: 'Anthropic API Key', regex: /\bsk-ant-(?:api\d{2}|admin\d{2}|sid\d{2})-[a-zA-Z0-9_-]{16,128}\b/g, label: 'API_TOKEN' },
+    { name: 'HuggingFace / Perplexity API Key', regex: /\b(?:hf_[a-zA-Z0-9]{20,64}|pplx-[a-zA-Z0-9]{24,64})\b/g, label: 'API_TOKEN' },
+    { name: 'SendGrid API Key', regex: /\bSG\.[a-zA-Z0-9_-]{16,32}\.[a-zA-Z0-9_-]{32,64}\b/g, label: 'API_TOKEN' },
+    { name: 'Postman API Key', regex: /\bPMAK-[a-fA-F0-9]{24}-[a-fA-F0-9]{34}\b/g, label: 'API_TOKEN' },
+    { name: 'GitHub Fine-Grained PAT', regex: /\bgithub_pat_[a-zA-Z0-9]{20,30}_[a-zA-Z0-9]{40,80}\b/g, label: 'API_TOKEN' },
+    { name: 'Slack Enterprise / Refresh Token', regex: /\bxoxe\.xox[baprs]-\d-[a-zA-Z0-9-]{10,}\b|\bxox[eapbrs]-[a-zA-Z0-9-]{10,}\b/g, label: 'API_TOKEN' },
+    { name: 'Telegram Bot API Token', regex: /\b\d{8,10}:AA[A-Za-z0-9_-]{33}\b/g, label: 'API_TOKEN' },
+    { name: 'Age Encryption Secret Key', regex: /\bAGE-SECRET-KEY-1[A-Z0-9]{58}\b/g, label: 'SECRET' },
+    { name: 'Modern Cloud & AI Platform Key', regex: /\b(?:sbp_[a-fA-F0-9]{40}|dop_v1_[a-fA-F0-9]{64}|doo_v1_[a-fA-F0-9]{64}|dp\.(?:st|pt|ct|sa)\.[a-zA-Z0-9_-]{20,}|lin_api_[a-zA-Z0-9]{32,64}|ntn_[a-zA-Z0-9]{32,64}|secret_[a-zA-Z0-9]{32,64}|gsk_[a-zA-Z0-9]{32,64}|r8_[a-zA-Z0-9]{24,64}|tvly-[a-zA-Z0-9_-]{20,64}|fc-[a-fA-F0-9]{32}|dapi[a-fA-F0-9]{32}(?:-\d)?|re_[a-zA-Z0-9_]{20,64}|napi_[a-zA-Z0-9]{32,64}|[a-zA-Z0-9]{14}\.atlasv1\.[a-zA-Z0-9]{50,80}|pypi-[A-Za-z0-9_-]{16,128}|whsec_[A-Za-z0-9+/=_-]{24,128}|shpat_[a-fA-F0-9]{32}|shpss_[a-fA-F0-9]{32}|shpca_[a-fA-F0-9]{32}|shppa_[a-fA-F0-9]{32}|hvs\.[A-Za-z0-9_-]{24,128}|hvb\.[A-Za-z0-9_-]{24,128}|glsa_[A-Za-z0-9]{32}_[A-Fa-f0-9]{8}|glc_[A-Za-z0-9+/=_-]{20,128}|pscale_tkn_[A-Za-z0-9_.-]{20,64}|pscale_pw_[A-Za-z0-9_.-]{20,64}|pat[A-Za-z0-9]{14}\.[a-fA-F0-9]{64}|pat-(?:na1|eu1)-[a-fA-F0-9]{8}-[a-fA-F0-9]{4}-[a-fA-F0-9]{4}-[a-fA-F0-9]{4}-[a-fA-F0-9]{12}|sq0atp-[A-Za-z0-9_-]{22,64}|sq0csp-[A-Za-z0-9_-]{32,64}|NRAK-[A-Z0-9]{27}|v1\.0-[a-fA-F0-9]{24}-[a-fA-F0-9]{16,160}|ATATT3xFfGF0[A-Za-z0-9+/=_-]{24,128}|tskey-(?:auth|api|client)-[A-Za-z0-9_-]{20,96}|sntry[su]_[A-Za-z0-9+/=_-]{32,160}|(?:pk|sk)\.eyJ1[A-Za-z0-9_-]{20,}\.[A-Za-z0-9_-]{16,}|key-[a-f0-9]{32}|[a-f0-9]{32}-us\d{1,2})\b/g, label: 'API_TOKEN' },
+    { name: 'Twilio Account SID / API Key', regex: /\b(?:AC|SK)[a-fA-F0-9]{32}\b/g, label: 'API_TOKEN' },
+    { name: 'Bcrypt / Argon2 Password Hash', regex: /(?<![A-Za-z0-9])(?:\$2[aby]\$\d{2}\$[./A-Za-z0-9=]{20,60}|\$argon2(?:id|i|d)\$[^\s"']{15,120})/g, label: 'SECRET' },
+    { name: 'JSON Web Token (JWT)', regex: /\beyJ[a-zA-Z0-9_-]+\.[a-zA-Z0-9_-]+\.[a-zA-Z0-9_-]+\b/g, label: 'JWT_TOKEN' },
