docs(roe): sync the wiki with RoE replace, remove and history
Pages around the Rules of Engagement page now match the feature:
Global Settings (Upload RoE / Replace RoE, where the model chip shows),
Home, Recon Presets (Load Preset reads first, names the settings the
document set, refuses a stale save), Scan Timeline and AI Gauntlet
(schedules paused by a replace; AI Gauntlet re-confirm asks for the RoE
again), Red Zone (the Limits badge and the RoE tab), Pentest Reports
(document and applied-after-scan note), Data Export and Import (the RoE
history travels and is re-checked), MCP Server (lastRun.roeChangedSince),
Recon Pipeline Workflow (the Upload it in RoE link) and a Troubleshooting
table of RoE upload errors.
New screenshots of the remove review and the superseded-documents
history, on the RoE page.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
docs: sync the wiki with Multi mute and Models by feature
New screenshots of the Multi mute dialog and the Models by feature grid;
refreshed CypherFix settings (the two account-wide model pickers), RoE tab
(its model line) and node drawer (Multi mute beside Mute). Home and the
sidebar link both sections, the drawer's action table follows the
on-screen order, and Muted Nodes and Global Settings note the re-run
after a muted seed and the grid waiting for a save.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
docs: Multi mute, Models by feature and the three-layer Priority Board
Multi mute on Muted Nodes and the Red Zone, Models by feature in Global
Settings and on every feature page that asks for a model, the settings
that retire the per-project CypherFix model, and the Priority Board's
rules, review and decision layers with the MCP review and run tools.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
docs(red-zone): document the Node ID and Mute columns and Node ID lookups
Adds the Node ID and Mute columns section and updates the Node Inspector,
Priority Board, Muted Nodes, Recon Delta and Insights Top Findings pages.
MCP Server: APOC functions and variable-length paths are now refused, and
how to look a node up by nodeId. Adds the missing Node Inspector screenshot
and refreshes the All Nodes one (Technology rows, no target addresses).
Also fixes the Top Findings columns and the Node Inspector export format
(CSV), both stale before this change.
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
docs(red-zone): document the node drawer actions and node-scoped agent sessions
Node Drawer: the Basic Info action row (copy context, ask agent, mute,
delete), what the copied brief contains and its limits, the smaller title
with a hover for clipped names, and the corrected delete scope. AI Agent
Guide: a second way in, a "Starting a Session from a Graph Node" section and
the node-chat title. Refreshes the node drawer screenshot, which also drops a
real hostname and IP the old image showed, and adds two new ones.
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
docs: add redamon.org/docs canonical banners + XBEN 8/16-20 walkthrough videos
Prepend a canonical banner to each curated wiki page linking to its version on
the official docs site (redamon.org/docs), so search engines consolidate
authority onto the owned domain instead of ranking the GitHub wiki. Also adds
the walkthrough video links to XBEN-008/016/017/018/019/020 in the benchmark table.
docs: supply-chain incident intel (6.10.0)
- Supply-Chain-Scanning: new "The incident catalog (threat intel)" section
(sync command, the six knobs, what it adds, the three things it deliberately
does not do, and the honest scope note that this catches the browser-side
class rather than supply-chain attacks in general). Adds the two new project
toggles, the Incident column on the Verdicts sheet, and the ThreatPulse /
CONTACTS_MALICIOUS_HOST half of the graph model.
- Project-Settings-Reference: scaIntelCorrelationEnabled (default ON) and
supplyChainTyposquatEnabled (default off, gates only the fuzzy check).
- TrafficMind: the ioc flag chip and the per-user ignore list, including that
clearing the box restores the shipped list rather than disabling suppression.
- Red-Zone: Threat Intel now has a third kind of row (BaseURL / Contacted host)
and why the edge type keeps it from reading as "your host is an indicator";
the SCA Verdicts sheet gains the Incident column.
- Attack-Surface-Graph: the new relationship in the chain, typosquat as a
source_tool, and the incident_* properties.
- Recon-Pipeline-Workflow: what GROUP 5.5 now does beyond the OSV verdict.
docs: repoint repo-relative links after the root reorganization
readmes/ moved to docs/readmes/ in the main repo, so the ../readmes/ links
from these wiki pages no longer resolved in a local checkout.
docs(scans): rename Scan Scheduler to Scans, add scan queue + org batch
docs(red-zone): Supply-Chain SCA table, JS Dep Signals rename, stale Other Scans
The "Supply-Chain" preset documented at #15 is the JS-Recon panel (source maps,
dev comments, dependency confusion). The package/OSV feature then took that name
in the UI, so the two were indistinguishable in the docs as well.
- #15 renamed to "JS Dep Signals", with a note that /graph?table=supplyChain
still resolves there, and that its Package/Version columns were blank on every
row until the js_recon writer started storing package_name/package_version.
- New #20 "Supply-Chain SCA": the Package / MalPackageFinding /
Vulnerability{source='osv'} view, its three sheets, and the three things it
derives rather than reads (three-state verdict, unverdictable packages,
origin), plus caps, deep links and export names.
- Preset counts corrected in both places that state them: 19/16 -> 20/17.
- Other Scans said the modal holds "both" scanners and listed two. It has held
three since the Supply Chain Scanner was added; documented, including that all
three write the live graph and so are blocked while viewing a past version.
- Data-Export-and-Import: the Red Zone sub-table list said "Supply Chain" and
omitted Web Cache Poisoning; multi-sheet tables export the ACTIVE sheet only
and do not follow the redzone-<slug> filename pattern, which was undocumented.