MegrurNiftiyev/MyGuard-Prompt-Injection-Detector

🛡️ MyGuard AI Document Security Gateway - FastAPI ML Microservice

<p align="center"> <b>High-Performance RETVec + CNN Text Classification Microservice for Prompt Injection & Document Threat Defense</b> </p>

<p align="center"> <a href="https://pypi.org/project/fastapi/"><img alt="fastapi" src="https://img.shields.io/badge/fastapi-v0.111.0-009688?style=for-the-badge&logo=fastapi&logoColor=white"></a> <a href="https://pypi.org/project/tensorflow/"><img alt="tensorflow" src="https://img.shields.io/badge/tensorflow-v2.16.1-FF6F00?style=for-the-badge&logo=tensorflow&logoColor=white"></a> <a href="https://pypi.org/project/retvec/"><img alt="retvec" src="https://img.shields.io/badge/retvec-v1.0.0-4285F4?style=for-the-badge&logo=google&logoColor=white"></a> <a href="https://keras.io"><img alt="keras" src="https://img.shields.io/badge/keras-D00000?style=for-the-badge&logo=keras&logoColor=white"></a> <a href="https://pypi.org/project/scikit-learn/"><img alt="scikit-learn" src="https://img.shields.io/badge/scikit--learn-v1.5.0-F7931E?style=for-the-badge&logo=scikitlearn&logoColor=white"></a> <a href="https://pypi.org/project/pydantic/"><img alt="pydantic" src="https://img.shields.io/badge/pydantic-v2.7.0-E92063?style=for-the-badge&logo=pydantic&logoColor=white"></a> <a href="https://pypi.org/project/firebase-admin/"><img alt="firebase-admin" src="https://img.shields.io/badge/firebase--admin-v6.5.0-FFCA28?style=for-the-badge&logo=firebase&logoColor=black"></a> <a href="https://pypi.org/project/supabase/"><img alt="supabase" src="https://img.shields.io/badge/supabase-v2.3.0-3ECF8E?style=for-the-badge&logo=supabase&logoColor=white"></a> <a href="https://pypi.org/project/uvicorn/"><img alt="uvicorn" src="https://img.shields.io/badge/uvicorn-v0.30.0-499885?style=for-the-badge&logo=python&logoColor=white"></a> <a href="https://pypi.org/project/python-dotenv/"><img alt="python-dotenv" src="https://img.shields.io/badge/python--dotenv-v1.0.0-ECD53F?style=for-the-badge&logo=dotenv&logoColor=black"></a> <a href="https://www.docker.com"><img alt="Docker" src="https://img.shields.io/badge/Docker-2496ED?style=for-the-badge&logo=docker&logoColor=white"></a> <a href="https://swagger.io"><img alt="Swagger" src="https://img.shields.io/badge/Swagger-85EA2D?style=for-the-badge&logo=swagger&logoColor=black"></a> <a href="https://huggingface.co/MegrurNiftiyev/MyGuard-Prompt-Injection-Detector"><img alt="Hugging Face" src="https://img.shields.io/badge/%F0%9F%A4%97%20Hugging%20Face-Model%20Hub-FFD21E?style=for-the-badge&logo=huggingface&logoColor=black"></a> <a href="https://github.com/MegrurNiftiyev/IDDA-Final-Project-Ai-Backend"><img alt="GitHub" src="https://img.shields.io/badge/GitHub-Repository-181717?style=for-the-badge&logo=github&logoColor=white"></a> </p> ---

📌 Executive Summary

MyGuard AI Document Security Gateway ML Service is a stateless, high-throughput Machine Learning microservice built with Python 3.10+, FastAPI, TensorFlow, and Google RETVec. It serves as the dedicated Layer 2 ML Classifier within the broader MyGuard AI Document Security infrastructure.

<p align="center"> <img src="docs/images/swaggerapidocs.png" alt="MyGuard FastAPI ML Service Swagger API Documentation" width="100%" /> </p>

As enterprise organizations ingest unstructured documents (PDF, DOCX, PPTX, XLSX, TXT) into Large Language Model (LLM) agents and RAG (Retrieval-Augmented Generation) Knowledge Graphs, adversaries attempt to inject malicious payloads (Indirect Prompt Injections, Jailbreaks, System Override Attacks, and Data Exfiltration Commands).

