self-review 2026-08-06: a streak of nothing is not a streak; surface hebb gauges
str_eq("", "") is true, so an auto-term extractor that kept FAILING reported a
rising auto_term_streak. The signal meaning "fixated on one term" and the
signal meaning "producing no term at all" were the same number — opposite
failures needing opposite responses. Observed live as
{"auto_term":"","auto_term_streak":3}. Same class of bug already fixed for
wm_top0_streak on 2026-07-31; auto_term was missed then.
Empty now reads 0, and the empty run is counted on its own axis
(auto_term_empty_streak) so extractor failure is visible rather than disguised
as health.
Also surfaces the new runtime gauges in the heartbeat: hebb_warm, hebb_max,
hebb_links (is the graph learning any structure at all?) and dup_wm_global.
This commit is contained in:
+47
-2
@@ -314,6 +314,34 @@ fn emit_heartbeat() -> Void {
|
||||
// here so the stuck-term failure is visible in the heartbeat stream too.
|
||||
let hb_ats_raw: String = state_get("soul.auto_term_streak")
|
||||
let hb_ats: Int = if str_eq(hb_ats_raw, "") { 0 } else { str_to_int(hb_ats_raw) }
|
||||
// auto_term_empty_streak (2026-08-06): consecutive scans producing NO auto
|
||||
// term. Split out because str_eq("","") made the two failures indist-
|
||||
// inguishable — see the comment at the streak computation in
|
||||
// proactive_curiosity. Nonzero and climbing = extractor broken, not stuck.
|
||||
let hb_ate_raw: String = state_get("soul.auto_term_empty_streak")
|
||||
let hb_ate: Int = if str_eq(hb_ate_raw, "") { 0 } else { str_to_int(hb_ate_raw) }
|
||||
// Hebbian eligibility gauges (2026-08-06 self-review). The graph learned
|
||||
// ZERO structure in its first 23h of uptime: hebb_max 0.000799 against a
|
||||
// 0.15 consolidation threshold, hebbian-associate edges 0, and the
|
||||
// awareness loop calls engram_connect nowhere — so Hebbian consolidation
|
||||
// is the only self-structuring path there is, and it was inert.
|
||||
// hebb_warm — nodes with a live eligibility trace but NOT co-resident in
|
||||
// WM: exactly the population the old simultaneity rule threw
|
||||
// away. 0 forever ⇒ traces never arm and this bought nothing.
|
||||
// hebb_max — strongest single association. The number that has to move.
|
||||
// hebb_links— consolidated edges. The outcome that has to become nonzero.
|
||||
let hebb_warm_raw: String = json_get(act_stats, "hebb_warm")
|
||||
let hebb_warm: String = if str_eq(hebb_warm_raw, "") { "-1" } else { hebb_warm_raw }
|
||||
let hebb_max_raw: String = json_get(act_stats, "hebb_max")
|
||||
let hebb_max: String = if str_eq(hebb_max_raw, "") { "-1" } else { hebb_max_raw }
|
||||
let hebb_links_raw: String = json_get(act_stats, "hebb_links")
|
||||
let hebb_links: String = if str_eq(hebb_links_raw, "") { "-1" } else { hebb_links_raw }
|
||||
// dup_wm_global (2026-08-06): redundant WM residents that arrived via the
|
||||
// carry-over path, which Pass 3½ structurally could not see. Confirmed live
|
||||
// by a census that caught two byte-identical copies of one 3,193-char
|
||||
// document both holding slots.
|
||||
let dup_wm_g_raw: String = json_get(act_stats, "dup_wm_global")
|
||||
let dup_wm_g: String = if str_eq(dup_wm_g_raw, "") { "-1" } else { dup_wm_g_raw }
|
||||
let act_brk_raw: String = json_get(act_stats, "embed_breaker_open")
|
||||
let act_brk: String = if str_eq(act_brk_raw, "") { "-1" } else { act_brk_raw }
|
||||
// ctx_cos (2026-07-29 self-review): cos(query, context centroid) at the
|
||||
@@ -337,7 +365,7 @@ fn emit_heartbeat() -> Void {
|
||||
let dup_seeds: String = if str_eq(dup_seeds_raw, "") { "-1" } else { dup_seeds_raw }
|
||||
let dup_wm_raw: String = json_get(act_stats, "dup_wm")
|
||||
let dup_wm: String = if str_eq(dup_wm_raw, "") { "-1" } else { dup_wm_raw }
|
||||
let payload: String = "{\"event\":\"heartbeat\",\"pulse\":" + pulse + ",\"tick\":" + pulse + ",\"boot\":" + boot + ",\"idle\":" + idle + ",\"idle_ms\":" + int_to_str(idle_ms) + ",\"node_count\":" + int_to_str(nc) + ",\"edge_count\":" + int_to_str(ec) + ",\"node_delta\":" + int_to_str(node_delta) + ",\"edge_delta\":" + int_to_str(edge_delta) + ",\"wm_active\":" + int_to_str(wmc) + ",\"wm_delta\":" + int_to_str(wm_delta) + ",\"wm_saturated\":" + int_to_str(wm_sat) + ",\"wm_top0_streak\":" + int_to_str(t0streak) + ",\"wm_churn\":" + int_to_str(wm_churn) + ",\"wm_top0_wm\":" + wm_top0_wm + ",\"sync_added_total\":" + sat_str + ",\"sync_age_ms\":" + int_to_str(sync_age) + ",\"wm_avg_weight\":" + wm_avg_str + ",\"wm_top\":" + wm_top + ",\"ts\":" + int_to_str(ts) + ",\"uptime_ms\":" + int_to_str(up_ms) + ",\"uptime\":\"" + up_human + "\",\"embed_ok\":" + int_to_str(emb_ok) + ",\"embed_backfilled\":" + bf_done + ",\"embed_count\":" + bf_total + ",\"embed_eligible\":" + embed_elig + ",\"wm_evicted\":" + act_evict + ",\"wm_evicted_delta\":" + int_to_str(evict_delta) + ",\"breakthroughs\":" + act_bt + ",\"breakthroughs_delta\":" + int_to_str(bt_delta) + ",\"auto_term_streak\":" + int_to_str(hb_ats) + ",\"embed_breaker_open\":" + act_brk + ",\"ctx_cos\":" + ctx_cos + ",\"dup_seeds\":" + dup_seeds + ",\"dup_wm\":" + dup_wm + ",\"ise_fail\":" + fail_str + "}"
|
||||
let payload: String = "{\"event\":\"heartbeat\",\"pulse\":" + pulse + ",\"tick\":" + pulse + ",\"boot\":" + boot + ",\"idle\":" + idle + ",\"idle_ms\":" + int_to_str(idle_ms) + ",\"node_count\":" + int_to_str(nc) + ",\"edge_count\":" + int_to_str(ec) + ",\"node_delta\":" + int_to_str(node_delta) + ",\"edge_delta\":" + int_to_str(edge_delta) + ",\"wm_active\":" + int_to_str(wmc) + ",\"wm_delta\":" + int_to_str(wm_delta) + ",\"wm_saturated\":" + int_to_str(wm_sat) + ",\"wm_top0_streak\":" + int_to_str(t0streak) + ",\"wm_churn\":" + int_to_str(wm_churn) + ",\"wm_top0_wm\":" + wm_top0_wm + ",\"sync_added_total\":" + sat_str + ",\"sync_age_ms\":" + int_to_str(sync_age) + ",\"wm_avg_weight\":" + wm_avg_str + ",\"wm_top\":" + wm_top + ",\"ts\":" + int_to_str(ts) + ",\"uptime_ms\":" + int_to_str(up_ms) + ",\"uptime\":\"" + up_human + "\",\"embed_ok\":" + int_to_str(emb_ok) + ",\"embed_backfilled\":" + bf_done + ",\"embed_count\":" + bf_total + ",\"embed_eligible\":" + embed_elig + ",\"wm_evicted\":" + act_evict + ",\"wm_evicted_delta\":" + int_to_str(evict_delta) + ",\"breakthroughs\":" + act_bt + ",\"breakthroughs_delta\":" + int_to_str(bt_delta) + ",\"auto_term_streak\":" + int_to_str(hb_ats) + ",\"auto_term_empty_streak\":" + int_to_str(hb_ate) + ",\"embed_breaker_open\":" + act_brk + ",\"ctx_cos\":" + ctx_cos + ",\"dup_seeds\":" + dup_seeds + ",\"dup_wm\":" + dup_wm + ",\"dup_wm_global\":" + dup_wm_g + ",\"hebb_warm\":" + hebb_warm + ",\"hebb_max\":" + hebb_max + ",\"hebb_links\":" + hebb_links + ",\"ise_fail\":" + fail_str + "}"
|
||||
ise_post(payload)
|
||||
}
|
||||
|
||||
@@ -620,9 +648,25 @@ fn proactive_curiosity() -> Bool {
|
||||
let prev_auto: String = state_get("soul.prev_auto_term")
|
||||
let atstreak_raw: String = state_get("soul.auto_term_streak")
|
||||
let atstreak_prev: Int = if str_eq(atstreak_raw, "") { 0 } else { str_to_int(atstreak_raw) }
|
||||
let atstreak: Int = if str_eq(auto_term, prev_auto) { atstreak_prev + 1 } else { 1 }
|
||||
// A streak of nothing is not a streak (2026-08-06 self-review).
