Defame1297/holocron
0
0
Fork 0
Code Issues 14 Pull Requests Actions Packages Projects Releases 3 Wiki Activity

chore: reformat data classification table in ai-constitution

Browse Source 
Whitespace-only change — padded columns for readability. No content change.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
This commit is contained in:
Defame1297
2026-05-25 20:25:28 +00:00
parent e3cc0b65f4
commit 737397ebec
1 changed files with 6 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

12
docs/ai-constitution.md
View File

@@ -51,12 +51,12 @@ Everything that enters an AI prompt is subject to the same classification obliga
### Data Classification for AI Systems
| Tier | Label | Description | AI Rule |
|---|---|---|---|
| 1 | **Public** | Publicly available data | No restrictions |
| 2 | **Internal** | Operational data, non-personal system data, anonymised logs | Enterprise AI tools only; not consumer/free-tier products |
| 3 | **Confidential** | Proprietary source code, system architecture, IP, identifiable personal data | Enterprise AI with explicit data-not-used-for-training contractual commitment; GDPR legal basis required for personal data |
| 4 | **Restricted** | GDPR Article 9 special categories (health, biometrics, ethnicity, religion, sexual orientation, political views), credentials, regulated financial data, data under professional secrecy | Never enters any AI context. Hard architectural prohibition. |
| Tier | Label | Description | AI Rule |
| ------| ------------------| ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------| ----------------------------------------------------------------------------------------------------------------------------|
| 1 | **Public** | Publicly available data | No restrictions |
| 2 | **Internal** | Operational data, non-personal system data, anonymised logs | Enterprise AI tools only; not consumer/free-tier products |
| 3 | **Confidential** | Proprietary source code, system architecture, IP, identifiable personal data | Enterprise AI with explicit data-not-used-for-training contractual commitment; GDPR legal basis required for personal data |
| 4 | **Restricted** | GDPR Article 9 special categories (health, biometrics, ethnicity, religion, sexual orientation, political views), credentials, regulated financial data, data under professional secrecy | Never enters any AI context. Hard architectural prohibition. |
**Consumer and free-tier AI products are incompatible with processing organisational or personal data.**
Enterprise contracts with explicit data-not-used-for-training commitments are the minimum bar. Verify per provider; do not assume.