This microservice analyzes extracted document text, optical OCR text streams, and steganographically hidden text layers, evaluating them through a character-level RETVec + Conv1D Deep Neural Network. It operates completely free of external LLM API calls, delivering zero-latency, deterministic threat classification before forwarding suspicious items for downstream LLM evaluation.

[!NOTE] Model Readiness & Dataset Scaling Notice: - Architecture & Pipeline Readiness: The model architecture (Google RETVec + Conv1D dual-head neural network) is fully implemented, deployed, and ready for real-time threat inference. - Dataset Volume & Diversity Bottleneck: To further improve model accuracy, the primary requirement is expanding dataset volume and sample diversity. As training materials grow in both quantity and quality (incorporating diverse real-world documents and injection techniques), model performance will scale accordingly. - Private Service Architecture & Testing Mode: In a production environment, this ML microservice operates as a network-isolated Private Microservice protected by X-Internal-Token. For jury evaluation and live testing convenience via Swagger UI, evaluation endpoints have been temporarily made publicly accessible.

🌐 Project Ecosystem & Live Deployment Links

The MyGuard platform consists of synchronized web applications, core gateway backends, ML microservices, and file collection infrastructure:

🔗 Repositories, Live Platforms & Model Hubs

🚀 Production Live URLs & API Gateways

• —🤗 Hugging Face Model Hub (Model Card & Weights): https://huggingface.co/MegrurNiftiyev/MyGuard-Prompt-Injection-Detector
• —🐙 GitHub Repository (Source Code): https://github.com/MegrurNiftiyev/MyGuard-AI-Backend
• —🐍 Python FastAPI ML Microservice (Production): https://myguard-ai-backend.onrender.com
• —📖 ML Microservice Interactive Swagger UI Docs: https://myguard-ai-backend.onrender.com/api-docs
• —🚀 Node.js Gateway REST API Base URL (Production): https://mygurad-backend-v2.onrender.com/api
• —📖 Node.js Gateway Interactive Swagger UI Docs: https://mygurad-backend-v2.onrender.com/api-docs
• —⚡ Real-Time WebSocket Server (Socket.IO): https://mygurad-backend-v2.onrender.com

🧠 Deep-Dive Machine Learning (ML) Mechanism & Architecture

This microservice uses a specialized Dual-Output Deep Learning Model that combines Google's RETVec (Resilient Equivariant Text Vectorizer) with a 1D Convolutional Neural Network (CNN).

[ Raw Input Text Stream (PDF / OCR / Hidden Text) ]
                        │
                        ▼
┌──────────────────────────────────────────────────────────────┐
│ RETVec Tokenizer (Sequence Length = 128)                     │
│  - Character-level & byte-level embedding graph              │
│  - Adversarial typo & visual obfuscation resistance           │
└───────────────────────┬──────────────────────────────────────┘
                        │
                        ▼
┌──────────────────────────────────────────────────────────────┐
│ 1D Convolutional Layer (128 Filters, Kernel Size = 5, ReLU) │
│  - Spatial character-level n-gram feature extraction          │
└───────────────────────┬──────────────────────────────────────┘
                        │
                        ▼
┌──────────────────────────────────────────────────────────────┐
│ Global MaxPooling 1D                                         │
│  - Position-invariant maximum feature activation selection   │
└───────────────────────┬──────────────────────────────────────┘
                        │
                        ▼
┌──────────────────────────────────────────────────────────────┐
│ Dense Trunk (64 Units, ReLU) + Dropout (0.3 Rate)            │
│  - Shared non-linear feature representation                  │
└───────────┬──────────────────────────────────────┬───────────┘
            │                                      │
            ▼                                      ▼
┌─────────────────────────┐            ┌─────────────────────────┐
│ Head 1: Risk Label      │            │ Head 2: Attack Category │
│ Dense(3, Softmax)       │            │ Dense(6, Sigmoid)       │
│  - safe                 │            │  - Instruction Override │
│  - suspicious           │            │  - Ranking Manipulation │
│  - injection            │            │  - Data Exfiltration    │
│ Loss: Categorical Cross │            │  - Social Engineering   │
└─────────────────────────┘            │  - Prompt Leaking       │
                                       │  - Context Manipulation │
                                       │ Loss: Binary Cross      │
                                       └─────────────────────────┘

