Cryptotremor

# 1. Import a manifest (CSV or JSON), or ask for the bundled reference estate
curl -sX POST https://cryptotremor.vercel.app/api/survey/import \
  -H 'content-type: application/json' \
  -b cookies.txt -c cookies.txt \
  -d '{"sample":true}' | jq '.created, .assets[0]'

# 2. Create one primitive
curl -sX POST https://cryptotremor.vercel.app/api/assets \
  -H 'content-type: application/json' \
  -b cookies.txt -c cookies.txt \
  -d '{"label":"Partner SFTP key exchange","system":"partner-sftp","usage":"key-establishment",
       "algorithm":"DH-2048","deployment":"partner-shared","confidentialityYears":10,
       "dataClass":"confidential","ownerTeam":"integrations","notes":"","cve":null}' \
  | jq '{score: .exposure.score, band: .exposure.band, seal}'

# 3. Read it back
curl -s https://cryptotremor.vercel.app/api/assets -b cookies.txt | jq '.assets[] | {label, exposureScore, ruptureYear}'

# 4. Inspect the full ledger and factor evidence for one id
curl -s https://cryptotremor.vercel.app/api/assets/<id> -b cookies.txt \
  | jq '.exposure.quantum, .exposure.factors[] | {label, points, evidence}'

# 5. Record a decision, re-score and seal
curl -sX PATCH https://cryptotremor.vercel.app/api/assets/<id> \
  -H 'content-type: application/json' -b cookies.txt \
  -d '{"decision":"schedule","decisionNote":"dual-deploy hybrid handshake"}' | jq '{score: .asset.exposureScore, seal}'

# 6. Change the horizon year and re-score the whole estate
curl -sX PATCH https://cryptotremor.vercel.app/api/survey \
  -H 'content-type: application/json' -b cookies.txt -d '{"horizonYear":2031}' | jq '.rescored'

# 7. Export a partner report, then replay the audit chain
curl -s 'https://cryptotremor.vercel.app/api/report?format=markdown' -b cookies.txt
curl -s https://cryptotremor.vercel.app/api/verify -b cookies.txt | jq '{ok, events, tamperedEntities}'

# 8. Retire a primitive (tombstoned, never erased)
curl -sX DELETE https://cryptotremor.vercel.app/api/assets/<id> \
  -H 'content-type: application/json' -b cookies.txt -d '{"reason":"replaced by ML-KEM"}' | jq '{tombstone}'

BASE=https://cryptotremor.vercel.app

# Handshake → capture the owner token
TOKEN=$(curl -sX POST $BASE/api/mcp -H 'content-type: application/json' \
  -d '{"jsonrpc":"2.0","id":1,"method":"initialize","params":{"protocolVersion":"2024-11-05"}}' \
  | jq -r '.result.ownerToken')

# Discover the typed tools
curl -sX POST $BASE/api/mcp -H 'content-type: application/json' \
  -d '{"jsonrpc":"2.0","id":2,"method":"tools/list","params":{}}' | jq '.result.tools[].name'

# Mutate through the same service layer the UI uses (idempotent on the key)
curl -sX POST $BASE/api/mcp -H 'content-type: application/json' -H "x-ct-owner: $TOKEN" \
  -d '{"jsonrpc":"2.0","id":3,"method":"tools/call","params":{"name":"save_asset","arguments":{
       "label":"CI signing key","system":"ci","usage":"signature","algorithm":"RSA-4096",
       "deployment":"internal","confidentialityYears":7,"dataClass":"internal",
       "ownerTeam":"platform","idempotencyKey":"ci-signing-key"}}}'

{
  "mcpServers": {
    "cryptotremor": {
      "type": "http",
      "url": "https://cryptotremor.vercel.app/api/mcp"
    }
  }
}

git clone https://github.com/aniruddhaadak80/cryptotremor.git
cd cryptotremor
npm install
npm run dev            # http://localhost:3000

src/
  app/            routes (pages + route handlers)
  components/     interface: header, footer, trace, rupture console, agent console
  lib/
    engine/       quantum cost, exposure score, Grover search, waves, survey aggregation
    db/           adapter selection, Postgres + PGlite, schema, typed repository
    feed/         CISA KEV and arXiv with TTL cache and sealed fallback
    integrity/    canonical JSON, SHA-384 seals, replay
    domain/       algorithm registry, compliance regimes, attacker profiles
  proxy.ts        anonymous session bootstrap
scripts/
  verify-live.mjs end-to-end live verification
tests/browser/    Playwright primary journey

