docs/COMPLIANCE_REPORT.md

BioFlow Compliance Report (Phase 1)

Date: 2026-01-27
Scope: Open-source compliance + forbidden runtime dependencies

Summary

• Streamlit UI removed from runtime and repository path.
• OpenAI / Azure OpenAI / Anthropic UI references removed.
• Runtime stack confirmed: FastAPI + Next.js + Qdrant only.

Removed / Deprecated

• bioflow/app.py (legacy Streamlit app) deleted
• bioflow/ui/* (Streamlit UI package) deleted
• Streamlit dependency removed from runtime requirements
• UI settings no longer expose proprietary LLM providers

Allowed / Kept

• OBM (OpenBioMed) for embeddings only
• DeepPurpose for DTI (open-source)
• Qdrant as primary vector database

Dependencies (Runtime)

From requirements.txt (open-source only):

• fastapi, uvicorn
• qdrant-client
• torch, transformers, rdkit, numpy, scikit-learn
• requests, pandas, dotenv

Remaining Risks / Follow-ups

• Legacy references in docs should avoid implying Streamlit runtime.
• Ensure no proprietary endpoints are configured in deployment.

Evidence

• Streamlit files removed: bioflow/app.py, bioflow/ui/*
• UI settings updated: ui/app/dashboard/settings/page.tsx