🖼️ Deep Learning Model Computational Graph & Architecture Diagram

<p align="center"> <img src="docs/images/model_architecture.png" alt="MyGuard RETVec + 1D CNN Model Architecture" width="360" /> </p>

🔬 Detailed Layer-by-Layer Architectural Specification

1. Google RETVec Tokenization (Character-Level Embeddings)

Traditional NLP vectorizers (Word2Vec, GloVe, BERT) rely on token vocabularies. Adversaries exploit this vulnerability by injecting zero-width spaces, leetspeak (p r 0 m p t i n j 3 c t 1 o n), homoglyphs, or steganographic unicode modifications that cause subword tokenizers to split words into benign sub-tokens.

RETVec (Resilient Equivariant Text Vectorizer) solves this by embedding text directly at the byte and character level inside the TensorFlow graph:

• —Sequence Length: 128 character tokens per chunk.
• —Robustness: Equivariant architecture produces consistent numeric vector representations even when characters are swapped, substituted, or obfuscated.
• —Embedded Graph: RETVec is compiled directly into the SavedModel, eliminating external preprocessing dependencies during production inference.

2. 1D Convolutional Neural Network (CNN) Trunk

The embedded vector sequence passes through a lightweight, high-speed 1D CNN:

• —`Conv1D(128, kernel_size=5, activation='relu')`: Captures spatial 5-gram character sequence patterns associated with command injection syntax ("ignore previous instructions", "system prompt override", "print secret key").
• —`GlobalMaxPooling1D()`: Downsamples feature maps by extracting the maximum activation score, making threat detection invariant to the offset or positioning of the injection within a text segment.
• —`Dense(64, activation='relu')` & `Dropout(0.3)`: Dense representation layer with 30% dropout regularization to prevent overfitting on specific phrasing.

3. Dual Classification Output Heads

The network splits into two independent heads to serve different risk management operations:

Head 1: Risk Severity Label (label)

• —Activation: 3-class Softmax
• —Output Classes:
• —safe: Benign, standard business text.
• —suspicious: Ambiguous or subtle text requiring escalation.
• —injection: High-confidence prompt override or malicious attack payload.
• —Loss Function: categorical_crossentropy

Head 2: Multi-Label Attack Taxonomy (categories)

• —Activation: 6-unit Sigmoid (Multi-label classification, threshold = 0.5)
• —Output Categories:
• —Instruction Override: Overriding system prompt rules.
• —Ranking Manipulation: Distorting AI scoring or review outcomes.
• —Data Exfiltration: System prompt leaking or credentials theft.
• —Social Engineering: Phishing, coercion, or pretexting prompts.
• —Prompt Leaking: Direct attempts to expose backend instructions.
• —Context Manipulation: Injecting false context into LLM memory frames.
• —Loss Function: binary_crossentropy

4. Zero-Trust Security Posture & Loss Functions

In enterprise security gateways, a False Negative (missing a malicious injection) is a critical vulnerability, whereas a False Positive (flagging a safe document as suspicious) simply routes the file to Layer 3 (LLM Review) for confirmation.

• —Class Weighting: Uses sklearn.utils.class_weight.compute_class_weight during training to assign higher loss penalization to missed injection samples.
• —Recall Optimization: The network thresholding is tuned specifically for 100% Injection Recall, ensuring zero malicious payloads bypass Layer 2 undetected.

