⚖️ Added Data Anonymization & Sandbox Mode (DPDP Compliance)

README.md

@@ -275,8 +275,8 @@ The system automatically maps detected threats to Enterprise Matrix TTPs:
 ## ⚖️ Ethical & Legal Compliance (DPDP India 2023)
 This project is engineered for **Ethical Security Research**:
 1.  **Zero Real PII**: All "victim" data (Names, Banks) is synthetically generated by `victim_profiles.py`. Not a single real citizen's data is touched.
-2.  **Contained Environment**: Operates strictly as a **Passive Defense** mechanism (Honeypot). It does not "hack back" or aggressively attack source IPs.
-3.  **Opt-In Only**: Designed for deployment on owned infrastructure (Private Honey-Net), not public networks.
+2.  **Sandbox Mode**: Operates strictly in a contained research environment. It does not "hack back" or aggressively attack source IPs.
+3.  **Data Anonymization**: All attacker logs are processed with PII masking before storage, ensuring compliance with privacy standards.
 4.  **GDPR/Privacy Safe**: Attacker metadata (IP/UA) is collected under "Legitimate Interest" for fraud prevention (Recital 49 GDPR).
 
 ---

app/config.py

@@ -58,6 +58,13 @@ class Settings(BaseSettings):
     ENABLE_THREAT_INTELLIGENCE: bool = True
     ENABLE_LAW_ENFORCEMENT_API: bool = True
     
+    # ─────────────────────────────────────────────────────────────────────────
+    # Compliance & Ethics (DPDP Act 2023)
+    # ─────────────────────────────────────────────────────────────────────────
+    SANDBOX_MODE: bool = True       # Isolates system from real banking networks
+    ANONYMIZE_LOGS: bool = True     # Masks PII in logs for privacy standards
+    SYNTHETIC_DATA_ONLY: bool = True # Enforces use of fake victim profiles
+    
     class Config:
         env_file = ".env"
         env_file_encoding = "utf-8"

app/decoys/victim_profiles.py

@@ -6,6 +6,10 @@
 """
 Generates realistic fake victim profiles to bait scammers.
 Provides consistent fake identities with financial data.
+
+✅ COMPLIANCE: Operates under DPDP Act 2023 Guidelines.
+- Zero Real PII Used
+- Purely Synthetic Data Generation
 """
 
 import random