VISHWAS
विश्वासRFP §6Responsible AI & ComplianceVISHWAS — Responsible AI & Compliance Console (RFP §6)
Every AI capability in the portfolio is governed by VISHWAS: fairness monitoring, transparency (Model Cards), explainability, accountability (audit logs), human oversight, DPDP/ISO 27001/CERT-In/OWASP compliance, and prompt-injection guardrails.
Responsible AI
6/6 enabledAccountability
Immutable audit log; every AI output traceable to prompt version, model, provider, sources, user
Bias Monitoring
Scheduled fairness metric recompute; drift detection; alerting
Explainability
Every AI output carries "Why?" button — citations, SHAP, Grad-CAM, attribution weights
Fairness Monitoring
Disparity dashboard — outcome/score distributions by gender, social category, district. Flag disparate impact ratio < 0.8
Human Oversight
Human-in-loop queues with override rate metric; confidence-threshold routing
Transparency — Model Cards
Model Card per AI feature: purpose, training data, limitations, operating point, TRL
Security
6/6 enabledCERT-In Guidelines
180-day log retention, incident response runbook, NTP sync, vulnerability disclosure
DPDP Act 2023
Consent registry, purpose limitation, retention policy, data-principal rights, data-residency enforcement
Encryption Standards
TLS 1.3 in transit; AES-256-GCM at rest; envelope encryption for API keys
ISO 27001
Information security management system controls
OWASP Top 10
Web application security controls + pentest checklist
OWASP LLM Top 10
Prompt injection defence, output encoding, model DoS limits, sensitive-info filters
Governance
4/4 enabledAudit Logs
Tamper-evident hash-chained audit trail with search/export UI
Data Retention Policies
Per-entity retention policy; automated purge; retention report
Model Governance
Model registry: version, approver, deployment date, eval scores, rollback
User Access Control
RBAC + ABAC (posting-level scoping: Block officer cannot query state data)
Chest X-ray abnormality triage
Hindi+English OCR for govt documents
Satellite change detection
Domain-specific LLM (Health/Agri/Revenue/Legal)
Private GPT on-premise deployment
Plant disease detection from leaf images
Scheme progress forecasting
Grievance routing & urgency scoring
Government knowledge assistant with RAG
Adaptive learning path
Fraud detection for scheme disbursements
Security event threat classification
| Time | Action | Module | Entity |
|---|---|---|---|
| 8/26/2026, 3:35:38 PM | DISABLE | GYAN | EnterpriseAiConfig/cmt9x2ru |
| 8/26/2026, 3:35:26 PM | ENABLE | GYAN | EnterpriseAiConfig/cmt9x2ru |
| 8/26/2026, 3:06:12 PM | CONFIG.UPDATE_PROVIDER | CONFIG | ApiProvider/cmt9ouco |
| 8/26/2026, 3:05:44 PM | CONFIG.UPDATE_PROVIDER | CONFIG | ApiProvider/cmt9ouco |
| 8/26/2026, 1:04:17 PM | VISHWAS.TOGGLE_FLAG | VISHWAS | FeatureFlag/cmt9oucp |
| 8/26/2026, 1:04:16 PM | VISHWAS.TOGGLE_COMPLIANCE | VISHWAS | ComplianceFlag/cmt9oucp |
| 8/26/2026, 1:04:05 PM | CONFIG.DEMO_PRESET | DEMO_DIRECTOR | ApiProvider/live |
| 8/26/2026, 1:04:05 PM | CONFIG.UPDATE_PROMPT | CONFIG | PromptTemplate/cmt9ouco |
| 8/26/2026, 1:04:04 PM | CONFIG.UPDATE_PROVIDER | CONFIG | ApiProvider/cmt9ouco |
| 8/26/2026, 1:00:59 PM | CONFIG.DEMO_PRESET | DEMO_DIRECTOR | ApiProvider/hybrid |
| 8/26/2026, 11:59:30 AM | AI.GENERATE | BHU | - |
| 8/26/2026, 10:59:30 AM | AI.GENERATE | KISAN | - |
| 8/26/2026, 8:59:30 AM | AI.GENERATE | SAHAYAK | - |
| 8/26/2026, 6:59:30 AM | AI.GENERATE | SAMVAAD | - |
| 8/26/2026, 1:06:30 AM | VISHWAS.ENABLE_FLAG | VISHWAS | ComplianceFlag/OWASP_LL |
| 8/26/2026, 1:05:30 AM | VISHWAS.ENABLE_FLAG | VISHWAS | ComplianceFlag/DPDP |
| 8/26/2026, 1:04:30 AM | VISHWAS.ENABLE_FLAG | VISHWAS | ComplianceFlag/ISO27001 |
| 8/26/2026, 1:02:30 AM | CONFIG.SEED_PROMPTS | CONFIG | - |
| 8/26/2026, 1:01:30 AM | CONFIG.SEED_PROVIDERS | CONFIG | - |
| 8/26/2026, 12:59:30 AM | PLATFORM.BOOT | CONFIG | - |
Fairness Dashboard (Concept)
Tracks outcome distributions by gender, social category, and district across every AI feature. Flags disparate impact ratio < 0.8 for review. In production, this card would render live charts from a fairness-metrics store; in this demo it visualises the methodology and wiring — every model card exposes its fairness operating point.
Prompt Injection Guardrail Demo (OWASP LLM §1)
The VISHWAS guardrail layer runs server-side before the LLM is invoked, checking every input against known prompt-injection patterns. Try a safe query first (it passes), then try an injection attempt (it gets blocked) — this is the OWASP LLM Top 10 §1 defence working live.