name = "iso42001-aligned"
version = "0.1.0"
description = "ISO/IEC 42001 Annex A alignment: enforced responsible-use process (A.9.2/A.9.4), operation logging expectation, data filtering before use (A.7.4) (mapping: compliance/mappings/iso42001.toml)"
extends = "strict-redaction"

[context]
# A.9.2: the pack itself is the enforced process definition — cap and
# retention make the expectations explicit and reviewable.
max_context_tokens = 16000
audit_retention_days = 365
# A.9.4: out-of-intended-use surface denied; violations are recorded.
deny_tools = ["ctx_url_read"]

[redaction]
# A.7.4: regulated identifiers controlled before context use.
date_of_birth = '(?i)\b(dob|date[ _-]?of[ _-]?birth)\b[ :=#]*\d{1,4}[-/.]\d{1,2}[-/.]\d{1,4}'
national_id = '\b\d{3}-\d{2}-\d{4}\b'
iban = '\b[A-Z]{2}\d{2}[A-Z0-9]{11,30}\b'
payment_card = '\b\d{4}[ -]?\d{4}[ -]?\d{4}[ -]?\d{1,7}\b'

[filters]
# A.7.4 — data filtering before use (GL #675): regulated identifiers are
# redacted out of inbound context; prompt-injection is flagged for review.
pii = "redact"
injection = "warn"

[egress]
# A.9.4 — out-of-scope action control (GL #676): block agent writes/actions
# carrying detected secrets or PII; bound the write/action rate.
block_secrets = true
max_writes_per_min = 240
