正文
获取原文件README.md
v0.2.0 修复发布
补齐清单/画像引用，供最终门禁追溯。本地去标识规则通过不等于已取得患者资料的外发许可；自由文本仍需隐私审核。
D003 is the privacy boundary for the Haonan D-series medical-data processing pipeline.
It is intentionally conservative and uses only the Python standard library in v0.1. It does not claim HIPAA Safe Harbor or clinical-grade anonymization. Instead it creates a pseudonymized/redacted local package, audits residual high-confidence identifiers, and tells downstream skills whether content may become model-visible.
Quick start
python scripts/phi_gate.py \
--input-path /path/to/source-package \
--manifest /path/to/source_manifest.json \
--profile /path/to/schema_linkage_profile.json \
--output-root ./runs/haonan-d003
Then validate:
python scripts/validate_phi_report.py ./runs/haonan-d003/<package-id>/phi_gate_report.json
Self-test:
python scripts/self_test.py
Important limitation
Free-text de-identification is heuristic in v0.1. Sanitized free text therefore produces model_visibility_gate = review_required unless a future stronger local de-identification stage is added.
Whole-package network egress is always blocked.
Handoff artifacts
D003 also writes deidentified_manifest.json and privacy_review_queue.csv so downstream skills never have to guess which sanitized files are allowed, review-required, or blocked.
v0.1.1 clinical-field preservation
Clinical semantic fields such as diagnosis_name, test_name, drug_name, procedure_name and their Chinese equivalents are explicitly preserved. They must not be redacted merely because the field name contains name. Direct patient-name fields remain redacted.
当前版本：v0.2.1
新伪ID采用128 bit HMAC截断及a–p字母编码，保留角色域与运行级密钥，不生成可被手机号/身份证规则误匹配的长数字串。没有豁免任意数字或关闭隐私扫描。英文name标签添加单词边界。脱敏清单记录所有sanitized产物SHA-256；残留扫描读取错误阻断。
以SKILL.md顶部发布合同和references/repair-v0.2.1.md为准，历史自测描述不代表全面临床验收。