options.proto

proto3 · package acme.security
1syntax = "proto3";
2 
3package acme.security;
4 
5import "google/protobuf/descriptor.proto";
6 
7option go_package = "acme.example/security;security";
8 
9// Classification for fields that store personally identifiable information.
10enum Redaction {
11  REDACTION_UNSPECIFIED = 0;
12  REDACTION_MASK = 1;
13  REDACTION_HASH = 2;
14  REDACTION_DROP = 3;
15}
16 
17message PiiRule {
18  bool sensitive = 1;
19  Redaction redaction = 2;
20  string policy = 3;
21}
22 
23// Marks a field as personally identifiable information.
24//
25// Apply this option to any field that must be treated as PII in logs,
26// analytics exports, and support tooling.
27extend google.protobuf.FieldOptions {
28  PiiRule pii = 50001;
29}
30 
31extend google.protobuf.MessageOptions {
32  bool audit_required = 50002;
33}
34 
35extend google.protobuf.FileOptions {
36  string owner = 50003;
37}
38 