# abinashp671-droid/orion_v2 architecture

> Architecture diagram of the GitHub repository abinashp671-droid/orion_v2, generated by GitDiagram from its file tree, README and a sample of source files (last updated 2026-09-30). It is an AI-made overview: check details against the source.

- Interactive diagram: https://gitdiagram.com/abinashp671-droid/orion_v2
- Repository: https://github.com/abinashp671-droid/orion_v2

## Overview

ORION is documented as a multimodal cyber-threat intelligence platform: citizens or SOC analysts submit web, message, audio, image, video, or authentication signals; detection produces normalized evidence, deterministic risk assessment, explanations and response guidance, surfaced in citizen and SOC interfaces. The checked-in source shown here implements the Browser Shield extension, which observes bounded page signals, requests analysis, stores the result and presents warnings. The tree omits the documented backend and dashboard source, so those capabilities are represented at subsystem level with no asserted implementation path; their internal wiring follows the README architecture.

Main entry points: [`browser-shield/src/background/background.js`](https://github.com/abinashp671-droid/orion_v2/blob/main/browser-shield/src/background/background.js) (Background Worker), [`browser-shield/src/popup/popup.js`](https://github.com/abinashp671-droid/orion_v2/blob/main/browser-shield/src/popup/popup.js) (Shield Popup), [`browser-shield/src/content/content.js`](https://github.com/abinashp671-droid/orion_v2/blob/main/browser-shield/src/content/content.js) (Page Observer), [`browser-shield/src/config.js`](https://github.com/abinashp671-droid/orion_v2/blob/main/browser-shield/src/config.js) (Endpoint Config)

## Diagram (Mermaid)

```mermaid
flowchart TD

subgraph group_shield["Browser Shield"]
  node_pageobserver["Page Observer<br/>[content.js]"]
  node_worker["Background Worker<br/>[background.js]"]
  node_config["Endpoint Config<br/>[config.js]"]
  node_shieldstore[("Extension Storage<br/>[background.js]")]
  node_popup["Shield Popup<br/>[popup.js]"]
end

subgraph group_detect["Detection"]
  node_gateway["Provider Gateway"]
  node_websignals["Web Detectors"]
  node_identitymedia["Identity Media Detectors"]
  node_semantic["Semantic Observers"]
end

subgraph group_assessment["Assessment"]
  node_evidence["Evidence Contract"]
  node_risk["Deterministic Risk Engine"]
  node_explain["Threat Enrichment"]
  node_incidents[("Incident Records")]
end

subgraph group_experience["User Experiences"]
  node_citizen["Citizen Safety Hub"]
  node_soc["SOC Command Center"]
end

node_webuser(("Web User"))
node_helpline(("Cyber Helpline 1930"))
node_browser(("Browser"))

node_webuser -->|"visits page"| node_pageobserver
node_pageobserver -->|"sends signals"| node_worker
node_worker -->|"reads endpoint"| node_config
node_worker -->|"posts analysis"| node_gateway
node_worker -->|"caches results"| node_shieldstore
node_popup -->|"reads results"| node_shieldstore
node_popup -->|"requests status"| node_worker
node_popup -->|"builds deep link"| node_config
node_gateway -->|"dispatches detection"| node_websignals
node_gateway -->|"dispatches detection"| node_identitymedia
node_gateway -->|"requests observations"| node_semantic
node_gateway -->|"normalizes evidence"| node_evidence
node_evidence -->|"scores evidence"| node_risk
node_risk -->|"enriches assessment"| node_explain
node_explain -.->|"records incidents"| node_incidents
node_explain -->|"serves guidance"| node_citizen
node_explain -->|"serves investigations"| node_soc
node_citizen -->|"dispatches reports"| node_helpline
node_browser -.->|"opens extension"| node_popup

click node_pageobserver "https://github.com/abinashp671-droid/orion_v2/blob/main/browser-shield/src/content/content.js"
click node_worker "https://github.com/abinashp671-droid/orion_v2/blob/main/browser-shield/src/background/background.js"
click node_config "https://github.com/abinashp671-droid/orion_v2/blob/main/browser-shield/src/config.js"
click node_shieldstore "https://github.com/abinashp671-droid/orion_v2/blob/main/browser-shield/src/background/background.js"
click node_popup "https://github.com/abinashp671-droid/orion_v2/blob/main/browser-shield/src/popup/popup.js"

classDef toneNeutral fill:#f8fafc,stroke:#334155,stroke-width:1.5px,color:#0f172a
classDef toneBlue fill:#dbeafe,stroke:#2563eb,stroke-width:1.5px,color:#172554
classDef toneAmber fill:#fef3c7,stroke:#d97706,stroke-width:1.5px,color:#78350f
classDef toneMint fill:#dcfce7,stroke:#16a34a,stroke-width:1.5px,color:#14532d
classDef toneRose fill:#ffe4e6,stroke:#e11d48,stroke-width:1.5px,color:#881337
classDef toneIndigo fill:#e0e7ff,stroke:#4f46e5,stroke-width:1.5px,color:#312e81
classDef toneTeal fill:#ccfbf1,stroke:#0f766e,stroke-width:1.5px,color:#134e4a
class node_pageobserver,node_worker,node_config,node_shieldstore,node_popup,node_webuser,node_browser toneBlue
class node_gateway,node_websignals,node_identitymedia,node_semantic toneAmber
class node_evidence,node_risk,node_explain,node_incidents toneMint
class node_citizen,node_soc toneRose
class node_helpline toneIndigo
```