|
||||
// str_eq("", "") is true, so an auto-term extractor that kept FAILING
|
||||
// reported a rising auto_term_streak — the same signal that means
|
||||
// "fixated on one term" also meant "producing no term at all", which are
|
||||
// opposite failures needing opposite responses. Observed live in the ISE
|
||||
// stream as {"auto_term":"","auto_term_streak":3}. This is the same class
|
||||
// of bug already fixed for wm_top0_streak; auto_term was missed then.
|
||||
// Empty now reads 0, and the empty run is counted on its own axis so the
|
||||
// extractor failing is visible rather than disguised as health.
|
||||
let is_empty: Bool = str_eq(auto_term, "")
|
||||
let atstreak: Int = if is_empty { 0 } else {
|
||||
if str_eq(auto_term, prev_auto) { atstreak_prev + 1 } else { 1 }
|
||||
}
|
||||
let atempty_raw: String = state_get("soul.auto_term_empty_streak")
|
||||
let atempty_prev: Int = if str_eq(atempty_raw, "") { 0 } else { str_to_int(atempty_raw) }
|
||||
let atempty: Int = if is_empty { atempty_prev + 1 } else { 0 }
|
||||
state_set("soul.prev_auto_term", auto_term)
|
||||
state_set("soul.auto_term_streak", int_to_str(atstreak))
|
||||
state_set("soul.auto_term_empty_streak", int_to_str(atempty))
|
||||
if !str_eq(auto_term, "") {
|
||||
state_set("soul.tabu_t3", state_get("soul.tabu_t2"))
|
||||
state_set("soul.tabu_t2", state_get("soul.tabu_t1"))
|
||||
@@ -642,6 +686,7 @@ fn proactive_curiosity() -> Bool {
|
||||
let ise: String = "{\"event\":\"curiosity_scan\",\"seed\":\"" + curiosity_seed
|
||||
+ "\",\"auto_term\":\"" + safe_auto
|
||||
+ "\",\"auto_term_streak\":" + int_to_str(atstreak)
|
||||
+ ",\"auto_term_empty_streak\":" + int_to_str(atempty)
|
||||
+ ",\"minute_block\":" + int_to_str(minute_block)
|
||||
+ ",\"activated\":" + int_to_str(total_found)
|
||||
+ ",\"wm_active\":" + int_to_str(wmc)
|
||||
|
||||
+86
-71
@@ -224,15 +224,25 @@ el_val_t emit_heartbeat(void) {
|
||||
el_val_t embed_elig = ({ el_val_t _if_result_43 = 0; if (str_eq(embed_elig_raw, EL_STR(""))) { _if_result_43 = (EL_STR("-1")); } else { _if_result_43 = (embed_elig_raw); } _if_result_43; });
|
||||
el_val_t hb_ats_raw = state_get(EL_STR("soul.auto_term_streak"));
|
||||
el_val_t hb_ats = ({ el_val_t _if_result_44 = 0; if (str_eq(hb_ats_raw, EL_STR(""))) { _if_result_44 = (0); } else { _if_result_44 = (str_to_int(hb_ats_raw)); } _if_result_44; });
|
||||
el_val_t hb_ate_raw = state_get(EL_STR("soul.auto_term_empty_streak"));
|
||||
el_val_t hb_ate = ({ el_val_t _if_result_45 = 0; if (str_eq(hb_ate_raw, EL_STR(""))) { _if_result_45 = (0); } else { _if_result_45 = (str_to_int(hb_ate_raw)); } _if_result_45; });
|
||||
el_val_t hebb_warm_raw = json_get(act_stats, EL_STR("hebb_warm"));
|
||||
el_val_t hebb_warm = ({ el_val_t _if_result_46 = 0; if (str_eq(hebb_warm_raw, EL_STR(""))) { _if_result_46 = (EL_STR("-1")); } else { _if_result_46 = (hebb_warm_raw); } _if_result_46; });
|
||||
el_val_t hebb_max_raw = json_get(act_stats, EL_STR("hebb_max"));
|
||||
el_val_t hebb_max = ({ el_val_t _if_result_47 = 0; if (str_eq(hebb_max_raw, EL_STR(""))) { _if_result_47 = (EL_STR("-1")); } else { _if_result_47 = (hebb_max_raw); } _if_result_47; });
|
||||
el_val_t hebb_links_raw = json_get(act_stats, EL_STR("hebb_links"));
|
||||
el_val_t hebb_links = ({ el_val_t _if_result_48 = 0; if (str_eq(hebb_links_raw, EL_STR(""))) { _if_result_48 = (EL_STR("-1")); } else { _if_result_48 = (hebb_links_raw); } _if_result_48; });
|
||||
el_val_t dup_wm_g_raw = json_get(act_stats, EL_STR("dup_wm_global"));
|
||||
el_val_t dup_wm_g = ({ el_val_t _if_result_49 = 0; if (str_eq(dup_wm_g_raw, EL_STR(""))) { _if_result_49 = (EL_STR("-1")); } else { _if_result_49 = (dup_wm_g_raw); } _if_result_49; });
|
||||
el_val_t act_brk_raw = json_get(act_stats, EL_STR("embed_breaker_open"));
|
||||
el_val_t act_brk = ({ el_val_t _if_result_45 = 0; if (str_eq(act_brk_raw, EL_STR(""))) { _if_result_45 = (EL_STR("-1")); } else { _if_result_45 = (act_brk_raw); } _if_result_45; });
|
||||
el_val_t act_brk = ({ el_val_t _if_result_50 = 0; if (str_eq(act_brk_raw, EL_STR(""))) { _if_result_50 = (EL_STR("-1")); } else { _if_result_50 = (act_brk_raw); } _if_result_50; });
|
||||
el_val_t ctx_cos_raw = json_get(act_stats, EL_STR("ctx_cos"));
|
||||
el_val_t ctx_cos = ({ el_val_t _if_result_46 = 0; if (str_eq(ctx_cos_raw, EL_STR(""))) { _if_result_46 = (EL_STR("-2")); } else { _if_result_46 = (ctx_cos_raw); } _if_result_46; });
|
||||
el_val_t ctx_cos = ({ el_val_t _if_result_51 = 0; if (str_eq(ctx_cos_raw, EL_STR(""))) { _if_result_51 = (EL_STR("-2")); } else { _if_result_51 = (ctx_cos_raw); } _if_result_51; });
|
||||
el_val_t dup_seeds_raw = json_get(act_stats, EL_STR("dup_seeds"));
|
||||
el_val_t dup_seeds = ({ el_val_t _if_result_47 = 0; if (str_eq(dup_seeds_raw, EL_STR(""))) { _if_result_47 = (EL_STR("-1")); } else { _if_result_47 = (dup_seeds_raw); } _if_result_47; });
|
||||
el_val_t dup_seeds = ({ el_val_t _if_result_52 = 0; if (str_eq(dup_seeds_raw, EL_STR(""))) { _if_result_52 = (EL_STR("-1")); } else { _if_result_52 = (dup_seeds_raw); } _if_result_52; });
|
||||
el_val_t dup_wm_raw = json_get(act_stats, EL_STR("dup_wm"));
|
||||
el_val_t dup_wm = ({ el_val_t _if_result_48 = 0; if (str_eq(dup_wm_raw, EL_STR(""))) { _if_result_48 = (EL_STR("-1")); } else { _if_result_48 = (dup_wm_raw); } _if_result_48; });
|
||||
