Zum Hauptinhalt springen
Echtzeit-Radar & Feeds
Alle RSS Feeds ➔
👥 Community & Social
••••••••
Sichere ProgrammierungI built a tool that makes images bigger, not smaller – here's why(25.09.2026 um 05:56 Uhr)
••••••••••
Sichere ProgrammierungI built a tool that makes images bigger, not smaller – here's why(25.09.2026 um 05:56 Uhr)
••
Intelligence View
⚡ tsecurity.de Intelligence

Dukaan Digital: Teaching an AI to Read a Kirana Shop So Small Stores Can Compete on ONDC

The problem nobody built for Walk into any Indian neighborhood and you'll find one within 200 meters: a kirana store. A shopkeeper who knows your family's grocery list better than you do, sells rice by the fistful, and has been running…

0
↗ Quelle (dev.to)
Reagiere als Erste:r — dein Feedback zählt!

The problem nobody built for



Walk into any Indian neighborhood and you'll find one within 200 meters: a kirana store. A shopkeeper who knows your family's grocery list better than you do, sells rice by the fistful, and has been running the same ledger-and-memory system for twenty years.



Now walk through the Open Network for Digital Commerce (ONDC) — India's answer to letting any seller, not just Amazon or Blinkit, plug into digital commerce. In theory, this is exactly the lifeline kirana stores need to compete with 10-minute delivery apps. In practice, almost none of them are on it.



Why? Because getting listed means digitizing a catalog — hundreds of SKUs, prices, categories, descriptions — and typing all of that into a form is a full-time job the shopkeeper doesn't have time for. Half their inventory doesn't even have a barcode: loose grains, regional snacks, hand-weighed spices. There's no "Add to Catalog" button for a kilo of unbranded toor dal.



That gap — between wanting to go digital and having the hours to do it — is the actual bottleneck. Not technology access. Not willingness. Time.



The idea: let the camera do the typing



The insight behind Dukaan Digital is simple: a kirana shopkeeper already produces two documents every single day without thinking about it — a wholesale distributor's invoice, and a shelf full of visible stock. Both are already a complete inventory list. They just live in the wrong format.



So instead of asking anyone to type anything, the app asks for a photo.





  1. Snap — a photo of a messy, possibly handwritten distributor invoice, or a photo of a crowded shelf.


  2. Extract — Gemini 1.5 Flash reads the image and returns a structured list: product name, category, brand, quantity, unit, price, and whether it's a loose/unbranded item.


  3. Describe — for the items that don't have a listing anywhere on the internet (loose grains, local snacks, regional produce), the model generates a short, catchy description on the spot, because nobody else is going to write one.


  4. Review — extracted items show up as editable tags the shopkeeper can fix in ten seconds.


  5. Export — one tap produces an ONDC-shaped catalog JSON, ready to feed into a seller-app integration.



What used to be an afternoon of data entry becomes a five-minute phone break between customers.



Under the hood



The stack is deliberately unglamorous, because the hard part of this problem isn't the architecture — it's the extraction accuracy on genuinely messy, real-world input.





  • Vision & extraction: Gemini 1.5 Flash, prompted to return strict JSON (name, category, brand, quantity, unit, price, is_loose_item, description, confidence) — no prose, no markdown fences to strip.


  • Validation: every model response gets checked against a Pydantic schema before it's allowed near a database. Malformed individual items get silently dropped instead of failing the whole scan — a photo with 40 products shouldn't fail because one line was unreadable.


  • Backend: FastAPI, five routes — scan, save, list, delete, export.


  • Storage: SQLite. A single-store prototype doesn't need more than that yet.


  • ONDC mapping: the saved catalog gets shaped into something that mirrors an ONDC on_search payload — bpp/providers → items[], each with a descriptor, price, and quantity block.



The part I spent the most time on



Not the API calls — the prompt. Getting a vision model to reliably parse a handwritten invoice, in someone else's handwriting, with abbreviations and crossed-out quantities, is a genuinely different problem from reading a printed receipt. The prompt has to explicitly tell the model to fix spelling, expand abbreviations, and flag its own confidence — because a shopkeeper reviewing extracted data needs to know at a glance which line to double-check, not just trust everything blindly.



The other deliberate choice was making loose/unbranded items a first-class concept instead of an edge case. A bag of Lay's has a barcode, a price, and a Wikipedia-adjacent amount of existing metadata. A kilo of local makhana from the shop two streets over has none of that — and that's exactly the inventory ONDC listings tend to ignore, because it's the hardest to catalog by hand. If this tool only worked for branded FMCG goods, it would be solving the easy 60% of the problem.



What it looks like in practice



The interface leans into what a kirana shop actually looks like rather than defaulting to a generic dashboard: a shop-signboard header, a ledger-paper background, and — the part that gets the best reaction in demos — every scanned item shows up as a hand-tag clipped to a string, slightly rotated, punch-hole and all, exactly like the price tags already hanging in these stores. The shopkeeper isn't learning a new mental model. They're looking at a digital version of something they already touch every day.



What's still rough



This is a working prototype, not a finished product, and it's worth being honest about the gaps:




  • The ONDC export mirrors the shape of a real catalog payload but hasn't been validated against the official protocol headers and versioning — that's the natural next step once there's an actual seller-app sandbox to test against.

  • Extraction accuracy is only as good as the photo. Low light or extreme clutter still needs a retake.