+    { name: 'API Token/Key (GitHub/Slack/NPM)', regex: /\b(?:ghp|gho|ghu|ghs|ghr|glpat|npm|xox[baprs])[-_][A-Za-z0-9_-]{10,}\b/g, label: 'API_TOKEN' },
+    { name: 'Stripe API Key', regex: /\b(?:[rs]k)_(?:test|live)_[a-zA-Z0-9]{10,}\b/g, label: 'STRIPE_KEY' },
+    { name: 'OpenAI Project API Key', regex: /\b(?:sk|pk)-(?:proj-)?[a-zA-Z0-9_-]{16,}\b/gi, label: 'OPENAI_KEY' },
+    { name: 'Slack / Discord Incoming Webhook URL', regex: /\bhttps:\/\/(?:hooks\.slack\.com\/services\/T[A-Z0-9_]+\/B[A-Z0-9_]+\/[A-Za-z0-9_-]+|(?:ptb\.|canary\.)?discord(?:app)?\.com\/api\/webhooks\/\d{17,20}\/[A-Za-z0-9_-]{60,70})\b/gi, label: 'SECRET' },
+    { name: 'Azure Connection String / SAS Token', regex: /(?:DefaultEndpointsProtocol=https?;AccountName=[^;\s"']+;AccountKey=[A-Za-z0-9+/=]{20,}(?:;EndpointSuffix=[^;\s"']+)?|Endpoint=sb:\/\/[^;\s"']+;SharedAccessKeyName=[^;\s"']+;SharedAccessKey=[A-Za-z0-9+/=]{16,}|\bSharedAccessSignature=sr=[^\s"']+&sig=[A-Za-z0-9%/+=]{16,}|\bAccountKey=[A-Za-z0-9+/=]{40,88}==)/gi, label: 'SECRET' },
+    { name: 'Database Connection URI', regex: /\b(?:postgres(?:ql)?|mysql|mongodb(?:\+srv)?|redis|amqp|mssql):\/\/[^\s"']+/gi, label: 'DB_URI' },
+    { name: 'Embedded Credentials URI', regex: /\b(?:https?|hxxps?|s?ftp|fxp|wss?):\/\/[a-zA-Z0-9_.%+-]+:[^\s/@:"']+@[a-zA-Z0-9_.-]+(?:\[\.\][a-zA-Z0-9_.-]+|\(\.\)[a-zA-Z0-9_.-]+)*(?::\d+)?(?:\/[^\s"']*)?/gi, label: 'SECRET' },
+    { name: 'URL Query Parameter Secret', regex: /(?<=[?&](?:api_key|apikey|access_token|client_secret|auth_token|token|secret|password|private_key)=)[^\s"'\x26#)>]{8,}/gi, label: 'SECRET' },
+    { name: 'CLI Credential Flag / Curl User Auth', regex: /(?:\bcurl\b[^\r\n]*?\s(?:-u|--user)\s+["']?[A-Za-z0-9_.+-]+:[^\s"']+|\b(?:--password|--api-key|--apikey|--access-token|--auth-token|--client-secret|--secret-key|--private-key)(?:=|\s+)["']?[^\s"']{6,}["']?)/gi, label: 'SECRET' },
+    { name: 'HTTP API Key Header', regex: /\b(?:X-API-Key|X-Amz-Security-Token|X-Functions-Key|X-Shopify-Access-Token|X-Auth-Token|Api-Key)\s*:\s*["']?[A-Za-z0-9_.\-~+/=]{12,}["']?/gi, label: 'SECRET' },
+    { name: 'Docker Registry Auth / K8s Secret Base64', regex: /(?<=["']?(?:auth|identitytoken|registrytoken|\.dockerconfigjson)["']?\s*:\s*["'])[A-Za-z0-9+/=]{16,}(?=["'])/gi, label: 'SECRET' },
+    { name: 'Bearer / Auth Header Token', regex: /(?<=\b(?:Bearer|Token)\s+)[a-zA-Z0-9_\-\.~+/=]{16,}\b/gi, label: 'SECRET' },
+    { name: 'Database/API Secret', regex: /\b(DB|POSTGRES|REDIS|MYSQL|AWS|SECRET|PASSWORD|TOKEN|API|KEY)[A-Z0-9_]*\s*[:=]\s*[^ \t\r\n"']{8,}/gi, label: 'SECRET' },
