{
 "generated_at": "2026-10-06T19:30:20Z",
 "first_run": "2026-10-06T17:46:26Z",
 "overall": {
  "status": "ok",
  "label": "Healthy"
 },
 "headline": "Everything is operating normally.",
 "summary": "6 of 6 services are healthy and mirrored; 7 of 7 fleet nodes are reporting; 3 of 3 backups are on schedule.",
 "kpis": [
  {
   "key": "services",
   "label": "Services healthy",
   "value": "6/6",
   "detail": "all with a live mirror and DNS failover",
   "state": "ok"
  },
  {
   "key": "fleet",
   "label": "Fleet nodes reporting",
   "value": "7/7",
   "detail": "263 active bans, ban lists in sync",
   "state": "ok"
  },
  {
   "key": "backups",
   "label": "Backups on schedule",
   "value": "3/3",
   "detail": "oldest run 9.5 h ago \u00b7 1 restore-tested",
   "state": "ok"
  },
  {
   "key": "bans",
   "label": "Bans yesterday",
   "value": "252",
   "detail": "a typical day (median 169)",
   "state": "ok"
  },
  {
   "key": "heal",
   "label": "Firewall self-heal, 24h",
   "value": "100%",
   "detail": "193 drifts detected, 0 unresolved",
   "state": "ok"
  }
 ],
 "attention": [],
 "watch": [],
 "changes": [],
 "sources": {
  "health": {
   "status": "ok",
   "as_of": "2026-10-06T19:30:20Z",
   "stale": false,
   "facts": {
    "services": [
     {
      "name": "threats",
      "host": "threats.beane.me",
      "primary_ok": true,
      "mirror_ok": true,
      "serving": "primary",
      "dns_ok": true,
      "state": "ok"
     },
     {
      "name": "intel",
      "host": "intel.beane.me",
      "primary_ok": true,
      "mirror_ok": true,
      "serving": "primary",
      "dns_ok": true,
      "state": "ok"
     },
     {
      "name": "backups",
      "host": "backups.beane.me",
      "primary_ok": true,
      "mirror_ok": true,
      "serving": "primary",
      "dns_ok": true,
      "state": "ok"
     },
     {
      "name": "observe",
      "host": "observe.beane.me",
      "primary_ok": true,
      "mirror_ok": true,
      "serving": "primary",
      "dns_ok": true,
      "state": "ok"
     },
     {
      "name": "vuln",
      "host": "vuln.beane.me",
      "primary_ok": true,
      "mirror_ok": true,
      "serving": "primary",
      "dns_ok": true,
      "state": "ok"
     },
     {
      "name": "portfolio",
      "host": "beane.me",
      "primary_ok": true,
      "mirror_ok": true,
      "serving": "primary",
      "dns_ok": true,
      "state": "ok"
     }
    ],
    "total": 6,
    "healthy": 6,
    "checked_at": "2026-10-06T19:29:21Z"
   }
  },
  "fleet": {
   "status": "ok",
   "as_of": "2026-10-06T19:30:20Z",
   "stale": false,
   "facts": {
    "nodes": [
     {
      "name": "Ares",
      "state": "healthy",
      "age_min": 15.6
     },
     {
      "name": "Argus",
      "state": "healthy",
      "age_min": 11.5
     },
     {
      "name": "Hermes",
      "state": "healthy",
      "age_min": 15.2
     },
     {
      "name": "Iris",
      "state": "healthy",
      "age_min": 11.0
     },
     {
      "name": "Triton",
      "state": "healthy",
      "age_min": 13.4
     },
     {
      "name": "Vault",
      "state": "healthy",
      "age_min": 16.8
     },
     {
      "name": "Zephyrus",
      "state": "healthy",
      "age_min": 16.5
     }
    ],
    "total": 7,
    "healthy": 7,
    "drift_24h": 193,
    "heals_24h": 193,
    "heal_failures_24h": 0,
    "first_pass_pct": 100.0,
    "active_bans": 263,
    "ban_sync": "ok",
    "ban_spread": 0
   }
  },
  "intel": {
   "status": "ok",
   "as_of": "2026-10-06T19:30:20Z",
   "stale": false,
   "facts": {
    "daily": [
     {
      "date": "2026-09-07",
      "bans": 171,
