مراجعة كود آمنة لـ الرعاية الصحية

rules:
  - id: hipaa_no_phi_logging
    agent: security
    title: Never log PHI
    description: Patient data must never appear
      in logs, errors, or debug output
    importance: 10
    match:
      file_glob:
        - '**/patient/**/*.ts'
        - '**/medical/**/*.ts'
    checklist:
      - Check console.log for PHI fields
      - Verify error messages are sanitized
      - Ensure debug output excludes PHI
    tags:
      - hipaa
      - critical
      - phi