BLA
BLA (Blind LLM Agents) is the open-source Blue Defense MCP and CLI built to protect software artifacts against automated AI reverse-engineering workflows.
翻译准备中
尚未检测到更新。GitHub 发布版本后会显示在这里。
个人 GitHub 账号下公开仓库的所有者可以登录并验证所有权,自行管理介绍,无需管理员批准。
登录并生成验证文件,在 30 分钟内将其提交到此仓库的默认分支。其他分支或分叉仓库中的文件无效。然后在下方检查文件,即可无需管理员批准直接管理项目。请保留文件以维持管理权限。
如需登录,将前往登录页面。登录后请回到此处,再次点击所选的验证按钮。
在项目文件夹中运行 /nomorevibe verify,即可验证所有权并自行管理介绍。
一分钟完成验证正在加载完整 README。 以下为已保存的摘录。
React + Vite static site. npm install, npm run dev to work locally, npm run build to produce dist/.
Vercel builds from main with the default command; vercel.json rewrites every path to index.html.
Vite inlines the value at build time; the pages are absent from the bundle's route table, not hidden behind a redirect.
/capabilities is built from two files, cross-checked by scripts/check-catalog.mjs before every dev and build (also npm run check):查看完整 README ↗React + Vite static site. npm install, npm run dev to work locally, npm run build to produce dist/.
Vercel builds from main with the default command; vercel.json rewrites every path to index.html.
| Variable | Effect |
|---|---|
VITE_ENABLEMENT=on | Mounts the internal field-enablement pages (/enablement, /enablement/sales, /enablement/sa) and turns the header logo into their entry point. Off by default, so the deployed customer build ships no route to them (design call DC-8, LRA change review). Set it for an internal deploy or a local npm run dev; never in the Vercel production environment. |
Vite inlines the value at build time; the pages are absent from the bundle's route table, not hidden behind a redirect.
/capabilities is built from two files, cross-checked by scripts/check-catalog.mjs before every dev and build (also npm run check):
| File | Source |
|---|---|
src/data/assetCatalog.json | Generated by the pack: python3 tools/gen-asset-catalog.py --out <this repo>/src/data/assetCatalog.json --kibana-env <env file> --host-var PUBSEC_KIBANA_HOST --key-var PUBSEC_API_KEY. The --kibana-env arguments resolve the demo cluster's saved-object ids (detection rules are minted at install; the osquery pack too), so links open the right object. The key is read from the env file and never written anywhere. Regenerate after every pack change; the check fails the build if a capability names an asset that no longer ships or a shipped asset no capability describes. |
src/data/capabilities.js | Hand-authored: each capability's text, the asset ids that contribute to it and the dashboard screenshots to show. |
public/screenshots/<dashboard id>.png and thumbs/<id>.jpg | Captured from the demo cluster through the Kibana reporting API (POST /api/reporting/generate/pngV2 with a DASHBOARD_APP_LOCATOR job, 1600 x 1200 preserve-layout, 7d for operations views, 30d for posture views, 90d for inventory views), then sips -Z 640 -s format jpeg for the thumbnail. All 21 dashboards are captured (2026-09-21, after LRA change-review items R-89 and R-94 were applied live and the R-97 drilldown fixes re-uploaded). Recapture a dashboard whenever its panels change and keep the same file name; the capability's shots list references the id. |