Configure Hugging Face Space

.dockerignore

@@ -0,0 +1,21 @@
+.env
+.env.*
+.git
+.gitignore
+
+motor_policy_venv/
+.venv/
+venv/
+__pycache__/
+.pytest_cache/
+
+ui/node_modules/
+ui/dist/
+
+output/
+src/output/
+docs/*.pdf
+
+*.log
+.DS_Store
+Thumbs.db

.env.example

@@ -0,0 +1,6 @@
+# Required: create a Groq API key at https://console.groq.com/keys
+GROQ_API_KEY="replace_with_your_groq_api_key"
+
+# Optional model overrides
+# GROQ_MODEL="meta-llama/llama-4-scout-17b-16e-instruct"
+# GROQ_CLASSIFIER_MODEL="llama-3.1-8b-instant"

.gitattributes

@@ -0,0 +1,20 @@
+* text=auto
+
+*.py text eol=lf
+*.ts text eol=lf
+*.tsx text eol=lf
+*.js text eol=lf
+*.json text eol=lf
+*.md text eol=lf
+*.yaml text eol=lf
+*.yml text eol=lf
+*.css text eol=lf
+*.html text eol=lf
+Dockerfile text eol=lf
+
+*.pdf binary
+*.png binary
+*.jpg binary
+*.jpeg binary
+*.gif binary
+*.webp binary

.gitignore

@@ -0,0 +1,44 @@
+# Secrets and local environment
+.env
+.env.*
+!.env.example
+
+# Python
+__pycache__/
+*.py[cod]
+*.pyo
+.pytest_cache/
+.ruff_cache/
+.mypy_cache/
+.coverage
+htmlcov/
+motor_policy_venv/
+.venv/
+venv/
+
+# Node / Vite
+ui/node_modules/
+ui/dist/
+ui/.vite/
+npm-debug.log*
+yarn-debug.log*
+yarn-error.log*
+
+# Generated runtime output
+output/
+src/output/
+*.log
+
+# Private source documents
+docs/*.pdf
+
+# OS / editor noise
+.DS_Store
+Thumbs.db
+.vscode/*
+!.vscode/extensions.json
+!.vscode/settings.json.example
+
+# Large model/cache artifacts
+.cache/
+models/

Dockerfile

@@ -0,0 +1,37 @@
+# syntax=docker/dockerfile:1
+
+FROM node:20-slim AS ui-build
+
+WORKDIR /app/ui
+COPY ui/package*.json ./
+RUN npm ci
+COPY ui/ ./
+RUN npm run build
+
+
+FROM python:3.11-slim AS app
+
+ENV PYTHONUNBUFFERED=1 \
+    PORT=7860
+
+WORKDIR /app
+
+RUN apt-get update \
+    && apt-get install -y --no-install-recommends build-essential curl \
+    && rm -rf /var/lib/apt/lists/*
+
+COPY requirements.txt ./
+RUN pip install --no-cache-dir -r requirements.txt \
+    && python -m spacy download en_core_web_sm
+
+COPY config/ ./config/
+COPY src/ ./src/
+COPY scripts/ ./scripts/
+COPY sample_data/ ./sample_data/
+COPY --from=ui-build /app/ui/dist ./ui/dist
+
+RUN mkdir -p output/sessions output/debug
+
+EXPOSE 7860
+
+CMD ["sh", "-c", "uvicorn api:app --app-dir src --host 0.0.0.0 --port ${PORT:-7860}"]

LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Teja Sagiraju
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

README.md

@@ -0,0 +1,23 @@
+---
+title: PolicyTrace
+sdk: docker
+app_port: 7860
+pinned: false
+license: mit
+---
+
+# PolicyTrace
+
+PolicyTrace is a Document AI workflow for UK motor insurance PDFs.
+
+It uses a FastAPI backend and React review UI to extract a structured Golden Record, match fields back to source PDF locations, and support human review.
+
+GitHub repository:
+
+https://github.com/AItoolstack/ai-policytrace
+
+Demo PDFs are available in the GitHub repo under:
+
+sample_data/policytrace_demo_pack/
+
+For public demos, use only synthetic or redacted PDFs.

SECURITY.md

@@ -0,0 +1,27 @@
+# Security And Privacy
+
+PolicyTrace is designed for document extraction workflows that may involve sensitive personal data.
+
+## Public Demo Rules
+
+- Use only synthetic or redacted PDFs.
+- Do not commit real customer documents.
+- Do not commit `.env` or API keys.
+- Do not commit `output/`, session folders, debug artifacts, or generated extraction JSON from real documents.
+- Rotate any key that was ever stored in a local file before publishing the repository.
+
+## Secrets
+
+Local development uses `.env`, which is ignored by git.
+
+Production deployments should use platform secrets:
+
+- Hugging Face Spaces: Space Secrets
+- GitHub Actions: Repository Secrets
+- Cloud platforms: managed secret stores
+
+## Uploaded Files
+
+The local API stores uploaded PDFs under `output/sessions/`. Session folders are deleted on startup when they are older than `pipeline.session_ttl_days`.
+
+For production use, add authentication, stronger retention controls, audit logging, and external storage policies before accepting real documents.