SIKDS: Secure Institutional Knowledge & Distribution System

A ministry-scale platform (MESRS) for publishing official documents to institutions with role-based access, per-download PDF watermarking that makes any leak traceable, and an AI assistant that answers questions with citations from the archive.

Project Overview

SIKDS is a ministry-scale platform (MESRS) for distributing official documents to universities as a single source of truth. A directive is published once, targeted to the right institutions or roles, and every recipient sees the same current version while older ones are archived automatically behind it.

Its focus is traceability: every download is watermarked with the recipient's name, institution, and a unique ID (visible plus hidden metadata), so a leak traces back to its source, and every action is written to an immutable audit log. On top of the archive, an AI layer indexes each document into pgvector and answers plain-language questions with citations, scoped to only the documents a user is allowed to see.

Key Features

Ministry SSO authentication with automatic user provisioning and role-based access gating
Granular role-based access control with custom roles, per-action permissions, and a full permission-resolution flow (Spatie)
Dynamic PDF watermarking (visible overlay plus hidden XMP metadata and a per-download identifier) for instant leak traceability
AI assistant over the archive with pgvector semantic search, re-ranking, and access-scoped answers that cite their sources
Automated indexing pipeline that extracts, chunks, and embeds each document on a Redis queue, with an OCR fallback for scanned pages
Full document lifecycle and versioning (Draft, Active, Archived, Soft-deleted) backed by an immutable audit log