feat: add fail-closed OpenMed privacy gate

Cargo.toml

@@ -27,6 +27,7 @@ members = [
     "crates/helix-timeline",
     "crates/helix-evolve",
     "crates/helix-refranges",
+    "crates/helix-openmed",
     "crates/helix-demo",
     "crates/helix-wasm",
 ]
@@ -45,6 +46,9 @@ serde_json = "1"
 thiserror = "2"
 criterion = { version = "0.5", default-features = false }
 proptest = "1"
+sha2 = "0.10"
+hmac = "0.12"
+regex = "1"
 
 [profile.release]
 opt-level = 3

README.md

@@ -75,6 +75,10 @@ This is no longer just a spec — the testable core is implemented in Rust and v
   pharmacogenomics (`helix-genome`/rvDNA), OCR ingestion (`helix-ocr`), semantic retrieval
   (`helix-retrieval`), visual RAG (`helix-visual`/rupixel), privacy-preserving cohort
   (`helix-cohort`), FHIR connectors (`helix-connect`), and federation transport (`helix-fed`).
+- **Local clinical-text privacy**: OpenMed 1.9 ONNX candidate detection is wrapped by the
+  fail-closed `helix-openmed` Rust/WASM gate with artifact pinning, complete-document
+  coverage, deterministic identifier rules, Unicode-safe offsets, and HMAC-only receipts.
+  See the [integration guide](docs/openmed-integration.md).
 - **Web console + WASM mobile app** running the real pipeline in-browser — **[live demo](https://ruvnet.github.io/helix/)**.
 
 Every integration keeps the discipline: the LLM narrates (never reasons), embeddings/visual

crates/helix-openmed/Cargo.toml

@@ -0,0 +1,17 @@
+[package]
+name = "helix-openmed"
+version.workspace = true
+edition.workspace = true
+license.workspace = true
+authors.workspace = true
+repository.workspace = true
+rust-version.workspace = true
+description = "Fail-closed OpenMed clinical-text privacy and de-identification gate for Helix"
+
+[dependencies]
+serde.workspace = true
+serde_json.workspace = true
+thiserror.workspace = true
+sha2.workspace = true
+hmac.workspace = true
+regex.workspace = true