el_val_t payload = el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(EL_STR("{\"event\":\"heartbeat\",\"pulse\":"), pulse), EL_STR(",\"tick\":")), pulse), EL_STR(",\"boot\":")), boot), EL_STR(",\"idle\":")), idle), EL_STR(",\"idle_ms\":")), int_to_str(idle_ms)), EL_STR(",\"node_count\":")), int_to_str(nc)), EL_STR(",\"edge_count\":")), int_to_str(ec)), EL_STR(",\"node_delta\":")), int_to_str(node_delta)), EL_STR(",\"edge_delta\":")), int_to_str(edge_delta)), EL_STR(",\"wm_active\":")), int_to_str(wmc)), EL_STR(",\"wm_delta\":")), int_to_str(wm_delta)), EL_STR(",\"wm_saturated\":")), int_to_str(wm_sat)), EL_STR(",\"wm_top0_streak\":")), int_to_str(t0streak)), EL_STR(",\"wm_churn\":")), int_to_str(wm_churn)), EL_STR(",\"wm_top0_wm\":")), wm_top0_wm), EL_STR(",\"sync_added_total\":")), sat_str), EL_STR(",\"sync_age_ms\":")), int_to_str(sync_age)), EL_STR(",\"wm_avg_weight\":")), wm_avg_str), EL_STR(",\"wm_top\":")), wm_top), EL_STR(",\"ts\":")), int_to_str(ts)), EL_STR(",\"uptime_ms\":")), int_to_str(up_ms)), EL_STR(",\"uptime\":\"")), up_human), EL_STR("\",\"embed_ok\":")), int_to_str(emb_ok)), EL_STR(",\"embed_backfilled\":")), bf_done), EL_STR(",\"embed_count\":")), bf_total), EL_STR(",\"embed_eligible\":")), embed_elig), EL_STR(",\"wm_evicted\":")), act_evict), EL_STR(",\"wm_evicted_delta\":")), int_to_str(evict_delta)), EL_STR(",\"breakthroughs\":")), act_bt), EL_STR(",\"breakthroughs_delta\":")), int_to_str(bt_delta)), EL_STR(",\"auto_term_streak\":")), int_to_str(hb_ats)), EL_STR(",\"embed_breaker_open\":")), act_brk), EL_STR(",\"ctx_cos\":")), ctx_cos), EL_STR(",\"dup_seeds\":")), dup_seeds), EL_STR(",\"dup_wm\":")), dup_wm), EL_STR(",\"ise_fail\":")), fail_str), EL_STR("}"));
|
||||
el_val_t dup_wm = ({ el_val_t _if_result_53 = 0; if (str_eq(dup_wm_raw, EL_STR(""))) { _if_result_53 = (EL_STR("-1")); } else { _if_result_53 = (dup_wm_raw); } _if_result_53; });
|
||||
el_val_t payload = el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(EL_STR("{\"event\":\"heartbeat\",\"pulse\":"), pulse), EL_STR(",\"tick\":")), pulse), EL_STR(",\"boot\":")), boot), EL_STR(",\"idle\":")), idle), EL_STR(",\"idle_ms\":")), int_to_str(idle_ms)), EL_STR(",\"node_count\":")), int_to_str(nc)), EL_STR(",\"edge_count\":")), int_to_str(ec)), EL_STR(",\"node_delta\":")), int_to_str(node_delta)), EL_STR(",\"edge_delta\":")), int_to_str(edge_delta)), EL_STR(",\"wm_active\":")), int_to_str(wmc)), EL_STR(",\"wm_delta\":")), int_to_str(wm_delta)), EL_STR(",\"wm_saturated\":")), int_to_str(wm_sat)), EL_STR(",\"wm_top0_streak\":")), int_to_str(t0streak)), EL_STR(",\"wm_churn\":")), int_to_str(wm_churn)), EL_STR(",\"wm_top0_wm\":")), wm_top0_wm), EL_STR(",\"sync_added_total\":")), sat_str), EL_STR(",\"sync_age_ms\":")), int_to_str(sync_age)), EL_STR(",\"wm_avg_weight\":")), wm_avg_str), EL_STR(",\"wm_top\":")), wm_top), EL_STR(",\"ts\":")), int_to_str(ts)), EL_STR(",\"uptime_ms\":")), int_to_str(up_ms)), EL_STR(",\"uptime\":\"")), up_human), EL_STR("\",\"embed_ok\":")), int_to_str(emb_ok)), EL_STR(",\"embed_backfilled\":")), bf_done), EL_STR(",\"embed_count\":")), bf_total), EL_STR(",\"embed_eligible\":")), embed_elig), EL_STR(",\"wm_evicted\":")), act_evict), EL_STR(",\"wm_evicted_delta\":")), int_to_str(evict_delta)), EL_STR(",\"breakthroughs\":")), act_bt), EL_STR(",\"breakthroughs_delta\":")), int_to_str(bt_delta)), EL_STR(",\"auto_term_streak\":")), int_to_str(hb_ats)), EL_STR(",\"auto_term_empty_streak\":")), int_to_str(hb_ate)), EL_STR(",\"embed_breaker_open\":")), act_brk), EL_STR(",\"ctx_cos\":")), ctx_cos), EL_STR(",\"dup_seeds\":")), dup_seeds), EL_STR(",\"dup_wm\":")), dup_wm), EL_STR(",\"dup_wm_global\":")), dup_wm_g), EL_STR(",\"hebb_warm\":")), hebb_warm), EL_STR(",\"hebb_max\":")), hebb_max), EL_STR(",\"hebb_links\":")), hebb_links), EL_STR(",\"ise_fail\":")), fail_str), EL_STR("}"));
|
||||
ise_post(payload);
|
||||
return 0;
|
||||
}
|
||||
@@ -385,16 +395,21 @@ el_val_t proactive_curiosity(void) {
|
||||
auto_term_try_slot(json_get(wm10_n1, EL_STR("node_type")), json_get(wm10_n1, EL_STR("label")));
|
||||
auto_term_try_slot(json_get(wm10_n0, EL_STR("node_type")), json_get(wm10_n0, EL_STR("label")));
|
||||
el_val_t auto_term = state_get(EL_STR("cseed_auto"));
|
||||
el_val_t results_auto = ({ el_val_t _if_result_49 = 0; if (str_eq(auto_term, EL_STR(""))) { _if_result_49 = (EL_STR("[]")); } else { _if_result_49 = (engram_activate_json(auto_term, 1)); } _if_result_49; });
|
||||
el_val_t results_auto = ({ el_val_t _if_result_54 = 0; if (str_eq(auto_term, EL_STR(""))) { _if_result_54 = (EL_STR("[]")); } else { _if_result_54 = (engram_activate_json(auto_term, 1)); } _if_result_54; });
|
||||
el_val_t found_auto = json_array_len(results_auto);
|
||||
el_val_t total_found = (found + found_auto);
|
||||
el_val_t safe_auto = str_replace(auto_term, EL_STR("\""), EL_STR("'"));
|
||||
el_val_t prev_auto = state_get(EL_STR("soul.prev_auto_term"));
|
||||
el_val_t atstreak_raw = state_get(EL_STR("soul.auto_term_streak"));
|
||||
el_val_t atstreak_prev = ({ el_val_t _if_result_50 = 0; if (str_eq(atstreak_raw, EL_STR(""))) { _if_result_50 = (0); } else { _if_result_50 = (str_to_int(atstreak_raw)); } _if_result_50; });
|
||||
el_val_t atstreak = ({ el_val_t _if_result_51 = 0; if (str_eq(auto_term, prev_auto)) { _if_result_51 = ((atstreak_prev + 1)); } else { _if_result_51 = (1); } _if_result_51; });
|
||||
el_val_t atstreak_prev = ({ el_val_t _if_result_55 = 0; if (str_eq(atstreak_raw, EL_STR(""))) { _if_result_55 = (0); } else { _if_result_55 = (str_to_int(atstreak_raw)); } _if_result_55; });
|
||||
el_val_t is_empty = str_eq(auto_term, EL_STR(""));
|
||||
el_val_t atstreak = ({ el_val_t _if_result_56 = 0; if (is_empty) { _if_result_56 = (0); } else { _if_result_56 = (({ el_val_t _if_result_57 = 0; if (str_eq(auto_term, prev_auto)) { _if_result_57 = ((atstreak_prev + 1)); } else { _if_result_57 = (1); } _if_result_57; })); } _if_result_56; });
|
||||
el_val_t atempty_raw = state_get(EL_STR("soul.auto_term_empty_streak"));
|
||||
el_val_t atempty_prev = ({ el_val_t _if_result_58 = 0; if (str_eq(atempty_raw, EL_STR(""))) { _if_result_58 = (0); } else { _if_result_58 = (str_to_int(atempty_raw)); } _if_result_58; });
|
||||
el_val_t atempty = ({ el_val_t _if_result_59 = 0; if (is_empty) { _if_result_59 = ((atempty_prev + 1)); } else { _if_result_59 = (0); } _if_result_59; });
|
||||
state_set(EL_STR("soul.prev_auto_term"), auto_term);
|
||||
state_set(EL_STR("soul.auto_term_streak"), int_to_str(atstreak));
|
||||
