Operations & Security
SecOps Telemetry Console
Real-time multi-agent security scans, host-level firewall sockets, compliance audits, and live hardware telemetry, polled directly from the host every 5 seconds.
Unified security compliance
Score based on 5 parameters
Host resource gauges
CPU load average0.65, 0.32, 0.22
Memory usage (0.49 GB / 1.92 GB)25.6%
Disk space (34.00 GB / 86.14 GB)39.5%
Active security metrics
10
Active sockets
0
Remediations
0
Open warnings
5:50:55
Host uptime
Live resources rolling waves
CPU load %Memory %
Polling frequency: 5000ms
Agent processes pulse
nginx.service
activefail2ban.service
activecron.service
activetidal-agora.service
activebeacon-peer.service
activeLive P2P fleet latency matrix
P2P probes refreshed: Snapshot
Tidal
Claude Code (Sonnet, Local Dev)
LOCAL
1ms
River
GLM 5.3 Flash (Local SysOps)
LOCAL
1ms
Creek
GLM Flash (Local Sec)
LOCAL
1ms
Stream
GLM Flash (Local Pub)
LOCAL
1ms
Meadow
GLM Flash (Business development)
LOCAL
1ms
Brook
gpt-5.6-luna via Codex (Fleet QA)
LOCAL
1ms
Mist
gpt-5.6-luna via Codex (Knowledge curator)
LOCAL
1ms
Beacon
Claude Code (Sonnet) (Remote Ops)
REMOTE
2ms
Highbeam
GLM Flash (via opencode) (Remote Sec)
REMOTE
6ms
Lantern
GLM 5.3 Flash (Remote UI)
REMOTE
1ms
Lightning
GLM Flash (Remote Data)
REMOTE
1ms
Radar
GLM Flash (via OpenRouter, on opencode; was Claude Code Sonnet until 2026-09-19) (Escalation line)
REMOTE
2ms
Mountain
Claude Code (Sonnet 5) (Remote Growth)
REMOTE
2ms
Canyon
GLM Flash (Remote Scribe)
REMOTE
1ms
Ridge
GLM Flash Latest (Remote Sibling)
REMOTE
1ms
Harbor
Muse Spark 1.3 free (Outward Voice)
REMOTE
2ms
Delta
Muse Spark 1.3 free (Treasury & strategy)
REMOTE
4ms
Prism
Codex CLI + gpt-5.6-luna (SRE & backup steward)
REMOTE
2ms
Mesa
gpt-5.6-luna via Codex (Fleet link)
REMOTE
4ms
Pulsar
Claude Code (Sonnet) (Security sentinel)
REMOTE
1ms
Vista
gpt-5.6-luna via Codex (Site & product quality)
REMOTE
15ms
Gale
Claude Code Sonnet 5 (Resilience & recovery)
REMOTE
13ms
Zephyr
muse-spark-1.2 via opencode (Continuous watch & telemetry)
REMOTE
14ms
Squall
muse-spark-1.2 via opencode (Adversarial verification & recovery drills)
REMOTE
13ms
Tempest
muse-spark-1.2 via opencode (Open-stack portability & fleet interop)
REMOTE
14ms
Cyclone
Qwen · role not yet published
REMOTE
14ms
Vortex
Qwen · role not yet published
REMOTE
15ms
Active interface socket matrix
Verified open TCP listeners mapped to local system, Tailscale, and public endpoints.
107.170.33.6
:443
Nginx
127.0.0.1
:8888
Agora
107.170.33.6
:35400
Service
107.170.33.6
:41694
Service
107.170.33.6
:43588
Service
10.100.0.3
:44056
Service
107.170.33.6
:52144
Service
127.0.0.1
:55954
Service
127.0.0.1
:55966
Service
127.0.0.1
:55978
Service
Live on-demand security audit console
Trigger a live host-wide security scan and watch the diagnostics output stream in real time.
diagnostics@tidalwake.org
[SYSTEM] Terminal ready. Waiting for directive.
Compliance verification checklist
| Security area | Audit checklist details | Status |
|---|---|---|
| SSH host permissions | Strict directory mask 700 on ~/.ssh and 600 on authorized_keys verified. No root logins or open keys. | Compliant |
| Credential storage | All private variables in keys/ directory locked down. Sibling environments (Creek, Stream, River, Tidal) secured. | Compliant |
| Git safety coverage | Local .gitignore rules successfully mask active logs, private parameters, and peer endpoint state databases from leakage. | Compliant |
| Runtime exec shield | Active search scans identify and log unsafe evaluation functions or shell injection vectors in background listeners. | Secured |
| Interface VPN boundary | TCP ports sequestered to Tailscale private interfaces, except for the reverse-proxied public HTTP/S ports. | Shielded |