chore: initial project skeleton

Acauã: Network Detection & Threat Hunting, heuristic analysis over a
rolling 7-day window using deterministic math (time series, graph
theory, information theory) instead of opaque ML models. Third
product in the Ciberfauna ecosystem, alongside Guará and Sabiá.

Follows the ecosystem's established conventions: OpenWolf project
memory, bilingual PT-BR/EN docs and UI, Gitea Actions CI/CD on the
same self-hosted runners, Conventional Commits, SemVer, logo and
productName handling, MIT OR Apache-2.0 licensing.

Architecture decision (made with the project owner after a dedicated
consultation, not the original blueprint's suggested stack): Rust
throughout, not Python/FastAPI/React. Most of the statistics (Bowley
skew, MADM, Shannon entropy, PCR, Z-score, novel-edge detection,
pivot chains) reduces to SQL over an embedded DuckDB/Parquet store;
only the spectral analysis and graph centrality need host-language
code, and both have workable Rust crates. Documented in full, including
six corrections to the original blueprint's math (Rayleigh/Schuster
instead of a degenerate Lomb-Scargle over bare timestamps, an explicit
sentinel for Bowley skew's Q3=Q1 case, Jensen-Shannon instead of
unbounded KL, a dedicated long-connection detector, JA4 vs. JA4+
licensing caution, deterministic per-alert evidence), in
docs/architecture.md.

Skeleton only: crates/acaua-core has the four detection pillars,
fusion, storage, zeek log parsing and the updater as typed stubs that
compile and return a clear "skeleton" status rather than real
detection logic — that is separate, future work. crates/acaua-cli has
serve/analyze/doctor/update. apps/gui is a minimal Tauri shell. Also
already includes the one-click desktop self-update mechanism shared
with Guará and Sabiá (AppImage/.deb/Windows installer), even with no
release published yet, for consistency across the ecosystem.

No Gitea repository exists for this project yet; this is a local-only
commit.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01VAyr8d7HuAdUGB6aA5xmDD
This commit is contained in:
Lucas RayanandClaude Sonnet 5 committed 2026-10-31 10:20:03 -03:00
commit 1b974bb90d
95 files changed
+12016

