Demo Strict

Version

1.0.0

Category

Demonstration

Evaluation Available

false

Domains

• HIPAA_PHI
• PCI
• SECURITY
• ACCESSIBILITY

Controls

• Email, phone, SSN, MRN-like and card-number patterns
• Six normalized instruction-override phrase heuristics
• Structured credential fields and known secret patterns
• Accessibility copy heuristics

Docs

• Policies and validators
• Policy packs
• API reference

Thresholds

warn: 0.5

redact: 2

block: 4

escalate: 8

Behavior

• The exact assigned ID and version select scoring weights, thresholds and enabled validators.
• BLOCKED and ESCALATE_HITL withhold protected output. Required transformations are applied and revalidated at supported boundaries.
• Used as the demo-environment fallback when no exact assignment exists. Public guided fixtures use separately versioned teaching thresholds; they are not all this pack.

Limitations

• Pattern matching can produce false positives and miss sensitive data; it does not establish legal data classification.
• Pack names do not establish HIPAA, PCI DSS, accessibility or other regulatory compliance.
• A finding is not a completed remediation. Inspect the final enforcement outcome and returned artifact.
• Regulatory Pulse source coverage and draft state mappings do not establish installed jurisdiction-specific executable packs.
• Not a selectable Developer Evaluation policy. Demonstration behavior is not a production assurance profile.

Enabled validators

• pii-phi · 1.1.1
• prompt-injection · 1.2.0
• security-secrets · 1.1.0
• a11y-copy-lint · 1.1.0

Bounded examples

Request examples describe an exercise; they are not recorded execution evidence.

Run an existing Guided demo in /workbench using synthetic data.