Reviews a diff against Northwind Health's specific security policy — its credential formats, PHI handling rules, and banned helpers. Use when asked for a security review, a PHI or privacy check, or before releasing code that touches patient data. Not for general correctness review — that is reviewing-code.
