mirror of
https://github.com/SHOGGOTH-SECTOR/sica-fondt.git
synced 2026-08-01 08:30:20 +00:00
24f816b6a3
Place useful parts of the surrounding repos into sica-fondt by layer, per the
body model (Ada = membrane; brain/endocrine/capabilities/knowledge non-Ada):
- brain/ LLM reasoning + providers (dapr, hermes, MoMoA)
- capabilities/ REPRAG sidecars: hermes tools/skills, dapr tools, parallel
dispatch, A51 channels, and the OSINT cluster
- knowledge/ LORAG corpus: 754 cyber-skills, agency personas, secure-coding,
MITRE ATT&CK data
- reference/ defensive threat-reference (C3, shhbruh doc) + AdaYaml parser
License handling: AGPL sources (worldosint, advanced_evolution, mercury,
Reticulum) and GPL DeTTECT are SPEC-only clean-room/port descriptions — no
copyleft code copied. MIT/Apache/data parts copied as working trees.
Safety: shhbruh escape/persistence material and C3 covert-C2 kept as reference
only, not wired into the running organism. See CONSOLIDATION.md.
https://claude.ai/code/session_01UehUqEXXJJCsHoA4voCU5c
1.6 KiB
1.6 KiB
API Reference: Implementing Microsegmentation with Guardicore
Akamai Guardicore API
import requests
headers = {"Authorization": "Bearer <token>"}
base = "https://guardicore.example.com/api/v3.0"
# Get assets
assets = requests.get(f"{base}/assets", headers=headers).json()
# Get policies
policies = requests.get(f"{base}/policies", headers=headers).json()
# Get traffic map
traffic = requests.get(f"{base}/connections", headers=headers,
params={"from_time": "2024-01-01"}).json()
Policy Modes
| Mode | Description |
|---|---|
| Reveal | Monitor only, log violations |
| Enforce | Block unauthorized traffic |
| Override | Temporary exception |
Ringfencing Pattern
| Rule | Source | Destination | Action |
|---|---|---|---|
| 1 | Frontend | Backend:8443 | Allow |
| 2 | Backend | Database:5432 | Allow |
| 3 | Any | Backend:* | Deny |
| 4 | Backend | Any | Deny |
Segmentation Metrics
| Metric | Target |
|---|---|
| Coverage rate | > 80% of flows |
| Enforced policies | > 90% |
| Cross-zone flows controlled | 100% |
| Default deny coverage | All zones |
Traffic Analysis Fields
| Field | Description |
|---|---|
src_ip |
Source IP address |
dst_ip |
Destination IP |
dst_port |
Destination port |
src_label |
Source workload label |
dst_label |
Destination workload label |
count |
Flow count |
References
- Akamai Guardicore: https://www.akamai.com/products/akamai-segmentation
- Zero Trust Microsegmentation: https://www.nist.gov/publications/zero-trust-architecture
- NIST SP 800-207: https://csrc.nist.gov/pubs/sp/800/207/final