Showcase · HIPAA PHI redactor

From blank page to signed artifact in one afternoon.

A real .kolm built from the HIPAA Safe-Harbor compliance pack. Redacts 18 identifier categories. K-score 0.98. Leak rate 0. One signed file you can hand to your auditor today.

K-score

0.982

Leak rate

0.000

Latency p99

2 µs

Artifact size

9.5 KB

Live

Paste clinical text. Watch PHI vanish.

Input

Output

(redacting...)

cid: cidv1:sha256:1bcf23236ebf8a8f7b9f7d909724ef90344867d299265965d0e0c9a1223e6346

runtime: pattern-engine/0.1 · V8 regex · local-only

Auditor receipts

Every artifact ships its own evidence binder.

manifest.json

What's inside, in canonical JSON

Task, base model, preset, K-score, leak rate, coverage, compliance pack. The CID is the SHA-256 of this file's canonical hashes.

"cid": "cidv1:sha256:1bcf23..."
"k_score": 0.982
"compliance_pack": {
  "name": "hipaa-phi-redactor",
  "framework": "HIPAA",
  "control": "§164.514(b)(2) Safe Harbor"
}

receipt.json

HMAC-SHA256 chain of every stage

Receipt body covers load_recipe, load_seeds, compile_patterns, evaluate, k_gate. Signature replays deterministically with the host secret.

"stages": [
  { "name": "compile_patterns", "hash": "ed05..." },
  { "name": "evaluate", "k_score": 0.982 },
  { "name": "k_gate", "passed": true }
]
"signature": "<hmac-sha256-hex>"

credential.json

kolm-credential/0.1 provenance

References artifact_hash + CID + signed_at. Every prediction the runtime emits can carry this credential id so downstream systems can link outputs back to their producer.

"spec": "kolm-credential/0.1"
"credential_id": "kc_4ebd5f06..."
"artifact_hash": "a91f..."
"cid": "cidv1:sha256:1bcf23..."
"signed_at": "2026-05-14T..."

Reproduce

Three commands from clone to deployed artifact.

Clone the repo · git clone https://github.com/sneaky-hippo/kolmogorov-stack
Build the showcase artifact · node apps/showcase/healthcare/build.mjs · writes dist/phi-redactor.kolm with manifest, receipt, credential, model.
Run it · node apps/showcase/healthcare/run.mjs "Patient Sarah Mitchell, DOB 1972-04-18, MRN 8847-21."

The same artifact loads from the Python, Swift, Kotlin, and React Native SDKs. see docs/sdks. The LoRA-tier upgrade uses the same compliance pack and runs through the same K-score gate.

This is what the first afternoon looks like.

The pattern artifact is the floor, not the ceiling. The LoRA path catches the rest of the long tail (novel name shapes, code-switched notes, OCR artifacts) through the same compile gate and ships the same receipt.

Compile your own Healthcare landing Compliance packs