File size: 843 Bytes
5d97275 | 1 2 3 4 5 6 7 8 9 10 11 | """Shield: the protective layer around the engine - policy, position awareness, posture audit, enforcement, playbooks.
policy what the operator allows the layer to do (report / enforce), per family and severity, allowlists
position what the layer can see from where it runs -> which roles it takes (edge WAF, host firewall, sensor, chain node)
posture what is exposed that should not be (listening ports vs policy, forgotten services), with fixes
enforce block / rate-limit / challenge with TTLs and an audit log; nftables, iptables, Windows Firewall, or dry-run
playbook recent attack patterns (2024-2026) as behaviour signatures over the engine's own features, with actions
adapters other inputs seen as streams (JSON-RPC for chain nodes)
"""
from dibaguard.shield.policy import Policy # noqa: F401
|