{
  "entry_points": [
    "app/main.py",
    "app/proxy.py",
    "app/store.py",
    "app/reports.py",
    "app/redaction.py"
  ],
  "data_flow": [
    "app/main.py -> app/proxy.py (registers /v1/chat/completions route)",
    "app/proxy.py -> app/store.py (records metadata and llm_requests)",
    "app/proxy.py -> upstream llama.cpp (forwards requests)",
    "app/store.py -> app/reports.py (aggregates dashboard stats)",
    "app/reports.py -> app/redaction.py (removes secrets before previews)",
    "app/main.py -> app/reports.py (dashboard pages)"
  ],
  "risks": [
    "app/proxy.py - potential for untrusted input forwarding to upstream llama.cpp",
    "app/store.py - SQLite injection risks if not properly parameterized",
    "app/redaction.py - potential for incomplete secret removal or false negatives",
    "app/main.py - FastAPI route registration may expose unintended endpoints",
    "app/proxy.py - metadata recording may inadvertently log sensitive information",
    "app/reports.py - dashboard aggregation may expose PII if not properly sanitized"
  ]
}