Operator ETL

Agentic data intake for FOIA and public comments — a locally proven MVP with a deterministic Medallion warehouse, LangGraph orchestration, Model Context Protocol (MCP) allowlist, and a fail-closed PII policy plane.

Python and SQL decide what data exists. Agents orchestrate within typed boundaries. The Critic proves numeric claims.

Contents

• Status

• Features

• Architecture

• Quickstart

• Configuration

• Repository layout

• Testing

• Docker and packages

• Documentation

• Contributing

• Security

• Support

• License

Related MCP server: @actalumen/mcp-server

Status

Honest inventory: docs/FINAL-REVIEW.md · okf/models/implementation-status.md.

Who this is for: agencies and regulated teams exploring agentic FOIA / public-comment intake with proof gates, not a turnkey production FOIA deployment.

What we do not claim: FedRAMP / ATO, live cloud E2E as proven, or that verify.sh green means production-ready FOIA software. See docs/PUBLIC-READINESS.md.

Features

• Medallion warehouse — bronze → silver + quarantine → gold SQL marts (DuckDB local)

• Fail-closed PII — scan before insight; encrypted vault (0600); no vault decrypt via MCP

• Critic faithfulness — insight numbers must appear in gold metrics

• MCP allowlist — three tools only; no raw SQL

• Observability — OpenTelemetry / OpenInference metadata without raw PII in spans

• A2A — JSON-RPC task surface with bearer auth and sanitized artifacts

• Proof gate — ./scripts/verify.sh runs OKF validate, pytest, and the FOIA demo

Architecture

Three planes keep generative intelligence away from raw operational data:

flowchart TB
  subgraph control [Control plane]
    LG[LangGraph state machine]
    Critic[Critic audit]
    HITL[HITL approval]
  end
  subgraph policy [Policy plane]
    PII[PII scan]
    Vault[AES vault]
    MCP[MCP allowlist]
  end
  subgraph data [Data plane]
    Bronze[Bronze raw]
    Silver[Silver validated]
    Quarantine[Quarantine]
    Gold[Gold SQL marts]
  end
  LG --> MCP
  MCP --> PII
  PII --> Vault
  Bronze --> Silver
  Bronze --> Quarantine
  Silver --> Gold
  Gold --> Critic

Quickstart

Prerequisites

• Python 3.12+ (or uv)

Verify in one command

git clone https://github.com/khaosans/operator-etl.git
cd operator-etl
./scripts/verify.sh

Installs uv if needed, syncs frozen deps, validates the OKF bundle, runs pytest, and executes the FOIA demo on a fresh warehouse. Success ends with OPERATOR_ETL_VERIFY=PASS.

Expected demo metrics on sample data: status=complete, silver=10, quarantined=2.

Full guide: docs/QUICKSTART.md.

Run the FOIA graph

uv run etl-graph --source public_comments --pipeline public_comments

status=complete  run_id=...
rows_in=12  silver=10  quarantined=2
pii_findings=3  critic_passed=True

pii_findings=3 is scanner groups (EMAIL, PHONE, US_SSN). Dashboard PII flagged ≥ 4 counts silver comments with PII — both are expected on the synthetic sample.

Dashboard (optional)

export OPERATOR_ETL_WAREHOUSE=".tmp/mvp-demo/operator.duckdb"
export OPERATOR_ETL_PIPELINE_NAME=public_comments
export OPERATOR_ETL_DOMAIN=gov
uv run streamlit run dashboard/app.py

Screenshots: docs/TOUR.md.

Configuration

Copy .env.example for local DuckDB runs. Common variables:

Cloud secrets (PII_VAULT_KEY, API keys) live in infra/env.example / Terraform examples — never commit .env or terraform.tfvars.

Repository layout

src/operator_etl/            Data plane
src/operator_etl_graph/      LangGraph control plane
src/operator_etl_policy/     PII + vault
src/operator_etl_mcp/        MCP server
src/operator_etl_{gcp,aws,azure}/  Cloud adapters
src/a2a/                     A2A JSON-RPC surface
src/telemetry/               Sanitized OTel
pipelines/  sql/  samples/   Registry, gold SQL, synthetic data
infra/{gcp,aws,azure}/       Terraform staging stacks
tests/  harness/  scripts/   Proof gate
okf/  skills/  docs/         Knowledge bundle, agent skills, wiki

Testing

make test        # pytest
make e2e         # OKF + pytest + FOIA demo
make lint        # ruff
make security    # bandit + pip-audit

Every architectural invariant has automated coverage (ingest idempotency, quarantine, PII, critic, MCP deny, telemetry, A2A). Map: docs/TESTING.md · proof citations: docs/FOUNDATIONS.md.

Docker and packages

# Tagged release (see GitHub Releases for current version)
docker pull ghcr.io/khaosans/operator-etl:0.7.0
docker run --rm -it ghcr.io/khaosans/operator-etl:0.7.0 etl-graph --help

# Or :latest for the newest non-prerelease tag
docker pull ghcr.io/khaosans/operator-etl:latest

pip install operator-etl --index-url https://pypi.pkg.github.com/khaosans/simple/

Release SBOMs (CycloneDX) attach to GitHub Releases. Process: docs/RELEASING.md.

Documentation

Wiki: https://khaosans.github.io/operator-etl/

Contributing

See CONTRIBUTING.md and CODE_OF_CONDUCT.md.

make e2e && make lint && make security
uv run pre-commit install   # optional local hooks

CI must be green before merge (e2e, docker, terraform, gitleaks, bandit, pip-audit, CodeQL, Trivy, Checkov). Ruleset setup: docs/PUBLIC-READINESS.md.

Security

Report vulnerabilities per SECURITY.md. Do not open public issues for sensitive disclosures.

Agent checklist: skills/operator-security/SKILL.md.

Support

• Docs wiki and docs/index.md

• GitHub Issues for bugs and questions

• Changelog: CHANGELOG.md · Versioning: docs/VERSIONING.md

All sample intake records are synthetic.

License

Licensed under the Apache License 2.0.