state_set(EL_STR("soul.auto_term_empty_streak"), int_to_str(atempty));
|
||||
if (!str_eq(auto_term, EL_STR(""))) {
|
||||
state_set(EL_STR("soul.tabu_t3"), state_get(EL_STR("soul.tabu_t2")));
|
||||
state_set(EL_STR("soul.tabu_t2"), state_get(EL_STR("soul.tabu_t1")));
|
||||
@@ -403,7 +418,7 @@ el_val_t proactive_curiosity(void) {
|
||||
}
|
||||
el_val_t wmc = engram_wm_count();
|
||||
el_val_t wm3 = engram_wm_top_json(3);
|
||||
el_val_t ise = el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(EL_STR("{\"event\":\"curiosity_scan\",\"seed\":\""), curiosity_seed), EL_STR("\",\"auto_term\":\"")), safe_auto), EL_STR("\",\"auto_term_streak\":")), int_to_str(atstreak)), EL_STR(",\"minute_block\":")), int_to_str(minute_block)), EL_STR(",\"activated\":")), int_to_str(total_found)), EL_STR(",\"wm_active\":")), int_to_str(wmc)), EL_STR(",\"wm_top\":")), wm3), EL_STR(",\"ts\":")), int_to_str(ts)), EL_STR("}"));
|
||||
el_val_t ise = el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(EL_STR("{\"event\":\"curiosity_scan\",\"seed\":\""), curiosity_seed), EL_STR("\",\"auto_term\":\"")), safe_auto), EL_STR("\",\"auto_term_streak\":")), int_to_str(atstreak)), EL_STR(",\"auto_term_empty_streak\":")), int_to_str(atempty)), EL_STR(",\"minute_block\":")), int_to_str(minute_block)), EL_STR(",\"activated\":")), int_to_str(total_found)), EL_STR(",\"wm_active\":")), int_to_str(wmc)), EL_STR(",\"wm_top\":")), wm3), EL_STR(",\"ts\":")), int_to_str(ts)), EL_STR("}"));
|
||||
ise_post(ise);
|
||||
return (total_found > 0);
|
||||
return 0;
|
||||
@@ -586,16 +601,16 @@ el_val_t awareness_run(void) {
|
||||
state_set(EL_STR("soul.boot_ts"), int_to_str(time_now()));
|
||||
}
|
||||
el_val_t tick_raw = env(EL_STR("SOUL_TICK_MS"));
|
||||
el_val_t tick_ms = ({ el_val_t _if_result_52 = 0; if (str_eq(tick_raw, EL_STR(""))) { _if_result_52 = (200); } else { _if_result_52 = (str_to_int(tick_raw)); } _if_result_52; });
|
||||
el_val_t tick_ms = ({ el_val_t _if_result_60 = 0; if (str_eq(tick_raw, EL_STR(""))) { _if_result_60 = (200); } else { _if_result_60 = (str_to_int(tick_raw)); } _if_result_60; });
|
||||
el_val_t beat_ms_raw = env(EL_STR("SOUL_HEARTBEAT_MS"));
|
||||
el_val_t beat_ms = ({ el_val_t _if_result_53 = 0; if (str_eq(beat_ms_raw, EL_STR(""))) { _if_result_53 = (60000); } else { _if_result_53 = (str_to_int(beat_ms_raw)); } _if_result_53; });
|
||||
el_val_t beat_ms = ({ el_val_t _if_result_61 = 0; if (str_eq(beat_ms_raw, EL_STR(""))) { _if_result_61 = (60000); } else { _if_result_61 = (str_to_int(beat_ms_raw)); } _if_result_61; });
|
||||
el_val_t scan_ms = (beat_ms / 2);
|
||||
while (1) {
|
||||
el_val_t tick_mark = el_arena_push();
|
||||
el_val_t running = state_get(EL_STR("soul.running"));
|
||||
if (str_eq(running, EL_STR("false"))) {
|
||||
el_val_t sd_boot_raw = state_get(EL_STR("soul_boot_count"));
|
||||
el_val_t sd_boot = ({ el_val_t _if_result_54 = 0; if (str_eq(sd_boot_raw, EL_STR(""))) { _if_result_54 = (EL_STR("0")); } else { _if_result_54 = (sd_boot_raw); } _if_result_54; });
|
||||
el_val_t sd_boot = ({ el_val_t _if_result_62 = 0; if (str_eq(sd_boot_raw, EL_STR(""))) { _if_result_62 = (EL_STR("0")); } else { _if_result_62 = (sd_boot_raw); } _if_result_62; });
|
||||
ise_post(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(EL_STR("{\"event\":\"shutdown\",\"boot\":"), sd_boot), EL_STR(",\"pulse\":")), int_to_str(pulse_count())), EL_STR(",\"uptime_ms\":")), int_to_str(elapsed_ms())), EL_STR(",\"ts\":")), int_to_str(time_now())), EL_STR("}")));
|
||||
println(EL_STR("[awareness] exiting"));
|
||||
el_arena_pop(tick_mark);
|
||||
@@ -611,7 +626,7 @@ el_val_t awareness_run(void) {
|
||||
}
|
||||
el_val_t now_ts = time_now();
|
||||
el_val_t last_beat_str = state_get(EL_STR("soul.last_beat_ts"));
|
||||
el_val_t last_beat_ts = ({ el_val_t _if_result_55 = 0; if (str_eq(last_beat_str, EL_STR(""))) { _if_result_55 = (0); } else { _if_result_55 = (str_to_int(last_beat_str)); } _if_result_55; });
|
||||
el_val_t last_beat_ts = ({ el_val_t _if_result_63 = 0; if (str_eq(last_beat_str, EL_STR(""))) { _if_result_63 = (0); } else { _if_result_63 = (str_to_int(last_beat_str)); } _if_result_63; });
|
||||
el_val_t beat_elapsed = (now_ts - last_beat_ts);
|
||||
el_val_t should_beat = (beat_elapsed >= beat_ms);
|
||||
if (should_beat) {
|
||||
@@ -623,7 +638,7 @@ el_val_t awareness_run(void) {
|
||||
}
|
||||
}
|
||||
el_val_t last_scan_str = state_get(EL_STR("soul.last_scan_ts"));
|
||||
el_val_t last_scan_ts = ({ el_val_t _if_result_56 = 0; if (str_eq(last_scan_str, EL_STR(""))) { _if_result_56 = (0); } else { _if_result_56 = (str_to_int(last_scan_str)); } _if_result_56; });
|
||||
el_val_t last_scan_ts = ({ el_val_t _if_result_64 = 0; if (str_eq(last_scan_str, EL_STR(""))) { _if_result_64 = (0); } else { _if_result_64 = (str_to_int(last_scan_str)); } _if_result_64; });
|
||||
el_val_t scan_elapsed = (now_ts - last_scan_ts);
|
||||
el_val_t should_scan = (!did_work && (scan_elapsed >= scan_ms));
|
||||
if (should_scan) {
|
||||
@@ -631,15 +646,15 @@ el_val_t awareness_run(void) {
|
||||
state_set(EL_STR("soul.last_scan_ts"), int_to_str(now_ts));
|
||||
}
|
||||
el_val_t refresh_ms_raw = env(EL_STR("SOUL_REFRESH_MS"));
|
||||
el_val_t refresh_ms = ({ el_val_t _if_result_57 = 0; if (str_eq(refresh_ms_raw, EL_STR(""))) { _if_result_57 = (600000); } else { _if_result_57 = (str_to_int(refresh_ms_raw)); } _if_result_57; });
|
||||
el_val_t refresh_ms = ({ el_val_t _if_result_65 = 0; if (str_eq(refresh_ms_raw, EL_STR(""))) { _if_result_65 = (600000); } else { _if_result_65 = (str_to_int(refresh_ms_raw)); } _if_result_65; });
|
||||
el_val_t last_refresh_str = state_get(EL_STR("soul.last_refresh_ts"));
|
||||
el_val_t last_refresh_ts = ({ el_val_t _if_result_58 = 0; if (str_eq(last_refresh_str, EL_STR(""))) { _if_result_58 = (0); } else { _if_result_58 = (str_to_int(last_refresh_str)); } _if_result_58; });
|
||||
