rehydrate - SKILL.md Agent Skill

name: rehydrate description: Put the real values back into an analysis that was produced from GREEN (placeholder) text — LOCALLY, using the user's own reversible map. Completes the confide round-trip (redact -> cloud-analyze the green -> rehydrate locally). Use when the user says "rehydrate", "restore real names", "unmask the analysis", "put the names back", "de-redact this output", "reverse the placeholders", or hands you an analysis full of [CONFIDE_PERSON_0001]/[CONFIDE_DATE_0002] plus a *.map.json. Runs only on the user's own map; the map never leaves the machine; nothing fetched or transmitted. Prints counts only — never echoes restored PII. Warns on placeholders not in the map (possible LLM hallucination).

confide:rehydrate — restore real values into a placeholder analysis

This is the last step of the CONFIDE round-trip:

Redact locally with confide:anon (default reversible mode) → a GREEN copy with unique reserved-sentinel placeholders ([CONFIDE_PERSON_0001], [CONFIDE_EMAIL_0001], [CONFIDE_DATE_0002]…) plus a secret <name>.map.json (structured: green_sha256, entries[]…) that stays on the machine.
Analyze the GREEN text anywhere — including a cloud LLM. The analysis comes back full of those same placeholders (sometimes mangled to CONFIDE_PERSON_0001, [CONFIDE PERSON 0001]… — but always keeping the full CONFIDE_TYPE_NNNN core).
Rehydrate here: replace every placeholder with its original value from your own map, producing the real analysis — without the cloud ever seeing the originals.

Privacy invariants (do not violate)

Local-only, on the user's OWN map. The map never leaves the machine. This skill never fetches or transmits anything.
Counts only on stdout. The summary reports restored N, unmatched M. The restored text (which contains originals) is written to a local file; it is NEVER echoed to stdout beyond the counts.
Unmatched = possible hallucination. A placeholder that is not in the map is reported as unmatched and left in place — we never invent a value for it. Warn the user that these may be LLM hallucinations.
The <name>.restored.md output contains originals: it is local-only, do not share or commit it.

Run it

python3 skills/rehydrate/scripts/rehydrate.py ANALYSIS_FILE [--map <name>.map.json]

ANALYSIS_FILE — the text/analysis containing placeholders.
--map <name>.map.json — the secret map from confide:anon. If omitted, the sibling *.map.json is auto-found (e.g. an analysis next to session.map.json, or one derived from session.green.md).
--out PATH — output path (default: <name>.restored.md next to the input).
--verify-green <green_file> — check the map's green_sha256 against that GREEN file; warns loudly if they don't match (wrong map for this document).

Robust to LLM mangling that still keeps the full CONFIDE_TYPE_NNNN core: [CONFIDE_PERSON_0001], [CONFIDE PERSON 0001], CONFIDE_PERSON_0001, and confide_person_0001 all restore to the same map entry. Ordinary prose lacking the CONFIDE prefix (e.g. "Person 1", "patient 1", "section 2") is never touched, and 0001 never eats 0010. Rehydration is idempotent (re-running on restored text is a no-op). Accepts both the structured map schema and a legacy flat map.

After running

Report the restore summary (restored N, unmatched M) — never paste PII.
If unmatched > 0, flag the placeholders as possible hallucinations not in the map.
Remind the user the *.restored.md is local-only (it now contains originals).