antiflock

Bootstrap and run AntiFl0ck — open-source counter-surveillance for the networks you control — with one command. No manual git clone, no hand-editing compose files.

Pre-alpha: this installs and runs the local, fully-simulated demo stack (Core, policy engine, signed audit log, Third-Eye dashboard). Host-level enforcement is still under active development — see the release status.

Requirements

• Docker
• git
• Node.js 20+ (the underlying stack's own build/dev tooling)
• Python 3.9+

Quick start

pipx install antiflock   # or: pip install antiflock
antiflock init
antiflock dev

init clones the repo into ./antiflock (skipped if you're already inside a checkout) and generates a private, locally-scoped config at .antiflock/dev.env — operator/SDK/agent/dashboard tokens, never committed.

dev builds and starts the full stack. Once it's up, open http://127.0.0.1:4173 — username operator, token from that config file.

Run the scripted coffee-shop simulation against a running stack:

antiflock lab

Stop everything:

antiflock down

Commands

Flags: --dir <path> (checkout location, default ./antiflock), --ref <git-ref> (branch or tag to clone, default main).

Feature configuration

• .antiflock/dev.env — generated secrets and node/application identifiers (permissions locked down automatically; regenerate by deleting the file and re-running init).
• configs/demo.yaml and docker-compose.yml in the checkout — service ports, demo-mode flags, and the lab profile.
• Full walkthrough: docs/operator-runbook.md.

Already have a checkout?

Run any command from inside it and the CLI uses that directory directly instead of cloning a new one — it's just a thin wrapper around node scripts/compose.mjs.

Also on npm: npx antiflock (package) — same CLI, same commands.

License

Apache-2.0, see LICENSE. AntiFl0ck is an independent open-source project; see TRADEMARKS.md.