# AEGIS-SENTINEL

<!-- BOOKSTACK-DOCUMENT-RELEASE:BEGIN -->
# AEGIS-SENTINEL

| Field | Value |
| --- | --- |
| Distribution | BSS — OpenSOF |
| Product | OpenSOF |
| Release | 0.15.1 |
| Deployment | `opensof.bss.dev` |
| Source | `/srv/bss/releases/OpenSOF-v0.15.0-20app` |
| Evidence | Catalog intent plus component-scoped static evidence |
| Source fingerprint | `cda583b42f2a0d296b268ab5b174932a378c8be6fb52ffa1af14af896e990f6e` |
| Status | Generated baseline — human review required |

> **Verification boundary:** This page combines platform design guidance with static evidence from the release. It does not prove that every detected interface is enabled, reachable, secure, or operational in the deployed environment.

## Purpose

A security and protection integration point for presenting alerts, status and defensive capabilities within the wider operational platform.

## Operational value

Lets protective functions participate in common situational awareness, tasking and evidence workflows.

## Differentiators

Security alerts can become semantically linked operational objects and tasks instead of remaining isolated notifications.

## Platform connections

- OpenCyberSec
- OpenCOP
- OpenTask
- OpenIIA

## Release detection

| Status | Score | Evidence items |
| --- | --- | --- |
| detected | 42 | 10 |

| Evidence type | Source | Match |
| --- | --- | --- |
| content | `CHANGELOG.md` | `aegis-sentinel` |
| content | `DEPLOY-GODADDY.md` | `aegis-sentinel` |
| content | `EXTERNAL-SERVICES.md` | `aegis-sentinel` |
| content | `README.md` | `aegis-sentinel` |
| content | `WALLACECORP-DEPLOYMENT.md` | `aegis-sentinel` |
| content | `DEPLOY-GODADDY.md` | `aegis_sentinel` |
| content | `deploy.env.example` | `aegis_sentinel` |
| content | `server.js` | `aegis_sentinel` |
| content | `tests/compiled_deployment_smoke_test.py` | `aegis_sentinel` |
| content | `tests/external_integrations_smoke_test.py` | `aegis_sentinel` |

## Candidate REST/API interfaces

| Method | Path | Source |
| --- | --- | --- |
| GET | `http://127.0.0.1:18782/api/integrations` | `tests/compiled_deployment_smoke_test.py` |

## Candidate real-time interfaces

No component-specific WebSocket endpoint was associated by the scanner.

