iCheck v0.1.0-preview.r19.28 - Monitoring integrations and portable operations

iCheck Engineering Preview r19.28

N1–N3: external monitoring integrations, portable operation packages and built-in operational capabilities.

Download and install

For a fresh Ubuntu 24.04 x86_64 server, download
icheck-0.1.0-preview.r19.28-ubuntu24.04-amd64.run and SHA256SUMS.
Verify the checksum, then run:

sudo bash icheck-0.1.0-preview.r19.28-ubuntu24.04-amd64.run

This installs native systemd services. Docker is not required.
The application and Python wheels are embedded; OS and monitoring dependencies
require network access. Existing installations are refused, not overwritten.
The automatically generated Source code downloads are not installers.

Web username: admin. The password is the unique 15–256-character passphrase
you choose during setup. No shared password, provider key, device credential,
private deployment receipt or lab inventory is distributed.

See the installation guide
for prerequisites, HTTPS, Grafana credentials and recovery.
The separate native application archive is for administrators following the
manual deployment and upgrade guide.

Changes

• External monitoring: read-only Zabbix 7.0/7.4, SolarWinds Platform/Orion
  SWIS v3 and the versioned monitoring-bridge contract. GUI source setup,
  group selection, inventory synchronization, optional schedules, reviewed
  asset mapping, alert feeds and metric/history tools are included.
  Imported inventory does not start duplicate device polling.
• Alert investigation: external evidence can feed the existing opt-in AI
  investigation engine. Source suppression/recovery and local silence/closure
  stop further steps. An in-flight request may finish. Acknowledgement alone
  does not stop investigation, and stopped episodes do not restart automatically.
• Portable packages: export/import workflows, Skills, collectors, tools,
  multi-tool MCP packages and connector requirements. Imports use local bindings,
  dependency review, content hashes, signature policy and recorded receipts.
  Importing does not automatically install, execute or schedule a package.
• Six built-in operation packages: Zabbix Operations, SolarWinds Operations,
  Connector Bridge Operations, Network Diagnostics, HTTP/API Diagnostics and
  Configuration Backups. The network package contains Cisco IOS, NX-OS and Junos
  MCP servers, each with interface-check and protected configuration-backup tools.
• Native installation: database head h1n3q5s7u9w2, two dedicated integration
  workers, restricted database roles and a shared source-origin policy that starts
  empty. Configure approved source endpoints before testing integrations.

Open Monitoring → Integrations and Capability Studio → Packages after sign-in.
Existing Grafana AI editing, Prometheus/Alertmanager and multi-provider settings
remain available.

Verification and limits

See the attached acceptance record for the exact artifact hashes, clean-host
installation, reboot and regression results. Source, Git history and built
application checks exclude private runtime material. Generated Next.js build keys
are identified separately from operator/provider credentials.

The clean-host test uses a software-emulated VM. One Collector timeout recovered
automatically during installation, and an early post-reboot readiness probe
reached its five-minute limit before startup completed. These observations are
recorded in the acceptance asset; no installation repair was performed.

This is an engineering prerelease, not a production-capacity claim.
Live Zabbix/Orion interoperability and representative fleet acceptance remain
pending. SolarWinds SaaS, non-node/cumulative Orion alerts, arbitrary configuration
changes, OS upgrades, high availability and automated in-place upgrades are outside
this release's scope. No source, device, paid AI provider or recurring policy is
activated during installation.

Feedback: GitHub issues.

iCheck r19.27 - Native Linux installer

Native Linux installer

This prerelease adds a self-extracting, one-command installer for a dedicated,
fresh Ubuntu 24.04 x86_64 server. All application services run natively under
systemd. Docker is not installed or required.

Download the .run file and SHA256SUMS from Assets, verify the checksum,
then run:

sha256sum --check --ignore-missing SHA256SUMS
sudo bash icheck-0.1.0-preview.r19.27-ubuntu24.04-amd64.run

The installer asks for a server IPv4 address, approved monitoring networks and
an administrator passphrase. It provisions PostgreSQL, the application and GUI,
workers, HTTPS, Prometheus, SNMP Exporter, Grafana and Alertmanager. It includes
the prebuilt r19.26 application and pinned Python wheels; OS packages and pinned
monitoring binaries require Internet access. No source compilation is required.

