AABW 2026 · Retail & Hospitality
ShelfReady

Built for Guardian — Vietnam health & beauty retail.

Claude reads. Rules decide. A person approves.

The problem · before

First, someone reads
the whole file.

A supplier's pack — claims, ingredients, certificates. In Vietnamese.

By hand. Every page.
Every new product, every week.

The problem · buried in the file

Two ways this product
quietly fails.

Prohibited claim · page 3
…giúp đặc trị mụn, giảm thâm sau 7 ngày…
= "treats acne"
A cure claim on a cosmetic — illegal advertising.
Missing document
  • Phiếu công bố (product notification)
  • Test report
  • Certificate of Free Sale not in file
No CFS — the listing stops here.

This is where onboarding dies.

The turn
Would you let a chatbot decide
what's legal to sell?

Neither would we. So we split the work.

Input Supplier file PDF · scans · Vietnamese
Claude reads Extracts every claim, ingredient & doc — with the evidence
Rules decide Cited gate 16 rules · PASS or FLAG · any doubt → FLAG
A person approves The only door nothing reaches the shelf without a human
A judgment call? A council argues both sides — defender vs prosecutor. It can raise concern. It can never clear a product. And we prove that in the code.
Live demo · 60 seconds
See it decide.

One supplier file becomes a reviewed decision — with the evidence, in under a minute.

synthetic dossier · reviewed live on AWS
Credibility · impact

Proven where it counts.
Honest about the rest.

Proven · live 8/8 golden files, exact live Bedrock vision over real Vietnamese PDFs · a known answer key
Proven · live 0 public endpoints CloudFront + Cognito + WAF is the only door · private-isolated VPC
Guardian's target 70–80% less onboarding effort we automate the part that eats the time
Guardian's target 90% less price monitoring a second agent watches competitor prices overnight

The trust boundary is proven in code — not promised. A test proves no path but a human's can approve.

Claude reads.
Rules decide.
A person approves.
ShelfReady
We're Groot. Thank you. A person still makes every call that matters — now in minutes, with the evidence in front of them.
AppendixA1 · Agentic workflow

Plan → tools → act → verify. Every step is a trace step.

One real flagged case (D1) traces end to end — the agent plans the run, calls its tools, drafts an action, routes it to a person, and verifies the result. All visible in the case view.

plan → vision_extract → cross_check_extract → cross_check_compare → rulepack_gate → council_defender / council_prosecutor / council_chairman → council_merge → persist_and_queue (verify)

Council escalation, drafts only

Runs only on ambiguous flags (capped per case). Two Sonnet advocates argue; an Opus chairman drafts a ruling with confidence. Split or low confidence → auto-escalate with both arguments attached. Merging hard-asserts the gate stays FLAG — a suggestion is never a state change.

Fail-safe by construction

  • Any pipeline error lands the case FLAG-side, visible in the trace.
  • Malformed or token-truncated model output is rejected — never parsed by guesswork.
  • Second read unavailable? Counts as disagreement → human verify.
AppendixA2 · Architecture

One CDK stack. No public endpoint.

The only public surface
CloudFront + WAF + Cognito auth
An officer signs in here — and nowhere else reaches in.
↓  VPC Origin · SG-to-SG rule
Private-isolated VPC · natGateways: 0 · ap-southeast-1
Compute
Internal ALB → ECS Fargate
FastAPI + the Claude agent pipeline + the deterministic gate
Reached via PrivateLink
Bedrock · Secrets · logs
no internet route — nothing inside can reach the public network
State
Aurora Sv2 · WORM audit
KMS CMK everywhere · S3 Object Lock for sealed records
cdk deploy stands it up · cdk destroy tears it down least-privilege IAM · auth fails closed (401) Apify price collector runs out-of-band, seeds the DB
AppendixA3 · The rulepack

16 rules. Every citation verified.

5
prohibited claim
6
banned ingredient
4
required document
1
label requirement
Nghị định 181/2013/NĐ-CP, Điều 4 khoản 3 — quảng cáo mỹ phẩm không được gây hiểu nhầm sản phẩm đó là thuốc.
Cosmetic advertising may not imply the product is a medicine — which is exactly why "đặc trị mụn" (treats acne) flags on the demo case.
core/rulepack_v1.yaml · ASEAN Cosmetic Directive Annex II quoted verbatim from the official asean.org PDF (v2023-1)
AppendixA4 · Data honesty

Synthetic where it must be — and a strength, not an apology.

Dossiers — a known answer key

Supplier packs are confidential, so demo dossiers are authored synthetic PDFs (organizer-blessed) — which means we know the right answer for every one. Each page carries a "TÀI LIỆU MÔ PHỎNG" footer; generators are seeded and deterministic, checked by 117 validation assertions.

Prices — labeled snapshot, live path wired

The demo uses a labeled synthetic price snapshot; every observation records its source and provenance. The production path — Apify actors run out-of-band, never from inside the VPC — is already wired in the collector CLI.

Impact figures (70–80% / 90%) are Guardian's targets, not measured results — we automate the mechanism behind them and say exactly that.

AppendixA5 · Impact math

Every number carries its label.

InputValueBasis
New SKUs onboarded per month100assumption
Manual first-pass per dossier45 minassumption
Manual onboarding effort at that volume75 h / monthderived
Onboarding effort reduction−70–80%Guardian target
Effort freed if the target holds≈ 52–60 h / monthderived
Price monitoring reduction (Top 200 SKUs)−90%Guardian target
  • We automate the mechanism — document reading, extraction, first-pass checks, daily price comparison.
  • Illustrative model, not a measurement. A live pilot must validate the savings.
AppendixA6 · Roadmap

Same spine, more jobs. Humans still change the law.

Next

  • Live price feeds: add the token, run the Apify collector out-of-band (Shopee · Lazada · TikTok Shop); provenance flips to source=apify.
  • P2 · voice-of-customer: review actors → the same agent → deterministic engine → human.
  • P4 · hospitality (Anam): PMS reads on the identical pattern.

Governed rule-mining

Mine officer decisions and propose new lexicon rules — each with a citation and evidence. A human rule committee approves before anything applies.

The gate can learn — but only a person changes the law.

ShelfReady · by Groot
01 / 13
Press or Space · F fullscreen