Enforce healthcare data protection contracts

Define shared data-protection and safety rules for healthcare

When defining the interlocking safety and privacy rules that every healthcare feature must follow.

• · Data classification scheme
• · Role definitions

• · Classify→AccessControl→Audit contract
• · Alert severity matrix
• · Deploy-gate thresholds

Healthcare project with PHI; all spokes must reference this core

• · PHI exposure in logs or LLM prompts
• · Critical alert is dismissable
• · Deploy gate lowered after failure

• · Three-layer contract (classify→access→audit)
• · Patient-safety bias: block-not-pass default
• · HIPAA/DISHA/GDPR coverage matrix