No files matched your search

+167
View File
@@ -0,0 +1,167 @@
<!doctype html>
<html lang="pt-BR">
<head>
<meta charset="utf-8">
<meta name="viewport" content="width=device-width, initial-scale=1">
<title>Acauã</title>
<link rel="icon" href="/logo.png">
<link rel="stylesheet" href="/app.css">
</head>
<body>
<div class="app">
<aside class="sidebar">
<div class="brand">
<img class="logo" src="/logo.png" alt="">
<div>
<strong>Acauã</strong>
<small>caça a ameaças em rede</small>
</div>
</div>
<div class="side-title">Navegação</div>
<nav class="nav" aria-label="Navegação principal">
<button type="button" class="nav-item active" data-target="overview">
<span class="nav-icon">◈</span>
<span><span class="nav-label">Visão geral</span><span class="nav-sub">painel e estado</span></span>
</button>
<button type="button" class="nav-item" data-target="alerts">
<span class="nav-icon">◎</span>
<span><span class="nav-label">Alertas</span><span class="nav-sub">evidências recentes</span></span>
</button>
<button type="button" class="nav-item" data-target="analysis">
<span class="nav-icon">⌁</span>
<span><span class="nav-label">Análise</span><span class="nav-sub">dataset Zeek</span></span>
</button>
<button type="button" class="nav-item" data-target="settings">
<span class="nav-icon">⚙</span>
<span><span class="nav-label">Configurações</span><span class="nav-sub">idioma e tema</span></span>
</button>
</nav>
<div class="side-foot">
<div class="status-row">
<span id="connection" class="pill"><span class="dot"></span><span id="connectionText">Conectando…</span></span>
<span class="pill muted">esqueleto</span>
</div>
<div class="status-row">
<span id="version" class="mono" data-i18n-skip>—</span>
<button id="updateBtn" type="button" class="link-btn">checar atualização</button>
</div>
</div>
</aside>
<main class="main">
<header class="topbar" id="overview">
<div>
<p class="eyebrow">Acauã</p>
<h1>Caça a ameaças em rede</h1>
<p class="sub">Pesquisa determinística, sem IA opaca</p>
</div>
<button id="settingsBtn" type="button" class="icon-btn" aria-label="Configurações" title="Configurações">⚙</button>
</header>
<section class="notice notice-warn">
<strong>Aviso de escopo.</strong>
<span>Este é um esqueleto pré-implementação. Os quatro pilares matemáticos, o parser Zeek e o armazenamento DuckDB ainda não estão implementados.</span>
</section>
<section class="notice">
<strong>Uso autorizado.</strong>
<span>Use somente em redes próprias ou com autorização explícita. Nenhum pacote é enviado para fora.</span>
</section>
<section class="pillars" aria-label="Pilares de detecção">
<article class="card">
<span class="card-kicker">Pilar 1</span>
<h2>Beaconing</h2>
<p>Periodograma de Rayleigh/Schuster. Em desenvolvimento.</p>
<span class="tag">em desenvolvimento</span>
</article>
<article class="card">
<span class="card-kicker">Pilar 2</span>
<h2>Sessões persistentes</h2>
<p>Detector de conexões longas. Em desenvolvimento.</p>
<span class="tag">em desenvolvimento</span>
</article>
<article class="card">
<span class="card-kicker">Pilar 3</span>
<h2>Anomalias de protocolo</h2>
<p>Features determinísticas por protocolo. Em desenvolvimento.</p>
<span class="tag">em desenvolvimento</span>
</article>
<article class="card">
<span class="card-kicker">Pilar 4</span>
<h2>Fusão de evidências</h2>
<p>Jensen-Shannon e prova por alerta. Em desenvolvimento.</p>
<span class="tag">em desenvolvimento</span>
</article>
</section>
<section class="panel" id="analysis">
<div class="panel-head">
<div>
<h2>Analisar dataset</h2>
<p class="hint">Aponte para um diretório de logs Zeek ou para um dataset local.</p>
</div>
<button id="refreshBtn" type="button" class="btn">Atualizar status</button>
</div>
<div class="field-row">
<label class="field">
<span>Diretório de logs</span>
<input id="datasetPath" type="text" placeholder="/var/log/zeek/current" autocomplete="off" spellcheck="false">
</label>
<button id="analyzeBtn" type="button" class="btn primary">Analisar</button>
</div>
<pre id="output" class="output">Nenhuma análise executada.</pre>
</section>
<section class="panel" id="alerts">
<div class="panel-head">
<div>
<h2>Alertas recentes</h2>
<p class="hint">Cada alerta futuro carregará a evidência determinística que o sustenta.</p>
</div>
</div>
<ul id="alertList" class="alert-list">
<li class="empty">Nenhum alerta ainda. O motor de detecção será ligado nas próximas specs.</li>
</ul>
</section>
<footer class="foot">
<span>Acauã · esqueleto pré-implementação</span>
<span class="mono">MIT OR Apache-2.0</span>
</footer>
</main>
</div>
<dialog id="settingsDlg" aria-labelledby="settingsTitle">
<form method="dialog">
<div class="dialog-head">
<h2 id="settingsTitle">Configurações</h2>
<button type="button" id="closeSettings" class="icon-btn" aria-label="Fechar configurações" title="Fechar">×</button>
</div>
<label class="field">
<span>Idioma</span>
<select id="langSel">
<option value="auto">Auto</option>
<option value="pt">Português</option>
<option value="en">English</option>
</select>
</label>
<div class="field">
<span>Tema</span>
<div class="segmented" id="themePick">
<button type="button" data-theme-pick="auto">Auto</button>
<button type="button" data-theme-pick="light">Claro</button>
<button type="button" data-theme-pick="dark">Escuro</button>
</div>
</div>
<menu>
<button type="button" id="doneSettings" class="btn primary">Fechar</button>
</menu>
</form>
</dialog>
<script type="module" src="/app.js"></script>
</body>
</html>