kavach - GitLite

KO | EN

gitlite — search

#javascript #hacktoberfest #go #machine-learning #deep-learning #linux #docker #java #windows #awesome #cli #kubernetes #pytorch #openai

kavach

(★ 253)

Tactical AI Workspace Monitor & EDR

파일 탐색기

최종 버전 다운로드 (.zip)

- - bug_report.md
  - feature_request.md
- - release.yml
- FUNDING.yml
- extensions.json
- tauri.svg
- vite.svg
- - react.svg
- - ActionLog.tsx
  - AgentScopeViewer.tsx
  - BlastRadiusModal.tsx
  - CommLink.tsx
  - Dashboard.tsx
  - Header.tsx
  - TacticalConsole.tsx
  - TrustScopes.tsx
- App.tsx
- index.css
- main.tsx
- types.ts
- vite-env.d.ts
- - default.json
- - 128x128.png
  - 128x128@2x.png
  - 32x32.png
  - icon.icns
  - icon.ico
  - icon.png
  - Square107x107Logo.png
  - Square142x142Logo.png
  - Square150x150Logo.png
  - Square284x284Logo.png
  - Square30x30Logo.png
  - Square310x310Logo.png
  - Square44x44Logo.png
  - Square71x71Logo.png
  - Square89x89Logo.png
  - StoreLogo.png
- - clipboard.rs
  - ebpf_mon.rs
  - honeypot.rs
  - lib.rs
  - main.rs
  - siem.rs
- .gitignore
- build.rs
- build_err.txt
- build_errors.json
- build_errors.txt
- build_errors_short.txt
- build_output.txt
- Cargo.lock
- Cargo.toml
- error_log.txt
- info
- rust_errors.txt
- tauri.conf.json
.gitignore
CODE_OF_CONDUCT.md
CONTRIBUTING.md
index.html
kavach-demo.gif
LICENSE
package-lock.json
package.json
README.md
SECURITY.md
tsconfig.json
tsconfig.node.json
vite.config.ts

# 설치 가이드

1. 코드 내려받기

git clone https://github.com/LucidAkshay/kavach

깃허브에서 프로젝트 코드 전체를 내 컴퓨터로 내려받습니다.

cd kavach

방금 내려받은 프로젝트 폴더 안으로 이동합니다.

2. Node.js

쉬움 추천

사전 준비물

Git GitHub에서 프로젝트 코드를 내려받으려면 필요합니다.
Node.js npm 명령어를 쓰려면 Node.js가 설치되어 있어야 합니다. LTS(장기지원) 버전을 추천합니다.

npm install

package.json에 명시된 라이브러리들을 내려받아 설치합니다.

npm start

개발/실행 서버를 켭니다.

✅ 명령어 실행 후 터미널에 나타나는 주소(보통 http://localhost:3000 형태)를 브라우저에서 열어보세요.

3. Rust

보통

사전 준비물

Git GitHub에서 프로젝트 코드를 내려받으려면 필요합니다.
Rust (rustup) rustup으로 설치하면 cargo도 함께 설치됩니다.

cd src-tauri

이 프로젝트의 관련 파일이 하위 폴더 안에 있어서, 먼저 그 폴더로 이동합니다.

cargo build --release

Rust 프로젝트를 컴파일합니다.

cargo run

빌드 후 바로 실행까지 진행합니다.

✅ cargo build가 에러 없이 끝나면 성공입니다. target/ 폴더에 실행 파일이 생성됩니다.

// repository documentation

Was this content helpful?

★ 0 (0 ratings)

<div align="center">

# 🛡️ KAVACH
**Tactical AI Workspace Monitor & EDR**

![Tauri](https://img.shields.io/badge/Tauri-v2-FFC107?logo=tauri&logoColor=white&style=for-the-badge) 
![Rust](https://img.shields.io/badge/Rust-Stable-000000?logo=rust&logoColor=white&style=for-the-badge) 
![React](https://img.shields.io/badge/React-19-61DAFB?logo=react&logoColor=white&style=for-the-badge) 
![License](https://img.shields.io/badge/License-GPLv3-blue.svg?style=for-the-badge)

<br>

<a href="https://www.producthunt.com/products/kavach?embed=true&utm_source=badge-featured&utm_medium=badge&utm_campaign=badge-kavach" target="_blank" rel="noopener noreferrer"><img alt="Kavach | Product Hunt" width="250" height="54" src="https://api.producthunt.com/widgets/embed-image/v1/featured.svg?post_id=1098249&theme=light&t=1773791260859"></a>

<br>
<br>

![Kavach Dashboard Demo](https://raw.githubusercontent.com/LucidAkshay/kavach/main/kavach-demo.gif)

<br>

> **Kavach** (Sanskrit for "Armor") is an open source Endpoint Detection and Response (EDR) layer designed exclusively to restrain, monitor, and remediate autonomous AI agents and local LLMs operating on your machine.

</div>

***

## 🛰️ The Threat & The Observer

Autonomous AI agents are revolutionary, but they are inherently volatile. When they operate on your local file system, they move at superhuman speeds. A single hallucination can delete production databases, overwrite source code, or exfiltrate private API keys.

