🌿 DURIOS // v0.4 / 3. Security & MIT SDK / 24. Cloud OCR & Vault
⚡ LIVE SPA
cloud_done
DURIOS // CLOUD VISION OCR & 10-YEAR COLD ARCHIVE VAULT PRO SAAS STEP 24

94.67% GROSS MARGIN (150K VND FEE vs 8K COGS) · AES-256-GCM SCRYPT ENVELOPE · S3/R2 GLACIER LOCK

Confidence Gate: ≥ 0.85 AUTO | < 0.85 HITL Cold Vault: 10-Year WORM Immutable
Managed OCR Retail Pricing
150,000 VND
Per container dossier full-pack
Cloud Vision Inference COGS
8,000 VND
GCP Vision / AWS Textract API
Gross Margin per Container
94.67%
+142,000 VND contribution
Cold Vault WORM Retention
10 Years
S3/R2 Object Lock (Nghị định 52)
document_scanner

Cloud Vision OCR Draft Ingestion

CloudOcrExtractorAdapter

Direct scanned PDF/JPG intake. Fields with confidence score ≥ 0.85 populate draft forms; low-confidence fields (< 0.85) are quarantined for mandatory HITL packhouse clerk verification.

Extracted Draft Fields & HITL Routing 4/4 FIELDS EXTRACTED
containerNumber: CSQU3054383
0.98 AUTO-PASS
pucCode: VN-TG-ORCH-0042
0.95 AUTO-PASS
netWeightKg: 18,450.00
0.92 AUTO-PASS
cadimiHeavyMetal: 0.025 mg/kg (Blurred)
0.78 HITL QUARANTINE
lock_clock

10-Year Cold Archive Vault Console

CloudVaultBackupConnector

Zero-knowledge client-side encryption. Manifest metadata is sealed inside an AES-256-GCM envelope derived via scrypt-sha256-v1 before replication to S3 Glacier / Cloudflare R2 object storage.

Algorithm & Key Derivation: AES-256-GCM / scrypt-sha256-v1
Payload Scope: MANIFEST_METADATA_ONLY_NOT_BLOBS
Target Tier: Cloudflare R2 + AWS S3 Glacier (10-Yr WORM)
Encrypted AAD Context: TENANT-CAILAY-PILOT-01|1.0.0|f3a8c1e82a0b12cd5e4...9e10
SHA-256 Plaintext Manifest Hash: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855