BLA
BLA (Blind LLM Agents) is the open-source Blue Defense MCP and CLI built to protect software artifacts against automated AI reverse-engineering workflows.
翻譯準備中
尚未偵測到更新。GitHub 發布版本後會顯示在這裡。
個人 GitHub 帳號下公開儲存庫的擁有者可以登入並驗證所有權,自行管理介紹,無需管理員核准。
登入並產生驗證檔案,在 30 分鐘內將其提交至此儲存庫的預設分支。其他分支或分叉儲存庫中的檔案無效。然後在下方檢查檔案,即可無需管理員核准直接管理專案。請保留檔案以維持管理權限。
如需登入,將前往登入頁面。登入後請回到此處,再次點擊所選的驗證按鈕。
在專案資料夾中執行 /nomorevibe verify,即可驗證所有權並自行管理介紹。
一分鐘完成驗證正在載入完整 README。 以下為已儲存的摘錄。
React + Vite static site. npm install, npm run dev to work locally, npm run build to produce dist/.
Vercel builds from main with the default command; vercel.json rewrites every path to index.html.
Vite inlines the value at build time; the pages are absent from the bundle's route table, not hidden behind a redirect.
/capabilities is built from two files, cross-checked by scripts/check-catalog.mjs before every dev and build (also npm run check):檢視完整 README ↗React + Vite static site. npm install, npm run dev to work locally, npm run build to produce dist/.
Vercel builds from main with the default command; vercel.json rewrites every path to index.html.
| Variable | Effect |
|---|---|
VITE_ENABLEMENT=on | Mounts the internal field-enablement pages (/enablement, /enablement/sales, /enablement/sa) and turns the header logo into their entry point. Off by default, so the deployed customer build ships no route to them (design call DC-8, LRA change review). Set it for an internal deploy or a local npm run dev; never in the Vercel production environment. |
Vite inlines the value at build time; the pages are absent from the bundle's route table, not hidden behind a redirect.
/capabilities is built from two files, cross-checked by scripts/check-catalog.mjs before every dev and build (also npm run check):
| File | Source |
|---|---|
src/data/assetCatalog.json | Generated by the pack: python3 tools/gen-asset-catalog.py --out <this repo>/src/data/assetCatalog.json --kibana-env <env file> --host-var PUBSEC_KIBANA_HOST --key-var PUBSEC_API_KEY. The --kibana-env arguments resolve the demo cluster's saved-object ids (detection rules are minted at install; the osquery pack too), so links open the right object. The key is read from the env file and never written anywhere. Regenerate after every pack change; the check fails the build if a capability names an asset that no longer ships or a shipped asset no capability describes. |
src/data/capabilities.js | Hand-authored: each capability's text, the asset ids that contribute to it and the dashboard screenshots to show. |
public/screenshots/<dashboard id>.png and thumbs/<id>.jpg | Captured from the demo cluster through the Kibana reporting API (POST /api/reporting/generate/pngV2 with a DASHBOARD_APP_LOCATOR job, 1600 x 1200 preserve-layout, 7d for operations views, 30d for posture views, 90d for inventory views), then sips -Z 640 -s format jpeg for the thumbnail. All 21 dashboards are captured (2026-09-21, after LRA change-review items R-89 and R-94 were applied live and the R-97 drilldown fixes re-uploaded). Recapture a dashboard whenever its panels change and keep the same file name; the capability's shots list references the id. |