OBSERVE
Find the signal.
Start with a scoped question, a reliable source, and a clear view of what is not being observed.
OUTPUT / scoped observation Public console / SIMULATION · GitHub DEMOVIEW / MISSION · EU / UTC · secure-by-default build surfaceevidence / demo until verified
Defensible systems.
Useful intelligence.
Gated software.
ZeroDev ships source-linked security tools, public research, and controlled software delivery. Inspect the proof here; get the software from the Store.
PUBLIC / PRIVATE Evidence is open; licensed software is delivered through the ZeroDev store .
ZD / PUBLIC EVIDENCE
--:--:-- UTCGLOBAL READINESSDEMO
DEFCON
5
nominal posture
No elevated public posture detected in the demo adapter.
Synthetic public demo adapter · checked not checked
TELEMETRY / PUBLIC VIEWDEMO SERIES
RECON FEED / SAFE SCOPESIMULATION
12:48:09PROBEedge-eu-03rate-limit held · 184 req/s
12:46:31AUTHvault-apitoken replay rejected
12:43:17SCANsandbox-net7 surfaces mapped · no escalation
01
OBSERVED
GitHub index + RSS edge monitor
02
INFERRED
Derived readiness readouts are never official alerts
03
SIMULATED
DEFCON + recon remain synthetic until verified
04
STALE / UNAVAILABLE
Warnings stay visible when a source cannot be checked
/ THE STANDARD
Make the work legible. Make the boundary explicit.
The public surface shows enough to build trust without pretending that a demo is production, a stale snapshot is live, or a private target belongs in a portfolio.
ZD / 00Evidence before theatre.
Every public claim has a source, a scope, or an honest unavailable state.
/ 00 — LIVE SURFACES
Open the software. Watch the signal.
These are the public surfaces that prove the system is running: real repository metadata, a real edge monitor, and a clear private handoff.
/ 01 — METHOD
A disciplined loop from signal to software.
The same standard runs through research, products, public demos, and private delivery: observe carefully, build usefully, verify the boundary, then gate access.
BUILD
Make it useful.
Turn the signal into a tool, workflow, or interface that a real operator can understand and use.
OUTPUT / working systemVERIFY
Prove the boundary.
Separate observation from inference, synthetic data from live data, and public proof from private detail.
OUTPUT / auditable evidenceGATE
Deliver the right access.
Use explicit entitlements, least privilege, expiry, and revocation when the work should not be public.
OUTPUT / controlled delivery/ 02 — LIVE EVIDENCE
Operations, without the theatre.
The software index and RSS monitor are public source surfaces. The status rail distinguishes source-linked, stale, demo, and unavailable states; DEFCON and recon stay marked as demo until a verified adapter is connected.
Awaiting first source check · checked not checked
LIVE verified adapter DEMO synthetic sample STALE last known snapshot UNAVAILABLE no verified source
READ THIS SURFACE How to interpret the public evidence layer4 definitions
DEFCON
A normalized public posture from the adapter. It is not a government alert or an incident declaration.
TELEMETRY
The chart is a visual sample until a verified public series is connected. Treat it as demonstration, not measurement.
RECON
The map and scan use synthetic scope only: no live targets, credentials, or exploit actions.
FRESHNESS
LIVE is checked source data; STALE is the last known snapshot; OFFLINE has no verified source; DEMO is synthetic.
01 DEFCON tracker DEMO ADAPTER
CURRENT PUBLIC LEVEL5NOMINAL
1critical2elevated3elevated4elevated5nominal
No elevated public posture detected in the demo adapter.Checked not checked
02 Recon workbench SAFE SCOPE
synthetic scope / no live targets
03 Store catalog bridge DEMO CATALOG
PUBLIC STORE METADATA
Read the design state.
Before it ships.
Read-only catalog metadata is shared from the Store. Provider links and availability remain explicit; no preview is presented as ready to ship.
DESIGNS—demo snapshot
PRINT LINKS0verified mappings
PROVIDERPENDINGsource metadata only
No public catalog records returned yet.
Catalog freshness: demo · checked not checked · provider mappings are never inferred.
Recent observations4 events / demo
| Signal | Surface | Observation | Severity |
|---|---|---|---|
| PROBE 12:48:09 | edge-eu-03 | rate-limit held · 184 req/s | low |
| AUTH 12:46:31 | vault-api | token replay rejected | medium |
| SCAN 12:43:17 | sandbox-net | 7 surfaces mapped · no escalation | low |
| SIGNAL 12:39:44 | north-atlantic | baseline variance · monitoring | high |
/ 03 — BUILD MAP
Every project has a boundary.
