Data Security and Privacy
Operating contract
- Identify the requested deliverable, then select exactly one atomic task below.
- Read that task file completely before acting.
- Read references/lifecycle-standard.md and use the task's profile, risk tier and execution path.
- Load only the company context and adapter references needed for the selected task.
- On a cross-role handoff, compare logical ID and SHA-256 in
references/shared-reference-manifest.json; reuse an already loaded shared reference when both match instead of loading its duplicate.
- Inspect real artifacts and systems before making change-sensitive claims.
- Apply Definition of Ready, stage gates, test strategy, Definition of Done, approval and handoff requirements.
- Do not invent access, approvals, successful execution, test results or business confirmation.
- For any Git-backed mutation, regardless of the task's verb or profile, require a pre-change success/scope contract, a post-change
core-audit-change-scope, and fresh core-verify-deliverable evidence before completion.
- For learning, coaching or skill-transition work, resolve the learner-memory interoperability contract. Reuse only relevant verified summaries; never infer mastery from exposure, and expand stale, uncertain, changed-version or safety-critical prerequisites.
Ownership
Own only deliverables listed in this role catalog. When the requested deliverable belongs to another role, produce a handoff instead of silently taking ownership. Use the department orchestrator for multi-role work.
Stack-native adapter routing
After selecting the task, detect the real stack/version and read only the matching adapter below plus the adapter index. Do not load every adapter.
- snowflake
- bigquery
- databricks
- microsoft-fabric
- power-bi
- metadata-catalog
Atomic task routing
- Plan, define, design, map, specify or create a proposed artifact (3 tasks): read references/catalog-plan-design.md.
- Build, implement, configure, teach, interview or deliver an artifact (part 1) (5 tasks): read references/catalog-build-deliver-1.md.
- Build, implement, configure, teach, interview or deliver an artifact (part 2) (4 tasks): read references/catalog-build-deliver-2.md.
- Inspect, analyze, test, review, validate, assess, certify or audit (4 tasks): read references/catalog-test-assure.md.
Read only the best-matching catalog. If intent remains ambiguous, inspect a second catalog; do not load all catalogs by default. Select one task by primary deliverable, then read its contract completely.
Completion response
State the selected task ID, primary deliverable, evidence inspected, validation performed, approval status, residual risks and next owner. A draft or plan is not an executed production outcome.
1---2name: data-security-and-privacy3description: Protect data through classification, threat modeling, least privilege, encryption, masking, audit, privacy workflows and incident response. Use for Data Security, Privacy, DSR or sensitive-data risk work.4---56# Data Security and Privacy78## Operating contract9101. Identify the requested deliverable, then select exactly one atomic task below.112. Read that task file completely before acting.123. Read [references/lifecycle-standard.md](references/lifecycle-standard.md) and use the task's profile, risk tier and execution path.134. Load only the company context and adapter references needed for the selected task.145. On a cross-role handoff, compare logical ID and SHA-256 in `references/shared-reference-manifest.json`; reuse an already loaded shared reference when both match instead of loading its duplicate.156. Inspect real artifacts and systems before making change-sensitive claims.167. Apply Definition of Ready, stage gates, test strategy, Definition of Done, approval and handoff requirements.178. Do not invent access, approvals, successful execution, test results or business confirmation.189. For any Git-backed mutation, regardless of the task's verb or profile, require a pre-change success/scope contract, a post-change `core-audit-change-scope`, and fresh `core-verify-deliverable` evidence before completion.1910. For learning, coaching or skill-transition work, resolve [the learner-memory interoperability contract](references/learning-memory-interoperability.md). Reuse only relevant verified summaries; never infer mastery from exposure, and expand stale, uncertain, changed-version or safety-critical prerequisites.2021## Ownership2223Own only deliverables listed in this role catalog. When the requested deliverable belongs to another role, produce a handoff instead of silently taking ownership. Use the department orchestrator for multi-role work.242526## Stack-native adapter routing2728After selecting the task, detect the real stack/version and read only the matching adapter below plus [the adapter index](references/technology-adapters.md). Do not load every adapter.2930- [snowflake](references/adapter-snowflake.md)31- [bigquery](references/adapter-bigquery.md)32- [databricks](references/adapter-databricks.md)33- [microsoft-fabric](references/adapter-microsoft-fabric.md)34- [power-bi](references/adapter-power-bi.md)35- [metadata-catalog](references/adapter-metadata-catalog.md)3637## Atomic task routing3839- **Plan, define, design, map, specify or create a proposed artifact** (3 tasks): read [references/catalog-plan-design.md](references/catalog-plan-design.md).40- **Build, implement, configure, teach, interview or deliver an artifact (part 1)** (5 tasks): read [references/catalog-build-deliver-1.md](references/catalog-build-deliver-1.md).41- **Build, implement, configure, teach, interview or deliver an artifact (part 2)** (4 tasks): read [references/catalog-build-deliver-2.md](references/catalog-build-deliver-2.md).42- **Inspect, analyze, test, review, validate, assess, certify or audit** (4 tasks): read [references/catalog-test-assure.md](references/catalog-test-assure.md).4344Read only the best-matching catalog. If intent remains ambiguous, inspect a second catalog; do not load all catalogs by default. Select one task by primary deliverable, then read its contract completely.4546## Completion response4748State the selected task ID, primary deliverable, evidence inspected, validation performed, approval status, residual risks and next owner. A draft or plan is not an executed production outcome.
kina2711