@meta
  v: 1
  route: /projects
  generated: 2026-06-07T00:00:00Z
  ttl: 1h

@intent
  purpose:    The roster of tools under the TechMages.org umbrella — build-your-own, open, authorization-first. Warlock OS is the flagship; others are on the bench.
  audience:   msp, security-pro, agent
  capability: read, navigate, evaluate

@state
  active[1]{project,status,summary}:
    Warlock OS,active,"Build-your-own field cyberdeck — wireless, SDR, mesh, blue-team audit, cracking, AI operator; one API, engagement gate, signed AAR audit"
  bench[7]{project,stage,summary}:
    Signed-attestation library,extracting,"The Warlock AAR layer (Ed25519 + JCS + did:web) as a standalone, reusable component"
    Public AAR verifier,building,"Reference verifier for signed AARs — check signature + canonicalization offline against a did:web, without trusting the issuer"
    Engagement-gate kit,pattern,Scope-allowlist + audit + kill-switch pattern as a drop-in for other authorization-first tools
    Post-engagement report generator,planned,"Turns the signed audit trail into a client-ready report — scope, actions, refusals, timestamps, signatures"
    Warlock Headless,planned,"The gated API and modules in a container, deck hardware optional — server-side or lab, driven from the same web/TUI/AI fronts"
    Mobile uplink (Starlink + LTE),planned,"Field uplink over Starlink or LTE with the same scope gating and kill switch — connectivity that respects the engagement"
    Future Titanium tools,pipeline,Internal security tools documented and hardened into buildable projects as they mature

@actions
  - id: view_human
    method: GET
    href: /projects.html
  - id: explore_warlock
    method: GET
    href: /warlock.html
  - id: view_source
    method: GET
    href: https://github.com/techmages-org/techmages

@context
  > Projects is the roster. One project is active — Warlock OS, the flagship field cyberdeck. The bench holds slots, not promises: a signed-attestation library being extracted from Warlock, a public AAR verifier, a reusable engagement-gate kit, a post-engagement report generator that renders the signed audit trail into a client-ready report, a containerized "Warlock Headless" that runs the gated API without the deck hardware, a scope-gated mobile uplink (Starlink + LTE), and a pipeline of internal Titanium tools. When a project graduates here it gets a build doc, an explicit safety/authorization model, and a place on this list.

@nav
  self:      /projects.agent
  parents:   [/.agent]
  peers:     [/warlock.agent, /deck.agent, /deck-gui.agent, /charter.agent, /index.agent, /contribute.agent]