Cards are sourced from approved public GitHub repositories when available. Private builds explain the boundary without leaking the source.
LOCAL VIEWS
Showing 10 systems / 10 indexed
BOUNDARY KEY Public proof 07 Private access 02 Research 01rail / boundary · badge / state
01
08 / MAP TO MARKET
Ireland Map Design Lab
A research-led Ireland map studio that turns schematic layers, design maths, and original symbolic cues into garment concepts with a print-to-ship handoff.
IrelandMappingPrint-to-ship
Public scope
Interactive map layers, rounded place anchors, garment previews, design-spec export, research sources, and provider handoffs.
Private boundary
The prototype is not a legal map. Replace the hand-simplified outline with licensed source geometry and verify commercial rights before sale.
02
01 / FREE SOFTWARE
NetNewsWire Finance + Cyber RSS
A manifest-driven, privacy-conscious RSS bundle with importable profiles, an auditable source list, and a read-only live monitor for representative publisher feeds.
RSSNetNewsWireMIT
Public scope
672 configured feeds: 556 finance and 116 cybersecurity sources, with Master, iPhone Air and iPhone Lite OPML profiles plus a Cloudflare live monitor.
Private boundary
No credentials, private targets, customer data or paid feed content are exposed. RSS publishers retain their own content and feed terms.
03
02 / PUBLIC AUDIT
Apache-Tomcat Password Security Audit
A focused hardening project that turns password posture into an auditable, reviewable security surface.
JavaHardeningAudit
Public scope
Repository narrative, audit notes, and reproducible defensive techniques.
Private boundary
No customer environments, credentials, or live target data.
04
03 / GLOBAL POSTURE
DEFCON Signal Watch
A readiness and telemetry surface for turning public indicators into a calm, inspectable operator view.
Next.jsCloudflareTelemetry
Public scope
Product intent, safe demo surface, and the boundary around public telemetry.
Private boundary
Implementation, licensed artifacts, and target-specific data remain gated.
05
04 / NETWORK DEFENCE
Autosnort AFPacket Network Bridge
A network visibility component that provides a public proof point for defensive systems engineering.
LinuxAF_PACKETIDS
Public scope
Public implementation, setup notes, and defensive engineering context.
Private boundary
Deployment environments and operational telemetry are intentionally excluded.
06
05 / WEB HARDENING
HSTS Compliance / Apache + IIS
Automated HSTS configuration tooling for Apache Tomcat and IIS with audit, auto-detection, and patch modes.
HSTSApacheIIS
Public scope
OWASP-aligned configuration checks, audit output, and safe patch workflows for supported servers.
Private boundary
No customer infrastructure, credentials, or production configuration is bundled with the repository.
07
06 / DELIVERY SYSTEM
Lockbox Relay
A purchase-to-entitlement flow for shipping licensed software through verified, revocable access.
StripeGitHubR2
Public scope
Delivery model, trust boundaries, and safe entitlement concepts.
Private boundary
Payment events, customer records, and distribution artifacts stay server-side.
08
07 / SECURITY DATA
NIST NVD CVE 2.0 → XLSX Converter
A practical data pipeline for turning vulnerability intelligence into a portable, analyst-friendly workbook.
NVD 2.0PythonXLSX
Public scope
Converter source, data-shaping decisions, and analyst-facing examples.
Private boundary
No customer vulnerability data or private intelligence is bundled with the project.
09
08 / SECURITY DATA
Tenable Compliance Audit File Converter
A compliance-audit pipeline that turns Tenable audit archives into formatted XLSX and HTML review surfaces.
TenableXLSXHTML
Public scope
Audit-file parsing, structured exports, and a master HTML summary for analyst review.
Private boundary
Customer audit archives and private compliance findings stay outside the public repository.
10
09 / ATTACK SURFACE
RECON Graph
A scoped recon workbench that maps assets, observations, and confidence without exposing private targets.
Graph dataEdge jobsRBAC
Public scope
Safe interaction model and the principles behind scoped observations.
Private boundary
Private assets, target identifiers, and operational findings stay behind access control.
DEMOSynthetic public demo adapterchecked not checked0 demo records
/ 04 — PRIVATE DELIVERY
The boundary is part of the product.
Purchase or request access through a controlled path: verify the entitlement server-side, record the right scope and expiry, then deliver through the least-privilege channel.
Explore Print + repo delivery Request private access01CheckoutStripe hosted payment
02VerifySigned webhook event
03EntitleProduct + expiry recorded
04DeliverGitHub invite or R2 link