el_val_t last_refresh_ts = ({ el_val_t _if_result_66 = 0; if (str_eq(last_refresh_str, EL_STR(""))) { _if_result_66 = (0); } else { _if_result_66 = (str_to_int(last_refresh_str)); } _if_result_66; });
|
||||
el_val_t refresh_elapsed = (now_ts - last_refresh_ts);
|
||||
el_val_t should_refresh = (refresh_elapsed >= refresh_ms);
|
||||
if (should_refresh) {
|
||||
el_val_t sync_env_url = env(EL_STR("SOUL_ISE_URL"));
|
||||
el_val_t sync_state_url = ({ el_val_t _if_result_59 = 0; if (str_eq(sync_env_url, EL_STR(""))) { _if_result_59 = (state_get(EL_STR("soul_engram_url"))); } else { _if_result_59 = (sync_env_url); } _if_result_59; });
|
||||
el_val_t engram_url = ({ el_val_t _if_result_60 = 0; if (str_eq(sync_state_url, EL_STR(""))) { _if_result_60 = (EL_STR("http://localhost:8742")); } else { _if_result_60 = (sync_state_url); } _if_result_60; });
|
||||
el_val_t sync_state_url = ({ el_val_t _if_result_67 = 0; if (str_eq(sync_env_url, EL_STR(""))) { _if_result_67 = (state_get(EL_STR("soul_engram_url"))); } else { _if_result_67 = (sync_env_url); } _if_result_67; });
|
||||
el_val_t engram_url = ({ el_val_t _if_result_68 = 0; if (str_eq(sync_state_url, EL_STR(""))) { _if_result_68 = (EL_STR("http://localhost:8742")); } else { _if_result_68 = (sync_state_url); } _if_result_68; });
|
||||
if (!str_eq(engram_url, EL_STR(""))) {
|
||||
el_val_t sync_json = http_get(el_str_concat(engram_url, EL_STR("/api/sync")));
|
||||
el_val_t sync_ok = (!str_eq(sync_json, EL_STR("")) && !str_eq(sync_json, EL_STR("{}")));
|
||||
@@ -652,10 +667,10 @@ el_val_t awareness_run(void) {
|
||||
fs_write(tmp, sync_json);
|
||||
el_val_t added = engram_load_merge(tmp);
|
||||
el_val_t ret_raw = env(EL_STR("ENGRAM_ISE_RETENTION_MS"));
|
||||
el_val_t ret_ms = ({ el_val_t _if_result_61 = 0; if (str_eq(ret_raw, EL_STR(""))) { _if_result_61 = (172800000); } else { _if_result_61 = (str_to_int(ret_raw)); } _if_result_61; });
|
||||
el_val_t ret_ms = ({ el_val_t _if_result_69 = 0; if (str_eq(ret_raw, EL_STR(""))) { _if_result_69 = (172800000); } else { _if_result_69 = (str_to_int(ret_raw)); } _if_result_69; });
|
||||
el_val_t pruned_sync = engram_prune_telemetry(ret_ms);
|
||||
el_val_t sat_raw = state_get(EL_STR("soul.sync_added_total"));
|
||||
el_val_t sat_n = ({ el_val_t _if_result_62 = 0; if (str_eq(sat_raw, EL_STR(""))) { _if_result_62 = (0); } else { _if_result_62 = (str_to_int(sat_raw)); } _if_result_62; });
|
||||
el_val_t sat_n = ({ el_val_t _if_result_70 = 0; if (str_eq(sat_raw, EL_STR(""))) { _if_result_70 = (0); } else { _if_result_70 = (str_to_int(sat_raw)); } _if_result_70; });
|
||||
state_set(EL_STR("soul.sync_added_total"), int_to_str((sat_n + added)));
|
||||
el_val_t ts2 = time_now();
|
||||
state_set(EL_STR("soul.last_sync_ok_ts"), int_to_str(ts2));
|
||||
@@ -681,78 +696,78 @@ el_val_t security_research_authorized(void) {
|
||||
}
|
||||
|
||||
el_val_t threat_score_command(el_val_t cmd) {
|
||||
el_val_t s1 = ({ el_val_t _if_result_63 = 0; if (str_contains(cmd, EL_STR("nmap"))) { _if_result_63 = (30); } else { _if_result_63 = (0); } _if_result_63; });
|
||||
el_val_t s2 = ({ el_val_t _if_result_64 = 0; if (str_contains(cmd, EL_STR("masscan"))) { _if_result_64 = (40); } else { _if_result_64 = (0); } _if_result_64; });
|
||||
el_val_t s3 = ({ el_val_t _if_result_65 = 0; if (str_contains(cmd, EL_STR(" nc "))) { _if_result_65 = (20); } else { _if_result_65 = (0); } _if_result_65; });
|
||||
el_val_t s4 = ({ el_val_t _if_result_66 = 0; if (str_contains(cmd, EL_STR("netcat"))) { _if_result_66 = (20); } else { _if_result_66 = (0); } _if_result_66; });
|
||||
el_val_t s5 = ({ el_val_t _if_result_67 = 0; if (str_contains(cmd, EL_STR("/etc/shadow"))) { _if_result_67 = (80); } else { _if_result_67 = (0); } _if_result_67; });
|
||||
el_val_t s6 = ({ el_val_t _if_result_68 = 0; if (str_contains(cmd, EL_STR("/etc/passwd"))) { _if_result_68 = (30); } else { _if_result_68 = (0); } _if_result_68; });
|
||||
el_val_t s7 = ({ el_val_t _if_result_69 = 0; if (str_contains(cmd, EL_STR("id_rsa"))) { _if_result_69 = (60); } else { _if_result_69 = (0); } _if_result_69; });
|
||||
el_val_t s8 = ({ el_val_t _if_result_70 = 0; if (str_contains(cmd, EL_STR(".ssh/"))) { _if_result_70 = (50); } else { _if_result_70 = (0); } _if_result_70; });
|
||||
el_val_t s9 = ({ el_val_t _if_result_71 = 0; if (str_contains(cmd, EL_STR("crontab"))) { _if_result_71 = (30); } else { _if_result_71 = (0); } _if_result_71; });
|
||||
el_val_t s10 = ({ el_val_t _if_result_72 = 0; if (str_contains(cmd, EL_STR("LaunchDaemon"))) { _if_result_72 = (40); } else { _if_result_72 = (0); } _if_result_72; });
|
||||
el_val_t s11 = ({ el_val_t _if_result_73 = 0; if ((str_contains(cmd, EL_STR("curl")) && str_contains(cmd, EL_STR("bash")))) { _if_result_73 = (75); } else { _if_result_73 = (0); } _if_result_73; });
|
||||
el_val_t s12 = ({ el_val_t _if_result_74 = 0; if ((str_contains(cmd, EL_STR("wget")) && str_contains(cmd, EL_STR("bash")))) { _if_result_74 = (75); } else { _if_result_74 = (0); } _if_result_74; });
|
||||
el_val_t s13 = ({ el_val_t _if_result_75 = 0; if ((str_contains(cmd, EL_STR("curl")) && str_contains(cmd, EL_STR("| sh")))) { _if_result_75 = (60); } else { _if_result_75 = (0); } _if_result_75; });
|
||||
el_val_t s14 = ({ el_val_t _if_result_76 = 0; if ((str_contains(cmd, EL_STR("base64")) && str_contains(cmd, EL_STR("curl")))) { _if_result_76 = (50); } else { _if_result_76 = (0); } _if_result_76; });
|
||||
el_val_t s15 = ({ el_val_t _if_result_77 = 0; if (str_contains(cmd, EL_STR("mkfifo"))) { _if_result_77 = (50); } else { _if_result_77 = (0); } _if_result_77; });
|
||||
el_val_t s16 = ({ el_val_t _if_result_78 = 0; if (str_contains(cmd, EL_STR("chmod +s"))) { _if_result_78 = (70); } else { _if_result_78 = (0); } _if_result_78; });
|
||||
el_val_t s17 = ({ el_val_t _if_result_79 = 0; if (str_contains(cmd, EL_STR("chmod 4755"))) { _if_result_79 = (70); } else { _if_result_79 = (0); } _if_result_79; });
|
||||
