luna/enodia-sentinal
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Add HTTPS management console and response planning

Browse source
This commit is contained in:
Luna 2026-06-12 02:39:53 -07:00
parent a56d72edd6
commit a7129e5666
16 changed files with 927 additions and 160 deletions
Download patch file Download diff file Expand all files Collapse all files

5
docs/THREAT_MODEL.md
View file

@ -75,7 +75,8 @@ Sentinel assumes:
package signature policy.
- `pacman -Qkk` trusts the local package database; it is useful but not an
independent root of trust.
- The dashboard is read-only by design; it is not a remote response console.
- The dashboard is read-only by design; it can display dry-run response plans
but does not execute containment commands.
- The current product does not perform automatic containment.
## Security Controls Already Present
@ -90,7 +91,7 @@ Sentinel assumes:
| Signed-package verification | Checks files against package manifests independent of the local DB. |
| Rootcheck | Finds common hiding artifacts by comparing independent views. |
| Heartbeat + watchdog | Makes a silent sensor observable from another machine. |
| Read-only dashboard | Exposes evidence without adding a remote write path. |
| HTTPS read-only dashboard | Exposes evidence and dry-run plans without adding a remote write path. |
## Response Safety