Update README.md

README.md

@@ -1,12 +1,64 @@
 ---
 title: Sentinel MLOps Agent
-emoji: 🌍
-colorFrom: yellow
-colorTo: purple
+emoji: 🛡️
+colorFrom: blue
+colorTo: indigo
 sdk: docker
+app_port: 7860
 pinned: false
-license: mit
-short_description: Autonomous Anomaly Detection & RAG Investigation Agent
 ---
 
-Check out the configuration reference at https://huggingface.co/docs/hub/spaces-config-reference
+<div align="center">
+
+# 🛡️ Sentinel: Autonomous MLOps Agent
+### *Self-Healing Infrastructure Powered by Physics & Gemini 2.5*
+
+[![FastAPI](https://img.shields.io/badge/FastAPI-005571?style=for-the-badge&logo=fastapi)](https://fastapi.tiangolo.com/)
+[![Gemini](https://img.shields.io/badge/Google%20Gemini-8E75B2?style=for-the-badge&logo=googlebard&logoColor=white)](https://ai.google.dev/)
+[![Status](https://img.shields.io/badge/Status-Operational-success?style=for-the-badge)]()
+
+</div>
+
+---
+
+## ⚡ What is Sentinel?
+Sentinel is an autonomous monitoring agent that doesn't just alert you when a server crashes—it **investigates why.**
+
+Most MLOps tools rely on static thresholds (*"Alert if CPU > 80%"*). Sentinel uses **Statistical Physics (Z-Scores)** to learn the "normal" baseline of your system and detect subtle **Data Drift**.
+
+When an anomaly is detected, it triggers an AI Agent (**Gemini 2.5 Flash**) to perform **Root Cause Analysis (RCA)** on the system logs automatically.
+
+---
+
+## 🚀 Live Demo: How to Test It
+This API is live. You can simulate a "Cyber Attack" right now.
+
+1.  **[Click Here to Open the Swagger UI](/docs)** (or scroll down if embedded).
+2.  Click the green **`POST /monitor`** bar.
+3.  Click **Try it out**.
+4.  **The Test:** Change `cpu_usage` to **900**.
+    ```json
+    {
+      "timestamp": "12:00",
+      "service_name": "PaymentGateway",
+      "cpu_usage": 900
+    }
+    ```
+5.  Click **Execute**.
+
+### 📉 The Result
+You will receive a **CRITICAL** alert containing a full AI investigation report:
+> *"Root Cause: Unauthorized crypto-mining process detected. Recommended Fix: Terminate process PID 409..."*
+
+---
+
+## ⚙️ Architecture
+
+```mermaid
+graph LR
+    A[Live Data Stream] --> B(FastAPI Endpoint)
+    B --> C{Anomaly Detector (Z-Score)}
+    C -- Normal --> D[Log Metric]
+    C -- "Anomaly (>2.5σ)" --> E[Gemini 2.5 RAG Agent]
+    E --> F[Retrieve Error Logs]
+    F --> G[Generate Incident Report]