Skip to content

Latest commit

 

History

History

Folders and files

NameName
Last commit message
Last commit date

parent directory

..
 
 

README.md

MVP Plan: Continuous Compliance Gate

Important

Date: 2026-07-24
Repo: liitkud/complyaigent (dev)
Local: /home/kaoru/Projects/complyaigent
Status: Plan to build (MVP)
Epic: #74 MVP: Continuous Compliance Gate

Definition of Done

  • docker compose up (or documented uv/pnpm/go path) runs backend + frontend + DB
  • Officer uploads a sample policy → rules appear with version metadata
  • pg init + pre-push runs local A1 checks and successfully completes /validate poll flow
  • Dashboard HITL approve/reject works against the live API (not mock-only)
  • Every scan decision emits a structured verdict log (schema documented; Loki push if endpoint configured)
  • PII scan on validate path blocks obvious leaks (email / card / phone at minimum)
  • A1 regex rules are smoke-tested before serve (no unchecked ReDoS)
  • Handoff + onboarding docs match reality; CI green on dev

Workstreams → issues

# Workstream Primary paths Pri
W1 #75 Policy storage schema & versioning backend/app/models/, ingest API P0
W2 #76 Structured logging schema backend/app/core/logging.py, services/logger.py P0
W3 #77 Verdict push (Loki or sink) validate + logger P0
W4 #78 E2E happy-path / HITL live docker-compose.yml, frontend API client, validate HITL P0
W5 #79 Presidio PII in /validate backend/app/services/pii.py, api/validate.py P0
W6 #80 A1 regex validation gate categorizer.py / rule publish path P1
W7 #81 MVP sample policy pack docs/mvp/fixtures/ or data/ P1
W8 #82 Docs sync (handoff / onboarding / audit) docs/** P0

Deferred (post-MVP)

  • Load test / 5s rule (#22)
  • RAG fine-tune (#14)
  • Regulatory change simulator (#13)

References