Policies & validators
LSAS Platform ships with baseline policy packs and deterministic validators that you can assign by exact version per tenant, app, and environment. Policy packs express how strictly to treat findings; validators are the pure functions that generate those findings.
Baseline policy packs
These packs are implemented in the @lsas/policy-packs package and are the same definitions the gateway uses at runtime.
| Pack | ID | Primary domains | Enabled validators |
|---|---|---|---|
| HIPAA PHI Baseline | hipaa-phi-baseline | HIPAA_PHI (primary), PCI, SECURITY | PHI/PII & PCI detector, Prompt injection heuristics, Secrets & credentials detector |
| PCI Baseline | pci-baseline | PCI (primary), HIPAA_PHI, SECURITY | PHI/PII & PCI detector, Prompt injection heuristics, Secrets & credentials detector |
| Security Baseline | security-baseline | SECURITY (primary) | Prompt injection heuristics, Secrets & credentials detector |
| Accessibility Baseline | accessibility-baseline | ACCESSIBILITY (primary) | Accessibility copy linter |
| Demo Strict | demo-strict | HIPAA_PHI, PCI, SECURITY, ACCESSIBILITY | PHI/PII & PCI detector, Prompt injection heuristics, Secrets & credentials detector, Accessibility copy linter |
Thresholds are expressed as warn / redact / block / escalate scores per pack (for example, HIPAA PHI Baseline uses 1 / 4 / 8 / 16), and change through reviewed, versioned pack definitions rather than arbitrary request overrides.
Deterministic validators
Validators are pure, deterministic functions that inspect request/response payloads and emit structured findings for the decision engine. They do not make model calls.
| Validator | ID | Example rules |
|---|---|---|
| PHI/PII & PCI detector | pii-phi | HIPAA_EMAIL (email addresses), HIPAA_PHONE (phone numbers), HIPAA_SSN (SSN patterns), HIPAA_MRN (MRN-like IDs), PCI_CREDIT_CARD (credit card-like numbers). |
| Prompt injection heuristics | prompt-injection | PROMPT_INJECTION_HEURISTIC — flags patterns like "ignore previous instructions" or attempts to override safety guidance. |
| Accessibility copy linter | a11y-copy-lint | A11Y_LINK_TEXT_GENERIC ("click here"-style links), A11Y_ALT_TEXT_GENERIC (placeholder alt text like "image of" / "screenshot of"). |
| Secrets & credentials detector | security-secrets | SEC_OPENAI_KEY (sk- style keys), SEC_AWS_ACCESS_KEY (AKIA- style keys), SEC_PRIVATE_KEY_BLOCK (private key blocks), SEC_PASSWORD_INLINE (inline password= assignments), structured credential fields (SEC_STRUCTURED_CREDENTIAL), and connection URLs with credentials (SEC_CONNECTION_CREDENTIAL). |
Findings from these validators are scored and combined by the selected policy pack for a given tenant and environment. LSAS Platform helps enforce guardrails, but you still own your overall HIPAA, PCI, and security compliance programs.
Coverage and enforcement limits
These validators recognize selected patterns. A clean score is not evidence of complete PHI discovery, de-identification, clinical correctness, grounded citations, or WCAG conformance. The accessibility pack does not include privacy or secrets validators. Choose a pack for its actual enabled controls.
BLOCKED and ESCALATE_HITL return no released data. Redaction must pass revalidation before release. Unsupported clinical, regulatory-evidence, or code-execution capabilities remain held. Guided synthetic tiers are server-selected evaluation fixtures; sandbox override simulation does not approve production output or expand a caller’s authority.