📊 Dataset Processing, Extraction Pipeline & Real Evaluation

1. Document Extraction & Multi-Format Ingestion

The dataset pipeline (app/scripts/train_model.py and app/services/supabase_dataset.py) handles structured parsing across large-scale synthetic datasets and real-world administrative files:

• —10,200 PDF Synthetic Injection Dataset v4: 10,200 synthetic PDF documents generated across 6 document archetypes (invoice, contract, report, email, resume, form) with 1,700 clean baselines and 8,500 prompt injection attacks (invisible_text, system_spoof, goal_hijacking, persona_swap, metadata).
• —Real Azerbaijani & English Administrative Documents: 325 real-world government and corporate documents (Baku IH, Ministries, Town Councils, Expense Reports).
• —Microsoft Word (`.docx`): Parsed paragraph-by-paragraph and cell-by-cell across nested tables (python-docx).
• —PowerPoint (`.pptx`): Text frames and speaker notes extracted across slides (python-pptx).
• —Adobe PDF (`.pdf`): Structural text stream and binary metadata extraction (pypdf).
• —Archive Packages (`.zip`): Recursive decompression and text stream extraction.
• —Plain Text (`.txt`): UTF-8 stream normalization.

2. Sliding-Window Text Chunking Algorithm

Prompt injections are often hidden deep within long, multi-page corporate documents. Feeding an entire 50-page document as one block dilutes the injection signal.

The training and inference engine implements a sliding-window text chunker:

• —Chunk Size: 60 words
• —Overlap Size: 30 words
• —Mechanism: Text is segmented into overlapping windows. If any single chunk triggers an injection classification above the threshold, the document is flagged as injection.

def chunk_text(text: str, chunk_size: int = 60, overlap: int = 30) -> list[str]:
    lines = [line.strip() for line in text.split("\n") if line.strip()]
    chunks = []
    for line in lines:
        words = line.split()
        if len(words) <= chunk_size:
            chunks.append(line)
        else:
            i = 0
            while i < len(words):
                c = " ".join(words[i:i + chunk_size])
                chunks.append(c)
                i += chunk_size - overlap
    return chunks

3. Supabase Cloud Data Synchronization

Dataset files are maintained in Supabase Cloud Storage and Firestore/PostgreSQL tables. Calling POST /api/v1/dataset/sync downloads missing samples into local storage (./data/raw/benign and ./data/raw/injection).

📈 Real Dataset Evaluation Report & Benchmark Metrics

• —Training Chunks Total: 1,816 chunks (1,072 safe, 744 injection).
• —Held-Out Test Set: 6 real-world complete document files (3 clean Azerbaijani/English documents, 3 malicious injection documents) kept completely isolated from training.

Held-Out Test Evaluation Results (2026-09-01 Run):

• —Total Test Documents: 6
• —Injection Detection Rate (Recall): 100.00% (3 out of 3 malicious injection files caught)
• —False Negative Rate: 0.00% (Zero missed threats)
• —Model Posture: Strict Security Mode (Zero-Trust)

Per-File Inference Breakdown Table:

⚡ 3-Layer Hybrid Security Pipeline Integration

The FastAPI ML service operates seamlessly inside the 3-Layer MyGuard Security Architecture:

[ Document Upload via Node.js Gateway ]
                  │
                  ▼
┌──────────────────────────────────────────────────────────────┐
│ LAYER 1: Heuristic & Visual Diff Detection (Node.js)         │
│  - Raw PDF Text Layer vs. Optical Tesseract OCR Text         │
│  - Zero-opacity font & white-on-white steganography scan      │
└───────────────────────┬──────────────────────────────────────┘
                        │
                        ▼
┌──────────────────────────────────────────────────────────────┐
│ LAYER 2: RETVec+CNN ML Microservice (Python FastAPI)         │
│  - Fast character-level Deep Learning classification         │
│  - Dual-head risk scoring & attack vector categorization     │
└───────────────────────┬──────────────────────────────────────┘
                        │
                        ├──────────────────────────┐
                        │ (Result = safe)          │ (Result = suspicious / injection)
                        ▼                          ▼
            [ ALLOW / PROCEED ]      ┌──────────────────────────┐
                                     │ LAYER 3: LLM Review      │
                                     │ (OpenAI gpt-4o-mini)     │
                                     │ Deep semantic evaluation │
                                     └─────────────┬────────────┘
                                                   │
                                                   ▼
                                         [ SANITIZE / BLOCK ]