## Configuration candidates

| Variable | Default | Evidence |
| --- | --- | --- |
| `AEGIS_SENTINEL_LABEL` | COMPILED_DEPLOYMENT.aegisSentinelLabel).trim() \|\| COMPILED_DEPLOYMENT.aegisSentinelLabel | server.js, tools/integrate_opensof_service_entries.py |
| `ANTHROPIC_API_KEY` | — | server.js, lib/openllm/agents.js, lib/openllm/providers.js |
| `BASE` | http://127.0.0.1:3000 | DEPLOY-GODADDY.md, OPENCYBERSEC-QUICKSTART.md, OPENCYBERSEC.md, UPGRADE-v0.14.0.md |
| `DATA_DIR` | path.join(ROOT | OPENCYBERSEC-QUICKSTART.md, OPENCYBERSEC.md, RELEASE-MANIFEST-v0.14.0.json, UPGRADE-v0.14.0.md |
| `EOD_TECH_TARGET` | @eodtech | server.js |
| `HOST` | 0.0.0.0 | server.js, lib/openrf-controller/server.js |
| `KNOWLEDGE_NS` | — | server.js |
| `MISSION_KNOWLEDGE_NS` | — | server.js |
| `MOUNT_PATH` | COMPILED_DEPLOYMENT.mountPath | server.js |
| `NODE_ID` | COMPILED_DEPLOYMENT.nodeId | server.js, edge/openssa-sensor/lib/openssa.js, lib/openssa.js |
| `OPENAAR_SIGNING_KEY` | [REDACTED] | server.js |
| `OPENAAR_SNAPSHOT_EVERY_EVENTS` | 100 | server.js |
| `OPENAAR_SNAPSHOT_INTERVAL_S` | 30 | server.js |
| `OPENAI_API_KEY` | — | server.js, lib/openllm/providers.js |
| `OPENANALYTICS_CONNECTOR_TIMEOUT_MS` | 60000 | server.js |
| `OPENBUS_API_TOKEN` | [REDACTED] | OPENKNOWLEDGE-OPENTASK.md, OPENLVC-DEMO.md, OPENLVC-RTI.md, demo_simulator.py |
| `OPENBUS_MAX_HISTORY` | 500 | server.js |
| `OPENCHAT_DEFAULT_TARGET` | #eod-ops | server.js |
| `OPENCOP_TRACK_URL` | https://opencop.c24.airoapp.ai/api/tracks | server.js |
| `OPENCOP_UI_URL` | BUILTIN_OPENCOP_UI_URL | server.js |
| `OPENCYBERSEC_AGENT_TOKEN` | [REDACTED] | OPENCYBERSEC-QUICKSTART.md, OPENCYBERSEC.md, server.js, examples/opencybersec/ingest-examples.sh |
| `OPENCYBERSEC_OPERATOR_TOKEN` | [REDACTED] | OPENCYBERSEC-QUICKSTART.md, OPENCYBERSEC.md, server.js, examples/opencybersec/ingest-examples.sh |
| `OPENCYBERSEC_READ_TOKEN` | — | server.js |
| `OPENFILES_HEALTH_URL` | — | server.js, tools/integrate_opensof_service_entries.py |
| `OPENFILES_SERVICE_URL` | — | server.js |
| `OPENIIA_MAX_EVIDENCE_BYTES` | 12000000 | server.js |
| `OPENISAC_HEALTH_URL` | — | server.js, tools/integrate_opensof_service_entries.py |
| `OPENISAC_SERVICE_URL` | — | server.js |
| `OPENKNOWLEDGE_EDITOR_TOKEN` | [REDACTED] | server.js |
| `OPENKNOWLEDGE_GRAPH` | https://opensof.local/graph/core | server.js |
| `OPENKNOWLEDGE_MODEL_FILE` | path.join(DATA | server.js |
| `OPENKNOWLEDGE_ONTOWIKI_URL` | — | server.js |
| `OPENKNOWLEDGE_SPARQL_ENDPOINT` | — | server.js |
| `OPENKNOWLEDGE_TIMEOUT_MS` | 8000 | server.js |
| `OPENLLM_ANTHROPIC_API_KEY` | [REDACTED] | server.js, lib/openllm/providers.js |
| `OPENLLM_OPENAI_API_KEY` | [REDACTED] | server.js, lib/openllm/providers.js |
| `OPENLLM_OPENWEBUI_API_KEY` | [REDACTED] | server.js, lib/openllm/providers.js |
| `OPENLLM_OPENWEBUI_URL` | process.env.OPENWEBUI_URL \|\| | server.js, lib/openllm/providers.js |
| `OPENLLM_OPERATOR_TOKEN` | [REDACTED] | server.js, lib/openllm.js |
| `OPENLLM_WORKSPACES_DIR` | path.join(ROOT | server.js |
| `OPENLVC_HEALTH_URL` | — | server.js, tools/integrate_opensof_service_entries.py |
| `OPENLVC_SERVICE_URL` | — | server.js |
| `OPENMAIL_HEALTH_URL` | — | server.js, tools/integrate_opensof_service_entries.py |
| `OPENMAIL_SERVICE_URL` | — | server.js |
| `OPENRF_AGENT_TOKEN` | [REDACTED] | server.js, lib/openrf-controller/server.js, openrf/API.md |
| `OPENRF_DATA_DIR` | path.join(DATA | server.js, lib/openrf-controller/server.js |
| `OPENRF_OPERATOR_TOKEN` | [REDACTED] | server.js, lib/openrf-controller/server.js, openrf/API.md, openrf/README-UPSTREAM-v0.3.0.md |
| `OPENRF_READ_TOKEN` | — | server.js, lib/openrf-controller/server.js, openrf/API.md |
| `OPENSSA_ACTIVE_TIMEOUT_S` | 900 | server.js, edge/openssa-sensor/SERVER_INTEGRATION.md, edge/openssa-sensor/lib/openssa.js, lib/openssa.js |
| `OPENSSA_ITU_REGION` | 2 | server.js, edge/openssa-sensor/SERVER_INTEGRATION.md, edge/openssa-sensor/lib/openssa.js, lib/openssa.js |
| `OPENSSA_SENSOR_TOKEN` | [REDACTED] | server.js, edge/openssa-sensor/SERVER_INTEGRATION.md, edge/openssa-sensor/local_server.js, edge/openssa-sensor/demo/run_streaming_demo.py |
| `OPENWEBUI_API_KEY` | [REDACTED] | server.js, lib/openllm/providers.js |
| `OPENWEBUI_CHAT_PATH` | /api/chat/completions | server.js |
| `OPENWEBUI_DEFAULT_MODEL` | — | server.js |
| `OPENWEBUI_HEALTH_PATH` | /health | server.js |
| `OPENWEBUI_MODELS_PATH` | /api/models | server.js |
| `OPENWEBUI_URL` | ).replace(/\/+$/ | server.js |
| `OPEN_EYES_DEFAULT_ASSET` | ISAC-RASPBOT-01 | server.js |
| `PORT` | 3000 | server.js, edge/openssa-sensor/local_server.js, lib/openrf-controller/server.js |
| `PUBLIC_BASE_URL` | COMPILED_DEPLOYMENT.publicBaseUrl).replace(/\/+$/ | server.js |
| `RASPBOT_BROWSER_WS_URL` | — | server.js |
| `RASPBOT_CONTROL_URL` | — | server.js |
| `RASPBOT_STREAM_URL` | — | server.js |
| `ROCKETCHAT_AUTH_TOKEN` | [REDACTED] | server.js |
| `ROCKETCHAT_BOT_USERNAME` | openc5.bot | server.js |
| `ROCKETCHAT_EMBED_URL` | — | server.js |
| `ROCKETCHAT_INCOMING_WEBHOOK_URL` | — | server.js |
| `ROCKETCHAT_OUTGOING_TOKEN` | [REDACTED] | server.js, rocketchat/outgoing-webhook-test.sh |
| `ROCKETCHAT_PUBLIC_URL` | ROCKETCHAT_URL \|\| '').replace(/\/+$/ | server.js |
| `ROCKETCHAT_URL` | ).replace(/\/+$/ | server.js |
| `ROCKETCHAT_USER_ID` | — | server.js |
| `SITE_ID` | COMPILED_DEPLOYMENT.siteId | server.js, edge/openssa-sensor/lib/openssa.js, lib/openssa.js |
| `SUITE_VERSION` | — | server.js, tools/integrate_opensof_service_entries.py |