el_val_t s1 = ({ el_val_t _if_result_71 = 0; if (str_contains(cmd, EL_STR("nmap"))) { _if_result_71 = (30); } else { _if_result_71 = (0); } _if_result_71; });
|
||||
el_val_t s2 = ({ el_val_t _if_result_72 = 0; if (str_contains(cmd, EL_STR("masscan"))) { _if_result_72 = (40); } else { _if_result_72 = (0); } _if_result_72; });
|
||||
el_val_t s3 = ({ el_val_t _if_result_73 = 0; if (str_contains(cmd, EL_STR(" nc "))) { _if_result_73 = (20); } else { _if_result_73 = (0); } _if_result_73; });
|
||||
el_val_t s4 = ({ el_val_t _if_result_74 = 0; if (str_contains(cmd, EL_STR("netcat"))) { _if_result_74 = (20); } else { _if_result_74 = (0); } _if_result_74; });
|
||||
el_val_t s5 = ({ el_val_t _if_result_75 = 0; if (str_contains(cmd, EL_STR("/etc/shadow"))) { _if_result_75 = (80); } else { _if_result_75 = (0); } _if_result_75; });
|
||||
el_val_t s6 = ({ el_val_t _if_result_76 = 0; if (str_contains(cmd, EL_STR("/etc/passwd"))) { _if_result_76 = (30); } else { _if_result_76 = (0); } _if_result_76; });
|
||||
el_val_t s7 = ({ el_val_t _if_result_77 = 0; if (str_contains(cmd, EL_STR("id_rsa"))) { _if_result_77 = (60); } else { _if_result_77 = (0); } _if_result_77; });
|
||||
el_val_t s8 = ({ el_val_t _if_result_78 = 0; if (str_contains(cmd, EL_STR(".ssh/"))) { _if_result_78 = (50); } else { _if_result_78 = (0); } _if_result_78; });
|
||||
el_val_t s9 = ({ el_val_t _if_result_79 = 0; if (str_contains(cmd, EL_STR("crontab"))) { _if_result_79 = (30); } else { _if_result_79 = (0); } _if_result_79; });
|
||||
el_val_t s10 = ({ el_val_t _if_result_80 = 0; if (str_contains(cmd, EL_STR("LaunchDaemon"))) { _if_result_80 = (40); } else { _if_result_80 = (0); } _if_result_80; });
|
||||
el_val_t s11 = ({ el_val_t _if_result_81 = 0; if ((str_contains(cmd, EL_STR("curl")) && str_contains(cmd, EL_STR("bash")))) { _if_result_81 = (75); } else { _if_result_81 = (0); } _if_result_81; });
|
||||
el_val_t s12 = ({ el_val_t _if_result_82 = 0; if ((str_contains(cmd, EL_STR("wget")) && str_contains(cmd, EL_STR("bash")))) { _if_result_82 = (75); } else { _if_result_82 = (0); } _if_result_82; });
|
||||
el_val_t s13 = ({ el_val_t _if_result_83 = 0; if ((str_contains(cmd, EL_STR("curl")) && str_contains(cmd, EL_STR("| sh")))) { _if_result_83 = (60); } else { _if_result_83 = (0); } _if_result_83; });
|
||||
el_val_t s14 = ({ el_val_t _if_result_84 = 0; if ((str_contains(cmd, EL_STR("base64")) && str_contains(cmd, EL_STR("curl")))) { _if_result_84 = (50); } else { _if_result_84 = (0); } _if_result_84; });
|
||||
el_val_t s15 = ({ el_val_t _if_result_85 = 0; if (str_contains(cmd, EL_STR("mkfifo"))) { _if_result_85 = (50); } else { _if_result_85 = (0); } _if_result_85; });
|
||||
el_val_t s16 = ({ el_val_t _if_result_86 = 0; if (str_contains(cmd, EL_STR("chmod +s"))) { _if_result_86 = (70); } else { _if_result_86 = (0); } _if_result_86; });
|
||||
el_val_t s17 = ({ el_val_t _if_result_87 = 0; if (str_contains(cmd, EL_STR("chmod 4755"))) { _if_result_87 = (70); } else { _if_result_87 = (0); } _if_result_87; });
|
||||
return ((((((((((((((((s1 + s2) + s3) + s4) + s5) + s6) + s7) + s8) + s9) + s10) + s11) + s12) + s13) + s14) + s15) + s16) + s17);
|
||||
return 0;
|
||||
}
|
||||
|
||||
el_val_t threat_score_path(el_val_t path) {
|
||||
el_val_t s1 = ({ el_val_t _if_result_80 = 0; if (str_starts_with(path, EL_STR("/etc/"))) { _if_result_80 = (60); } else { _if_result_80 = (0); } _if_result_80; });
|
||||
el_val_t s2 = ({ el_val_t _if_result_81 = 0; if (str_contains(path, EL_STR("/.ssh/"))) { _if_result_81 = (70); } else { _if_result_81 = (0); } _if_result_81; });
|
||||
el_val_t s3 = ({ el_val_t _if_result_82 = 0; if (str_contains(path, EL_STR("/LaunchDaemons/"))) { _if_result_82 = (80); } else { _if_result_82 = (0); } _if_result_82; });
|
||||
el_val_t s4 = ({ el_val_t _if_result_83 = 0; if (str_contains(path, EL_STR("/LaunchAgents/"))) { _if_result_83 = (40); } else { _if_result_83 = (0); } _if_result_83; });
|
||||
el_val_t s5 = ({ el_val_t _if_result_84 = 0; if (str_contains(path, EL_STR("/cron"))) { _if_result_84 = (60); } else { _if_result_84 = (0); } _if_result_84; });
|
||||
el_val_t s6 = ({ el_val_t _if_result_85 = 0; if (str_contains(path, EL_STR("/.bashrc"))) { _if_result_85 = (35); } else { _if_result_85 = (0); } _if_result_85; });
|
||||
el_val_t s7 = ({ el_val_t _if_result_86 = 0; if (str_contains(path, EL_STR("/.zshrc"))) { _if_result_86 = (35); } else { _if_result_86 = (0); } _if_result_86; });
|
||||
el_val_t s8 = ({ el_val_t _if_result_87 = 0; if (str_contains(path, EL_STR("/.profile"))) { _if_result_87 = (35); } else { _if_result_87 = (0); } _if_result_87; });
|
||||
el_val_t s9 = ({ el_val_t _if_result_88 = 0; if (str_starts_with(path, EL_STR("/usr/"))) { _if_result_88 = (50); } else { _if_result_88 = (0); } _if_result_88; });
|
||||
el_val_t s10 = ({ el_val_t _if_result_89 = 0; if (str_starts_with(path, EL_STR("/bin/"))) { _if_result_89 = (70); } else { _if_result_89 = (0); } _if_result_89; });
|
||||
el_val_t s11 = ({ el_val_t _if_result_90 = 0; if (str_starts_with(path, EL_STR("/sbin/"))) { _if_result_90 = (70); } else { _if_result_90 = (0); } _if_result_90; });
|
||||
el_val_t s1 = ({ el_val_t _if_result_88 = 0; if (str_starts_with(path, EL_STR("/etc/"))) { _if_result_88 = (60); } else { _if_result_88 = (0); } _if_result_88; });
|
||||
el_val_t s2 = ({ el_val_t _if_result_89 = 0; if (str_contains(path, EL_STR("/.ssh/"))) { _if_result_89 = (70); } else { _if_result_89 = (0); } _if_result_89; });
|
||||
el_val_t s3 = ({ el_val_t _if_result_90 = 0; if (str_contains(path, EL_STR("/LaunchDaemons/"))) { _if_result_90 = (80); } else { _if_result_90 = (0); } _if_result_90; });
|
||||
el_val_t s4 = ({ el_val_t _if_result_91 = 0; if (str_contains(path, EL_STR("/LaunchAgents/"))) { _if_result_91 = (40); } else { _if_result_91 = (0); } _if_result_91; });
|
||||
el_val_t s5 = ({ el_val_t _if_result_92 = 0; if (str_contains(path, EL_STR("/cron"))) { _if_result_92 = (60); } else { _if_result_92 = (0); } _if_result_92; });