      "spike": false,
      "partial": false
     },
     {
      "date": "2026-09-08",
      "bans": 64,
      "spike": false,
      "partial": false
     },
     {
      "date": "2026-09-09",
      "bans": 107,
      "spike": false,
      "partial": false
     },
     {
      "date": "2026-09-10",
      "bans": 73,
      "spike": false,
      "partial": false
     },
     {
      "date": "2026-09-11",
      "bans": 158,
      "spike": false,
      "partial": false
     },
     {
      "date": "2026-09-12",
      "bans": 146,
      "spike": false,
      "partial": false
     },
     {
      "date": "2026-09-13",
      "bans": 136,
      "spike": false,
      "partial": false
     },
     {
      "date": "2026-09-14",
      "bans": 67,
      "spike": false,
      "partial": false
     },
     {
      "date": "2026-09-15",
      "bans": 49564,
      "spike": true,
      "partial": false
     },
     {
      "date": "2026-09-16",
      "bans": 189,
      "spike": false,
      "partial": false
     },
     {
      "date": "2026-09-17",
      "bans": 234,
      "spike": false,
      "partial": false
     },
     {
      "date": "2026-09-18",
      "bans": 200,
      "spike": false,
      "partial": false
     },
     {
      "date": "2026-09-19",
      "bans": 112,
      "spike": false,
      "partial": false
     },
     {
      "date": "2026-09-20",
      "bans": 339,
      "spike": false,
      "partial": false
     },
     {
      "date": "2026-09-21",
      "bans": 306,
      "spike": false,
      "partial": false
     },
     {
      "date": "2026-09-22",
      "bans": 334,
      "spike": false,
      "partial": false
     },
     {
      "date": "2026-09-23",
      "bans": 345,
      "spike": false,
      "partial": false
     },
     {
      "date": "2026-09-24",
      "bans": 107,
      "spike": false,
      "partial": false
     },
     {
      "date": "2026-09-25",
      "bans": 159,
      "spike": false,
      "partial": false
     },
     {
      "date": "2026-09-26",
      "bans": 128,
      "spike": false,
      "partial": false
     },
     {
      "date": "2026-09-27",
      "bans": 156,
      "spike": false,
      "partial": false
     },
     {
      "date": "2026-09-28",
      "bans": 104,
      "spike": false,
      "partial": false
     },
     {
      "date": "2026-09-29",
      "bans": 179,
      "spike": false,
      "partial": false
     },
     {
      "date": "2026-09-30",
      "bans": 205,
      "spike": false,
      "partial": false
     },
     {
      "date": "2026-10-01",
      "bans": 269,
      "spike": false,
      "partial": false
     },
     {
      "date": "2026-10-02",
      "bans": 238,
      "spike": false,
      "partial": false
     },
     {
      "date": "2026-10-03",
      "bans": 113,
      "spike": false,
      "partial": false
     },
     {
      "date": "2026-10-04",
      "bans": 244,
      "spike": false,
      "partial": false
     },
     {
      "date": "2026-10-05",
      "bans": 252,
      "spike": false,
      "partial": false
     },
     {
      "date": "2026-10-06",
      "bans": 148,
      "spike": false,
      "partial": true
     }
    ],
    "typical": 169,
    "yesterday": {
     "date": "2026-10-05",
     "bans": 252
    },
    "today_so_far": 148,
    "ratio": 1.49,
    "trend": "typical",
    "spikes": [
     {
      "date": "2026-09-15",
      "bans": 49564
     }
    ]
   }
  },
  "threats": {
   "status": "ok",
   "as_of": "2026-10-06T19:30:20Z",
   "stale": false,
   "facts": {
    "unique_ips": 25,
    "by_severity": {
     "critical": 8,
     "high": 6,
     "medium": 0,
