richlira/sentinel

gemma-router

The contract for talking to the operator's local endpoint. One consolidated call, no credentials in code (the egress proxy injects them), and the only domain the sandbox may reach.

لغة النص الأصلي: الإنجليزية

local-redactor

The agent's FIRST action. Delegate the RAW document to the local model on the operator's hardware for classification + redaction. The cloud never reads or reasons over raw content; it only receives masked spans back.

لغة النص الأصلي: الإنجليزية

pdf-generator

Assemble the report object and audit log proving the privacy claim, with raw_sensitive_bytes_processed_in_cloud = 0. Emitted as a file artifact between SENTINEL_AUDIT markers.

لغة النص الأصلي: الإنجليزية