KBP-002 · Knowledge base · all collections

No customer documents in the general knowledge base

Compiled into the runtime gateway and evaluated inline on every prompt, tool call and completion in scope. Owned by DPO.

Simulate this policycriticalenforcingEdit in rule builder

Triggers / 30d

76

blocks, masks and escalations

Integrations bound

0

enforced at each connection

Severity

critical

owner DPO

Added latency

7 ms

p99 within the 60 ms budget

Rule definition

Compiled expression

When

  • ingested document contains PAN / Aadhaar / account number
  • collection ≠ kb/case-files

Then

  • quarantine document
  • raise critical finding
  • notify DPO

Policy as code

apiVersion: truint.ai/v1
kind: KnowledgeBasePolicy
metadata:
  id: KBP-002
  name: "No customer documents in the general knowledge base"
  owner: "DPO"
  scope: "Knowledge base · all collections"
spec:
  severity: critical
  mode: enforce
  knowledgeBase:
    sources:
      - "kb/*"
    classification: Restricted
    maxAgeDays: 30
    minCitationCoverage: 0
    retentionMonths: 24
    audiences:
      - "All agents"
  when:
    - "ingested document contains PAN / Aadhaar / account number"
    - "collection ≠ kb/case-files"
  then:
    - "quarantine document"
    - "raise critical finding"
    - "notify DPO"

Knowledge base scope

Collections and grounding thresholds

Sources
kb/*
Classification
Restricted
Max source age
30 days
Min citation coverage
0%
Retention
24 months
Permitted audiences
All agents

Governance metadata

Policy ID
KBP-002
Owner
DPO
Scope
Knowledge base · all collections
State
Enforcing inline
Catalog version
2026.07.3
Last change
2026-07-22 · approved by AI Council

Bound integrations

Where this rule executes

Applies estate-wide rather than to a specific connection.

Recent evaluations

Decisions where this rule fired

No evaluations from this rule in the current buffer.