Inspiration

Enterprise adoption of Generative AI is often stalled by "security chicken"—the fear that sensitive customer data (PII) will leak into AI models or training sets. I was inspired to build a "Reasoning Firewall" that allows businesses to use frontier models like Nova while ensuring strict compliance with global and Indian data privacy standards.

What it does

NovaSentry acts as an autonomous compliance gatekeeper. When a document is uploaded, it:

Scans for PII: Uses regex-based logic to detect sensitive entities (Aadhaar, PAN, Emails).

Agentic Reasoning: If "clean," Amazon Nova 2 Lite reasons through the document to categorize its intent (Invoice, Legal, etc.) and provides a risk-aware summary.

Autonomous Blocking: If PII is detected, the agent halts the pipeline, moves the file to a quarantine bucket, and alerts the security team via Amazon SNS.

How we built it

We utilized a serverless, "Infrastructure as Code" approach:

Infrastructure: Deployed entirely via Terraform for reproducibility.

Orchestration: AWS Lambda handles the flow, utilizing the Amazon Bedrock Converse API to interact with Nova models.

CI/CD: Automated deployments using GitHub Actions, ensuring a secure and professional development workflow.

Challenges we ran into

Balancing AI "reasoning time" with user experience was tough. Initially, complex prompts caused Lambda timeouts, which we solved by optimizing the Nova 2 Lite inference configuration and increasing the function timeout to 180 seconds to allow for deep reasoning.

Accomplishments that we're proud of

Successfully creating a system that not only summarizes but decides whether a document is safe to process. Achieving a 100% block rate on our synthetic PII test files was a major milestone.

What we learned

We learned that Agentic AI is not just about chatting; it's about decision-making. Mastering the Amazon Bedrock Converse API allowed us to build more reliable, multi-turn-ready agents.

What's next for NovaSentry Agent

We plan to integrate Nova Act to automate UI workflows, such as automatically filing "safe" invoices into accounting software or triggering legal review tickets for complex contracts.

Built With

Share this project:

Updates