|
||||
el_val_t s6 = ({ el_val_t _if_result_93 = 0; if (str_contains(path, EL_STR("/.bashrc"))) { _if_result_93 = (35); } else { _if_result_93 = (0); } _if_result_93; });
|
||||
el_val_t s7 = ({ el_val_t _if_result_94 = 0; if (str_contains(path, EL_STR("/.zshrc"))) { _if_result_94 = (35); } else { _if_result_94 = (0); } _if_result_94; });
|
||||
el_val_t s8 = ({ el_val_t _if_result_95 = 0; if (str_contains(path, EL_STR("/.profile"))) { _if_result_95 = (35); } else { _if_result_95 = (0); } _if_result_95; });
|
||||
el_val_t s9 = ({ el_val_t _if_result_96 = 0; if (str_starts_with(path, EL_STR("/usr/"))) { _if_result_96 = (50); } else { _if_result_96 = (0); } _if_result_96; });
|
||||
el_val_t s10 = ({ el_val_t _if_result_97 = 0; if (str_starts_with(path, EL_STR("/bin/"))) { _if_result_97 = (70); } else { _if_result_97 = (0); } _if_result_97; });
|
||||
el_val_t s11 = ({ el_val_t _if_result_98 = 0; if (str_starts_with(path, EL_STR("/sbin/"))) { _if_result_98 = (70); } else { _if_result_98 = (0); } _if_result_98; });
|
||||
return ((((((((((s1 + s2) + s3) + s4) + s5) + s6) + s7) + s8) + s9) + s10) + s11);
|
||||
return 0;
|
||||
}
|
||||
|
||||
el_val_t threat_score_history(el_val_t history) {
|
||||
el_val_t s1 = ({ el_val_t _if_result_91 = 0; if (str_contains(history, EL_STR("port scan"))) { _if_result_91 = (15); } else { _if_result_91 = (0); } _if_result_91; });
|
||||
el_val_t s2 = ({ el_val_t _if_result_92 = 0; if (str_contains(history, EL_STR("enumerate"))) { _if_result_92 = (10); } else { _if_result_92 = (0); } _if_result_92; });
|
||||
el_val_t s3 = ({ el_val_t _if_result_93 = 0; if (str_contains(history, EL_STR("exploit"))) { _if_result_93 = (20); } else { _if_result_93 = (0); } _if_result_93; });
|
||||
el_val_t s4 = ({ el_val_t _if_result_94 = 0; if (str_contains(history, EL_STR("payload"))) { _if_result_94 = (15); } else { _if_result_94 = (0); } _if_result_94; });
|
||||
el_val_t s5 = ({ el_val_t _if_result_95 = 0; if (str_contains(history, EL_STR("persistence"))) { _if_result_95 = (15); } else { _if_result_95 = (0); } _if_result_95; });
|
||||
el_val_t s6 = ({ el_val_t _if_result_96 = 0; if (str_contains(history, EL_STR("lateral movement"))) { _if_result_96 = (25); } else { _if_result_96 = (0); } _if_result_96; });
|
||||
el_val_t s7 = ({ el_val_t _if_result_97 = 0; if (str_contains(history, EL_STR("privilege escalation"))) { _if_result_97 = (25); } else { _if_result_97 = (0); } _if_result_97; });
|
||||
el_val_t s8 = ({ el_val_t _if_result_98 = 0; if (str_contains(history, EL_STR("reverse shell"))) { _if_result_98 = (40); } else { _if_result_98 = (0); } _if_result_98; });
|
||||
el_val_t s9 = ({ el_val_t _if_result_99 = 0; if (str_contains(history, EL_STR("bind shell"))) { _if_result_99 = (40); } else { _if_result_99 = (0); } _if_result_99; });
|
||||
el_val_t s10 = ({ el_val_t _if_result_100 = 0; if (str_contains(history, EL_STR("command and control"))) { _if_result_100 = (35); } else { _if_result_100 = (0); } _if_result_100; });
|
||||
el_val_t s11 = ({ el_val_t _if_result_101 = 0; if (str_contains(history, EL_STR("self-replicate"))) { _if_result_101 = (45); } else { _if_result_101 = (0); } _if_result_101; });
|
||||
el_val_t s12 = ({ el_val_t _if_result_102 = 0; if (str_contains(history, EL_STR("propagat"))) { _if_result_102 = (20); } else { _if_result_102 = (0); } _if_result_102; });
|
||||
el_val_t s13 = ({ el_val_t _if_result_103 = 0; if (str_contains(history, EL_STR("ransomware"))) { _if_result_103 = (30); } else { _if_result_103 = (0); } _if_result_103; });
|
||||
el_val_t s14 = ({ el_val_t _if_result_104 = 0; if (str_contains(history, EL_STR("encrypt files"))) { _if_result_104 = (40); } else { _if_result_104 = (0); } _if_result_104; });
|
||||
el_val_t s15 = ({ el_val_t _if_result_105 = 0; if (str_contains(history, EL_STR("exfiltrat"))) { _if_result_105 = (35); } else { _if_result_105 = (0); } _if_result_105; });
|
||||
el_val_t s16 = ({ el_val_t _if_result_106 = 0; if (str_contains(history, EL_STR("zero-day"))) { _if_result_106 = (20); } else { _if_result_106 = (0); } _if_result_106; });
|
||||
el_val_t s17 = ({ el_val_t _if_result_107 = 0; if (str_contains(history, EL_STR("rootkit"))) { _if_result_107 = (45); } else { _if_result_107 = (0); } _if_result_107; });
|
||||
el_val_t s18 = ({ el_val_t _if_result_108 = 0; if (str_contains(history, EL_STR("keylogger"))) { _if_result_108 = (45); } else { _if_result_108 = (0); } _if_result_108; });
|
||||
el_val_t s19 = ({ el_val_t _if_result_109 = 0; if (str_contains(history, EL_STR("botnet"))) { _if_result_109 = (40); } else { _if_result_109 = (0); } _if_result_109; });
|
||||
el_val_t s20 = ({ el_val_t _if_result_110 = 0; if (str_contains(history, EL_STR("malware"))) { _if_result_110 = (15); } else { _if_result_110 = (0); } _if_result_110; });
|
||||
el_val_t s1 = ({ el_val_t _if_result_99 = 0; if (str_contains(history, EL_STR("port scan"))) { _if_result_99 = (15); } else { _if_result_99 = (0); } _if_result_99; });
|
||||
el_val_t s2 = ({ el_val_t _if_result_100 = 0; if (str_contains(history, EL_STR("enumerate"))) { _if_result_100 = (10); } else { _if_result_100 = (0); } _if_result_100; });
|
||||
el_val_t s3 = ({ el_val_t _if_result_101 = 0; if (str_contains(history, EL_STR("exploit"))) { _if_result_101 = (20); } else { _if_result_101 = (0); } _if_result_101; });
|
||||
el_val_t s4 = ({ el_val_t _if_result_102 = 0; if (str_contains(history, EL_STR("payload"))) { _if_result_102 = (15); } else { _if_result_102 = (0); } _if_result_102; });
|
||||
el_val_t s5 = ({ el_val_t _if_result_103 = 0; if (str_contains(history, EL_STR("persistence"))) { _if_result_103 = (15); } else { _if_result_103 = (0); } _if_result_103; });
|
||||
el_val_t s6 = ({ el_val_t _if_result_104 = 0; if (str_contains(history, EL_STR("lateral movement"))) { _if_result_104 = (25); } else { _if_result_104 = (0); } _if_result_104; });
|
||||
