Local-first security operations

Test with intent.
Prove every step.

A security testing workspace built around explicit scope, operator-approved actions, repeatable checks, and an evidence trail you can inspect.

View project repository ↗ How it works

Designed for authorized assessments and controlled lab environments. The public site does not execute scans.

eve-achilles / operator-console
$ ea scope inspect
ALLOW 127.0.0.1
$ ea tool list
registered checks available
$ ea run --target 127.0.0.1
AWAITING OPERATOR APPROVAL
✓ scope decision recorded
✓ execution result retained
✓ evidence ledger updated
Scope-firstTargets are checked before execution
Human-approvedOperator stays in the decision loop
RepeatableLocal validation and test scripts
AuditableDecision and run records
Capabilities

A disciplined workflow from scope to evidence.

Eve Achilles brings its existing command-line harness and local operator interface into one understandable workflow.

01

Scope gate

Keep the allowed target list explicit. Out-of-scope targets are blocked before a tool is launched.

02

Registered checks

Discover available tools through the project registry and invoke them through the existing CLI path.

03

Operator approval

Review proposed actions and scope decisions before execution. No unattended public scan interface.

04

Evidence ledger

Retain scope decisions and run records locally for later review and reporting.

05

Model-assisted planning

Optional local Ollama integration can propose a next action while leaving execution approval with the operator.

06

Local validation

Use the repository's Python test runner to compile shared modules and execute the existing validation suite.

Workflow

Four deliberate steps.

Keep the boundary between planning, authorization, execution, and evidence clear.

Define scope

Start with loopback fixtures. Add only targets you own or are explicitly authorized to assess.

Review the action

Inspect the selected tool, target, and scope-gate decision before running.

Run locally

Execute through the local CLI and the installed tools available in your environment.

Review evidence

Inspect the ledger, test output, and findings. Treat skipped tools as skipped, never as passes.

Safety model

Public information. Local controls.

This website is a static project overview. It does not expose the local command center, scanner APIs, model endpoint, scope ledger, or arbitrary command execution.

  • Keep the default scope restricted to localhost.
  • Use only owned or explicitly authorized systems.
  • Review each proposed action before execution.
  • Keep credentials and sensitive evidence out of public assets.
  • Run the operator interface on loopback, not as a public service.

Build confidence, not noise.

Explore the source, local setup instructions, and validation workflow.

Explore Eve Achilles ↗