Fix CI pytest failure, add .dockerignore, complete render.yaml

.dockerignore

@@ -0,0 +1,70 @@
+# Version control
+.git
+.gitignore
+
+# Environment files (never bake secrets into images)
+.env
+.env.*
+!.env.example
+
+# Python artifacts
+__pycache__/
+*.pyc
+*.pyo
+*.pyd
+.pytest_cache/
+.ruff_cache/
+*.egg-info/
+dist/
+build/
+venv/
+.venv/
+
+# Node / frontend
+node_modules/
+.next/
+frontend/node_modules/
+frontend/.next/
+
+# C++ build artifacts (rebuilt inside the container)
+drift_engine
+drift-engine/drift_engine
+
+# Go binaries (rebuilt inside the container)
+ingestion-service/sentinel-ingestion
+ingestion-service/ingestion-service
+
+# OS / IDE
+.DS_Store
+Thumbs.db
+.idea/
+.vscode/
+*.swp
+
+# CI / GitHub
+.github/
+
+# Documentation and project management
+*.md
+LICENSE
+DailyLog.md
+Contributing.md
+system_design.md
+FILE Structure
+Metrics.md
+
+# Terraform state (contains sensitive data)
+terraform/
+*.tfstate
+*.tfstate.*
+*.tfvars
+
+# Helm / k8s (not needed inside service containers)
+helm/
+k8s/
+
+# Load tests
+load_test/
+
+# Monitoring config (mounted as volumes in compose)
+monitoring/

.github/workflows/ci.yml

@@ -77,4 +77,4 @@ jobs:
       - name: Install dependencies
         run: pip install -r requirements.txt
       - name: Run tests
-        run: pytest tests/ -v
+        run: python -m pytest tests/ -v

render.yaml

@@ -1,7 +1,74 @@
 services:
+  # ── Streamlit dashboard — primary web UI ───────────────────────────────────
   - type: web
-    name: sentinel-ai
+    name: sentinel-dashboard
     env: docker
-    plan: gpu
+    dockerfilePath: ./streamlit-dashboard/Dockerfile
+    dockerContext: ./streamlit-dashboard
+    plan: free
     autoDeploy: true
+    healthCheckPath: /_stcore/health
+    envVars:
+      - key: WAREHOUSE_MODE
+        value: postgres
+      - key: DATABASE_URL
+        sync: false          # set in Render dashboard
+      - key: INGESTION_URL
+        value: https://sentinel-ingestion.onrender.com
+      - key: DRIFT_ENGINE_URL
+        value: https://sentinel-drift-engine.onrender.com
+      - key: LLM_GUARD_URL
+        value: https://sentinel-llm-guard.onrender.com
+
+  # ── Ingestion service (Go) ─────────────────────────────────────────────────
+  - type: web
+    name: sentinel-ingestion
+    env: docker
+    dockerfilePath: ./ingestion-service/Dockerfile
+    dockerContext: ./ingestion-service
+    plan: free
+    autoDeploy: true
+    healthCheckPath: /health
+    envVars:
+      - key: WAREHOUSE_MODE
+        value: postgres
+      - key: DATABASE_URL
+        sync: false          # set in Render dashboard
+      - key: PORT
+        value: "8080"
+
+  # ── Drift engine (C++ + Python) ────────────────────────────────────────────
+  - type: web
+    name: sentinel-drift-engine
+    env: docker
+    dockerfilePath: ./drift-engine/Dockerfile
+    dockerContext: ./drift-engine
+    plan: free
+    autoDeploy: true
+    healthCheckPath: /health
+    envVars:
+      - key: WAREHOUSE_MODE
+        value: postgres
+      - key: DATABASE_URL
+        sync: false          # set in Render dashboard
+
+  # ── LLM Guard ──────────────────────────────────────────────────────────────
+  - type: web
+    name: sentinel-llm-guard
+    env: docker
+    dockerfilePath: ./llm-guard/Dockerfile
+    dockerContext: ./llm-guard
+    plan: free
+    autoDeploy: true
+    healthCheckPath: /health
+    envVars:
+      - key: WAREHOUSE_MODE
+        value: postgres
+      - key: DATABASE_URL
+        sync: false          # set in Render dashboard
+      - key: OLLAMA_HOST
+        sync: false          # set in Render dashboard if using Ollama
+      - key: LLM_MODEL
+        value: llama2
+