| --- |
| title: Amanat |
| emoji: "\U0001F6E1" |
| colorFrom: green |
| colorTo: blue |
| sdk: docker |
| app_port: 8000 |
| pinned: false |
| --- |
| |
| # Amanat: Data Governance AI Agent |
|
|
| Amanat connects to OneDrive, Slack, and Outlook through Auth0 Token Vault, scans for sensitive beneficiary data, and helps fix it. Built for the Auth0 "Authorized to Act" Hackathon 2026. |
|
|
| ## This Demo |
|
|
| This published app runs IBM Granite 4 on watsonx.ai (the same model that runs locally via llama-server in the video demo). Auth0 login works. Tools return synthetic demo data from the [Waqwaq scenario](https://github.com/msradam/amanat/tree/main/demo-data/drive) — a fictional humanitarian crisis with displaced persons registries, GBV reports, biometric enrollment logs, and Slack messages containing leaked PII. |
|
|
| **Try these queries after logging in:** |
| - "Scan files for PII exposure" |
| - "Search messages for beneficiary names or medical information in public channels" |
| - "What does the ICRC Handbook say about sharing displaced person data with host governments?" |
| - "Check data retention compliance" |
|
|
| ## Auth0 Features Used |
|
|
| - **Universal Login** with Guardian MFA |
| - **Token Vault** (Connected Accounts) for federated token exchange across OneDrive, Slack, Outlook |
| - **CIBA** (Client-Initiated Backchannel Authentication) — Guardian push for destructive actions |
| - **Guardian MFA** — push notifications for login and step-up auth |
|
|
| ## Links |
|
|
| - [GitHub Repo](https://github.com/msradam/amanat) |
| - [Devpost Submission](https://devpost.com/software/amanat-data-governance-ai-agent) |
| - [Synthetic demo data (auditable)](https://github.com/msradam/amanat/tree/main/demo-data/drive) |
|
|
| Built by Adam Munawar Rahman. |
|
|
