---
title: Amanat
emoji: "\U0001F6E1"
colorFrom: green
colorTo: blue
sdk: docker
app_port: 8000
pinned: false
---

# Amanat: Data Governance AI Agent

Amanat connects to OneDrive, Slack, and Outlook through Auth0 Token Vault, scans for sensitive beneficiary data, and helps fix it. Built for the Auth0 "Authorized to Act" Hackathon 2026.

## This Demo

This published app runs IBM Granite 4 on watsonx.ai (the same model that runs locally via llama-server in the video demo). Auth0 login works. Tools return synthetic demo data from the [Waqwaq scenario](https://github.com/msradam/amanat/tree/main/demo-data/drive) — a fictional humanitarian crisis with displaced persons registries, GBV reports, biometric enrollment logs, and Slack messages containing leaked PII.

**Try these queries after logging in:**
- "Scan files for PII exposure"
- "Search messages for beneficiary names or medical information in public channels"
- "What does the ICRC Handbook say about sharing displaced person data with host governments?"
- "Check data retention compliance"

## Auth0 Features Used

- **Universal Login** with Guardian MFA
- **Token Vault** (Connected Accounts) for federated token exchange across OneDrive, Slack, Outlook
- **CIBA** (Client-Initiated Backchannel Authentication) — Guardian push for destructive actions
- **Guardian MFA** — push notifications for login and step-up auth

## Links

- [GitHub Repo](https://github.com/msradam/amanat)
- [Devpost Submission](https://devpost.com/software/amanat-data-governance-ai-agent)
- [Synthetic demo data (auditable)](https://github.com/msradam/amanat/tree/main/demo-data/drive)

Built by Adam Munawar Rahman.