Atlas
Telemetry coordinator
NorthstarResearch Lab
Fictional demo · integrations disabled
simulation online
OPERATIONS / SYNTHETIC ENVIRONMENT
Mission Control
A shared command surface where people and agents observe, shield, prove, and respond—entirely inside fictional memory.
WebMCP previewTools register in a WebMCP-enabled browser
Fleet online2/3fictional nodes
Shield score100demo checks
Eval suite5/5safety scenarios
Agent tools04least privilege
OBSERVE / SYSTEM MAP
Fleet status
online
Kepler
Orbit analysis
Lumen
Signal processing
OBSERVE / SHARED WORKSPACE
Priority queue
Inspect Lumen thermal trend
Orion · in-progress
Validate Kepler pass schedule
Vega · queued
Archive synthetic telemetry batch
Nova · queued
SHIELD / DAILY VULNERABILITY SCAN
Shield Wall
100posture
Demo security checks only — not a professional penetration test and never a scan of real systems.
6/6checks passed
0open findings
+173-run trend
24hmanual cadence
Simulated scheduled reportSimulated daily · manual or WebMCP trigger only · Ready · 6/6 demo checks passed
Critical 0High 0Medium 0Low 0Info 6
83
92
100
Dependency auditPinned demo dependencies have a verified zero-vulnerability production audit.pass
Remediation: Keep the lockfile current and rerun the real local dependency audit before release.
Secret exposure guardThe demo boundary declares no credentials and the repository privacy gate is clean.pass
Remediation: Keep environment files excluded and rerun the real local privacy scan before release.
Security headersCSP limits connections to self and blocks objects, framing, cameras, microphones, and location.pass
Remediation: Preserve the restrictive headers and recheck the production response after deployment.
Input validationTask, scan, and incident inputs use strict allowlist schemas with extra properties rejected.pass
Remediation: Add a schema and negative tests before exposing any additional demo action.
Integration isolationThe demo has no API routes, network targets, credentials, analytics, or external integrations.pass
Remediation: Do not add remote destinations, arbitrary URLs, backend rewrites, or persistent storage.
WebMCP permission boundaryTools are bounded to fictional reads, validated memory writes, local checks, and reversible drill actions.pass
Remediation: Keep tool schemas strict and require a separate review before broadening any capability.
PROVE / REPEATABLE SAFETY EVALS
Evaluation Harness
—scenarios passed
Preparing isolated demo stores…
Every scenario gets a fresh in-memory store. No visible mission state, file, network, or external system is touched.
RESPOND / REVERSIBLE PLAYBOOK
Incident Drill
Lumen signal anomaly
A fictional signal burst is ready for a reversible response drill.
Incident drill readyhuman · 2026-08-27 13:30 UTC
Simulation only. Actions are reversible, session-local, and never reach a real device or service.