```json
{
  "entry_points": [
    "app/main.py (FastAPI routes)",
    "app/proxy.py (/v1/chat/completions endpoint)"
  ],
  "data_flow": [
    "User Request -> app/main.py -> app/proxy.py",
    "app/proxy.py -> app/store.py (Metadata/Request logging to SQLite)",
    "app/proxy.py -> llama.cpp (Upstream inference)",
    "llama.cpp -> app/proxy.py -> app/redaction.py (Secret scrubbing)",
    "app/proxy.py -> User (Final response)",
    "app/store.py -> app/reports.py -> app/main.py (Dashboard visualization)"
  ],
  "risks": [
    "SQL Injection: Potential risk in app/store.py if queries are not parameterized.",
    "Prompt Injection/SSRF: app/proxy.py handles external inputs and forwards to upstream services.",
    "Data Leakage: app/redaction.py may fail to catch all secrets, leading to PII exposure in dashboard previews.",
    "Broken Access Control: app/main.py registers dashboard pages; lack of authentication could expose internal stats."
  ]
}
```