SEC-071-hipaa-security-rule-mapper

# HIPAA Security Rule Mapper

 Field | Value |
|-------|-------|
| **Domain** | Cybersecurity |
| **Skill ID** | `SEC-071` |
| **Difficulty** | Advanced |
| **Exec Time** | 5–10s |
| **Skill Type** | Generative |
| **Reasoning** | Reflexion |
| **Output Format** | Code Block |

### [1] Input Intelligence

- **Accepts:** `text, JSON context, workspace files, web documentation URL` *(fill in for your implementation)*
- **Intent:** Detect user intent related to *hipaa security rule mapper*
- **Entities to Extract:** `Code Logic, Security Dependencies, User Configurations`
- **Validation:** `Validates JSON structure, verifies execution endpoints exist, asserts parameter typing`
- **Ambiguity Handler:** Ask clarifying question if confidence < 70%

### [2] Reasoning Engine

- **Strategy:** Reflexion
- **Sub-tasks:**
  1. Parse and validate the input for *hipaa security rule mapper* context
  2. `Construct enterprise DAG strategy matching HIPAA Security Rule Mapper`
  3. `Evaluate sub-task dependencies using static analysis`
  4. `Render verified components mapping strictly to Promptraft architecture`
  5. Synthesize results and prepare output
- **Domain Rules:** `- Must eliminate unnecessary abstractions
- Enforce strict typing
- Verify API boundary safety`
- **Fallback:** If reasoning fails → return partial result + ask user
- **Confidence Threshold:** 75% minimum to auto-proceed

### [3] Tool Execution

- **Primary Tool:** `Tenable API` — `Executes the primary heavy-lifting specific to the domain logic`
- **Secondary Tool:** `Qualys API` — `Provides validation, fallback, or post-processing security checks`
- **Execution Order:** `Parallel (unless specifically blocked)`
- **Error Handling:** Retry × 2 → fallback tool → graceful error message
- **Data Flow:** `Tenable API output → AST & Schema normalizer → Qualys API input`

### [4] Knowledge & Memory

- **Primary Source:** User History (Redis)
- **Context Injected At:** Stage 2 (Reasoning) + Stage 3 (Tool Execution)
- **Write-back:** Store `execution latency, failure rates, context compression metrics` after each run
- **Freshness Policy:** `Real-time execution memory`
- **Personalization:** `User-level context isolation`

### [5] Output Optimization

- **Format:** Code Block
- **Quality Checks:** `Strict Schema JSON validation + Halucination bounds`
- **Tone:** `Technical & Direct`
- **Follow-up Suggestions:**
  - `Deploy workflow to execution environment`
  - `Deploy workflow to execution environment`
  - `Deploy workflow to execution environment`
- **Confidence Score:** Append `confidence: 96%` to output

### ⚙️ YAML Config

```yaml
skill:
  id: SEC-071
  name: "HIPAA Security Rule Mapper"
  domain: Cybersecurity
  version: 1.0.0
  difficulty: Advanced
  type: Generative
  enabled: true
  pipeline:
    input_types: [ ]  # fill: text, file, json, url, image
    reasoning: Reflexion
    tools:
      primary: Tenable API
      secondary: Qualys API
    knowledge_source: User History (Redis)
    output_format: Code Block
  config:
    confidence_threshold: 0.75
    max_retries: 2
    timeout_seconds: 10
    memory_write_back: true
    personalization_level: user  # user | team | global
```

---