Data Sovereignty Control Plane for Banks in India

Building the EASY COMPLIANCE check framework! RBI + DPDP Act 2023 + GDPR. No hallucinations. Every day ships a tangible artifact live on ghoshk.com/lab.

LIVEDAY 01

Regulatory Corpus

RBI + DPDP Act 2023 + GDPR Art 44-49. Searchable source of truth for all future agents.

ghoshk.com/lab/day-01-regulations →

LIVEDAY 02

Risk Taxonomy + Risk Register

8 risks mapped to Day 01 regs. Downloadable CSV that a bank CRO can actually open.

ghoshk.com/lab/day-02-risk-taxonomy →

LIVEDAY 03 • GOVERNANCE LAYER

Policy Check Agent

TS function that blocks Aadhaar/PAN/Payment to us-east-1/eu-west-1. Maps to RBI-2018 + DPDP-16 + RISK-02. OPA-like engine.

ghoshk.com/lab/day-03-policy-check →

LIVEDAY 04 • GOVERNANCE LAYER

Audit Trail & Tamper-Proof Log

Every BLOCK saved with auditId, timestamp, regId, riskId, hash chain. Export CSV for RBI auditor.

ghoshk.com/lab/day-04-audit-trail →

LIVEDAY 05 • SANDBOXING LAYER

E2B Sandboxing - Firecracker microVMs

PII never leaves VM. Blocks fetch, fs, console.log(data). Only hash leaves.

ghoshk.com/lab/day-05-sandboxing →

CONCEPTDATA LAYER

Cloud Storage 101

S3 vs GCS vs Azure Blob. ap-south-1 vs us-east-1. Where bank data physically lives.

ghoshk.com/lab/cloud-storage-101 →

Built in public at G:\dev\sovereign-lab → GitHub → Vercel → ghoshk.com. $0 stack. No hallucinations.