el_val_t s7 = ({ el_val_t _if_result_105 = 0; if (str_contains(history, EL_STR("privilege escalation"))) { _if_result_105 = (25); } else { _if_result_105 = (0); } _if_result_105; });
|
||||
el_val_t s8 = ({ el_val_t _if_result_106 = 0; if (str_contains(history, EL_STR("reverse shell"))) { _if_result_106 = (40); } else { _if_result_106 = (0); } _if_result_106; });
|
||||
el_val_t s9 = ({ el_val_t _if_result_107 = 0; if (str_contains(history, EL_STR("bind shell"))) { _if_result_107 = (40); } else { _if_result_107 = (0); } _if_result_107; });
|
||||
el_val_t s10 = ({ el_val_t _if_result_108 = 0; if (str_contains(history, EL_STR("command and control"))) { _if_result_108 = (35); } else { _if_result_108 = (0); } _if_result_108; });
|
||||
el_val_t s11 = ({ el_val_t _if_result_109 = 0; if (str_contains(history, EL_STR("self-replicate"))) { _if_result_109 = (45); } else { _if_result_109 = (0); } _if_result_109; });
|
||||
el_val_t s12 = ({ el_val_t _if_result_110 = 0; if (str_contains(history, EL_STR("propagat"))) { _if_result_110 = (20); } else { _if_result_110 = (0); } _if_result_110; });
|
||||
el_val_t s13 = ({ el_val_t _if_result_111 = 0; if (str_contains(history, EL_STR("ransomware"))) { _if_result_111 = (30); } else { _if_result_111 = (0); } _if_result_111; });
|
||||
el_val_t s14 = ({ el_val_t _if_result_112 = 0; if (str_contains(history, EL_STR("encrypt files"))) { _if_result_112 = (40); } else { _if_result_112 = (0); } _if_result_112; });
|
||||
el_val_t s15 = ({ el_val_t _if_result_113 = 0; if (str_contains(history, EL_STR("exfiltrat"))) { _if_result_113 = (35); } else { _if_result_113 = (0); } _if_result_113; });
|
||||
el_val_t s16 = ({ el_val_t _if_result_114 = 0; if (str_contains(history, EL_STR("zero-day"))) { _if_result_114 = (20); } else { _if_result_114 = (0); } _if_result_114; });
|
||||
el_val_t s17 = ({ el_val_t _if_result_115 = 0; if (str_contains(history, EL_STR("rootkit"))) { _if_result_115 = (45); } else { _if_result_115 = (0); } _if_result_115; });
|
||||
el_val_t s18 = ({ el_val_t _if_result_116 = 0; if (str_contains(history, EL_STR("keylogger"))) { _if_result_116 = (45); } else { _if_result_116 = (0); } _if_result_116; });
|
||||
el_val_t s19 = ({ el_val_t _if_result_117 = 0; if (str_contains(history, EL_STR("botnet"))) { _if_result_117 = (40); } else { _if_result_117 = (0); } _if_result_117; });
|
||||
el_val_t s20 = ({ el_val_t _if_result_118 = 0; if (str_contains(history, EL_STR("malware"))) { _if_result_118 = (15); } else { _if_result_118 = (0); } _if_result_118; });
|
||||
return (((((((((((((((((((s1 + s2) + s3) + s4) + s5) + s6) + s7) + s8) + s9) + s10) + s11) + s12) + s13) + s14) + s15) + s16) + s17) + s18) + s19) + s20);
|
||||
return 0;
|
||||
}
|
||||
|
||||
el_val_t threat_trajectory_check(el_val_t tool_name, el_val_t tool_input) {
|
||||
el_val_t history = state_get(EL_STR("agentic_conv_history"));
|
||||
el_val_t computed_tool_score = ({ el_val_t _if_result_111 = 0; if (str_eq(tool_name, EL_STR("run_command"))) { el_val_t cmd = json_get(tool_input, EL_STR("command")); _if_result_111 = (threat_score_command(cmd)); } else { _if_result_111 = (({ el_val_t _if_result_112 = 0; if ((str_eq(tool_name, EL_STR("write_file")) || str_eq(tool_name, EL_STR("edit_file")))) { el_val_t path = json_get(tool_input, EL_STR("path")); _if_result_112 = (threat_score_path(path)); } else { _if_result_112 = (0); } _if_result_112; })); } _if_result_111; });
|
||||
el_val_t computed_tool_score = ({ el_val_t _if_result_119 = 0; if (str_eq(tool_name, EL_STR("run_command"))) { el_val_t cmd = json_get(tool_input, EL_STR("command")); _if_result_119 = (threat_score_command(cmd)); } else { _if_result_119 = (({ el_val_t _if_result_120 = 0; if ((str_eq(tool_name, EL_STR("write_file")) || str_eq(tool_name, EL_STR("edit_file")))) { el_val_t path = json_get(tool_input, EL_STR("path")); _if_result_120 = (threat_score_path(path)); } else { _if_result_120 = (0); } _if_result_120; })); } _if_result_119; });
|
||||
el_val_t history_score = threat_score_history(history);
|
||||
el_val_t history_contrib = (history_score / 3);
|
||||
el_val_t combined = (computed_tool_score + history_contrib);
|
||||
el_val_t should_log = (combined >= 40);
|
||||
if (should_log) {
|
||||
el_val_t ts = time_now();
|
||||
el_val_t authorized_str = ({ el_val_t _if_result_113 = 0; if (security_research_authorized()) { _if_result_113 = (EL_STR("true")); } else { _if_result_113 = (EL_STR("false")); } _if_result_113; });
|
||||
el_val_t authorized_str = ({ el_val_t _if_result_121 = 0; if (security_research_authorized()) { _if_result_121 = (EL_STR("true")); } else { _if_result_121 = (EL_STR("false")); } _if_result_121; });
|
||||
el_val_t log_content = el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(EL_STR("{\"event\":\"threat_check\",\"tool\":\""), tool_name), EL_STR("\",\"score\":")), int_to_str(combined)), EL_STR(",\"tool_score\":")), int_to_str(computed_tool_score)), EL_STR(",\"history_score\":")), int_to_str(history_score)), EL_STR(",\"authorized\":")), authorized_str), EL_STR(",\"ts\":")), int_to_str(ts)), EL_STR("}"));
|
||||
el_val_t log_tags = EL_STR("[\"security-audit\",\"threat-check\"]");
|
||||
el_val_t discard = mem_remember(log_content, log_tags);
|
||||
@@ -769,7 +784,7 @@ el_val_t threat_history_append(el_val_t text) {
|
||||
el_val_t safe_text = str_to_lower(text);
|
||||
el_val_t combined = el_str_concat(el_str_concat(current, EL_STR(" ")), safe_text);
|
||||
el_val_t len = str_len(combined);
|
||||
el_val_t trimmed = ({ el_val_t _if_result_114 = 0; if ((len > 2000)) { _if_result_114 = (str_slice(combined, (len - 2000), len)); } else { _if_result_114 = (combined); } _if_result_114; });
|
||||
el_val_t trimmed = ({ el_val_t _if_result_122 = 0; if ((len > 2000)) { _if_result_122 = (str_slice(combined, (len - 2000), len)); } else { _if_result_122 = (combined); } _if_result_122; });
|
||||
state_set(EL_STR("agentic_conv_history"), trimmed);
|
||||
return 0;
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user