DLP: regional identifiers and templates

jcoffey-dev commented

2026-09-29 00:14:05 +00:00

Owner

Phase 2b of the DLP spec: the rest of the §2.3 detector catalog, each from its issuer's published rules and tested against published examples. 49 detectors in all (US, UK, Canada, Australia, 14 EU countries, Norway, Switzerland, India, China, Japan, Singapore, South Korea, Brazil, Mexico, South Africa) plus seven templates named for what they find.

Refinement to §2.3 (recorded in the spec): digit-only identifiers whose check about one number in ten passes count alone only in their written form (536-22-1234, 943 476 5919), and as bare digits only beside a word; ABA routing numbers and NPIs always need one.

A test runs every detector over an ordinary business email (order/invoice/tracking numbers, dates, amounts, an address) and requires nothing to fire except the contact detectors. 47 unit tests; still nothing wired into the mail path.

Phase 2b of the DLP spec: the rest of the §2.3 detector catalog, each from its issuer's published rules and tested against published examples. 49 detectors in all (US, UK, Canada, Australia, 14 EU countries, Norway, Switzerland, India, China, Japan, Singapore, South Korea, Brazil, Mexico, South Africa) plus seven templates named for what they find. **Refinement to §2.3 (recorded in the spec):** digit-only identifiers whose check about one number in ten passes count alone only in their written form (`536-22-1234`, `943 476 5919`), and as bare digits only beside a word; ABA routing numbers and NPIs always need one. A test runs every detector over an ordinary business email (order/invoice/tracking numbers, dates, amounts, an address) and requires nothing to fire except the contact detectors. 47 unit tests; still nothing wired into the mail path.

jcoffey-dev added 1 commit 2026-09-29 00:14:05 +00:00

DLP: regional identifiers and templates

ci / fork-checks (pull_request) Successful in 1m47s

Details

ci / build (pull_request) Successful in 7m42s

Details

92d14fbd60

Phase 2b of the DLP and mail flow rules spec: every identifier in the
§2.3 catalog, each implemented from its issuer's published rules and
tested against published examples.

US (SSN, ITIN, EIN, ABA routing, driver's licenses, MBI, NPI, DEA), UK
(NI number, NHS number, UTR), Canada (SIN), Australia (TFN, Medicare),
the EU (Germany's tax ID and ID card, France's NIR, Spain's DNI/NIE,
Italy's codice fiscale, the Dutch BSN, Belgium's national number,
Poland's PESEL, Sweden's personnummer, Denmark's CPR, Finland's HETU,
Ireland's PPS, Portugal's NIF, Austria's SVNR), Norway, Switzerland,
India (Aadhaar, PAN), China, Japan, Singapore, South Korea, Brazil (CPF,
CNPJ), Mexico (CURP) and South Africa. 49 detectors in all, plus seven
templates named for what they find.

An identifier that is only digits and whose check about one random
number in ten passes counts alone only in its written form
(536-22-1234, 943 476 5919) and as bare digits only beside a word; ABA
routing numbers and NPIs always need one. Spec §2.3 records this.

A test runs every detector over an ordinary business email (order,
invoice and tracking numbers, dates, amounts, an address) and requires
nothing to fire but the contact detectors. 47 unit tests.

jcoffey-dev merged commit f8b9df6438 into main

2026-09-29 00:21:52 +00:00

jcoffey-dev deleted branch feature/dlp-detectors-us-uk-ca-au

2026-09-29 00:21:52 +00:00

jcoffey-dev referenced this pull request

2026-09-29 01:23:35 +00:00

Release 2026.9.28.6 #107

jcoffey-dev referenced this pull request

2026-09-29 05:39:08 +00:00

Release 2026.9.29 #121

DLP: regional identifiers and templates #102