## Components

### Browser Shield

- [Page Observer](https://github.com/abinashp671-droid/orion_v2/blob/main/browser-shield/src/content/content.js): `browser-shield/src/content/content.js`
- [Background Worker](https://github.com/abinashp671-droid/orion_v2/blob/main/browser-shield/src/background/background.js): `browser-shield/src/background/background.js`
- [Endpoint Config](https://github.com/abinashp671-droid/orion_v2/blob/main/browser-shield/src/config.js): `browser-shield/src/config.js`
- [Extension Storage](https://github.com/abinashp671-droid/orion_v2/blob/main/browser-shield/src/background/background.js): `browser-shield/src/background/background.js`
- [Shield Popup](https://github.com/abinashp671-droid/orion_v2/blob/main/browser-shield/src/popup/popup.js): `browser-shield/src/popup/popup.js`

### Detection

- **Provider Gateway**
- **Web Detectors**
- **Identity Media Detectors**
- **Semantic Observers**

### Assessment

- **Evidence Contract**
- **Deterministic Risk Engine**
- **Threat Enrichment**
- **Incident Records**

### User Experiences

- **Citizen Safety Hub**
- **SOC Command Center**

### Other components

- **Web User**
- **Cyber Helpline 1930**
- **Browser**

## Connections

- Web User → Page Observer: visits page (evidence: `browser-shield/src/content/content.js`)
- Page Observer → Background Worker: sends signals (evidence: `browser-shield/src/content/content.js`)
- Background Worker → Endpoint Config: reads endpoint (evidence: `browser-shield/src/background/background.js`)
- Background Worker → Provider Gateway: posts analysis (evidence: `browser-shield/src/background/background.js`)
- Background Worker → Extension Storage: caches results (evidence: `browser-shield/src/background/background.js`)
- Shield Popup → Extension Storage: reads results (evidence: `browser-shield/src/popup/popup.js`)
- Shield Popup → Background Worker: requests status (evidence: `browser-shield/src/popup/popup.js`)
- Shield Popup → Endpoint Config: builds deep link (evidence: `browser-shield/src/popup/popup.js`)
- Provider Gateway → Web Detectors: dispatches detection (evidence: `README.md`)
- Provider Gateway → Identity Media Detectors: dispatches detection (evidence: `README.md`)
- Provider Gateway → Semantic Observers: requests observations (evidence: `README.md`)
- Provider Gateway → Evidence Contract: normalizes evidence (evidence: `README.md`)
- Evidence Contract → Deterministic Risk Engine: scores evidence (evidence: `README.md`)
- Deterministic Risk Engine → Threat Enrichment: enriches assessment (evidence: `README.md`)
- Threat Enrichment → Incident Records: records incidents
- Threat Enrichment → Citizen Safety Hub: serves guidance (evidence: `README.md`)
- Threat Enrichment → SOC Command Center: serves investigations (evidence: `README.md`)
- Citizen Safety Hub → Cyber Helpline 1930: dispatches reports (evidence: `README.md`)
- Browser → Shield Popup: opens extension