Sentinel + CipherMesh

A self-healing LLM firewall with cryptographic data protection

🔐 Sentinel: Enterprise-Grade LLM Security Gateway

Sentinel is a production-ready, drop-in gateway/SDK that shields upstream LLM providers from raw sensitive data while adding a self-healing security layer that detects, corrects, or cryptographically contains adversarial prompts.

CipherMesh provides advanced PII/tokenization and cryptographic protection layers, ensuring your data remains secure while maintaining LLM functionality.

🌟 Key Features

$3

- Real-time Data Redaction: Automatic detection and tokenization of sensitive information
- Format-Preserving Encryption (FF3-1): Maintain data format while ensuring security
- Reversible Detokenization: Controlled access with policy gating
- Multi-language PII Detection: Support for 50+ languages and dialects
- Code Secret Detection: Automatic detection of API keys, passwords, and secrets

$3

- Semantic Violation Detection: Advanced AI-powered threat detection
- Constitutional AI Reflection: Ethical alignment and bias correction
- Prompt Rewriting & Ranking: Automatic sanitization of malicious prompts
- Tool/Function Call Guarding: Prevent unauthorized system access
- Adaptive Learning: Continuous improvement through feedback loops

$3

- Multi-Provider Adapters: OpenAI, Anthropic, Mistral, Hugging Face, Ollama, and more
- Reverse Proxy Mode: Seamless integration with existing infrastructure
- Language SDKs: Native support for Python, Node.js, Java, and Go
- Streaming Support: Real-time inspection with zero latency impact
- Multi-Tenancy: Secure isolation for enterprise environments

$3

- OPA-Style Policy Evaluation: Industry-standard policy management
- Policy Versioning: Safe deployment with canary rollouts
- Multi-Tenant Policy Management: Granular control for complex organizations
- Audit Trails: Comprehensive compliance reporting
- Dynamic Policy Updates: Real-time policy changes without downtime

$3

- BYOK/HSM Integration: Bring your own keys for maximum security
- Envelope Encryption: AES-256-GCM for data at rest and in transit
- Advanced Key Derivation: HKDF-SHA-512 for secure key management
- Tamper-Evident Audit Logs: Merkle tree-based integrity verification
- Cloud KMS Integration: AWS KMS, Azure Key Vault, GCP KMS support

🏗️ Architecture Overview

``
┌─────────────────┐ ┌──────────────────┐ ┌────────────────────┐
│ Application │───▶│ Sentinel │───▶│ LLM Provider │
│ (Client) │ │ Gateway │ │ (OpenAI, etc.) │
└─────────────────┘ │ ┌─────────────┐ │ └────────────────────┘
│ │ CipherMesh │ │ │
│ │ (Data │ │ ▼
│ │ Protection)│ │ ┌────────────────────┐
│ └─────────────┘ │ │ Response │
│ ┌─────────────┐ │ │ Processing │
│ │ Policy │ │ │ & Encryption │
│ │ Engine │ │ └────────────────────┘
│ └─────────────┘ │ │
│ ┌─────────────┐ │ ▼
│ │ Security │ │ ┌────────────────────┐
│ │ Pipeline │ │◀───│ Secure │
│ │ (Detection,│ │ │ Response │
│ │ Reflection,│ │ │ Return │
│ │ Rewriting) │ │ └────────────────────┘
│ └─────────────┘ │
└──────────────────┘
`

🚀 Quick Start

$3

`bash


Clone the repository

git clone https://github.com/swayam8624/Sentinel.git
cd Sentinel

Start the services

docker-compose up -d

Access the gateway at http://localhost:8080

`

$3

`bash


Add the Helm repository

helm repo add sentinel https://swayam8624.github.io/Sentinel/charts

Update repository information

helm repo update

Install the chart

helm install sentinel sentinel/sentinel
`

$3

Node.js:
`bash
npm install @yugenkairo/sentinel-sdk
`

Python:
`bash
pip install sentinel-sdk
`

📚 Comprehensive Documentation

- 📘 Software Requirements Specification
- 🏗️ Architecture Decision Records
- 🔌 API Documentation
- 🚀 Deployment Guide
- 🛡️ Security Policy
- 📦 Distribution Channels
- 📋 Threat Modeling

🛠️ Development Setup

1. Install Prerequisites:
- Go 1.23 or later
- Docker and Docker Compose
- Helm 3.x (for Kubernetes deployment)

2. Clone and Setup:
`bash
git clone https://github.com/swayam8624/Sentinel.git
cd Sentinel
make deps
`

3. Build and Run:
`bash
make build
make run
`

4. Testing:
`bash
make test
make test-integration
make test-security
`

📦 Distribution Channels

Sentinel is available through multiple enterprise-grade distribution channels:

$3


Pre-built Docker images for seamless deployment:
`bash
docker pull sentinel/gateway:latest
`

$3

Production-ready Kubernetes deployments:
`bash
helm repo add sentinel https://swayam8624.github.io/Sentinel/charts
helm install sentinel sentinel/sentinel
`

$3

Native integration for your applications:
- Node.js: npm install @yugenkairo/sentinel-sdk
- Python: pip install sentinel-sdk

$3

Build from the latest source code:
`bash
git clone https://github.com/swayam8624/Sentinel.git
cd Sentinel
make build
``

🤝 Contributing

We welcome contributions from the community! Please see our Contributing Guide for details on how to get started.

$3

- Follow our Code of Conduct
- Check existing issues before creating new ones
- Review our development practices

📄 License

This project is licensed under the Apache License 2.0 - see the LICENSE file for details.

📞 Support

For enterprise support, security disclosures, or professional services, please contact our team at support@sentinel-platform.org.

---

Built with ❤️ for the AI security community