Sentinel + CipherMesh

🔐 Sentinel: Enterprise-Grade LLM Security Gateway

Sentinel is a production-ready, drop-in gateway/SDK that shields upstream LLM providers from raw sensitive data while adding a self-healing security layer that detects, corrects, or cryptographically contains adversarial prompts.

CipherMesh provides advanced PII/tokenization and cryptographic protection layers, ensuring your data remains secure while maintaining LLM functionality.

🌟 Key Features

🔐 Advanced Data Protection

• Real-time Data Redaction: Automatic detection and tokenization of sensitive information
• Format-Preserving Encryption (FF3-1): Maintain data format while ensuring security
• Reversible Detokenization: Controlled access with policy gating
• Multi-language PII Detection: Support for 50+ languages and dialects
• Code Secret Detection: Automatic detection of API keys, passwords, and secrets

🛡️ Self-Healing Security Pipeline

• Semantic Violation Detection: Advanced AI-powered threat detection
• Constitutional AI Reflection: Ethical alignment and bias correction
• Prompt Rewriting & Ranking: Automatic sanitization of malicious prompts
• Tool/Function Call Guarding: Prevent unauthorized system access
• Adaptive Learning: Continuous improvement through feedback loops

🔌 Universal Provider Compatibility

• Multi-Provider Adapters: OpenAI, Anthropic, Mistral, Hugging Face, Ollama, and more
• Reverse Proxy Mode: Seamless integration with existing infrastructure
• Language SDKs: Native support for Python, Node.js, Java, and Go
• Streaming Support: Real-time inspection with zero latency impact
• Multi-Tenancy: Secure isolation for enterprise environments

⚙️ Advanced Policy Engine

• OPA-Style Policy Evaluation: Industry-standard policy management
• Policy Versioning: Safe deployment with canary rollouts
• Multi-Tenant Policy Management: Granular control for complex organizations
• Audit Trails: Comprehensive compliance reporting
• Dynamic Policy Updates: Real-time policy changes without downtime

🔐 Cryptographic Security

• BYOK/HSM Integration: Bring your own keys for maximum security
• Envelope Encryption: AES-256-GCM for data at rest and in transit
• Advanced Key Derivation: HKDF-SHA-512 for secure key management
• Tamper-Evident Audit Logs: Merkle tree-based integrity verification
• Cloud KMS Integration: AWS KMS, Azure Key Vault, GCP KMS support

🏗️ Architecture Overview

┌─────────────────┐    ┌──────────────────┐    ┌────────────────────┐
│   Application   │───▶│   Sentinel       │───▶│   LLM Provider     │
│   (Client)      │    │   Gateway        │    │   (OpenAI, etc.)   │
└─────────────────┘    │  ┌─────────────┐ │    └────────────────────┘
                       │  │  CipherMesh │ │              │          
                       │  │  (Data      │ │              ▼          
                       │  │  Protection)│ │    ┌────────────────────┐
                       │  └─────────────┘ │    │   Response         │
                       │  ┌─────────────┐ │    │   Processing       │
                       │  │  Policy     │ │    │   & Encryption     │
                       │  │  Engine     │ │    └────────────────────┘
                       │  └─────────────┘ │              │          
                       │  ┌─────────────┐ │              ▼          
                       │  │  Security   │ │    ┌────────────────────┐
                       │  │  Pipeline   │ │◀───│   Secure           │
                       │  │  (Detection,│ │    │   Response         │
                       │  │  Reflection,│ │    │   Return           │
                       │  │  Rewriting) │ │    └────────────────────┘
                       │  └─────────────┘ │                      
                       └──────────────────┘                      

🚀 Quick Start

Using Docker Compose

# Clone the repository
git clone https://github.com/swayam8624/Sentinel.git
cd Sentinel

# Start the services
docker-compose up -d

# Access the gateway at http://localhost:8080

Using Helm (Kubernetes)

# Add the Helm repository
helm repo add sentinel https://swayam8624.github.io/Sentinel/charts

# Update repository information
helm repo update

# Install the chart
helm install sentinel sentinel/sentinel

Using Language SDKs

Node.js:

npm install @yugenkairo/sentinel-sdk

Python:

pip install sentinel-sdk

📚 Comprehensive Documentation

• 📘 Software Requirements Specification
• 🏗️ Architecture Decision Records
• 🔌 API Documentation
• 🚀 Deployment Guide
• 🛡️ Security Policy
• 📦 Distribution Channels
• 📋 Threat Modeling

🛠️ Development Setup

1. Install Prerequisites:

   • Go 1.23 or later
   • Docker and Docker Compose
   • Helm 3.x (for Kubernetes deployment)

2. Clone and Setup:

   git clone https://github.com/swayam8624/Sentinel.git
   cd Sentinel
   make deps

3. Build and Run:

   make build
   make run

4. Testing:

   make test
   make test-integration
   make test-security

📦 Distribution Channels

Sentinel is available through multiple enterprise-grade distribution channels:

Docker

Pre-built Docker images for seamless deployment:

docker pull sentinel/gateway:latest

Helm Charts

Production-ready Kubernetes deployments:

helm repo add sentinel https://swayam8624.github.io/Sentinel/charts
helm install sentinel sentinel/sentinel

Language SDKs

Native integration for your applications:

• Node.js: npm install @yugenkairo/sentinel-sdk
• Python: pip install sentinel-sdk

From Source

Build from the latest source code:

git clone https://github.com/swayam8624/Sentinel.git
cd Sentinel
make build

🤝 Contributing

We welcome contributions from the community! Please see our Contributing Guide for details on how to get started.

Community Guidelines

• Follow our Code of Conduct
• Check existing issues before creating new ones
• Review our development practices

📄 License

This project is licensed under the Apache License 2.0 - see the LICENSE file for details.

📞 Support

For enterprise support, security disclosures, or professional services, please contact our team at [email protected].