How abinashp671-droid/orion_v2 works
ORION is documented as a multimodal cyber-threat intelligence platform: citizens or SOC analysts submit web, message, audio, image, video, or authentication signals; detection produces normalized evidence, deterministic risk assessment, explanations and response guidance, surfaced in citizen and SOC interfaces. The checked-in source shown here implements the Browser Shield extension, which observes bounded page signals, requests analysis, stores the result and presents warnings. The tree omits the documented backend and dashboard source, so those capabilities are represented at subsystem level with no asserted implementation path; their internal wiring follows the README architecture.
Main entry points: background.js Background Worker · popup.js Shield Popup · content.js Page Observer · config.js Endpoint Config
Components 18
Browser Shield
- Page Observer
browser-shield/src/content/content.js - Background Worker
browser-shield/src/background/background.js - Endpoint Config
browser-shield/src/config.js - Extension Storage
browser-shield/src/background/background.js - Shield Popup
browser-shield/src/popup/popup.js
Detection
- Provider Gateway
- Web Detectors
- Identity Media Detectors
- Semantic Observers
Assessment
- Evidence Contract
- Deterministic Risk Engine
- Threat Enrichment
- Incident Records
User Experiences
- Citizen Safety Hub
- SOC Command Center
Other components
- Web User
- Cyber Helpline 1930
- Browser
Connections 19
- Web User → Page Observer: visits page
browser-shield/src/content/content.js - Page Observer → Background Worker: sends signals
browser-shield/src/content/content.js - Background Worker → Endpoint Config: reads endpoint
browser-shield/src/background/background.js - Background Worker → Provider Gateway: posts analysis
browser-shield/src/background/background.js - Background Worker → Extension Storage: caches results
browser-shield/src/background/background.js - Shield Popup → Extension Storage: reads results
browser-shield/src/popup/popup.js - Shield Popup → Background Worker: requests status
browser-shield/src/popup/popup.js - Shield Popup → Endpoint Config: builds deep link
browser-shield/src/popup/popup.js - Provider Gateway → Web Detectors: dispatches detection
README.md - Provider Gateway → Identity Media Detectors: dispatches detection
README.md - Provider Gateway → Semantic Observers: requests observations
README.md - Provider Gateway → Evidence Contract: normalizes evidence
README.md - Evidence Contract → Deterministic Risk Engine: scores evidence
README.md - Deterministic Risk Engine → Threat Enrichment: enriches assessment
README.md - Threat Enrichment → Incident Records: records incidents
- Threat Enrichment → Citizen Safety Hub: serves guidance
README.md - Threat Enrichment → SOC Command Center: serves investigations
README.md - Citizen Safety Hub → Cyber Helpline 1930: dispatches reports
README.md - Browser → Shield Popup: opens extension