YoVinchen cfd6d4cbad Expose a runnable backend without giving the ingress layer secrets ...

The backend can now be inspected through a loopback-only gateway while the database-aware API remains on the internal data network. A governed synthetic demo proves readiness, pgvector retrieval, reranking, and citation output through real HTTP without invoking cloud models.

Constraint: The previously exposed Bailian key is compromised and cannot be used for live validation

Constraint: The API must be locally reachable while retaining no internet egress

Rejected: Attach the API directly to the ingress network | a real socket test proved that configuration still had egress

Rejected: Publish a port from the internal-only network | Docker Desktop did not expose the host port

Confidence: high

Scope-risk: moderate

Reversibility: clean

Directive: Keep model and database credentials out of the gateway; do not relax the fixed demo identity/profile filters

Tested: make verify; 63 pytest tests; strict mypy; Ruff; Secret scan; Compose config; three backend image builds; API/DB/gateway healthy; migration exit 0; Swagger browser check; live/ready/meta/status/search HTTP; 20/20/20 index; API egress ENETUNREACH; empty gateway mounts and business environment

Not-tested: Live Bailian calls require a newly rotated key; full generated-answer flow and React UI are not implemented

2026-07-12 16:37:02 +08:00

..

__init__.py

Make the first RAG slice executable without risking production data

2026-07-12 15:41:58 +08:00

config.py

Make the first RAG slice executable without risking production data

2026-07-12 15:41:58 +08:00

demo_identity.py

Expose a runnable backend without giving the ingress layer secrets

2026-07-12 16:37:02 +08:00

secrets.py

Make the first RAG slice executable without risking production data

2026-07-12 15:41:58 +08:00