     "low": 11
    },
    "by_category": [
     {
      "label": "Reconnaissance",
      "count": 8
     },
     {
      "label": "Web exploitation",
      "count": 6
     },
     {
      "label": "Webshell / post-exploitation",
      "count": 4
     },
     {
      "label": "Known CVE exploit",
      "count": 4
     },
     {
      "label": "Other probing",
      "count": 3
     }
    ],
    "techniques": [
     {
      "id": "T1595",
      "name": "Active scanning",
      "count": 13
     },
     {
      "id": "T1190",
      "name": "Exploit public-facing application",
      "count": 13
     },
     {
      "id": "T1059",
      "name": "Command & scripting interpreter",
      "count": 4
     },
     {
      "id": "T1105",
      "name": "Ingress tool transfer",
      "count": 4
     }
    ],
    "nodes_reporting": 6,
    "coordinated_groups": 1,
    "span_hours": 7.9
   }
  },
  "observe": {
   "status": "ok",
   "as_of": "2026-10-06T19:30:20Z",
   "stale": false,
   "facts": {
    "active": {
     "PERM_BAN": 250,
     "TEMP_BAN": 20,
     "WATCH": 189
    },
    "active_ranges": {},
    "ranges_total": 0,
    "new_24h": {
     "PERM_BAN": 10,
     "TEMP_BAN": 20,
     "WATCH": 20
    },
    "new_ranges_24h": 0,
    "top_reasons": [
     {
      "code": "SINGLE_NODE_ONLY",
      "description": "Threat activity was observed from a single node only.",
      "count": 30
     },
     {
      "code": "LOW_SCENARIO_VOLUME",
      "description": "Detected activity is a limited amount of firewall scenarios.",
      "count": 19
     },
     {
      "code": "HIGH_SEVERITY_SINGLE_NODE",
      "description": "High severity exploit activity was observed, but only from a single node.",
      "count": 16
     },
     {
      "code": "MULTI_STAGE_ATTACK",
      "description": "Multiple stages of an attack chain were observed within a short time window.",
      "count": 13
     },
     {
      "code": "REPUTATION_ESCALATION_WARNING",
      "description": "Escalated reputation based on attacks within a short window.",
      "count": 10
     }
    ],
    "generated_at": "2026-10-06T19:30:21Z"
   }
  },
  "backups": {
   "status": "ok",
   "as_of": "2026-10-06T19:30:20Z",
   "stale": false,
   "facts": {
    "nodes": [
     {
      "node": "Triton",
      "state": "ok",
      "name": "triton-20261006-080040.json",
      "last_ts": "2026-10-06T12:00:40Z",
      "age_h": 7.49,
      "interval_h": 8.0,
      "duration_sec": 35.28,
      "size_gb": 5.27,
      "size_change_pct": 0.2,
      "recent_ok": 12,
      "recent_total": 12
     },
     {
      "node": "Ares",
      "state": "ok",
      "name": "ares-20261006-120007.json",
      "last_ts": "2026-10-06T16:00:07Z",
      "age_h": 3.5,
      "interval_h": 8.0,
      "duration_sec": 1.08,
      "size_gb": 1.16,
      "size_change_pct": 0.0,
      "recent_ok": 12,
      "recent_total": 12
     },
     {
      "node": "Zephyrus",
      "state": "ok",
      "name": "zephyrus-20261006-060028.json",
      "last_ts": "2026-10-06T10:00:28Z",
      "age_h": 9.5,
      "interval_h": 12.0,
      "duration_sec": 17.2,
      "size_gb": 0.78466,
      "size_change_pct": 0.3,
      "recent_ok": 12,
      "recent_total": 12,
      "assurance": {
       "verification": {
        "last": "2026-10-06T04:30:36Z",
        "ok": true,
        "deep_last": "2026-10-01T07:00:01Z",
        "deep_ok": true
       },
       "restore": {
        "last": "2026-10-01T08:00:14Z",
        "ok": true,
        "tests": 11,
        "passed": 11
       }
      }
     }
    ],
    "total": 3,
    "current": 3
   }
  }
 },
 "drift_baseline": null
}