lreceive: LLM Compliance Audit Proxy for PII/PHI Redaction & SOC 2

Deploy lreceive in 5 steps. Everything you need is below, no other files or docs required.

STEP 1: Create a file named config.yaml with this content. Delete whichever provider block(s) you will not use.

server: proxy_addr: ":8080" admin_addr: ":8081" database: url: ${DATABASE_URL} ledger: signing_key_path: /data/signing.key checkpoint_interval: 1h providers: anthropic: enabled: true api_key: ${ANTHROPIC_API_KEY} allow_passthrough: true openai: enabled: true api_key: ${OPENAI_API_KEY} allow_passthrough: true detection: enabled: true policies:

• classes: [SECRET, PCI] action: redact
• classes: [PII, PHI] action: redact retention: tiers: default: 8760h

STEP 2: Provide a Postgres 14+ database reachable from the container (Amazon RDS, Aurora Postgres, or your own).

STEP 3: Run the container:

docker run -d
-e DATABASE_URL=postgres://user:pass@your-db-host:5432/lreceive
-e ANTHROPIC_API_KEY=sk-ant-...
-e OPENAI_API_KEY=sk-...
-p 8080:8080 -p 8081:8081
-v lreceive-data:/data
-v /path/to/config.yaml:/etc/lreceive/config.yaml:ro
709825985650.dkr.ecr.us-east-1.amazonaws.com/lreceive/irece:1.0.0

Port 8080 is the proxy your applications call. Port 8081 is the compliance dashboard, keep it off the public internet, place it behind your own VPN or private network.

STEP 4: Initialize the database and create your login (first launch only):

docker exec <container> auditctl migrate docker exec <container> auditctl users set admin docker exec <container> auditctl keys create my-application

The last command prints a secret once. Save it, it cannot be retrieved again.

STEP 5: Point your application at the proxy instead of the real provider:

http://<your-host>:8080/anthropic (Anthropic SDKs) http://<your-host>:8080/openai (OpenAI SDKs)

Use the secret from step 4 as the API key. lreceive forwards the request to the real provider, records a tamper-evident audit entry, and returns the response unchanged.

Open http://<your-host>:8081 and sign in with the admin account from step 4 to view the audit log, verify ledger integrity, and generate SOC 2 compliance reports.