Developer Builds NIST AI RMF-Compliant RAG System for UK Arts Clients at $25/Month

·1 views

Software architect Lakshman Pandey built a production retrieval-augmented generation (RAG) system in August 2026 serving UK arts and culture clients, designed to comply with the NIST AI Risk Management Framework. The system uses Supabase pgvector hosted in EU-West-2 to meet GDPR and UK data residency requirements, with Claude Haiku 4.5 as its language model and Voyage AI for embeddings. Pandey implemented all four NIST RMF functions — Govern, Map, Measure, and Manage — documenting key decisions through Architecture Decision Records to ensure transparency and reversibility. A Ragas-based evaluation suite with 18 golden questions monitors quality metrics such as context recall and answer relevancy to prevent performance degradation over time. The low-risk system processes queries at $0.003–$0.005 each, with total infrastructure costs of approximately $25 per month.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

Why bulk date conversion is harder than it looks: the 01/02/2024 problem

A developer essay on DEV Community explores why building a batch date converter is far more complex than simply applying a date-formatting library. The core challenge lies in ambiguity — inputs like 01/02/2024 can mean January 2 or February 1 depending on the data source, making triage essential. The Vue-based tool described handles CSV uploads with a custom parser that accounts for quoted commas, auto-detects which column most likely contains dates, and infers header rows from real data patterns. Rather than relying on JavaScript's native date parsing, the tool explicitly walks through format cases — ISO-like strings, month-name formats, and purely numeric forms — in a deliberate order to avoid locale-dependent errors. The article argues that good UX in data-cleanup tools means modeling ambiguity openly and auto-selecting sensible defaults while still allowing user overrides.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

DEV Community Highlights Top 7 Developer Posts on AI, Security, and Web Tech

The DEV editorial team selected seven standout community posts published between Saturday and Friday of the previous week. Topics ranged from AI's impact on software development roles to Anthropic's new text watermarking feature in Claude and its implications under the EU AI Act. Other featured posts covered agent tool security, runtime authorization gaps in AI agent frameworks, and an experimental LLM-powered Liar's Dice game that builds a behavioral profile of each player. A post on OpenAI's 'Verified Defenders' access promise prompted one developer to design a formal test after repeatedly hitting AI refusals during legitimate defensive security work. The roundup reflects growing community focus on AI governance, agent architecture, and the evolving responsibilities of developers in an AI-augmented workflow.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

MergePDF Processes PDFs Entirely in Your Browser With No Uploads or Sign-Up

A developer has built MergePDF, a free, open-source PDF tool that runs entirely client-side, meaning files never leave the user's browser. The tool supports merging, splitting, rotating, and rearranging PDF pages without requiring a backend server, account, or internet connection for processing. It was created as a privacy-focused alternative to services like iLovePDF, which upload user documents to remote servers. The project uses no database, API routes, analytics, or tracking, storing only theme preferences locally. The source code is publicly available on GitHub and can be deployed to Vercel with no configuration required.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Three-Phase AI Agent Workflow Cuts Hallucinations by Limiting Context

A structured three-phase workflow — Research, Plan, Implement — has been proposed to reduce AI agent errors caused by bloated context windows during long sessions. The approach, adapted from a HumanLayer talk, involves clearing the context between each phase and saving outputs as markdown files so the agent only needs the final conclusion, not the full history. Parallel subagents handle heavy reading tasks in isolated contexts and return only summaries, keeping the main agent's context usage below 40%. Cheaper models can be assigned to subagents while a more capable model orchestrates the overall task, balancing cost and performance. The author emphasizes that detailed requirements and explicit edge cases are critical, as agents tend to fill information gaps with assumptions that often miss the mark.

0 comments Read more at DEV Community