mirror of
https://github.com/SHOGGOTH-SECTOR/sica-fondt.git
synced 2026-08-01 08:30:20 +00:00
Place useful parts of the surrounding repos into sica-fondt by layer, per the
body model (Ada = membrane; brain/endocrine/capabilities/knowledge non-Ada):
- brain/ LLM reasoning + providers (dapr, hermes, MoMoA)
- capabilities/ REPRAG sidecars: hermes tools/skills, dapr tools, parallel
dispatch, A51 channels, and the OSINT cluster
- knowledge/ LORAG corpus: 754 cyber-skills, agency personas, secure-coding,
MITRE ATT&CK data
- reference/ defensive threat-reference (C3, shhbruh doc) + AdaYaml parser
License handling: AGPL sources (worldosint, advanced_evolution, mercury,
Reticulum) and GPL DeTTECT are SPEC-only clean-room/port descriptions — no
copyleft code copied. MIT/Apache/data parts copied as working trees.
Safety: shhbruh escape/persistence material and C3 covert-C2 kept as reference
only, not wired into the running organism. See CONSOLIDATION.md.
https://claude.ai/code/session_01UehUqEXXJJCsHoA4voCU5c
1.6 KiB
1.6 KiB
API Reference: Implementing API Threat Protection with Apigee
JSONThreatProtection Policy
<JSONThreatProtection name="JSON-Threat">
<ObjectEntryCount>25</ObjectEntryCount>
<ArrayElementCount>100</ArrayElementCount>
<ContainerDepth>5</ContainerDepth>
<StringValueLength>500</StringValueLength>
<Source>request</Source>
</JSONThreatProtection>
SpikeArrest Policy
<SpikeArrest name="Spike-Arrest">
<Rate>30ps</Rate>
<Identifier ref="request.header.x-api-key"/>
</SpikeArrest>
RegularExpressionProtection
<RegularExpressionProtection name="Regex-Protect">
<Source>request</Source>
<QueryParam name="*">
<Pattern>[\s]*((delete)|(exec)|(drop\s*table))</Pattern>
</QueryParam>
</RegularExpressionProtection>
Apigee Management API
# Deploy proxy revision
curl -X POST "https://apigee.googleapis.com/v1/organizations/{org}/environments/{env}/apis/{api}/revisions/{rev}/deployments" \
-H "Authorization: Bearer $(gcloud auth print-access-token)"
# List deployed proxies
curl "https://apigee.googleapis.com/v1/organizations/{org}/apis" \
-H "Authorization: Bearer $(gcloud auth print-access-token)"
Recommended Policy Limits
| Setting | Recommended | Description |
|---|---|---|
| ContainerDepth | 5 | JSON nesting depth |
| StringValueLength | 500 | Max string value |
| ObjectEntryCount | 25 | Max object keys |
| SpikeArrest Rate | 30ps | Requests per second |
References
- Apigee Policies: https://cloud.google.com/apigee/docs/api-platform/reference/policies
- Apigee Security: https://cloud.google.com/apigee/docs/api-platform/security