Policies & validators.
LSAS Platform ships with baseline policy packs and deterministic validators that you can assign by exact version per tenant, app, and environment. Policy packs express how strictly to treat findings; validators are the pure functions that generate those findings.
Baseline policy packs
These packs are implemented in the @lsas/policy-packs package and are the same definitions the gateway uses at runtime.
| Pack | ID | Primary domains | Enabled validators |
|---|---|---|---|
| HIPAA PHI Baseline | hipaa-phi-baseline | HIPAA_PHI (primary), PCI, SECURITY | PHI/PII & PCI detector, Prompt injection heuristics, Secrets & credentials detector |
| PCI Baseline | pci-baseline | PCI (primary), HIPAA_PHI, SECURITY | PHI/PII & PCI detector, Prompt injection heuristics, Secrets & credentials detector |
| Security Baseline | security-baseline | SECURITY (primary) | Prompt injection heuristics, Secrets & credentials detector |
| Accessibility Baseline | accessibility-baseline | ACCESSIBILITY (primary) | Accessibility copy linter |
| Demo Strict | demo-strict | HIPAA_PHI, PCI, SECURITY, ACCESSIBILITY | PHI/PII & PCI detector, Prompt injection heuristics, Secrets & credentials detector, Accessibility copy linter |
Thresholds are expressed as warn / redact / block / escalate scores per pack (for example, HIPAA PHI Baseline uses 1 / 4 / 8 / 16), and change through reviewed, versioned pack definitions rather than arbitrary request overrides.
Deterministic validators
Validators are pure, deterministic functions that inspect request/response payloads and emit structured findings for the decision engine. They do not make model calls.
| Validator | ID | Example rules |
|---|---|---|
| PHI/PII & PCI detector | pii-phi | HIPAA_EMAIL (email addresses), HIPAA_PHONE (phone numbers), HIPAA_SSN (SSN patterns), HIPAA_MRN (MRN-like IDs), PCI_CREDIT_CARD (credit card-like numbers). |
| Prompt injection heuristics | prompt-injection | PROMPT_INJECTION_HEURISTIC — flags patterns like "ignore previous instructions" or attempts to override safety guidance. |
| Accessibility copy linter | a11y-copy-lint | A11Y_LINK_TEXT_GENERIC ("click here"-style links), A11Y_ALT_TEXT_GENERIC (placeholder alt text like "image of" / "screenshot of"). |
| Secrets & credentials detector | security-secrets | SEC_OPENAI_KEY (sk- style keys), SEC_AWS_ACCESS_KEY (AKIA- style keys), SEC_PRIVATE_KEY_BLOCK (private key blocks), SEC_PASSWORD_INLINE (inline password= assignments), structured credential fields (SEC_STRUCTURED_CREDENTIAL), and connection URLs with credentials (SEC_CONNECTION_CREDENTIAL). |
Findings from these validators are scored and combined by the selected policy pack for a given tenant and environment. LSAS Platform helps enforce guardrails, but you still own your overall HIPAA, PCI, and security compliance programs.
Coverage and enforcement limits
These validators recognize selected patterns. A clean score is not evidence of complete PHI discovery, de-identification, clinical correctness, grounded citations, or WCAG conformance. The accessibility pack does not include privacy or secrets validators. Choose a pack for its actual enabled controls.
BLOCKED and ESCALATE_HITL return no released data. Redaction must pass revalidation before release. Unsupported clinical, regulatory-evidence, or code-execution capabilities remain held. Guided synthetic tiers are server-selected evaluation fixtures; sandbox override simulation does not approve production output or expand a caller’s authority.