About this project

The OCI Platform (Open Code Infrastructure) serves as the unified platform for the ITU-WHO-WIPO Global Initiative on AI for Health (GI-AI4H). It is designed to replace several legacy stacks by consolidating evaluation, annotation, and reporting packages into a modern monorepo. Key components include: - api: A modular monolith built with NestJS 11 handling identity, catalog, storage, annotation, prediction, evaluation, and reporting. - web: A Next.js 16 user interface for public users, operators, and regulators. - worker-eval: A Python sandbox runner for executing participant Docker images. - worker-ingest: A TypeScript SQS consumer for Croissant manifest ingestion. - infra: Infrastructure as Code (IaC) using AWS CDK for managing VPC, Cognito, Aurora, ECS, ALB, WAF, and S3. The technical stack utilizes Node.js 24, pnpm, Turborepo, TypeScript 6, Prisma, and Tailwind CSS. Security measures include KMS-CMK encryption, TLS 1.3, WAFv2, and mandatory MFA for privileged roles via AWS Cognito, with CI integration for Trivy, Gitleaks, and CycloneDX SBOM.