PII Detection and Redaction Pipeline

{
  "schemaVersion": "1.0",
  "capabilityId": "00000000-0000-4000-8000-000000000003",
  "name": "PII Detection and Redaction Pipeline",
  "slug": "pii-detection-redaction-pipeline",
  "summary": "Detects and redacts sensitive identifiers across text, JSON, PDF, and document images with explainable findings.",
  "granularity": "service",
  "purposes": [
    "pii redaction",
    "privacy",
    "document processing",
    "data loss prevention"
  ],
  "features": [
    "PII redaction",
    "custom patterns",
    "bounding boxes",
    "audit report",
    "presidio-compatible"
  ],
  "functionalDescription": "Detects and redacts sensitive identifiers across text, JSON, PDF, and document images with explainable findings. The versioned contract documents deterministic behavior, failure modes, configuration, and integration boundaries for production teams.",
  "inputs": [
    {
      "name": "request",
      "contentType": "multipart/form-data",
      "description": "Validated multipart/form-data request payload",
      "required": true
    }
  ],
  "outputs": [
    {
      "name": "result",
      "contentType": "application/json",
      "description": "Typed application/json response with trace metadata",
      "required": true
    }
  ],
  "runtimes": [
    {
      "language": "TypeScript",
      "runtime": "node",
      "versions": [
        "20",
        "22"
      ]
    }
  ],
  "frameworks": [
    "NestJS"
  ],
  "deploymentTargets": [
    "aws-lambda",
    "container",
    "kubernetes"
  ],
  "dependencies": [
    {
      "name": "zod",
      "version": ">=2",
      "optional": false
    }
  ],
  "permissions": [
    {
      "resource": "temporary-storage",
      "access": "read-write",
      "reason": "Bounded request processing"
    }
  ],
  "dataClassifications": [
    "PII",
    "confidential"
  ],
  "complianceClaims": [
    "SBOM available",
    "Dependency scan recorded"
  ],
  "testEvidence": {
    "coveragePercent": 98,
    "tests": 265,
    "lastRun": "2026-07-20T14:00:00.000Z",
    "status": "passing"
  },
  "securityEvidence": {
    "criticalFindings": 0,
    "highFindings": 0,
    "score": 97,
    "scannedAt": "2026-07-19T09:30:00.000Z",
    "scanner": "FixtureScan 1.4"
  },
  "benchmarks": [
    {
      "name": "p95 latency",
      "value": 78,
      "unit": "ms",
      "environment": "2 vCPU / 2 GB fixture runner"
    }
  ],
  "buildBenchmark": {
    "basis": "fixture-directional",
    "sampleSize": 0,
    "referenceTask": "Reimplement the declared pii-detection-redaction-pipeline contract in a compatible greenfield repository",
    "tokenEstimate": {
      "low": 99000,
      "high": 246000
    },
    "agentTimeMinutes": {
      "low": 75,
      "high": 211
    },
    "humanReviewHours": {
      "low": 1.3,
      "high": 4.8
    },
    "observedAt": null,
    "methodology": "Directional fixture derived from declared granularity and integration effort; no coding-agent replay was run.",
    "confidence": "low",
    "disclosure": "Prototype estimate only. It is not an empirical benchmark and must not be presented as measured savings."
  },
  "integration": {
    "estimatedHours": 3,
    "packageManager": "pnpm",
    "configurationNotes": [
      "Pin the immutable artifact digest",
      "Configure scoped service credentials"
    ]
  },
  "composition": {
    "composable": true,
    "interface": "http-api",
    "compatibleWith": [
      "json-pii-field-redactor",
      "bank-statement-transaction-normalizer",
      "pdf-invoice-extraction-service"
    ],
    "requires": [],
    "contractStability": "stable",
    "evidence": "fixture-declared",
    "notes": [
      "Compatibility links are declared fixture metadata and have not been independently integration-tested"
    ]
  },
  "commercialModels": [
    "pay-per-execution",
    "source-license"
  ],
  "licenseOptions": [
    {
      "id": "evaluation",
      "name": "Private evaluation",
      "scope": "evaluation",
      "priceCents": 5,
      "unit": "evaluation",
      "rights": [
        "evaluation"
      ],
      "developerSeats": null,
      "restrictions": [
        "Non-production use only",
        "Results retained for 30 days"
      ]
    },
    {
      "id": "hosted-execution",
      "name": "Hosted API execution",
      "scope": "execution",
      "priceCents": 20,
      "unit": "execution",
      "rights": [
        "hosted-access",
        "commercial-use"
      ],
      "developerSeats": null,
      "restrictions": [
        "No artifact or source access"
      ]
    },
    {
      "id": "commercial-source",
      "name": "Commercial source",
      "scope": "commercial-source",
      "priceCents": 79900,
      "unit": "one-time",
      "rights": [
        "artifact-access",
        "source-access",
        "modification",
        "commercial-use"
      ],
      "developerSeats": 10,
      "restrictions": [
        "No standalone redistribution",
        "One production application"
      ]
    },
    {
      "id": "organization-source",
      "name": "Organization source",
      "scope": "organization",
      "priceCents": 250000,
      "unit": "one-time",
      "rights": [
        "artifact-access",
        "source-access",
        "modification",
        "commercial-use"
      ],
      "developerSeats": 100,
      "restrictions": [
        "No standalone redistribution",
        "Single purchasing organization"
      ]
    }
  ],
  "artifactDigests": [
    {
      "algorithm": "sha256",
      "digest": "dec12619d4d947f0f66f829f8cf0144923de3640b3379eb831379e70304c625e",
      "artifactType": "source"
    }
  ],
  "provenance": {
    "builder": "FunctionFoundry demo build service",
    "sourceRevision": "fixture-pii-detection-redaction-pipeline-v1",
    "builtAt": "2026-07-18T12:00:00.000Z",
    "signed": true
  },
  "maintenanceStatus": "active",
  "version": "1.3.0",
  "seller": {
    "name": "Redact Labs",
    "verified": true,
    "reputation": 4.9
  },
  "verificationBadges": [
    "Security reviewed",
    "No critical findings",
    "High coverage"
  ]
}