Runtime architecture

LSAS sits between your products and one or more upstream LLM providers. Every request is turned into a decision with risk scores, findings, and remediations.

Gateway

The Fastify-based gateway exposes an OpenAI-compatible/v1/chat/completionsendpoint and attaches an lsasenvelope alongside the upstream response.

Validators

Deterministic validators run against the request and response payloads to surface PHI/PII, PCI, security, and accessibility findings.

Decisions

Policy packs map findings into decisions such as ALLOW, REDACTED, BLOCKED, or ESCALATE_HITL, plus severity tiers.