Evidence

import { complianceSheet, renderComplianceSheet } from 'ts-prorm-orm';

const sheet = complianceSheet(Patient);        // structured
const markdown = renderComplianceSheet(Patient); // the same, rendered

interface ComplianceSheet {
  model: string;
  asOf: string;                                  // the registry's date
  jurisdictions: Array<{ code: string; name: string; law: string[] }>;
  resolved: {
    digitalConsentAge: number;
    minimumAge?: number;
    requiresBasis: 'always' | 'special-only' | 'never';
    lawfulBases: LawfulBasis[];
    specialCategories: PersonalCategory[];
    prohibited: PersonalCategory[];
    breachNotificationHours?: number;
    requestDeadlineDays?: number;
    residency: Residency;
    rights: SubjectRight[];
  };
  fields: Array<PersonalField & { name: string; special: boolean; ceiling?: Duration }>;
  ageGate: { field?: string; consentField?: string; threshold: number } | null;
  region?: string;
  findings: Finding[];
}

for (const [, Model] of prorm.getModels()) {
  if (complianceOf(Model)) register.push(renderComplianceSheet(Model));
}

import fs from 'node:fs';
import path from 'node:path';
import { complianceOf, renderComplianceSheet } from 'ts-prorm-orm';
import { gitInfo } from 'ts-prorm-orm/compliance/audit';

const { commit, dirty } = gitInfo(process.cwd());
const dir = path.join('register', new Date().toISOString().slice(0, 10));
fs.mkdirSync(dir, { recursive: true });

const undeclared: string[] = [];
for (const [name, Model] of prorm.getModels()) {
  if (!complianceOf(Model)) {
    undeclared.push(name);
    continue;
  }
  const header = `<!-- generated from ${commit ?? 'no commit'}${dirty ? ' (uncommitted changes)' : ''} -->\n`;
  fs.writeFileSync(path.join(dir, `${name}.md`), header + renderComplianceSheet(Model));
}
fs.writeFileSync(path.join(dir, 'UNDECLARED.txt'), undeclared.join('\n') + '\n');

register/
  2026-09-26/
    Patient.md       # one sheet per declared model
    Appointment.md
    UNDECLARED.txt   # the models nobody has declared yet: the questions

SensitiveDataDiscovery.generateComplianceReport(prorm);
// per model: the fields matched, the pattern, the confidence, the recommendation,
// and the frameworks the pattern is tagged for

getPIIFields(Patient); getPHIFields(Patient); getPCIFields(Patient); getConfidentialFields(Patient);

import { ComplianceAuditTrail } from 'ts-prorm-orm';

const trail = ComplianceAuditTrail.enable(prorm, Patient, {
  getUserId: () => currentUser()?.id,
  getIpAddress: () => currentRequest()?.ip,
});

// Every change to patient 42 in the review period, newest first.
const history = await trail.getModelHistory(42, {
  startDate: new Date('2026-07-01'),
  endDate: new Date('2026-10-01'),
});

// The deletion entry: who, when, from where, and the row as it stood.
const deletion = history.find((e) => e.action === 'DELETE');