The leak check, one fail-closed SI review of a draft against withheld excerpts (KamoCollab CP07 Task 14)

Shipped

October 11, 2026 at 12:08 PM UTC

Author

Kamo

Commit

3cd4546

POST **************** (KamoAI secret only) answers {verdict: CLEAN|LEAKS|UNSURE, reason}. LeakCheckService builds a fixed, provider- and tenant-neutral prompt and makes one TEXT_GENERATION call through **************** (MEDIUM, one attempt, 20 s, PHI-eligible for PHI orgs), metered as usage kind DISCLOSURE_CHECK. Anything but one strict JSON verdict, a timeout, no route or the PHI boundary is UNSURE.