PII+ — Personal information outbound

Use this tag

Coming Soon. This tag has no working checker to install yet.

See How it works for its intended job. Help improve this tag to contribute or follow its progress.

Baseline job

Warn before detected personal information is sent to an AI service.

What the tag can claim

A detected outbound privacy risk, with user control.

Method and evidence

• Planned local input recognition and consented pre-send intervention.
• Development · standard v0.1.0
• Recognition settings require independent validation.

Input

User input before submission to a supported service.

Output

A versioned tag record with subject binding, method, evidence, limitations, and a result state.

Supported scope

• Preserved scope; no outbound interception runs today

Limits

• Detection can miss information
• Must not submit or change content without a clear user action
• Site forms are not an implementation of this tag

Accuracy and validation

Not independently release validated.

Cost and access

Free personal workflow. No paid detector, evidence, or verification gate.

Privacy

This catalogue does not evaluate your content. The personal reference implementation uses local services; detected redaction can miss sensitive information.

Dependencies

• Versioned claim and evidence contract
• Independent review for this tag
• Accessible presentation and a clear failure state

Failure behavior

A failed or unsupported check must not become a finding. A problem with this tag must not disable unrelated tags.

Who owns the outcome

Maintainers own implementation; independent reviewers own validation; the product owner accepts release.

Before release

Publish agreed acceptance criteria, run independent validation, and verify the complete user workflow before release.

Tag enhancements in scope

• F-023 — Detected PII redaction. Remove recognized entities before evaluation Scope record; not an implementation claim.
• F-024 — PII_OUTBOUND pre-send warning — you are about to paste personal data into a model. Specify and deliver pII_OUTBOUND pre-send warning — you are about to paste personal data into a model. Scope record; not an implementation claim.

Shared tag capabilities

• F-001 — Assertion envelope schema, JSON Schema 2020-12. Specify and deliver assertion envelope schema, JSON Schema 2020-12. Scope record; not an implementation claim.
• F-003 — Signal registry, 22 registered IDs with version suffixes. Specify and deliver signal registry, 22 registered IDs with version suffixes. Scope record; not an implementation claim.
• F-004 — Abstention as a first-class state — UNK. Specify and deliver abstention as a first-class state — UNK. Scope record; not an implementation claim.
• F-005 — Per-tag confidence floors. Specify and deliver per-tag confidence floors. Scope record; not an implementation claim.
• F-007 — Content-free assertion records. Return hashes, offsets, and metadata without embedding evaluated text Scope record; not an implementation claim.
• F-008 — Signed assertion integrity. Sign an exact canonical tag record with an identified key Scope record; not an implementation claim.
• F-009 — Cost-to-defeat ladder — statistical / behavioural / structural / cryptographic. Specify and deliver cost-to-defeat ladder — statistical / behavioural / structural / cryptographic. Scope record; not an implementation claim.
• N-005 — Label dispute, correction, and supersession workflow. Specify and deliver label dispute, correction, and supersession workflow. Scope record; not an implementation claim.
• N-006 — Versioned regression checks and revalidation triggers. Specify and deliver versioned regression checks and revalidation triggers. Scope record; not an implementation claim.

References

• taxonomy.md
• signals.md

Scope record T-OUT. Preserved scope is not implementation evidence.