privacy/workstreams/trasformazione.json

{
  "schema_version": 3,
  "workstream": "trasformazione",
  "display_name": "Synthetic company-transformation prototype",
  "role": "workflow",
  "governed_paths": [
    "skills",
    "scripts",
    "references"
  ],
  "runtime_profiles": [
    "openai-codex",
    "anthropic-cowork"
  ],
  "model_context": {
    "policy": "real_case_data_may_enter_selected_runtime_model_context",
    "classes": [
      {
        "id": "synthetic-transformation-case",
        "purpose": "Propose and review synthetic transformation-case findings and inspect versioned dossiers",
        "content": "Selected synthetic documents, case attributes, source snapshots, participant rights, creditors, reserve and asset values, proposed findings, decisions and dossiers may be read by the selected session model. Local code stores inert bytes, exact arithmetic and hashes. The synthetic-only declaration is not automatic anonymization or a personal-data detector; the helper does not measure provider context. No real-client mandate is supported in this increment.",
        "runtime_profiles": [
          "openai-codex",
          "anthropic-cowork"
        ]
      }
    ]
  },
  "external_boundaries": [],
  "security_controls": [
    {
      "id": "inert-import",
      "control": "Evidence import copies bytes without parsing or executing source contents; subsequent loads verify retained evidence hashes."
    },
    {
      "id": "bound-review",
      "control": "Review requires the exact current submitted proposal digest and rejects blank reviewer attribution; evidence changes invalidate dependent approvals. Reviewer names are not authenticated signatures."
    },
    {
      "id": "history-integrity",
      "control": "Append-only snapshot creation and chained digests detect edits and reject conflicting revision writes. Local owner can rewrite the store; this is not tamper-proof notarization."
    }
  ],
  "review": {
    "reviewed_at": "2026-09-29",
    "reviewed_by": "privacy-surface-review",
    "basis": "external_boundary_review_of_workflow_source",
    "source_fingerprint": "3ab0906720ba6ba6e0a1c30ad9c8759809666cb0122061bf396c9bdb989d1efa"
  }
}