How blackbox-sentinel/blackbox_sentinel works
BlackBox Sentinel is an inline network-defense appliance with a software simulation path. Its principal workflow captures or generates traffic, extracts window features, scores anomalies, gates containment through authenticated evidence and quorum, records decisions, and presents telemetry; physical relay isolation and tamper response are hardware-facing capabilities. The README also documents a kiosk, REST API, 3D CAD studio, and circuit simulator. The graph combines sampled source relationships, SOURCE INDEX references, and README-documented capabilities; unsampled implementation details are not inferred.
Main entry points: sentinel_pipeline.py Sentinel pipeline · m3_decision_path.py Decision orchestration · hal_base.py Hardware abstraction · trusted_controller_sim.py Trusted controller
Components 23
Traffic and detection
- Traffic generator
m2-systems/sim/traffic_generator.py - Feature extraction
ml/feature_pipeline_v2.py - Adaptive inference
m3-ml-ledger/src/predict_v3.py - Legacy inference
m3-ml-ledger/src/predict.py - Sentinel pipeline
sentinel_pipeline.py
Evidence and containment
- Authenticated envelopes
m3-ml-ledger/src/authenticated_envelope.py - Evidence contracts
m3-ml-ledger/src/m3_security_contracts.py - Quorum state
m3-ml-ledger/src/quorum_state.py - Decision orchestration
m3-ml-ledger/src/m3_decision_path.py - Trusted controller
m3-ml-ledger/src/trusted_controller_sim.py - Evidence transport
m2-systems/src/evidence_transport.py - Forensic ledger
ml/ledger.py
Hardware and security
- Relay controller
m1-hardware/src/relay_controller.py - Hardware abstraction
common/hal/hal_base.py - Security controller
security/trusted_controller.py
Telemetry and interface
- Normalized telemetry
integration/telemetry.py - Touch dashboard
gui/dashboard.py - Tactical GUI
m4-gui-venture/src/app.py - Web kiosk
m4-gui-venture/server.py - Hardware API
m4-gui-venture/hw_simulator_server.py - 3D CAD studio
m4-gui-venture/web/cad_viewer.js - Circuit simulator
m4-gui-venture/web/simulator.js
Other components
- Operator
Connections 30
- Operator → Sentinel pipeline: starts defense
README.md - Traffic generator → Feature extraction: provides packets
sentinel_pipeline.py - Sentinel pipeline → Traffic generator: generates traffic
sentinel_pipeline.py - Sentinel pipeline → Feature extraction: extracts features
sentinel_pipeline.py - Sentinel pipeline → Adaptive inference: scores windows
sentinel_pipeline.py - Sentinel pipeline → Legacy inference: scores traffic
- Sentinel pipeline → Decision orchestration: requests decision
sentinel_pipeline.py - Sentinel pipeline → Evidence transport: uses transport
sentinel_pipeline.py - Decision orchestration → Authenticated envelopes: binds evidence
m3-ml-ledger/src/m3_decision_path.py - Decision orchestration → Evidence contracts: evaluates evidence
m3-ml-ledger/src/m3_decision_path.py - Decision orchestration → Quorum state: evaluates votes
m3-ml-ledger/src/m3_decision_path.py - Decision orchestration → Trusted controller: requests containment
m3-ml-ledger/src/m3_decision_path.py - Decision orchestration → Forensic ledger: records decision
m3-ml-ledger/src/m3_decision_path.py - Evidence transport → Authenticated envelopes: authenticates messages
m2-systems/src/evidence_transport.py - Evidence transport → Quorum state: carries votes
m2-systems/src/evidence_transport.py - Trusted controller → Evidence contracts: verifies receipt
m3-ml-ledger/src/trusted_controller_sim.py - Trusted controller → Quorum state: checks approval
m3-ml-ledger/src/trusted_controller_sim.py - Sentinel pipeline → Hardware abstraction: uses hardware layer
sentinel_pipeline.py - Hardware abstraction → Relay controller: controls relay
- Security controller → Relay controller: enforces isolation
- Sentinel pipeline → Normalized telemetry: publishes status
sentinel_pipeline.py - Touch dashboard → Normalized telemetry: reads telemetry
gui/dashboard.py - Operator → Tactical GUI: uses kiosk UI
README.md - Tactical GUI → Hardware abstraction: accesses hardware
m4-gui-venture/src/app.py - Tactical GUI → Forensic ledger: records override
m4-gui-venture/src/app.py - Operator → Web kiosk: opens kiosk
README.md - Web kiosk → 3D CAD studio: serves CAD studio
README.md - Web kiosk → Circuit simulator: serves simulator
README.md - Operator → Hardware API: uses hardware API
README.md - Hardware API → Hardware abstraction: uses hardware layer
m4-gui-venture/hw_simulator_server.py