$ cat projects/genai-dlp.md
GenAI Data-Loss Prevention System
Self-hosted DLP for GenAI workflows — stop PII and secrets before they reach an LLM.
Built for Smart India Hackathon: a self-hosted data-loss-prevention layer that sits between users and LLM providers. Detects secrets, Indian PII (Aadhaar, PAN, GSTIN), and proprietary code in prompts, then enforces policy through a gateway, admin console, and browser extension.
// problem
Employees paste sensitive data into ChatGPT-style tools every day, and Indian organizations have no self-hosted guardrail that understands Indian PII formats.
// impact
Four FastAPI microservices (detection, LiteLLM gateway, ingestion, HTMX admin) plus a Manifest V3 extension that intercepts prompts in the browser. Policy engine with BLOCK / REDACT / JUSTIFY / WARN / ALLOW actions and a BLOCK floor that roles can't weaken, HMAC-stable tokenization for redaction, content-redacted audit logs, Docker Compose deployment, and CI with a false-positive-rate evaluation harness.
// tech-stack