Sign-in and configuration

• Web username: admin.
• Web password: the unique 15-256-character passphrase chosen during setup.
• No shared default password, provider token, saved device credential or existing
  lab configuration is included.
• Grafana uses its own admin account and a fresh random password; retrieval
  instructions are in the installation guide.
• Devices, AI/search providers and alert investigation policies are configured
  after installation. Installation does not contact devices or call AI providers.

Scope and limitations

This is a single-node engineering prerelease, not a production or large-fleet
qualification. It requires at least 3 GiB RAM and 10 GiB free root disk space.
Existing or partially installed systems are refused, not overwritten. This is
not an in-place upgrade or offline installer. ARM and other distributions are
not qualified. Evaluation certificates expire after 90 days and integration
tokens after 30 days; renewal is operator-managed.

The GitHub-generated source archives remain source distributions. Choose the
.run asset for installation.

Verification

• The exact installer asset completed one unmodified installation on a fresh,
  signed Ubuntu 24.04.5 cloud image in an independent VM.
• All 18 post-install checks passed and passed again after reboot: password
  sign-in, secure browser-session cookies, 15 native application/monitoring
  services, four current worker heartbeat groups, restricted database roles,
  integration readiness, and complete downloads of 14 initial JavaScript assets.
• A repeat installation was refused without changing 15 protected configuration,
  credential and receipt files.
• 136 focused tests passed. Source, Git history and the extracted payload passed
  secret scans; the publication tree passed its English/runtime-state audit.
• No live device probes, paid provider calls or upgrade of the existing server
  were performed. These checks do not constitute browser visual, fleet-load or
  real-device acceptance.

The VM used software emulation. One Collector restart was observed during the
initial startup; counters were stable during verification. All services had zero
restart counts on the subsequent verified reboot. This is not a speed benchmark.
The exact hashes, environment and results are in the native-installer-r19-27.json
asset and checked-in acceptance record.

Read the English installation guide
and preview limitations.

iCheck 0.1.0 Engineering Preview r19.26

iCheck 0.1.0 Engineering Preview · r19.26

Sanitized native Linux x86_64 distribution and complete reusable source snapshot.
This is an engineering prerelease, not a production-readiness claim.

Included

• Multi-provider guided setup: OpenRouter, OpenAI, Anthropic Claude, Google Gemini,
  DeepSeek and Qwen (Beijing/Singapore).
• AI Operator, categorized Capability Studio, multi-tool MCP server packages,
  monitoring, IP/MAC inventory, workflows and supported wireless observations.
• Direct dashboard AI authoring, Grafana integration, Alertmanager and optional
  bounded alert investigation with silence/closure stop semantics.
• English installation/user manuals, first-admin instructions and security notes.

Downloads

• icheck-engineering-preview-0-1-0-r19-26-public-linux-amd64.tar.gz: application
  wheel, 86 pinned dependency wheels, standalone GUI and native operator tools.
• icheck-0.1.0-preview.r19.26-source.tar.gz: source, synthetic tests and English
  documentation; excludes runtime databases, dependencies and private receipts.
• SHA256SUMS: integrity checksums, not a cryptographic publisher signature.

Read installation
and the user manual.

Admin access

The documented bootstrap defaults to username admin. There is no shared
default password. Set a unique 15–256-character passphrase using the protected
interactive password helper before signing in. Existing server passwords,
tokens, device credentials and lab configuration are not distributed.

Verification and boundaries

• 202 focused backend/deployment tests passed; two environment-dependent tests skipped.
• All 187 frontend tests and the native production build passed.
• Source-to-wheel checks compared 572 files; the native verifier checked 86
  dependency wheels and 25 console entry points.
• Gitleaks scanned the publication history and artifacts. Narrow exceptions are
  documented for synthetic rejection fixtures and newly generated framework
  build keys. An independent in-memory comparison found no matching live
  distinctive credentials in the release contents.
• Publication policy checks covered 1,159 tracked files and 87 documentation files.

Publication-specific differences from the running r19.26 build are English
provider labels, exclusion of private operational material, explicit monitoring
CIDRs and a documented admin bootstrap username. Publishing did not redeploy
or change the running server. No paid AI/search calls or device probes were made.

PostgreSQL, Node.js, Prometheus, SNMP Exporter, Grafana and Alertmanager remain
administrator-provisioned prerequisites. Fresh-host installation acceptance,
representative device/load testing and paid model qualification remain open.
Expanded Advanced settings may overflow a narrow phone screen with long values.
See limitations.