eltaweelactuary/Secure-AirGap-AI

Standalone, on-premises Egyptian Sign Language translation and chat assistant powered directly by the Gemini API (no service account, no cloud SaaS hop). Built for DevOpsDays Cairo 2026 Hackathon. # Secure-AirGap-AI > **On-device Egyptian Sign Language assistance — zero external AI API, fully auditable** > DevOpsDays Cairo 2026 Hackathon · **Team Takamol** Secure-AirGap-AI helps a deaf user turn an Egyptian Sign Language gesture into Arabic text and continue with a short Egyptian-Arabic customer-service exchange — **entirely on the user's own device**. This is deliberately more than an AI demo: the gesture-recognition engine, the DevOps platform around it, and the public demo are all designed to run with **no Gemini, no third-party AI API, and no API key of any kind**. ## Honest architecture — a true local/air-gapped claim Earlier iterations of this project called an external LLM (Gemini) for gesture interpretation, which meant outbound Internet access was required at inference time. **That dependency has been removed.** The current architecture is: > **Hand-gesture recognition runs fully on-device in the browser** using MediaPipe Hands (the JS runtime, WASM binary, and hand-landmarker model are vendored under `static/mediapipe/` and served by this app itself — nothing is fetched from a CDN or any third party at runtime) to extract 21 hand landmarks, converted into a small numeric tensor and matched against a local, auditable tensor dictionary. No camera frame, video, or landmark data is ever sent to this backend or to any external AI service. The FastAPI backend only serves the page and the vendored engine assets, enforces authentication/rate limits, exposes Prometheus metrics, and returns a **fixed, local, rule-based Egyptian-Arabic reply** for the recognized word — no network call, no model, no bill. ## Why it matters - **Accessibility impact:** a sign-to-text-to-chat interaction path for Egyptian Arabic customer-service scenarios that works with no Internet connection after the first page load. - **Security impact:** there is no AI-provider API key anywhere in this codebase, image, or CI pipeline — there is nothing to leak. - **DevOps impact:** th …