graph LR
  B["Visitor"] --> P["proxy.ts<br/>session scope"]
  P --> UI["Pages"]
  UI --> API["Route handlers"]
  API --> SVC["Service layer"]
  SVC --> ENG["Engine<br/>quantum cost + exposure"]
  SVC --> REPO["Typed repository"]
  MCP["MCP JSON-RPC 2.0"] --> SVC
  REPO --> DB[("Postgres<br/>Neon in production")]
  REPO --> LOCAL[("PGlite<br/>local and tests")]
  API --> FEED["Feed layer"]
  FEED --> SEAL["Sealed fallback"]

  classDef live fill:#22d3ee,color:#06232a,stroke:#0e7490
  classDef ai fill:#a78bfa,color:#1b1033,stroke:#6d28d9
  classDef agent fill:#34d399,color:#052e21,stroke:#047857
  classDef ext fill:#fbbf24,color:#2e2205,stroke:#b45309
  classDef infra fill:#94a3b8,color:#0b1220,stroke:#475569
  classDef risk fill:#fb7185,color:#2f0a12,stroke:#be123c
  class UI,API,SVC live
  class ENG ai
  class MCP agent
  class FEED,SEAL ext
  class P,DB,LOCAL infra
  class B risk

graph TB
  A["GET /api/feed/strata"] --> B["fetchWithRetry<br/>6s timeout, 1 retry"]
  B --> C["TTL cache<br/>1 hour per instance"]
  C --> D{"Reachable?"}
  D -->|yes| E["Normalize + attribute<br/>status: live"]
  D -->|no| F["Sealed dated sample<br/>status: fallback"]
  E --> G["Response carries<br/>source, fetchedAt, note"]
  F --> G
  G --> H["UI labels the source"]
  G --> I["Report records provenance"]

  classDef live fill:#22d3ee,color:#06232a,stroke:#0e7490
  classDef ai fill:#a78bfa,color:#1b1033,stroke:#6d28d9
  classDef ext fill:#fbbf24,color:#2e2205,stroke:#b45309
  classDef infra fill:#94a3b8,color:#0b1220,stroke:#475569
  classDef risk fill:#fb7185,color:#2f0a12,stroke:#be123c
  class B,C,E,G live
  class D ai
  class F ext
  class A,H,I infra

graph LR
  A["Asset record"] --> B["resolveAlgorithm"]
  B --> C{"Attack class"}
  C -->|asymmetric| D["Shor resources<br/>qubits, Toffoli, depth"]
  C -->|symmetric| E["Grover oracle<br/>pi/4 x 2^(n/2)"]
  D --> F["Physical qubits<br/>logical x 450 at d=15"]
  E --> F
  F --> G["Rupture year<br/>per attacker scenario"]
  G --> H["Harvest overlap<br/>secrecy window vs break"]
  H --> I["Six weighted factors"]
  I --> J["Score, band,<br/>binding constraint"]
  J --> K["Recommendation"]

  classDef live fill:#22d3ee,color:#06232a,stroke:#0e7490
  classDef ai fill:#a78bfa,color:#1b1033,stroke:#6d28d9
  classDef agent fill:#34d399,color:#052e21,stroke:#047857
  classDef infra fill:#94a3b8,color:#0b1220,stroke:#475569
  classDef risk fill:#fb7185,color:#2f0a12,stroke:#be123c
  class A,B,H live
  class C,D,E,F,G,I,J,K ai

graph TB
  A["Agent"] --> B["POST /api/mcp"]
  B --> C{"Method"}
  C -->|initialize| D["protocolVersion + ownerToken"]
  C -->|tools/list| E["10 typed schemas"]
  C -->|tools/call| F["Validate arguments"]
  F --> G{"Tool kind"}
  G -->|read/analysis| H["Engine + repository"]
  G -->|mutating| I["Same service layer as the UI"]
  I --> J["Transaction:<br/>row + audit event"]
  H --> K["JSON-RPC result"]
  J --> K
  D --> K
  E --> K
  K --> A

  classDef live fill:#22d3ee,color:#06232a,stroke:#0e7490
  classDef ai fill:#a78bfa,color:#1b1033,stroke:#6d28d9
  classDef agent fill:#34d399,color:#052e21,stroke:#047857
  classDef infra fill:#94a3b8,color:#0b1220,stroke:#475569
  class A,K agent
  class C,F,G ai
  class H,I,J live
  class B,D,E infra

