How mizcausevic-dev/rag-sentinel works
RAG Sentinel is an API-based governance and observability layer for enterprise retrieval collections. Operators inspect collection posture, fleet summaries, and incidents, while validation capabilities cover chunk quality, freshness, retrieval drift, answer grounding, and sensitive-content scanning. A separate vault workflow uses Decision Card permissions to replace authorized PII with tokens before indexing and preview role-gated detokenization. The route, posture, collection, and vault wiring shown is supported by sampled source; validation details are primarily documented in the README and route/schema paths, whose internal calls were not sampled.
Main entry points: vault.ts Vault preview API · src/index.ts HTTP application · routes/index.ts Operations APIs · vault-chunk.ts Tokenize chunks
Components 20
API and operations
- HTTP application
src/index.ts - Validation API
src/routes/validate.ts - Operations APIs
src/routes/index.ts - Input schemas
src/schemas/validation-schemas.ts
Governance checks
- Chunk quality
src/governance/chunk-quality.ts - Source freshness
src/governance/freshness.ts - Retrieval drift
src/governance/retrieval-drift.ts - Hallucination signals
src/governance/hallucination.ts - PII scanning
src/governance/pii-scanner.ts - Composite posture
src/governance/posture.ts
Vault integration
- Vault preview API
src/routes/vault.ts - Decision Card parser
src/vault/decision-card.ts - Tokenize chunks
src/governance/vault-chunk.ts - Vault contract
src/vault/types.ts - Mock vault
src/vault/mock-vault.ts - HTTP vault adapter
src/vault/real-vault.ts
Collection state
- RAG collections
src/data/collections.ts - Incident records
src/data/incidents.ts
Other components
- Operator
- Skyyflow vault
Connections 18
- Operator → HTTP application: sends requests
- HTTP application → Validation API: dispatches validation
- HTTP application → Operations APIs: dispatches operations
- HTTP application → Vault preview API: dispatches vault
- Operations APIs → RAG collections: reads collections
- Operations APIs → Incident records: reads incidents
- Operations APIs → Composite posture: evaluates posture
- Composite posture → RAG collections: reads metrics
- Validation API → Input schemas: validates inputs
- Vault preview API → Decision Card parser: parses card
- Vault preview API → Tokenize chunks: vaults chunks
- Tokenize chunks → PII scanning: scans chunks
- Tokenize chunks → Vault contract: uses contract
- Vault preview API → Mock vault: selects fallback
- Vault preview API → HTTP vault adapter: selects if configured
- Mock vault → Vault contract: implements contract
- HTTP vault adapter → Vault contract: implements contract
- HTTP vault adapter → Skyyflow vault: sends vault requests