🗄️ Model Registry & Persistence Architecture

To guarantee resiliency, full model auditability, and fast container startup on platforms like Render:

1. 1.Local Model Directory (`data/models/`): All historical model version files (model_run-01.keras through model_run-11.keras) are saved and version-tagged locally under ./data/models/. Whenever a new training run completes, it automatically saves a new versioned file (e.g., model_run-12.keras).
2. 2.Active Model File & Cache:
3. 3.`data/cache/active_model.keras`: Represents the currently active model loaded into memory for real-time /analyze-injection inference (0 ms load).
4. 4.`data/models/retvec_cnn_model.keras`: Serves as the primary active local Keras model artifact.
5. 5.Firebase Storage Persistence: Trained models are archived as ZIP files (models/model_<version>.zip) and uploaded to Firebase Storage.
6. 6.Firebase Firestore Registry: Active, candidate, and archived model versions are registered in the models Firestore collection:

   interface ModelMetadata {
     version: string;             // e.g., "run-11"
     status: 'active' | 'candidate' | 'archived';
     isCurrentVersion: boolean;   // true for the active model
     sourceCommit?: string;       // Git commit hash (e.g., "42743dc")
     description?: string;        // Detailed dataset & test metrics summary
     storagePath: string;         // Firebase Storage path
     metrics: {
       test_acc: number;
       recall: number;
       train_loss: number;
     };
     createdAt: string;
   }

1. 1.Asynchronous & Interactive Model Training:
2. 2.CLI Script (`python train_model.py`): Prompts an interactive comparison table and terminal confirmation before uploading new candidate versions.
3. 3.Background Job (`POST /train`): Unattended background worker (app/jobs/training_job.py) auto-registers new versions in Firebase.

🌐 Complete API Reference & Payload Specifications

🔑 Authentication & Endpoint Access Policy

To make API testing seamless via Swagger UI without requiring complex header setup, public endpoints are open for evaluation, while administrative/state-modifying endpoints remain protected:

• —🟢 Public Endpoints (No Token Required — Swagger UI Testing Ready):
• —POST /analyze-injection (Document injection analysis)
• —GET /model/active (Get current active model details)
• —GET /model/all-models (Filter & list all registered models with isCurrentVersion flag)
• —GET /health (Liveness & health check)
• —GET /api-docs (Interactive Swagger UI Documentation)
• —🔒 Protected Endpoints (`X-Internal-Token` Header Required):
• —POST /model/change-version/{version_id} (Promotes a version to active status and demotes previous active model)
• —POST /train (Triggers background ML model training run)

Interactive Swagger UI Documentation: - Live Render Deployment: `https://myguard-ai-backend.onrender.com/api-docs`

1. Liveness & Health Probe (/health)

GET /health

Returns service status. No auth required.

• —Response (`200 OK`):

{
  "status": "ok"
}

2. Injection Analysis (/analyze-injection)

POST /analyze-injection

Accepts text extracted by Node.js (raw text, visual OCR text, hidden text layers) and returns threat predictions. Public endpoint (No authentication token required).

• —Request Body:

{
  "documentId": "doc-1787753837283-457",
  "fullText": "Standard corporate report summary line 1...\nOCR extracted text page 1...\nSystem prompt override: Ignore previous instructions."
}

• —Response (`200 OK`):

{
  "label": "injection",
  "confidence": 0.985,
  "categories": [
    "Instruction Override",
    "Social Engineering"
  ]
}

3. Active Model Status & Management (/model)

GET /model/active

Retrieves metadata of the currently active model. Public endpoint.

• —Response (`200 OK`):

{
  "version": "run-11",
  "status": "active",
  "metrics": {
    "test_acc": 0.85,
    "recall": 1.0
  },
  "createdAt": "2026-09-01T14:30:00Z"
}

GET /model/all-models

Lists and filters all models registered in the registry. Public endpoint. Supports optional query parameters: version, accuracy_min, accuracy_max, created_after, created_before.

