System status

Durable principal, evidence, findings, Kanban, report and intent storage.

config: aurora/postgres connection

Local case task creation and lane movement backed by the active case-state store.

config: aurora/postgres connection

Case cadence derived from persisted remediation tasks.

config: aurora/postgres connection

Case-derived report generation and human-review intents persisted locally.

config: aurora/postgres connection

Publish approved case-derived executive reports to the Docs service.

config: server operator credential, protected handoff flag

Export approved findings, risk scores and task matrices to Sheets.

config: server operator credential, protected handoff flag

Upload approved reports, evidence bundles, and public media candidate manifests to Files.

config: server operator credential, protected handoff flag

Runtime flag for redacted, private, or public authorized case data surfaces.

config: cloak visibility mode

Production request/runtime metadata and deployment environment awareness.

Delegated provider authorization through Vercel Connect. Cloak Harbor keeps provider tokens server-side and exposes only authorization and token-metadata status.

config: server secret

Bounded public-photo candidate manifests stored through Files for authorized case review.

config: cloak public media capture, server operator credential, protected handoff flag

Server-side private artifact storage for OSINT run packets, evidence bundles, exports, and screenshots.

config: server secret

Server-side AWS object-store credentials for evidence vault workflows.

config: aws access id, server secret

Local Hunchly export indexer for protected evidence review when a desktop export directory is configured.

config: hunchly export dir

Export protected operation lifecycles, tool calls, W3C parentage, and public-safe evidence into Trace.

config: server operator credential, protected handoff flag

Availability and recurrence monitoring for the public-safe Cloak Harbor surface.

config: server operator credential, protected handoff flag

Run browser journeys, screenshots and public-safe capture workflows for authorized cases.

config: server operator credential, protected handoff flag

Bounded exposure discovery and recurrence monitoring for authorized identifiers.

config: server operator credential, protected handoff flag

Server-side archive checks for authorized public evidence and historical source links.

config: server secret · missing server secret

Server-side APILayer Numverify validation for authorized onboarding phone identifiers, with evidence, Kanban, webhook, and Sandbox records.

config: server secret

Local graph-aware correlation scoring over authorized client identifiers with explainable remediation planning.

config: aurora/postgres connection

Local Sherlock CLI adapter for authorized username and alias correlation checks.

config: sherlock bin · missing sherlock bin

Local SpiderFoot command adapter for authorized domain, email, and entity pivots.

config: spiderfoot bin · missing spiderfoot bin

Human-review queue for authorized email and phone checks until an approved server API contract is added.

config: aurora/postgres connection

Cloak-owned source playbook automation inspired by public OSINT workflows; generates evidence links and approval tasks for authorized identifiers.

config: aurora/postgres connection

Defensive LLM-assisted review queue for public clues that may weaken password recovery questions. It never stores actual answer values.

config: aurora/postgres connection

Bounded OpenStreetMap address-surface review for authorized address identifiers.

config: aurora/postgres connection

Evidence confidence, false-positive review and trusted-domain validation.

config: server operator credential, protected handoff flag

Local schema and contract validation for findings, evidence and action packets.

Score risk-rubric consistency, release readiness and action-packet quality.

config: server operator credential, protected handoff flag

SEC EDGAR and PACER-style source-link queue for authorized entity, domain, and name review.

config: aurora/postgres connection

Agentic remediation requests that remain protected and human-gated.

config: server operator credential, protected handoff flag

Safe replay and dry-run execution for action packets.

config: server operator credential, protected handoff flag

Webhook simulation and delivery testing for protected events.

config: server operator credential, protected handoff flag

Protected local event emission, HMAC signing, optional delivery target, and Postgres delivery ledger for case lifecycle events.

config: aurora/postgres connection

Agent-facing workflow validation and human-machine handoff review surfaces.

config: server operator credential, protected handoff flag

Optional isolated diagnostics for redacted OSINT run packets using deny-all network policy.

config: cloak enable vercel sandbox

Provider routing for human-reviewed drafts. Template fallback remains available when missing.

config: server secret

Server-side fallback credentials for provider-specific workflows when Gateway is unavailable.

config: server secret · missing server secret

Authorized OSINT and surface-assessment handoff through the JC PenTest Harness MCP.

config: server operator credential, protected handoff flag

Cross-site topology and relationship context for Cloak Harbor workflows.

config: server operator credential, protected handoff flag

Server-side Stripe Checkout, webhook receipts, and paid-plan entitlement handoff for Custom Cloak.

config: server secret

Optional server-side Stripe MCP credential for operator-assisted billing investigation and future entitlement automation.

config: server secret

Approved phone verification and client-notification workflows from server-side routes.

config: server secret · missing server secret