🔒 Security Operations
IA-SECURITY-OPS-001 status tracker — phase kanban + live event feed
Phase Kanban — IA-SECURITY-OPS-001
✅ COMPLETE
Phase 0
Sovereignty Sentinel
eios-sovereignty-sentinel.service — 5-min polling; canonical write detect, cred perm check, failed-auth flood (Phase 0+2)
Phase 1
SOC Dashboard
eios-security-concierge.service port 32787 — /soc HTML, /api/security/events, /api/security/alert; 30s auto-refresh
Phase 1
Incident Response Playbook
INCIDENT-RESPONSE-PLAYBOOK-001.md — P0–P3 severity windows, D.E.T.E.C.T. phases, notification chain, quarantine pattern, post-mortem template
🔄 IN-PROGRESS
—
⏳ PENDING
Phase 2 3F gate
Sovereignty Sentinel Full
Phase 0+2 running; Phase 1 (canonical write alert) + full production hardening pending 3F review
Phase 2 3F gate
OPA Policy Bundle
behaviours.db integration; SQ-2 OPA sidecar vs in-process (resolved: sidecar); implementation gated
Phase 2 3F gate
Failed-Auth Alerting Wire
Sentinel detects flood; alerting → concierge → eios-m-plus; full wiring pending gate
Phase 3+
Threat Intel / SIEM
External threat feeds; correlation engine; multi-entity incident coordination
🚫 BLOCKED
Phase 2
3F Review Required
All Phase 2 items gated on 3F (Foundation Philosophy) review — per IA-SECURITY-OPS-001 §11 SQ-2/3/4/5/6/7/8. Contact j3 to schedule.
🔴 Live Security Events
🔒 Open Full SOC Dashboard →Loading events…