• —Response (`200 OK`):

[
  {
    "version": "run-11",
    "status": "active",
    "isCurrentVersion": true,
    "description": "RETVec + Conv1D model run-11",
    "metrics": {
      "test_acc": 0.85,
      "recall": 1.0
    },
    "createdAt": "2026-09-01T14:30:00Z"
  },
  {
    "version": "run-10",
    "status": "archived",
    "isCurrentVersion": false,
    "description": "RETVec + Conv1D model run-10",
    "metrics": {
      "test_acc": 0.70,
      "recall": 1.0
    },
    "createdAt": "2026-08-28T10:00:00Z"
  }
]

POST /model/change-version/{version_id}

Promotes a specific model version to active status, demoting the previously active version to archived. Protected Endpoint (`X-Internal-Token` required).

• —Request Headers:

X-Internal-Token: <INTERNAL_SERVICE_TOKEN>

• —Response (`200 OK`):

{
  "version": "run-10",
  "status": "active",
  "metrics": {
    "test_acc": 0.70,
    "recall": 1.00
  }
}

4. Asynchronous Model Training (/train)

POST /train

Triggers an asynchronous training pipeline run. Protected Endpoint (`X-Internal-Token` required).

• —Request Headers:

X-Internal-Token: <INTERNAL_SERVICE_TOKEN>

• —Response (`202 Accepted`):

{
  "jobId": "job-998123-abc",
  "status": "queued",
  "message": "Training job successfully dispatched to background runner."
}

5. Supabase Dataset Management (/api/v1/dataset)

GET /api/v1/dataset/files

Lists clean (benign) and malicious (injection) dataset files in Supabase.

POST /api/v1/dataset/sync

Synchronizes remote Supabase dataset files to local disk.

• —Response (`200 OK`):

{
  "status": "success",
  "message": "Dataset successfully synchronized from Supabase.",
  "synced_counts": {
    "benign": 1072,
    "injection": 744
  }
}

🛡️ Security & Authentication Architecture

To prevent unauthorized access and Denial-of-Service (DoS) abuse:

1. 1.Private Microservice Isolation Mode:
2. 2.In production deployment environments, this ML microservice is deployed as an internal Private Service accessible only within the internal virtual network (VPC).
3. 3.In live evaluation mode, public access is temporarily enabled for evaluation endpoints to allow zero-friction testing via Swagger UI.
4. 4.Header Authentication: Protected endpoints validate the X-Internal-Token header against INTERNAL_SERVICE_TOKEN for server-to-server commands (POST /train, POST /model/change-version/{version_id}).
5. 5.Automated IP Ban Enforcement:
6. 6.Tracks failed authentication attempts per client IP in memory (app/api/dependencies.py).
7. 7.If an IP exceeds 3 invalid token attempts, it is added to the banned IP registry.
8. 8.Subsequent requests from banned IPs return HTTP 403 Forbidden instantly.

