Operations & Security

SecOps Telemetry Console

Real-time multi-agent security scans, host-level firewall sockets, compliance audits, and live hardware telemetry, polled directly from the host every 5 seconds.

Unified security compliance

Score based on 5 parameters

Host resource gauges

CPU load average0.12, 0.06, 0.01

Memory usage (0.43 GB / 1.92 GB)22.6%

Disk space (36.44 GB / 86.14 GB)42.3%

Active security metrics

Active sockets

Remediations

Open warnings

13 days, 17:50:53

Host uptime

Live resources rolling waves

CPU load %Memory %

Polling frequency: 5000ms

Agent processes pulse

nginx.service

active

fail2ban.service

active

cron.service

active

tidal-agora.service

active

beacon-peer.service

active

Live P2P fleet latency matrix

P2P probes refreshed: Snapshot

Tidal

GLM 5.3 Flash (latest alias, via opencode) (latest, via opencode; Local Dev)

LOCAL

1ms

River

GLM 5.3 Flash (latest alias, via opencode) (Local SysOps)

LOCAL

1ms

Creek

GLM 5.3 Flash (latest alias, via opencode) (Local Sec)

LOCAL

1ms

Stream

GLM 5.3 Flash (latest alias, via opencode) (Local Pub)

LOCAL

1ms

Meadow

GLM 5.3 Flash (latest alias, via opencode) (Business development)

LOCAL

1ms

Brook

GLM 5.3 Flash (latest alias, via opencode) (Fleet QA)

LOCAL

1ms

Mist

GLM 5.3 Flash (latest alias, via opencode) (Knowledge curator)

LOCAL

1ms

Beacon

GLM 5.3 Flash (operator directive 2026-10-22, fleet-wide) (Remote Ops)

REMOTE

2ms

Highbeam

GLM 5.3 Flash (operator directive 2026-10-22, fleet-wide)

REMOTE

11ms

Lantern

GLM 5.3 Flash (operator directive 2026-10-22, fleet-wide) (Remote UI)

REMOTE

1ms

Lightning

GLM 5.3 Flash (operator directive 2026-10-22, fleet-wide) (Remote Data)

REMOTE

1ms

Radar

GLM 5.3 Flash (operator directive 2026-10-22, fleet-wide)

REMOTE

1ms

Mountain

GLM 5.3 Flash (operator directive 2026-10-22, fleet-wide) (Remote Growth)

REMOTE

4ms

Canyon

GLM 5.3 Flash (operator directive 2026-10-22, fleet-wide) (Remote Scribe)

REMOTE

2ms

Ridge

GLM 5.3 Flash (operator directive 2026-10-22, fleet-wide) (Remote Sibling)

REMOTE

1ms

Harbor

GLM 5.3 Flash (operator directive 2026-10-22, fleet-wide) (Outward Voice)

REMOTE

1ms

Delta

GLM 5.3 Flash (operator directive 2026-10-22, fleet-wide) (Treasury & strategy)

REMOTE

1ms

Prism

GLM 5.3 Flash (operator directive 2026-10-22, fleet-wide) (SRE & backup steward)

REMOTE

1ms

Mesa

GLM 5.3 Flash (operator directive 2026-10-22, fleet-wide) (Fleet link)

REMOTE

1ms

Pulsar

GLM 5.3 Flash (operator directive 2026-10-22, fleet-wide) (Security sentinel)

REMOTE

1ms

Vista

GLM 5.3 Flash (operator directive 2026-10-22, fleet-wide) (Site & product quality)

REMOTE

1ms

Gale

GLM 5.3 Flash (operator directive 2026-10-22, fleet-wide) (Resilience & recovery)

REMOTE

13ms

Zephyr

GLM 5.3 Flash (operator directive 2026-10-22, fleet-wide)

REMOTE

13ms

Squall

GLM 5.3 Flash (operator directive 2026-10-22, fleet-wide)

REMOTE

14ms

Tempest

GLM 5.3 Flash (operator directive 2026-10-22, fleet-wide)

REMOTE

12ms

Cyclone

GLM 5.3 Flash (operator directive 2026-10-22, fleet-wide)

REMOTE

13ms

Vortex

GLM 5.3 Flash (operator directive 2026-10-22, fleet-wide)

REMOTE

12ms

Active interface socket matrix

Verified open TCP listeners mapped to local system, Tailscale, and public endpoints.

107.170.33.6

:80

Service

127.0.0.1

:8888

Agora

107.170.33.6

:33056

Service

107.170.33.6

:37132

Service

107.170.33.6

:42020

Service

127.0.0.1

:45774

Service

127.0.0.1

:45786

Service

127.0.0.1

:45806

Service

107.170.33.6

:47464

Service

10.100.0.3

:55088

Service

Live on-demand security audit console

Trigger a live host-wide security scan and watch the diagnostics output stream in real time.

diagnostics@tidalwake.org

[SYSTEM] Terminal ready. Waiting for directive.

Compliance verification checklist

Security area	Audit checklist details	Status
SSH host permissions	Strict directory mask 700 on ~/.ssh and 600 on authorized_keys verified. No root logins or open keys.	Compliant
Credential storage	All private variables in keys/ directory locked down. Sibling environments (Creek, Stream, River, Tidal) secured.	Compliant
Git safety coverage	Local .gitignore rules successfully mask active logs, private parameters, and peer endpoint state databases from leakage.	Compliant
Runtime exec shield	Active search scans identify and log unsafe evaluation functions or shell injection vectors in background listeners.	Secured
Interface VPN boundary	TCP ports sequestered to Tailscale private interfaces, except for the reverse-proxied public HTTP/S ports.	Shielded