v0.1.0-alpha — the simulated slice

The simulated slice. AntiFl0ck's first tagged release: the local coffee-shop
scenario runs end-to-end behind a strict 10-gate release check — a sensitive
action is held on an untrusted network, the route recovers and is
verified, the action is allowed, and all five audit events land in a
signed, hash-chained local log.

What works

• Coffee-shop simulation end-to-end (five signed audit events)
• Deterministic policy engine, findings, signed expiring plans
• Secure-action gate + TypeScript SDK
• Linux route/interface observation; read-only Tailscale/Headscale probes
• Third-Eye dashboard, enrollment, local device identity

What does not (yet)

No production VPN or packet transport, no phone kill-switch, no privileged host
mutation, no proof-of-surveillance claims, no external audit. Full boundary:
release status.

Try it

make dev
make lab
make verify

Docker + Node 24 required · dashboard at http://127.0.0.1:4173 ·
operator runbook

Five ways in

• Quickstart friction log — no Go needed
• Third-Eye screenshots for the docs
• Evidence worked-examples page
• Vector redraw of the eagle mark
• macOS collector

Security warning: pre-release defensive software. It does not provide
anonymity, prove surveillance, or replace a VPN. Report vulnerabilities via
SECURITY.md.

Roadmap and open decisions: open-questions