## Service candidates

No component-specific service definition was associated by the scanner.

## External dependencies/endpoints

| Host | URL | Source |
| --- | --- | --- |
| ${req.headers.host | `http://${req.headers.host/` | `server.js` |
| bss.dev | `https://bss.dev/live/isac/\nOPENLVC_PUBLIC_URL=\nAEGIS_SENTINEL_LABEL=AEGIS-SENTINEL\nOPENMAIL_PUBLIC_URL=\nOPENFILES_PUBLIC_URL=\n` | `tools/integrate_opensof_service_entries.py` |
| files.aegis.example.test | `https://files.aegis.example.test/` | `tests/external_integrations_smoke_test.py` |
| isac.edge.example.test | `https://isac.edge.example.test/` | `tests/external_integrations_smoke_test.py` |
| loammhpng4.c36.airoapp.ai | `https://loammhpng4.c36.airoapp.ai/` | `CHANGELOG.md` |
| loammhpng4.c36.airoapp.ai | `https://loammhpng4.c36.airoapp.ai/` | `README.md` |
| loammhpng4.c36.airoapp.ai | `https://loammhpng4.c36.airoapp.ai/api/tracks` | `README.md` |
| lvc.example.test | `https://lvc.example.test/` | `tests/external_integrations_smoke_test.py` |
| mail.aegis.example.test | `https://mail.aegis.example.test/` | `tests/external_integrations_smoke_test.py` |
| opencop.c24.airoapp.ai | `https://opencop.c24.airoapp.ai/api/tracks` | `deploy.env.example` |
| opencop.c24.airoapp.ai | `https://opencop.c24.airoapp.ai/api/tracks` | `server.js` |
| opensof.bss.dev | `https://opensof.bss.dev/` | `server.js` |
| opensof.local | `https://opensof.local/graph/core` | `deploy.env.example` |
| opensof.local | `https://opensof.local/graph/core` | `server.js` |
| opensof.local | `https://opensof.local/ontology` | `server.js` |
| opensof.local | `https://opensof.local/resource/` | `server.js` |

## Verification checklist

- Confirm the component is included and enabled in this edition/release.
- Record its authoritative service, process/container, port, base URL and health endpoint.
- Exercise its primary operator workflow and capture expected versus actual results.
- Verify authentication, authorization, audit, error behavior and data handling policy.
- Verify OpenBus/OpenKnowledge relationships and time/provenance metadata where applicable.
- Document known limitations and the release in which they are corrected.
<!-- BOOKSTACK-DOCUMENT-RELEASE:END -->

---

## Maintainer Notes

<!-- BOOKSTACK-DOCUMENT-RELEASE:NOTES-BEGIN -->
Add human-reviewed deployment notes, corrections, decisions, screenshots, and links here. Content outside the generated block is preserved on future runs.
<!-- BOOKSTACK-DOCUMENT-RELEASE:NOTES-END -->