PII Sovereign Guardrail — masks PII before it reaches external LLMs, rehydrates in response

[Keerthanajan08]

PII Sovereign Guardrail — middleware that masks PII (emails, phones, names, addresses) before it reaches an external LLM, using a two-layer approach (regex + LLM-based NER), then rehydrates the real values in the response. Flow is built, deployed, and tested end-to-end in Lamatic Studio. Demo screenshot and full architecture are in the README.

PR Checklist

1. Select Contribution Type

• Kit (kits/<category>/<kit-name>/)
• Bundle (bundles/<bundle-name>/)
• Template (templates/<template-name>/)

---

2. General Requirements

• PR is for one project only (no unrelated changes)
• No secrets, API keys, or real credentials are committed
• Folder name uses kebab-case and matches the flow ID
• All changes are documented in README.md (purpose, setup, usage)

---

3. File Structure (Check what applies)

• config.json present with valid metadata (name, description, tags, steps, author, env keys)
• All flows in flows/<flow-name>/ (where applicable) include:
  • config.json (Lamatic flow export)
  • inputs.json
  • meta.json
  • README.md
• .env.example with placeholder values only (kits only)
• No hand‑edited flow config.json node graphs (changes via Lamatic Studio export)

---

4. Validation

• npm install && npm run dev works locally (kits: UI runs; bundles/templates: flows are valid)
• PR title is clear (e.g., [kit] Add <name> for <use case>)
• GitHub Actions workflows pass (all checks are green)
• All CodeRabbit or other PR review comments are addressed and resolved
• No unrelated files or projects are modified

[coderabbitai]

Important

Review skipped

Auto reviews are limited based on label configuration.

🏷️ Required labels (at least one) (1)

• agentkit-challenge

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Repository UI (base), Organization UI (inherited)

Review profile: ASSERTIVE

Plan: Pro Plus

Run ID: 1e2e053d-384e-4106-bf41-2ed1ef5a3fd8

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[Keerthanajan08]

Hi! This PR needs the agentkit-challenge label for CodeRabbit's review to run (and per the challenge instructions). I don't have permission to add labels as an external contributor. Could a maintainer please add it ?