{"product":"Mosaic","synthetic_data_only":true,"assessment":{"candidate":{"asset_urn":"urn:li:dataset:(urn:li:dataPlatform:mosaic,research_export_clean,PROD)","columns":["zip5","birth_date","gender_category"],"families":["location","date_of_birth","demographic"],"lineage_paths":[["support_contacts.zip5","research_export_clean.zip5"],["support_contacts.full_birth_date","research_export_clean.birth_date"],["member_demographics_coarse.gender_category","research_export_clean.gender_category"]],"sensitive_attribute_present":true,"downstream_assets":["research_partner_delivery","cohort_explorer_export","readmission_model_training"]},"verdict":"validated_critical","reasons":["Three quasi-identifier families converge through independent lineage paths.","Exact aggregate validation found minimum k=1 and 100.000% of records in classes below k=5.","The combination reaches 3 downstream assets."],"metrics":{"total_records":120,"distinct_combinations":120,"minimum_k":1,"percent_below_2":100.0,"percent_below_5":100.0,"percent_below_10":100.0,"class_size_distribution":{"1":120}},"aggregate_query":"SELECT zip5, birth_date, gender_category, COUNT(*) AS equivalence_class_size FROM research_export_clean GROUP BY zip5, birth_date, gender_category","raw_rows_returned":0,"mitigation":{"status":"recommended","action":"suppress birth_date from the research export","drop":["birth_date"],"generalize":{},"evaluated_columns":["zip5","gender_category"],"metrics":{"minimum_k":20,"percent_below_5":0.0,"distinct_combinations":6},"utility_retained":0.667,"writes_applied":false},"adversarial_self_check":"False-positive case considered: the fields are not direct identifiers and each source alone is ordinary. Independent lineage convergence plus measured k=1 is the evidence that defeats that alternative explanation.","exit_code":3},"graph_value":{"status":"passed","graph_convergences":1,"baseline_convergences":0,"lineage_only_paths":[["support_contacts.zip5","research_export_clean.zip5"],["support_contacts.full_birth_date","research_export_clean.birth_date"],["member_demographics_coarse.gender_category","research_export_clean.gender_category"]]},"safe_controls":{"status":"passed","controls":[{"name":"generalized_export","expected":"validated_low","actual":"validated_low","minimum_k":20,"no_raw_rows_returned":true},{"name":"tagged_direct_identifier","expected":"not_a_compositional_finding","actual":"not_a_compositional_finding","reason":"Direct identifiers belong to existing classification controls, not Mosaic's convergence engine."},{"name":"operational_identifier","expected":"not_critical","actual":"not_critical","reason":"High cardinality without a person-joinable family is not compositional risk."},{"name":"aggregate_dashboard","expected":"not_critical","actual":"not_critical","reason":"The downstream dashboard carries aggregates, not row-level quasi-identifiers."}]},"writeback":{"status":"dry_run","requires_reviewer_approval":true,"target_urn":"urn:li:dataset:(urn:li:dataPlatform:mosaic,research_export_clean,PROD)","proposal":{"asset_urn":"urn:li:dataset:(urn:li:dataPlatform:mosaic,research_export_clean,PROD)","type":"mosaic_privacy_threat_model","properties":{"mosaic.riskState":"validated_critical","mosaic.minimumK":1,"mosaic.smallClassPercentBelow5":100.0,"mosaic.assessorVersion":"0.1.0"},"document":{"title":"Mosaic privacy threat model","downstream_assets":["research_partner_delivery","cohort_explorer_export","readmission_model_training"],"aggregate_query":"SELECT zip5, birth_date, gender_category, COUNT(*) AS equivalence_class_size FROM research_export_clean GROUP BY zip5, birth_date, gender_category","raw_rows_returned":0},"requires_reviewer_approval":true}},"exit_code":3}