A tool for the work.
A system for the fleet.

A programmable shell with policy evaluation, approvals, an HMAC audit chain, Starlark extensions, and an MCP server. The binary remains adssh.

Configuration and deployment gates for SSH fleets. A governor, reviewed contracts, and journals bound every permitted mutation.

Inventory and assess hosts, containers, Kubernetes, and infrastructure code. Emit evidence and a reviewable remediation handoff.

Plan, approve, submit, reconcile, and independently verify service repairs through vpscfgfarm. Ships in the badfarm distribution.

A catalog and loader for routine operations built on badfarm and vpscfgfarm. Scheduling, execution, and reports remain planned.

Find where the disk goes, check policy thresholds, and clean configured paths with quarantine and restore. macOS and Linux.

Check command arguments and protected paths before invoking a configured executable. A safer normal command path, not an unbypassable security boundary.

List suite roles and check that sahlink, sahconnect, and sahapi are on PATH. Reports adssh separately.

Make authenticated SystemAPI HTTP requests, or pass SSH arguments through to the installed adssh executable.

A bearer-protected loopback service with a suite catalog and three fixed, read-only SystemAPI proxy routes.

Launch a process, record stdio, and optionally relay one socket connection. Read capture and write input through a local control socket.

The name is reserved. No assigned role, binary, or service exists yet.