مراجعة كود آمنة لـ التكنولوجيا المالية

rules:
  - id: pci_encrypt_pan
    agent: security
    title: PAN must be encrypted
    description: Credit card numbers must use
      approved encryption methods
    importance: 10
    match:
      file_glob:
        - '**/payment/**/*.ts'
        - '**/transaction/**/*.ts'
    checklist:
      - Verify PAN is never stored in plaintext
      - Check AES-256 or stronger encryption
      - Ensure encryption keys are managed securely
    tags:
      - pci-dss
      - critical
      - payment