+    { name: 'Private Cryptographic Key (PEM Block)', regex: /-----BEGIN (?:RSA |EC |PGP |DSA |OPENSSH |ENCRYPTED )?PRIVATE KEY(?: BLOCK)?-----[\s\S]{10,8192}?-----END (?:RSA |EC |PGP |DSA |OPENSSH |ENCRYPTED )?PRIVATE KEY(?: BLOCK)?-----/g, label: 'SECRET' },
+    { name: 'Private Cryptographic Key (Header)', regex: /-----BEGIN (?:RSA |EC |PGP |DSA |OPENSSH |ENCRYPTED )?PRIVATE KEY(?: BLOCK)?-----/g, label: 'SECRET' }
 ];
 
 let LicenseManager;
@@ -209,9 +226,19 @@ function performSanitization(text) {
     sessionTruncatedLimit = limit;
   }
 
+  const activeRules = [...customRules];
+  DEVOPS_SECRETS_DETECTOR.forEach(rule => {
+    activeRules.push({
+      name: rule.name,
+      pattern: rule.regex.source,
+      regex: new RegExp(rule.regex.source, rule.regex.flags),
+      label: rule.label || 'SECRET'
+    });
+  });
+
   let result;
   try {
-    result = PrivacyScrubberCore.scrubText(textToScrub, customRules, {}, normalizedProfile, localSessionMap, license.isPro);
+    result = PrivacyScrubberCore.scrubText(textToScrub, activeRules, {}, normalizedProfile, localSessionMap, license.isPro);
   } catch (err) {
     return text;
   }
@@ -234,7 +261,7 @@ function performSanitization(text) {
       }
       if (isSecret) {
         hasSecrets = true;
-        result.scrubbedText = result.scrubbedText.replace(token, '[SECRET_BLOCKED_UPGRADE_TO_PRO]');
+        result.scrubbedText = result.scrubbedText.replaceAll(token, '[SECRET_BLOCKED_UPGRADE_TO_PRO]');
       }
     });
 
@@ -279,8 +306,8 @@ function buildCisoAuditTelemetry(currentTokenMap = {}) {
     frameworksSet.add('CCPA/CPRA');
   }
   if (types.includes('ID') || types.includes('SSN') || types.includes('PASSPORT') || types.includes('NATIONAL_ID')) {
-    frameworksSet.add('SOC 2 Type II');
-    frameworksSet.add('ISO 27001 (A.8.11)');
+    frameworksSet.add('SOC 2 controls');
+    frameworksSet.add('ISO 27001 A.8.11 controls');
   }
   if (types.some(t => ['CREDIT_CARD', 'BANK', 'IBAN', 'FINANCIAL', 'CARD', 'STRIPE_KEY', 'TAX_ID', 'EIN', 'W2', '1099', 'SALARY', 'WAGE'].includes(t))) {
     frameworksSet.add('PCI DSS v4.0');
@@ -300,7 +327,7 @@ function buildCisoAuditTelemetry(currentTokenMap = {}) {
   }
 
   const ipHoldings = {
-    standard: 'IETF draft-sibiryakov-ztds-protocol-00',
+    standard: 'IETF draft-sibiryakov-ztds-protocol-01',
     standardUrl: 'https://datatracker.ietf.org/doc/draft-sibiryakov-ztds-protocol/',
     patent: "U.S. & Int'l Patents Pending (Paris Convention Priority)",
     trademark: 'ZTDS™ Reg. #182655957 (ILPO Cl 9 & 42)'
@@ -310,27 +337,27 @@ function buildCisoAuditTelemetry(currentTokenMap = {}) {
     {
       statute: 'EU AI Act (Art. 50)',
