One hero project, and the trail behind it.

RefundDesk

An assistant that answers refund-policy questions for Finance, Support, Sales, Legal and HR, where what you can retrieve depends on who you are. Access control is enforced in the database, not in the prompt: Postgres row-level security sits under pgvector, so a Support agent cannot be talked into reading a Legal memo.

• Ingestion for PDFs, scanned PDFs (OCR), DOCX, XLSX, email, Markdown and HTML via Docling, with versioned documents, soft-deletes and a human review gate.
• Section-level ACL markings travel with every chunk; RLS policies are forced on the app role and checked with SQL leak tests.
• Hybrid retrieval: BM25 over tsvector plus HNSW cosine on bge-m3 embeddings, fused with Reciprocal Rank Fusion.
• A tool-calling agent loop with guardrails and an audit trail, a FastAPI backend, a React + Vite UI, and retrieval and agent evals.