  • No multi-store or auth support yet — this is built for one shopkeeper at a time.



Why this matters beyond one shop



ONDC's entire premise is that small sellers shouldn't need a tech team to compete with platforms that have one. If digitization keeps requiring manual data entry, the network ends up onboarding the shops that were already digital-first — which defeats the point. A camera-first cataloguing flow isn't a nice-to-have feature; it's the difference between ONDC reaching the kirana stores it was actually built for, or reaching only the ones that didn't need the help in the first place.






Built as a submission for Gen AI Academy APAC — vision-based product cataloguing for ONDC, using Gemini 1.5 Flash for extraction and FastAPI for the backend. Code and setup instructions available on request.

1. Sofort-Triage & Abwehrmaßnahmen

SOC Incident Playbook: Remote Code Execution (RCE) Defense
Syntax validiert (0 Fehler)
title: Detect Exploitation - Dukaan Digital: Teaching an AI to Read a Kirana Shop So Small Stores Can Compete on ONDC
id: 9bc3403b-ea70-4ed8-9fb7-e2206d0986f0
status: experimental
description: Automatisch generierte SIEM-Erkennungsregel basierend auf CTI Intelligence
references:
  - https://tsecurity.de/
author: iShareStuff CTI Automated Detection Engine
date: 2026-09-25
logsource:
  category: network_connection
  product: any
detection:
  selection:
      CommandLine|contains:
        - 'exploit'
  condition: selection
falsepositives:
  - Legitime administrative Zugriffe oder Penetrationstests
level: high
tags:
  - attack.initial_access
Syntax validiert (0 Fehler)
rule CTI_Threat_Indicator {
    meta:
        author = "iShareStuff CTI Automated Detection Engine"
        date = "2026-09-25"
        description = "YARA Signature for "
    strings:
        $str = "Dukaan Digital: Teaching an AI" ascii wide
    condition:
        any of them
}
Syntax validiert (0 Fehler)
index=security sourcetype IN ("cisco:asa", "pan:traffic", "zeek_conn", "suricata", "WinEventLog:Security")
("Dukaan Digital Teaching an AI to Read a ")
| stats count earliest(_time) as first_seen latest(_time) as last_seen by src_ip, dest_ip, dest_host, signature
| eval first_seen=strftime(first_seen, "%Y-%m-%d %H:%M:%S"), last_seen=strftime(last_seen, "%Y-%m-%d %H:%M:%S")
| sort - count
Syntax validiert (0 Fehler)
message: "*Dukaan Digital Teaching an AI to Read a *"
Syntax validiert (0 Fehler)
CommonSecurityLog
| where Message has "Dukaan Digital Teaching an AI to Read a "
| summarize EventCount = count(), FirstSeen = min(TimeGenerated), LastSeen = max(TimeGenerated) by SourceIP, DestinationIP, DestinationPort, Activity
| extend DetectionRule = "iShareStuff-CTI-Compiled"
| sort by EventCount desc

2. Cyber Threat Intelligence & Forensik

CTI Threat Relationship Graph2 Knoten / 1 Relationen
CVE / Incident Software MITRE ATT&CK CWE Weakness IoC
🎯
MITRE ATT&CK Matrix Navigator 14 Taktiken
Reconnaissance
-
Resource Development
-
Initial Access
Execution
Persistence
-
Privilege Escalation
Defense Evasion
Credential Access
-
Discovery
-
Lateral Movement
-
Collection
-
Command and Control
Exfiltration
-
Impact
tsecurity.de Cognitive Threat RAG
Fokus-Vektor:

Kognitive Analyse für identifizierte Bedrohung: Erhöhte Bedrohungslage im Bereich Dukaan Digital: Teaching an AI to Read a.... Basierend auf 368k Vektor-Korrelationen werden sofortige Isolationsmaßnahmen für betroffene Endpunkte empfohlen.

🛡️ Angriffsfläche & Exposure

Netzwerk/Remote-Zugriff ohne Vorauthentifizierung möglich.

⚡ Empfohlene Sofortmaßnahmen
  • 1. Perimeter-Inspektion: Relevante Portfreigaben und exponierte Endpunkte unverzüglich scannen.
  • 2. Patch-Applikation: Hersteller-Hotfix einspielen oder betroffene Daemons in isolierte DMZ-Segmente überführen.
  • 3. Telemetrie & EDR-Alerts: Prozessaufrufe und Child-Processes auf anomale Shell-Spawns überwachen.
🔗 Semantisch verwandte Zero-Days MariaDB 11.7 VEC
Ähnliche Beiträge
🔍 Verwandte News

Auch interessante Nachrichten Dukaan Digital: Teaching an AI to Read a Kirana Shop So Small Stores Can Compete on ONDC

Thematisch verwandte Begriffe: Dukaan, Digital, Teaching, Read · 6 Treffer

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Zum Aktualisieren ziehen
ZERO-DAY CVE-2026-87722 | Uncontrolled Resource Consumption (CWE-400 / CWE-1333) in regex search q…
Advisory →
tsecurity.de Icon
Offline-Lesen, Eilmeldungen & 0ms Ladezeit

Installiere tsecurity.de direkt auf deinen Home-Bildschirm für das ultimative Vollbild-Magazinerlebnis ohne Browser-Leisten.

Nächster Beitrag