Document Intelligence pack
Document Intelligence pack template, document assistant on fictitious data with a simulated dms connector.
Reference
| Field | Value |
|---|---|
| Name | document-intelligence |
| Version | 1.0.0 |
| Licence | MIT |
| Type | Template |
format | pack |
domain | document-intelligence |
| Category | document-intelligence |
namespace | enterprise-ai-packs |
publisher | Enterprise AI reference packs |
owner | enterprise-ai-packs |
compatibility.platform | >=1.0.0 <2.0.0 |
compatibility.sdk | >=1.0.0 <2.0.0 |
compatibility.runtimes | navin |
dependencies | None |
| Source | packs/templates/document-intelligence/plugin.yaml |
| Documentation | packs/templates/document-intelligence/docs/en/README.md, packs/templates/document-intelligence/docs/fr/README.md |
Capabilities
| Kind | Name |
|---|---|
tool | document-intelligence-search |
tool | document-intelligence-update-status |
connector | document-intelligence-dms |
policy | document_intelligence |
Requested permissions
The administrator grants a subset at install time; only the granted scopes are enforced.
| Scope | Sensitive | Classification | Reason |
|---|---|---|---|
document-intelligence.documents.read | No | confidential | Read document records to answer questions. |
document-intelligence.documents.write | Yes | confidential | Change the status of a document after a human approval. |
Data protection
| Field | Value |
|---|---|
classification_max | confidential |
pii | false |
residency | eu-west-1 |
retention_days | 30 |
dlp | mask |
fictitious_data | true |
piiDetectionRequired | true |
maskingPolicy | mask |
externalExportDefault | deny |
Approvals
Required for: install, upgrade, sensitivePermissions, production, externalExport, resume.
| Gate | Quorum | Roles |
|---|---|---|
install | 1 | tenant_admin, security_officer |
sensitive | 2 | tenant_admin, security_officer |
production | 2 | tenant_admin, security_officer |
Security and test flags
| Field | Value |
|---|---|
security.signedArtifactRequired | true |
security.sandboxRequired | true |
security.dynamicAuthorization | true |
security.auditRequired | true |
testFlags.sdkConformance | true |
testFlags.authorization | true |
testFlags.security | true |
Configuration
Properties of spec.configSchema, set by the administrator at install time:
| Name | Type | Constraints |
|---|---|---|
model_id | string | {"minLength": 3} |
mcp_servers | object | {"additionalProperties": {"additionalProperties": false, "properties": {"url": {"pattern": "^https?://", "type": "string"}}, "required": ["url"], "type": "object"}} |
Components
| Kind | Name | Version | Description | Details | Path |
|---|---|---|---|---|---|
| Agent | document-intelligence-assistant | 1.0.0 | Answers questions on document records and prepares status changes for a human approval. | risk_level: limited, autonomy.level: supervised, tools tool:document-intelligence-search, tool:document-intelligence-update-status | packs/templates/document-intelligence/agents/document-intelligence-assistant.yaml |
| Subagent | document-intelligence-reviewer | 1.0.0 | Reviews a proposed document status change against the rules before the human approval. | risk_level: minimal, autonomy.level: assisted, tools tool:document-intelligence-search | packs/templates/document-intelligence/subagents/document-intelligence-reviewer.yaml |
| Prompt | document-intelligence-summary | - | Summary of a document record for a business user. | variables record_id, audience, language | packs/templates/document-intelligence/prompts/document-intelligence-summary.yaml |
| MCP server | document-intelligence-mcp | - | MCP server of the Document Intelligence pack (official MCP Python SDK, MIT licence). | transport: streamable_http, tools document_intelligence_search, document_intelligence_update_status | packs/templates/document-intelligence/mcp/servers/document-intelligence-mcp.yaml |
| MCP tool | document-intelligence-search | 1.0.0 | Search fictitious document records through the pack MCP server. | action: read, scopes document-intelligence.documents.read, risk_level: limited, requires_approval: false | packs/templates/document-intelligence/mcp/tools/document-intelligence-search.yaml |
| MCP tool | document-intelligence-update-status | 1.0.0 | Change the status of a fictitious document record, idempotent, after a human approval. | action: write, scopes document-intelligence.documents.write, risk_level: high, requires_approval: true | packs/templates/document-intelligence/mcp/tools/document-intelligence-update-status.yaml |
| Connector | document-intelligence-dms | 1.0.0 | dms connector of the Document Intelligence pack. Simulated on fictitious data until the tenant configures it. | system: dms, auth.type: api_key, scopes document-intelligence.documents.read, document-intelligence.documents.write | packs/templates/document-intelligence/connectors/document-intelligence-dms.yaml |
| Workflow | document-intelligence-status-change | - | Status change of a document with a review and a four eyes approval. | steps search, review, approval, apply, on_failure: stop | packs/templates/document-intelligence/workflows/document-intelligence-status-change.yaml |
| Knowledge base | document-intelligence-knowledge | - | Knowledge base template of the Document Intelligence pack (fictitious documents). | classification: internal | packs/templates/document-intelligence/rag/config.yaml |
| Skill | document-intelligence-guidelines | 1.0.0 | How the Document Intelligence assistant handles document records. | scopes document-intelligence.documents.read, data_classification_max: confidential | packs/templates/document-intelligence/skills/document-intelligence-guidelines/SKILL.md |
Evaluations and tests
| Name | Type | Path | Threshold |
|---|---|---|---|
document-intelligence-answers | promptfoo | evaluations/promptfoo.yaml | 1.0 |
document-intelligence-retrieval | ragas | evaluations/ragas.jsonl | 0.8 |
| Kind | Path |
|---|---|
unit | tests/unit |
integration | tests/integration |
authz | tests/authz |
security | tests/security |
opa | policies/opa |
Files
| Kind | Path |
|---|---|
| Rules | packs/templates/document-intelligence/rules/document-intelligence-rules.md |
| Policies | packs/templates/document-intelligence/policies/opa/document_intelligence.rego, packs/templates/document-intelligence/policies/opa/document_intelligence_test.rego, packs/templates/document-intelligence/policies/openfga/model.fga, packs/templates/document-intelligence/policies/openfga/tests.fga.yaml |
| Observability | packs/templates/document-intelligence/observability/alerts/document-intelligence.yaml |
| Knowledge base documents | packs/templates/document-intelligence/rag/documents/guide.md |
Install it
Validate, build, sign and publish the pack, then install it from the Marketplace: the preflight checks the capabilities and the configuration before the installation.
enterprise-ai plugin validate packs/templates/document-intelligence
enterprise-ai plugin build packs/templates/document-intelligence --out /tmp/document-intelligence-dist
COSIGN_PASSWORD=... enterprise-ai plugin sign packs/templates/document-intelligence --out /tmp/document-intelligence-dist --key cosign.key --signer <publisher>
enterprise-ai plugin publish packs/templates/document-intelligence --out /tmp/document-intelligence-dist --key cosign.key \
--oci <registry>/packs/document-intelligence:1.0.0
cosign.key: signing key of your organization. <publisher>: publisher name registered in the Marketplace. <registry>: OCI registry of the Marketplace. Then call POST /v1/marketplace/preflight and POST /v1/marketplace/installations, see the Marketplace guide.