services:
  auditprobe:
    build:
      context: .
      dockerfile: Dockerfile
      args:
        AUDITPROBE_VERSION: "${AUDITPROBE_VERSION:-2.0.0}"
    image: "auditprobe:${AUDITPROBE_VERSION:-2.0.0}"
    ports:
      - "8501:8501"
    environment:
      HITL_ENABLED: "true"
      HITL_AUDIT_DB: /app/runtime/hitl/audit_log.db
      HITL_COMMITTEE_MEMBER_IDS: "${HITL_COMMITTEE_MEMBER_IDS:-}"
      EVIDENCE_TRACING_ENABLED: "true"
      # 默认 Compose 不接收任何密钥，避免 `docker compose config`/CI 日志展开本地 .env。
      # 如需在线 AI，按 README 使用 docker run --env-file 指定受控凭据文件。
      LLM_ASCEND_ENABLED: "false"
    volumes:
      - auditprobe_hitl:/app/runtime/hitl
    restart: unless-stopped

volumes:
  auditprobe_hitl: