BLA
BLA (Blind LLM Agents) is the open-source Blue Defense MCP and CLI built to protect software artifacts against automated AI reverse-engineering workflows.
Viewer for the OMB M-26-14 Federal Logging Maturity Model — Elastic Stack reference architectures for Levels 1-4.
SecurityJavaScript · CSSGitHub @elasticOnlineOwner unconfirmed
Have you tried it? One tap is enough. No sign-in needed.
No updates detected yet. GitHub releases will appear here.
Owners of public repositories under a personal GitHub account can sign in to verify ownership and manage the introduction themselves. No administrator approval is needed.
Sign in, generate a verification file, and commit it to this repository’s default branch within 30 minutes. Files on other branches or forks do not count. Then check the file below to manage the project without administrator approval. Keep the file to retain your access.
If needed, you will go to sign-in. After signing in, return here and press your chosen verification button again.
Run /nomorevibe verify in your project folder to verify ownership and manage the introduction yourself.
Verify in one minuteAsk about other verification options
Loading the full README. The saved excerpt is shown below.
React + Vite static site. npm install, npm run dev to work locally, npm run build to produce dist/.
Vercel builds from main with the default command; vercel.json rewrites every path to index.html.
Vite inlines the value at build time; the pages are absent from the bundle's route table, not hidden behind a redirect.
/capabilities is built from two files, cross-checked by scripts/check-catalog.mjs before every dev and build (also npm run check):Read the full README ↗React + Vite static site. npm install, npm run dev to work locally, npm run build to produce dist/.
Vercel builds from main with the default command; vercel.json rewrites every path to index.html.
| Variable | Effect |
|---|---|
VITE_ENABLEMENT=on | Mounts the internal field-enablement pages (/enablement, /enablement/sales, /enablement/sa) and turns the header logo into their entry point. Off by default, so the deployed customer build ships no route to them (design call DC-8, LRA change review). Set it for an internal deploy or a local npm run dev; never in the Vercel production environment. |
Vite inlines the value at build time; the pages are absent from the bundle's route table, not hidden behind a redirect.
/capabilities is built from two files, cross-checked by scripts/check-catalog.mjs before every dev and build (also npm run check):
| File | Source |
|---|---|
src/data/assetCatalog.json | Generated by the pack: python3 tools/gen-asset-catalog.py --out <this repo>/src/data/assetCatalog.json --kibana-env <env file> --host-var PUBSEC_KIBANA_HOST --key-var PUBSEC_API_KEY. The --kibana-env arguments resolve the demo cluster's saved-object ids (detection rules are minted at install; the osquery pack too), so links open the right object. The key is read from the env file and never written anywhere. Regenerate after every pack change; the check fails the build if a capability names an asset that no longer ships or a shipped asset no capability describes. |
src/data/capabilities.js | Hand-authored: each capability's text, the asset ids that contribute to it and the dashboard screenshots to show. |
public/screenshots/<dashboard id>.png and thumbs/<id>.jpg | Captured from the demo cluster through the Kibana reporting API (POST /api/reporting/generate/pngV2 with a DASHBOARD_APP_LOCATOR job, 1600 x 1200 preserve-layout, 7d for operations views, 30d for posture views, 90d for inventory views), then sips -Z 640 -s format jpeg for the thumbnail. All 21 dashboards are captured (2026-09-21, after LRA change-review items R-89 and R-94 were applied live and the R-97 drilldown fixes re-uploaded). Recapture a dashboard whenever its panels change and keep the same file name; the capability's shots list references the id. |