privacy-impact-evidence-review · git:20260907.d9240bd · 2026-09-07 · sha256 3e084c3b922d699d
privacy-impact-evidence-review git:20260907.d9240bdA
Immutable. This exact content never changes and is served at /api/v1/blob/3e084c3b922d699d.
---
name: privacy-impact-evidence-review
description: "사이버보안 업무의 개인정보 영향평가 근거 검토 절차. 내부 public-policy-evidence-pack capability를 사용하며 draft-only 경계를 지킵니다."
metadata:
kgov:
domain: "사이버보안"
capability: public-policy-evidence-pack
runtime_contract: "kgov/public-policy-evidence-pack/v1"
operation: "kgov/public-policy-evidence-pack/build-pack/v1"
role: additional
---
<!-- generated from catalog/domain-skills.json; do not edit -->
# 개인정보 영향평가 근거 검토
- Domain: **사이버보안**
- 내부 capability: `public-policy-evidence-pack`
- 실행 상태: `fixture-verified` / live smoke `not-run`
- 실행 경계: `draft-only`
- Reference Skill: 없음
## Runtime binding
- Contract: `kgov/public-policy-evidence-pack/v1`
- Operation: `kgov/public-policy-evidence-pack/build-pack/v1`
- Fixed input: `{"argv": ["--fixture"]}`
- Output fields: `manual_review_required`, `accepted`, `jurisdiction`, `permitted_output`, `claims`, `status_counts`, `claim_count`, `as_of_date`, `basic_identifier_scan`, `receipt_assurance`, `source_kind_assurance`
<!-- kgov-runtime-binding:start -->
```json
{
"binding": {
"contract_id": "kgov/public-policy-evidence-pack/v1",
"fixed_input": {
"argv": [
"--fixture"
]
},
"operation": "kgov/public-policy-evidence-pack/build-pack/v1"
},
"example_result": {
"accepted": true,
"as_of_date": "2026-07-15",
"basic_identifier_scan": "no-match-not-proof-of-redaction",
"claim_count": 3,
"claims": [
{
"claim_id": "C1",
"contradiction_detected": false,
"evidence_count": 1,
"retrieved_evidence_count": 1,
"retrieved_official_primary_count": 1,
"status": "structurally-supported-pending-human-review"
},
{
"claim_id": "C2",
"contradiction_detected": true,
"evidence_count": 2,
"retrieved_evidence_count": 2,
"retrieved_official_primary_count": 2,
"status": "conflict-detected-pending-human-review"
},
{
"claim_id": "C3",
"contradiction_detected": false,
"evidence_count": 1,
"retrieved_evidence_count": 1,
"retrieved_official_primary_count": 0,
"status": "insufficient-official-evidence"
}
],
"jurisdiction": "KR",
"manual_review_required": true,
"permitted_output": "evidence-pack-draft-only",
"receipt_assurance": "input-declared-not-live-retrieval-proof",
"source_kind_assurance": "input-declared-not-independently-verified",
"status_counts": {
"conflict-detected-pending-human-review": 1,
"insufficient-official-evidence": 1,
"structurally-supported-pending-human-review": 1
}
},
"exit_codes": {
"input_error": 2,
"policy_blocked": 3,
"review_blocked": 1,
"success": 0,
"upstream_error": 4
},
"fixture_argv": [
"--fixture"
],
"input_schema": {
"additionalProperties": false,
"properties": {
"argv": {
"items": {
"type": "string"
},
"type": "array"
}
},
"required": [
"argv"
],
"type": "object"
},
"module": "kgov_runtime.capabilities.public_policy_evidence_pack",
"network_mode": "none",
"output_schema": {
"additionalProperties": false,
"properties": {
"accepted": {
"const": true,
"type": "boolean"
},
"as_of_date": {
"format": "date",
"type": "string"
},
"basic_identifier_scan": {
"const": "no-match-not-proof-of-redaction",
"type": "string"
},
"claim_count": {
"minimum": 0,
"type": "integer"
},
"claims": {
"items": {
"additionalProperties": false,
"properties": {
"claim_id": {
"type": "string"
},
"contradiction_detected": {
"type": "boolean"
},
"evidence_count": {
"minimum": 0,
"type": "integer"
},
"retrieved_evidence_count": {
"minimum": 0,
"type": "integer"
},
"retrieved_official_primary_count": {
"minimum": 0,
"type": "integer"
},
"status": {
"enum": [
"structurally-supported-pending-human-review",
"conflict-detected-pending-human-review",
"insufficient-official-evidence"
],
"type": "string"
}
},
"required": [
"claim_id",
"contradiction_detected",
"evidence_count",
"retrieved_evidence_count",
"retrieved_official_primary_count",
"status"
],
"type": "object"
},
"type": "array"
},
"jurisdiction": {
"const": "KR",
"type": "string"
},
"manual_review_required": {
"const": true,
"type": "boolean"
},
"permitted_output": {
"const": "evidence-pack-draft-only",
"type": "string"
},
"receipt_assurance": {
"const": "input-declared-not-live-retrieval-proof",
"type": "string"
},
"source_kind_assurance": {
"const": "input-declared-not-independently-verified",
"type": "string"
},
"status_counts": {
"additionalProperties": false,
"properties": {
"conflict-detected-pending-human-review": {
"minimum": 0,
"type": "integer"
},
"insufficient-official-evidence": {
"minimum": 0,
"type": "integer"
},
"structurally-supported-pending-human-review": {
"minimum": 0,
"type": "integer"
}
},
"required": [
"structurally-supported-pending-human-review",
"conflict-detected-pending-human-review",
"insufficient-official-evidence"
],
"type": "object"
}
},
"required": [
"manual_review_required",
"accepted",
"jurisdiction",
"permitted_output",
"claims",
"status_counts",
"claim_count",
"as_of_date",
"basic_identifier_scan",
"receipt_assurance",
"source_kind_assurance"
],
"type": "object"
},
"schema_status": "active",
"source_output_mode": "none",
"source_policy_ids": []
}
```
<!-- kgov-runtime-binding:end -->
## 업무별 추가 체크
- 시스템·처리업무·개인정보 유형·처리목적·정보주체·법적근거·처리흐름·보유기간·제3자 제공을 분리
- 공식 자료로 입력된 개인정보위·국가법령정보 URL·가이드 또는 법령 버전·조회일과 상충·미수집 근거를 구분
- 영향평가 실시대상·적합성·법적준수·승인 판단은 개인정보 보호책임자와 전문기관 검토로 이관
## 절차
1. 저장소 루트에서 `docs/capabilities/public-policy-evidence-pack/procedure.md`와 `docs/capabilities/public-policy-evidence-pack/runtime-contract.md`를 먼저 읽습니다.
2. `python3 -m kgov_runtime.capabilities.public_policy_evidence_pack --fixture`로 합성 fixture 계약을 검증합니다.
3. live 실행은 capability manifest의 credential·proxy·허용 host 경계를 충족할 때만 수행합니다.
4. 정책·법률·통계 판단과 문서 결재·발송은 담당 공무원 승인
5. fixture 성공, URL 도달, live 검증을 서로 다른 증거로 보고합니다.
## 금지
- 이 Skill을 근거로 원본 변경·제출·결재·발송을 자동 수행하지 않습니다.
- 비밀값이나 원문 개인정보를 로그·결과·fixture에 남기지 않습니다.
- 내부 capability를 별도 top-level `skills/` 제품 표면으로 복제하지 않습니다.