auditing-deidentification-runs
提供可签名的无 PHI 审计链，适用于合规证明与取证保留。
输出审计数据仍包含敏感操作元数据，需安全存储与访问控制
为去标识化运行生成不可篡改的审计报告，记录每次红action的证据与哈希。
为去标识化运行生成不可篡改的审计记录，记录每次删减的偏移、标签、置信度、内容哈希和模型溯源，但不保留明文 PHI，用作合规证据（如 HIPAA/GDPR）。审计结果可以签名并验证，方便事后复核和证明哪段内容被处理、为什么被处理而不泄露敏感数据。
▸ 展开 SKILL.md 英文原文
Produce a signed, reproducible, no-PHI audit trail for an OpenMed de-identification run via deidentify(audit=True). Use when the user needs compliance evidence, a tamper-evident record of what was redacted and why, to verify nothing was changed, to retain proof for HIPAA/GDPR audits, or to review de-id decisions without exposing plaintext PHI. Covers the AuditReport / AuditSignature / AuditSpan / DetectorInfo fields, why audits store offsets+hashes+provenance+residual-risk and never plaintext, signing with .sign(key), and verifying with .verify(key). Pairs with OpenMed deidentifying-clinical-text and auditing-safe-harbor-checklist.
帮我安装这个 skill：https://raw.githubusercontent.com/maziyarpanahi/openmed/master/skills/auditing-deidentification-runs/SKILL.mdcurl -fsSL "https://raw.githubusercontent.com/maziyarpanahi/openmed/master/skills/auditing-deidentification-runs/SKILL.md"# Auditing de-identification runs `deidentify(..., audit=True)` returns an `AuditReport` instead of the rewritten text: a deterministic, **PHI-free** record of every redaction decision — offsets, label, detector confidence and threshold, the action taken, content hashes, model provenance, and projected residual risk. Sign it to make it tamper-evident, retain it as compliance evidence, and verify it later without ever touching the original text. Runs **on-device**. ## When to use this skill Use it whenever a de-identification needs to be *defensible*: regulatory retention, internal review, reproducibility checks, or proving to an auditor that identifiers were detected and handled — all wit