0 Fork 0

Files

T

Lucas RayanandClaude Sonnet 5 1b974bb90d chore: initial project skeleton

Acauã: Network Detection & Threat Hunting, heuristic analysis over a
rolling 7-day window using deterministic math (time series, graph
theory, information theory) instead of opaque ML models. Third
product in the Ciberfauna ecosystem, alongside Guará and Sabiá.

Follows the ecosystem's established conventions: OpenWolf project
memory, bilingual PT-BR/EN docs and UI, Gitea Actions CI/CD on the
same self-hosted runners, Conventional Commits, SemVer, logo and
productName handling, MIT OR Apache-2.0 licensing.

Architecture decision (made with the project owner after a dedicated
consultation, not the original blueprint's suggested stack): Rust
throughout, not Python/FastAPI/React. Most of the statistics (Bowley
skew, MADM, Shannon entropy, PCR, Z-score, novel-edge detection,
pivot chains) reduces to SQL over an embedded DuckDB/Parquet store;
only the spectral analysis and graph centrality need host-language
code, and both have workable Rust crates. Documented in full, including
six corrections to the original blueprint's math (Rayleigh/Schuster
instead of a degenerate Lomb-Scargle over bare timestamps, an explicit
sentinel for Bowley skew's Q3=Q1 case, Jensen-Shannon instead of
unbounded KL, a dedicated long-connection detector, JA4 vs. JA4+
licensing caution, deterministic per-alert evidence), in
docs/architecture.md.

Skeleton only: crates/acaua-core has the four detection pillars,
fusion, storage, zeek log parsing and the updater as typed stubs that
compile and return a clear "skeleton" status rather than real
detection logic — that is separate, future work. crates/acaua-cli has
serve/analyze/doctor/update. apps/gui is a minimal Tauri shell. Also
already includes the one-click desktop self-update mechanism shared
with Guará and Sabiá (AppImage/.deb/Windows installer), even with no
release published yet, for consistency across the ecosystem.

No Gitea repository exists for this project yet; this is a local-only
commit.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01VAyr8d7HuAdUGB6aA5xmDD

2026-10-31 10:20:03 -03:00

1.7 KiB

Raw Blame History

Support

English · Português

Acauã is pre-alpha. There is no support contract and no published binary yet. The fastest way to get help is a focused issue in the Gitea repository.

Before opening an issue

Run acaua doctor --json and keep the output.
Confirm the version with acaua --version.
Try the smallest input that reproduces the problem.
Read the known limits and architecture.

What to include

Operating system, architecture and Acauã version.
The exact command and the full terminal output.
Whether the input is a Zeek log directory, a synthetic fixture or a capture.
For a UI problem: browser or desktop build, language and theme.
For an update problem: acaua update output and whether curl and tar are on PATH.

Do not attach production captures or credentials. Redact addresses, hostnames and payloads before sharing.

Security issues

Do not include exploit details in a public issue. Follow SECURITY.md and ask for a private channel first.

Common situations

Symptom	What to check
`analyze` returns zero records	Expected in `0.1.0`; the parser is a stub
`serve` is unreachable from another machine	It binds to loopback by default
`update` fails	`curl`, `tar`, write permission and release assets
Desktop build fails	Tauri system dependencies for the platform
UI shows Portuguese	`Auto` follows the system language; choose English in settings

Scope

Support covers the Acauã code and documentation. It does not cover Zeek or Suricata configuration, network capture legality, or third-party distribution packages. Use only on networks you own or are authorized to monitor.

1.7 KiB Raw Blame History