**Architecture Transparency:** Kavach v1.1.0 operates as a high performance asynchronous file system observer using Userland APIs. It monitors designated workspaces, quarantines malicious actions, and provides immediate remediation tools. It is an EDR monitor, not a strict synchronous sandbox. True system call blocking requires kernel drivers, which are slated for our v1.2 roadmap.

***

## ⚡ The Arsenal : Active Defense Mechanisms

Kavach is armed with an exhaustive array of active defense mechanisms operating at the application layer to outsmart and contain rogue agents.

### 🌌 Flagship Tactical Mechanics
* **Phantom Workspace:** Intercepts destructive file operations (Modify, Delete, Create) and silently routes them to a hidden `.kavach_phantom` directory to trap malicious payloads.
* **The Auto Enforcer:** A ruthless background Rust thread. If an intercepted action sits pending in the UI for more than 60 seconds, Kavach automatically issues a hard OS termination signal to the rogue agent PID.
* **Temporal Rollback:** Automatic cryptographic caching of file modifications. If a file is under 50MB, Kavach enables instant 1 click restoration. Large files are dynamically flagged in the UI as ineligible for rollback.
* **Honeypot Tripwire Architecture:** Safely deploys a "sugar trap" `system_auth_tokens.json` file. Any process attempting to read or modify the decoy instantly triggers a High Risk lockdown and a distinct TRAP TRIGGERED alarm. Decoys are automatically scrubbed when the session ends.

### 🦀 Core Security Engine (Rust Layer)
* **High Velocity Loop Break:** Heuristic detection of repetitive command patterns (e.g. recursive `npm install` loops) to force automatic agent suspension.
* **The Janitor Protocol:** Intelligent auto whitelisting of standard Windows system maintenance paths (`%TEMP%`, `Prefetch`, `Logs`) to eliminate alert fatigue.
* **PID Chokehold:** Dynamic monitoring and CPU usage throttling. Instantly drops a rogue agent's OS priority to IDLE using Windows WMIC or POSIX renice commands.

### 🧠 The Brain & The Shield
* **Gag Order (PII Sanitizer):** Real time entropy and regex scanning for OpenAI AWS keys, credit cards, and emails in outbound strings.
* **Faraday Clipboard Guard:** Actively calculates Shannon Entropy on your OS clipboard. If it detects a stolen secret, it instantly overwrites your clipboard with a decoy string to prevent pasting and exfiltration.
* **Child Process Quarantine:** Hierarchical scanning that tracks and restricts permissions for any process spawned by a monitored parent agent.

### 📦 The Black Box (Forensics)
* **Cryptographic Ledger:** A blockchain style FNV hash chain that ensures audit logs are immutable and tamper proof.
* **Supply Chain Auditor:** Real time CVE scanning against the workspace `package.json` for known malware dependencies.
* **Predictive Blast Radius:** Recursive import scanner that visually maps exactly what will break in your project before you approve a file deletion.

***

## 🚀 v1.2 Roadmap : True Sandboxing & Autonomous Defense

Moving from a passive EDR tool to a true Zero Trust Sandbox requires native hardware drivers and autonomous intelligence. These are currently under active development:

* **Autonomous Reasoning Loop (Local LLM):** A lightweight, internally hosted reasoning agent that will automatically triage events, correlate velocity spikes with honeypot triggers, and dynamically rotate decoys without human intervention.
* **Linux eBPF Probes:** Kernel level hooks to intercept `sys_enter_openat` and `sys_enter_mkdir`.
* **Windows Minifilters:** Native file system drivers for absolute Windows execution blocking.
* **macOS Endpoint Security Framework (ESF):** Strict entitlements for Apple silicon.
* **Network Ghost Mode:** Local root certificate authority for intercepting and spoofing TLS traffic without payload execution.

***

## ⚙️ Under the Hood

Kavach is built for absolute performance and zero latency, running entirely locally on your machine with **zero cloud dependencies**.

* **The Engine (Rust):** The core interception logic, OS execution hooks, and cryptographic file caching are written in Rust for memory safety and bare metal speed.
* **The Command Center (React TypeScript):** The FUI dashboard operates in an isolated webview, ensuring the UI thread never blocks the security engine.
* **The Bridge (Tauri):** Secure asynchronous Inter Process Communication (IPC) bridges the frontend dashboard and the Rust watcher.

***

## 💻 Zero Config Deployment

1. **Download:** Grab the latest installer for your operating system from the **[Releases Page](../../releases)**.
2. **Launch:** Run the executable (e.g. `Akshays.Kavach_1.1.0_x64-setup.exe`). *(Note: Windows requires running as Administrator for process termination; macOS requires Full Disk Access).*
3. **Arm:** Select your workspace directory in the UI. Kavach immediately locks down the perimeter.

***

## 📞 Direct Line & Feedback

Kavach features a "Direct Line" communication module for users to report anomalies, suggest features, or collaborate.

* **Developer:** Akshay Sharma
* **Feedback:** Use the **[ COMM LINK ]** terminal button inside the application to route encrypted feedback directly to the developer inbox via your OS default mail client.

***

## 📜 License

Kavach is proudly released under the **GNU General Public License v3.0 (GPLv3)**. Permanent attribution to **Akshay Sharma** is required in all forks, distributions, and derivatives, and any modifications must remain open source under the same license terms.