🧱 Complete Project Structure

Ai-Models
├── .env.example                # Template environment configuration
├── .gitignore                  # Git exclude rules
├── Dockerfile                  # Containerization directives
├── NODE_JS_INTEGRATION_GUIDE.md # Node.js gateway integration manual
├── README.md                   # Primary documentation
├── REAL_DATASET_TRAINING_REPORT.md # Training report & metric log
├── requirements.txt            # Python package dependencies
├── train_model.py              # CLI entrypoint wrapper (delegates to app.scripts.train_model)
├── seed_model.py               # CLI entrypoint wrapper (delegates to app.scripts.seed_model)
├── push_to_firebase.py         # CLI entrypoint wrapper (delegates to app.scripts.push_to_firebase)
├── app/
│   ├── main.py                 # FastAPI application factory & lifecycle hooks
│   ├── api/
│   │   ├── dependencies.py     # Auth verification & IP ban protection
│   │   └── routes/
│   │       ├── classify.py     # POST /analyze-injection route handler
│   │       ├── model_status.py # GET/PATCH /model endpoints
│   │       └── train.py        # POST /train background runner route
│   ├── core/
│   │   ├── config.py           # Pydantic Settings & Env configuration
│   │   ├── firebase.py         # Firebase Admin SDK initialization
│   │   └── logging.py          # Structured JSON logging setup
│   ├── jobs/
│   │   └── training_job.py     # Background worker thread for training runs
│   ├── ml/
│   │   ├── cnn/
│   │   │   ├── architecture.py # RETVec + Conv1D model graph
│   │   │   └── model_registry.py # Firebase & local disk load/save logic
│   │   ├── preprocessing/
│   │   │   └── normalize.py    # Basic text normalization helpers
│   │   ├── retvec/
│   │   │   └── tokenizer.py    # Google RETVec integration wrappers
│   │   └── training/
│   │       ├── dataset.py      # Stratified dataset split & loader
│   │       ├── evaluate.py     # Precision/Recall/F1 metrics computation
│   │       └── train.py        # Class weight computation & training loop
│   ├── models/
│   │   └── schemas.py          # Pydantic request/response schemas
│   ├── scripts/                # Standalone CLI scripts module
│   │   ├── push_to_firebase.py # Firebase model upload & promotion module
│   │   ├── seed_model.py       # Initial model seeding module
│   │   └── train_model.py      # RETVec+CNN training & held-out test pipeline
│   └── services/
│       └── supabase_dataset.py # Supabase Storage & DB dataset manager
├── data/
│   ├── cache/                  # Local model cache directory
│   └── raw/                    # Local training dataset (benign/injection)
└── tests/                      # Pytest automated test suite
    ├── test_classify.py
    ├── test_model_registry.py
    └── test_training.py

⚙️ Environment Variables Reference

Create a .env file in the project root based on .env.example:

# Shared Secret for Service-to-Service Authorization
INTERNAL_SERVICE_TOKEN=myguard-internal-secret-token-2026

# Server Bind Settings
PORT=8000
HOST=0.0.0.0
LOG_LEVEL=INFO

# Firebase Admin SDK Credentials & Storage Bucket
FIREBASE_CREDENTIALS_PATH=./mygurad-firebase-admin.json
FIREBASE_STORAGE_BUCKET=myguard-app.appspot.com

# Supabase Data Pipeline Credentials
SUPABASE_URL=https://your-supabase-project.supabase.co
SUPABASE_SERVICE_ROLE_KEY=your-supabase-service-role-key
SUPABASE_STORAGE_BUCKET=team-files

# CORS Allowed Origins
ALLOWED_ORIGINS=https://mygurad-backend-v2.onrender.com,http://localhost:8000

💻 Setup, Installation & Execution

1. Clone Repository

git clone https://github.com/MegrurNiftiyev/MyGuard-AI-Backend.git
cd IDDA-Final-Project-Ai-Backend

2. Set Up Virtual Environment & Dependencies

python -m venv venv
# On Windows:
venv\Scripts\activate
# On Linux/macOS:
source venv/bin/activate

pip install -r requirements.txt

3. Environment Configuration

cp .env.example .env

4. Bootstrap Model (Optional for local testing)

python seed_model.py

5. Run FastAPI Application locally

uvicorn app.main:app --host 0.0.0.0 --port 8000 --reload

Interactive Swagger UI will be available at: http://localhost:8000/api-docs

6. Train Model on Dataset

python train_model.py

7. Run Container with Docker

docker build -t myguard-ai-backend .
docker run -p 8000:8000 --env-file .env myguard-ai-backend

🛡️ Error Handling Architecture

All API error responses follow a standardized JSON structure:

{
  "detail": {
    "error": "Short description of failure",
    "detail": "Detailed message"
  }
}

🐳 Docker Containerization & Production Deployment

The microservice includes a lightweight, multi-stage Dockerfile for enterprise containerization and zero-dependency cloud deployments (Render, AWS ECS, GCP Cloud Run, Kubernetes):

1. Build Docker Image

docker build -t myguard-ai-backend .

2. Run Container Locally

docker run -d -p 8000:8000 --env-file .env --name myguard-ai-backend myguard-ai-backend

3. Verify Container Health

curl http://localhost:8000/health

📜 License

Licensed under the MIT License.