How to enable GDPR, HIPAA, and PCI-DSS compliance in one call

// Enable GDPR compliance
const policy = await cadreen.policies.create({
  policy_type: "compliance",
  policy_text: "Enable GDPR compliance: PII access requires DPO approval, 24h timeout, high-severity logging.",
  risk_level: "high",
});

console.log(policy.id);     // "pol_gdpr_001"
console.log(policy.status); // "active"

// The template creates sub-policies automatically:
// - PII access → DPO approval
// - Data deletion → honored within 30 days
// - Cross-transfer → blocked by default

# Enable HIPAA compliance
policy = await cadreen.policies.create(
    policy_type="compliance",
    policy_text="Enable HIPAA compliance: PHI access requires approval and logging, automatic redaction in responses.",
    risk_level="high",
)

print(policy.id)  # "pol_hipaa_001"

> Look up customer john@example.com's credit card number

I can't do that. Your workspace has PCI-DSS compliance enabled.
Cardholder data is masked by default.

If you need access, say "request access" and I'll escalate to your DPO.

const result = await cadreen.intent.invoke({
  messages: [{ role: "user", content: "Show me all PII for user 123" }],
});

console.log(result.type);       // "blocked"
console.log(result.reason_code); // "compliance_pii_access"
console.log(result.policy_id);   // "pol_gdpr_001"

$ cadreen traces --decision blocked --policy pol_gdpr_001

Found 12 blocked requests (last 30 days):

  2026-06-21  PII access blocked     user:456  DPO approval requested
  2026-06-20  PII access blocked     user:789  DPO approved (2h response)
  2026-06-18  Cross-transfer blocked  user:123  No approval requested