Demo mode — every action is simulated in-browser against a self-contained mock. Set NEXT_PUBLIC_API_BASE to point the same client at the live SS-26 / SS-01 / SS-10 APIs.

Threat detection

Findings from the Zeek mesh chaos-rig auditor, detections-as-code and threat intel — with dual-control containment (SS-28).

2High

2Medium

2Investigating

3Closed

Containment is dual-control — created, approved, then executed. Every action is hash-chained to the SS-06 audit index.