redactable. Deterministic-first PII/PHI de-identification you can prove: benchmarked recall, jurisdiction policy packs, reversible tokenization, audit trail. CLI + library + GitHub Action; optional GLiNER / Gemma contextual tier.