       scope: 'AI Transparency & Data Minimization',
-      rule: '0-byte external network transmission; prevents unauthorized ingestion into frontier models.'
+      rule: 'Sanitization runs locally by design; reduces the content sent to external AI models. Informational mapping, not a compliance determination.'
     },
     {
       statute: 'GDPR (Art. 4, 25, 28, 32)',
       scope: 'Pseudonymization & Processor Liability',
-      rule: 'Volatile client-side tokenization eliminates GDPR Article 28 data processor liability.'
+      rule: 'Client-side pseudonymization is a technical measure supporting Art. 25 and 32. It does not by itself remove controller or processor obligations.'
     },
     {
       statute: 'HIPAA 45 CFR § 164.514(b)',
       scope: 'Safe Harbor De-Identification',
-      rule: 'Deterministic removal of all 18 PHI identifiers prior to AI analysis.'
+      rule: 'Pattern-based masking of direct identifiers supports Safe Harbor de-identification workflows. Review output for residual identifiers before sharing.'
     },
     {
       statute: 'IRC § 7216 & IRS Pub. 1075',
       scope: 'Tax Return Information Confidentiality',
-      rule: 'Strict criminal penalty safeguard against unauthorized disclosure of tax records to cloud LLMs.'
+      rule: 'Masking identifiers before AI use can reduce exposure of tax return information. Informational mapping, not legal advice.'
     },
     {
       statute: 'FRE 502',
       scope: 'Attorney-Client Privilege Preservation',
-      rule: 'Automated in-memory redaction prevents inadvertent waiver of legal privilege in AI workflows.'
+      rule: 'In-memory redaction can reduce disclosure of privileged details in AI workflows. Privilege determinations remain a legal judgment.'
     }
   ];
 
@@ -346,6 +373,54 @@ function buildCisoAuditTelemetry(currentTokenMap = {}) {
   };
 }
 
+// ── PSR-2 Receipt Integrity (real SHA-256; parity with src/modules/receipt-integrity.js) ──
+const PSR2_VERSION = 'PSR-2';
+const PSR2_STATEMENTS = {
+  measured: [
+    'Token Manifest SHA-256: digest of the sorted token labels held in this session (original values are never hashed or exported).',
+    'Entity counts per type.',
+    'Receipt SHA-256: digest of the canonical field string, so edits to this receipt are detectable.'
+  ],
+  byDesign: [
+    'The sanitization engine runs locally in process memory and does not transmit prompt content. This is an architectural property and is not measured by this receipt.',
+    'Token-to-original mappings are held in volatile memory for the session. This receipt does not record their contents.'
