🐆 Leopardo RH

Leopardo RH is built for everyone who keeps a company running — not only IT teams.

Measured on main, 2026-08-17 — see the full audit for methodology.

Coverage per module is tracked in CI (issue #1726) with a Payroll ≥ 80 % target.

Traditional HR & payroll suites are either too expensive (SAP, Oracle), not adapted to local regulations, or closed. Leopardo RH is built for the next wave of high-growth companies — with absolute data isolation, biometric-grade attendance, automated payroll, and AI-native insights, open source from day one.

• 🌍 True multi-tenancy — PostgreSQL search_path schema isolation + logical isolation, for high-compliance enterprises.
• 🤖 AI-native — predictive workforce analytics, anomaly detection, LLM-driven HR insights.
• 💰 Automated payroll engine — one-click multi-country payroll (DZ, MA, FR, TR), validation, PDFs, compliance-first.
• 🕒 Biometric attendance — ZKTeco cloud bridge, on-prem edge kiosk, GPS-fenced mobile check-in.
• 📱 Omnichannel — 5 native apps Flutter (Employee, Manager, HR, Marketing, Platform Admin) + web dashboards + PWA offline + kiosk biometrique web (front/zkteco-kiosk).
• 🔐 Security-first — RBAC matrix, SSO SAML/OIDC, encrypted-at-rest sensitive data, GDPR / law 18-07 posture, Secret Scanning + full-history secret audit (Spec A-2).

Real product visuals — web dashboards, mobile employee apps and the biometric kiosk path.

Web platform	Mobile employee app	Biometric kiosk

Modular Monolith (Domain-Driven Design) — every business capability lives in its own module under api/app/Modules/, with explicit Application / Domain / Infrastructure / Interfaces layers.

graph TB
    subgraph "Omnichannel Layer"
        Web[Next.js 16 Dashboard]
        Mobile[Flutter Native Suite x5]
        Kiosk[ZKTeco Cloud Bridge + Edge Kiosk]
    end

    subgraph "Enterprise Gateway"
        API[Laravel 12 / PHP 8.4]
        Sec[RBAC & JWT Shield + SSO]
    end

    subgraph "Core Business Logic — 18 DDD Modules"
        HRM[HR Core]
        PAY[Payroll Engine]
        ATT[Smart Attendance]
        AI[AI Analytics Layer]
    end

    subgraph "Data Infrastructure (0 €, résiliente)"
        DB[(PostgreSQL 16<br/>Multi-tenant + queue database)]
        Cache[(Cache Redis ou fichier<br/>selon dispo Upstash)]
        Workers[Worker web Render<br/>+ drain GitHub Actions]
        Store[S3-Compatible Storage]
    end

    Web & Mobile & Kiosk --> Sec
    Sec --> API
    API --> HRM & PAY & ATT & AI
    HRM & PAY & ATT & AI --> DB & Cache & Store
    DB --> Workers

📐 Full architecture: ARCHITECTURE.md · C4 diagrams · Multi-tenancy · ADR log

💸 Architecture 0 € assumée (2026-08-21) — le domaine leopardo-rh.com n'est pas acheté (état délibéré, #3452 → wontfix) ; on tourne sur les tiers gratuits Render / Vercel / Cloudflare Pages. Les URLs ci-dessous sont officielles et actives. La queue vit dans PostgreSQL (driver database, zéro quota) avec un drain de secours GitHub Actions toutes les 5 min ; le cache/session basculent automatiquement Redis ↔ fichier au boot selon la disponibilité d'Upstash (voir « ⚡ Infrastructure & résilience »).

Décisions 2026-08-21 (issues #5204/#5205/#5206/#5207) — objectif : zéro coût à vie, résilience « meilleur → pire » selon la disponibilité réelle des fournisseurs.

Liens : DEPLOYMENT_URLS.md · ARCHITECTURE.md · workflow queue-worker-fallback.yml

# 1. Clone
git clone https://github.com/kitokoh/leopardo-hr.git && cd leopardo-hr

# 2. Launch infrastructure (PostgreSQL + Redis)
docker-compose up -d

# 3. Bootstrap the backend
cd api
composer install
php artisan leopardo:migrate --seed

Developer guide: DEVELOPMENT.md · Conventions · Makefile

• Phase 1 — Core HRM + multi-tenant isolation
• Phase 2 — AI-driven salary estimation layer
• Phase 3 (partial) — OpenAPI spec + JS/Python SDKs + Postman collection
• Phase 4 — Public API ecosystem, billing & app marketplace
• Phase 5 — Global financial integrations (SEPA / SWIFT / mobile money)
• v1.0 release — tag sémantique v4.24.0 + release notes automatiques via release.yml (issue #1722)

Operational reality is tracked in PILOTAGE.md (source of truth, FR).

• ISO 27001-ready architecture, GDPR & law 18-07 (Algeria) posture
• Automated scanning : CodeQL · TruffleHog (PR/push + weekly full-history Spec A-2) · OWASP ZAP · Composer audit · Dependency review · Semgrep
• Responsible disclosure : SECURITY.md — private reporting, 72 h ack
• 🔒 Full git-history secret purge executed 2026-08-11 — post-mortem: POST_MORTEM_PURGE_2026-08-11.md

• Contribute : CONTRIBUTING.md · Code of Conduct
• Report a bug : Issues — always reference Closes #X
• Security issue : private disclosure via SECURITY.md
• Documentation : docs/README.md (685 files, FR/EN)
• Product site : kitokoh.github.io/leopardo-hr · Demo guide : docs/DEMARRAGE_RAPIDE.md