graph LR
  A["asset.create"] --> C["seal 1"]
  B["asset.update"] --> D["seal 2"]
  C --> D
  D --> E["asset.decide"]
  E --> F["asset.delete<br/>tombstone"]
  F --> G["HEAD"]
  C -.-> H["SHA-384 of<br/>prevSeal + canonical JSON"]
  D -.-> H
  F -.-> H
  G --> I["Replay reports<br/>first broken link"]
  H --> I

  classDef live fill:#22d3ee,color:#06232a,stroke:#0e7490
  classDef ai fill:#a78bfa,color:#1b1033,stroke:#6d28d9
  classDef agent fill:#34d399,color:#052e21,stroke:#047857
  classDef infra fill:#94a3b8,color:#0b1220,stroke:#475569
  classDef risk fill:#fb7185,color:#2f0a12,stroke:#be123c
  class A,B,E,F live
  class C,D,G,I agent
  class H ai

seal_0 = SHA-384(GENESIS || canonicalJson(event_1))
seal_n = SHA-384(UTF-8(prevSeal) || canonicalJson(event_n))

graph TB
  A["Push to main"] --> B["GitHub Actions<br/>Node 22"]
  B --> C["npm ci"]
  C --> D["typecheck + lint + test"]
  D --> E["next build"]
  E --> F["Vercel production"]
  F --> G["Runtime: Node 22"]
  G --> H["DATABASE_URL<br/>hosted Postgres"]
  G --> I["Outbound: CISA + arXiv<br/>timeout + retry"]
  F --> J["GET /api/health<br/>real store probe"]

  classDef live fill:#22d3ee,color:#06232a,stroke:#0e7490
  classDef ai fill:#a78bfa,color:#1b1033,stroke:#6d28d9
  classDef agent fill:#34d399,color:#052e21,stroke:#047857
  classDef infra fill:#94a3b8,color:#0b1220,stroke:#475569
  classDef risk fill:#fb7185,color:#2f0a12,stroke:#be123c
  class A,B,C,D,E agent
  class F,G infra
  class H,I,J live

graph LR
  A["Import manifest"] --> B["Inspect cost ledger"]
  B --> C["Read factor evidence"]
  C --> D["Record decision"]
  D --> E["Scrub horizon"]
  E --> F["Plan waves"]
  F --> G["Export report"]
  G --> H["Share with partner"]
  H --> I["Replay seal chain"]
  I --> J["Retire primitive"]

  classDef live fill:#22d3ee,color:#06232a,stroke:#0e7490
  classDef ai fill:#a78bfa,color:#1b1033,stroke:#6d28d9
  classDef agent fill:#34d399,color:#052e21,stroke:#047857
  classDef infra fill:#94a3b8,color:#0b1220,stroke:#475569
  class A,B,C,J live
  class E,F ai
  class G,H,I agent
  class D infra

graph LR
  A["Manifest import"] --> B["Cost ledger"]
  B --> C["Rupture scrub"]
  C --> D["Grover waves"]
  D --> E["Sealed exports"]
  E --> F["MCP tools"]

  classDef done fill:#34d399,color:#052e21,stroke:#047857
  class A,B,C,D,E,F done

graph TB
  A["Live parse of a real<br/>manifest file"] --> B["SPDX and CycloneDX<br/>crypto asset input"]
  C["Proof-of-possession<br/>for higher assurance"] --> D["Signed report<br/>artefacts"]
  B --> D
  E["Hybrid handshake<br/>deployment recipes"] --> F["Effort estimates<br/>from team history"]

  classDef next fill:#22d3ee,color:#06232a,stroke:#0e7490
  classDef idea fill:#a78bfa,color:#1b1033,stroke:#6d28d9
  class A,C,E next
  class B,D,F idea

graph TB
  A["Portfolio-level view<br/>across estates"] --> B["Peer benchmarks<br/>with consent"]
  C["Grover search over<br/>migration orderings"] --> D["Quantum-inspired<br/>scheduling study"]
  E["Library adapters<br/>(OpenSSL, JOSE, Tink)"] --> F["Findings pushed<br/>to CI as a gate"]

  classDef later fill:#94a3b8,color:#0b1220,stroke:#475569
  classDef idea fill:#a78bfa,color:#1b1033,stroke:#6d28d9
  class A,C,E later
  class B,D,F idea

git clone https://github.com/aniruddhaadak80/cryptotremor.git
cd cryptotremor
npm install
npm run typecheck && npm run lint && npm test && npm run build