+  ],
+  limits: [
+    'This receipt is not a digital signature and does not prove who generated it or when.',
+    'No final output digest is recorded by this export (Output SHA-256: not recorded).',
+    'Detection is pattern-based. Free-text narrative can contain indirect identifiers that remain after sanitization; review output before sharing.',
+    'Regulatory references are informational technical-safeguard mappings, not a legal determination of compliance.'
+  ]
+};
+function psr2Sha256(input) {
+  return crypto.createHash('sha256').update(String(input == null ? '' : input), 'utf8').digest('hex');
+}
+function buildPsr2Receipt(tokenMap, timestamp = new Date().toISOString()) {
+  const labels = (tokenMap && typeof tokenMap === 'object' ? Object.keys(tokenMap) : []).slice().sort();
+  const counts = {};
+  for (const t of labels) {
+    const m = t.match(/\[([A-Z_]+)_\d+\]/);
+    const type = m ? m[1] : 'CUSTOM';
+    counts[type] = (counts[type] || 0) + 1;
+  }
+  const entityCounts = Object.keys(counts).sort().map(k => `${k}=${counts[k]}`).join(',') || 'none';
+  const manifestSha256 = psr2Sha256(labels.join('\n'));
+  const canonical = [PSR2_VERSION, timestamp, 'none', manifestSha256, entityCounts, 'na'].join('|');
+  return { version: PSR2_VERSION, timestamp, outputSha256: null, manifestSha256, entityCounts, tokensTotal: labels.length, tokensPresentInOutput: null, canonical, receiptSha256: psr2Sha256(canonical) };
+}
+function psr2Lines(r) {
+  return [
+    `Receipt Version: ${r.version}`,
+    `Timestamp (UTC): ${r.timestamp}`,
+    `Output SHA-256: not recorded`,
+    `Token Manifest SHA-256: ${r.manifestSha256}`,
+    `Entity Counts: ${r.entityCounts}`,
+    `Tokens In Final Output: not recorded`,
+    `Canonical: ${r.canonical}`,
+    `Receipt SHA-256: ${r.receiptSha256}`
+  ];
+}
+
 function emitProofFeedback() {
   const isQuiet = args.includes("--quiet") || args.includes("-q");
   if (isQuiet) return;
@@ -504,7 +579,7 @@ if (isDiffMode) {
     }
     if (!diffOutput.trim()) {
       if (isJsonMode) {
-        console.log(JSON.stringify({ isDiff: true, empty: true, diff: "", count: 0, telemetry: buildCisoAuditTelemetry({}) }, null, 2));
+        console.log(JSON.stringify({ isDiff: true, empty: true, diff: "", count: 0, telemetry: buildCisoAuditTelemetry({}), receipt: buildPsr2Receipt({}) }, null, 2));
       } else {
         console.log(`[Zero-Trust Agentic Guard: Git Diff]\nNo git diff changes detected (${isStaged ? 'staged' : 'unstaged'}).`);
       }
@@ -518,7 +593,8 @@ if (isDiffMode) {
         sanitizedDiff: sanitizedDiff,
         tokenMap: localSessionMap,
         count: Object.keys(localSessionMap).length,
-        telemetry: telemetry
+        telemetry: telemetry,
+        receipt: buildPsr2Receipt(localSessionMap)
       }, null, 2));
     } else {
       process.stdout.write(sanitizedDiff.endsWith('\n') ? sanitizedDiff : sanitizedDiff + '\n');
@@ -544,7 +620,8 @@ if (hasStdin && !hasCommand && !isRestoreMode && !isDiffMode && !isRulesMode) {
         scrubbedText: sanitized,
         tokenMap: localSessionMap,
         count: Object.keys(localSessionMap).length,
-        telemetry: telemetry
+        telemetry: telemetry,
+        receipt: buildPsr2Receipt(localSessionMap)
       }, null, 2) + '\n');
       emitProofFeedback();
       process.exit(0);