Household Defense Listener — PROTOTYPE

SIMULATED STORY. Every event on this page is scripted fixture data, labeled SIMULATED on its face. No real network state was read or changed. Simulated producers are marked in the producer list below.

The response ladder — RECORD (silent log) → CHECK (one sense; owner looks) → CONFIRM (two physics-independent senses; latched) → CONTAIN (a proposal only, and only ever against the house's own network, under an owner ruling that has not been made). Decisions from the scripted attack story — RECORD 2 · CHECK 2 · CONFIRM 1.

CONFIRM — latched until owner-verified

• CONFIRM network-metadata · new_device · zone office · 2026-10-31T07:13:05.000Z
  two physics-independent senses agree inside 120s: tripwire + network-metadata
  licensed by evt_26015a5e8c598fdd + evt_93c9e62122cfcf32
  flags: time-unverified

CONTAIN — proposals (simulated; nothing executed)

• CONTAIN — PROPOSED, SIMULATED
  Isolate the unknown device at the house router (quarantine VLAN / MAC hold) and hold the tripped decoy's file for the owner's review
  Proposed against: SIM-DEVICE-0001 · Trigger: CONFIRM dec_68e4bad01d615ef0 (canary_trip · new_device + 2026-10-31T07:13:05.000Z, two physics-independent senses)
  Status: SIMULATED — NOT EXECUTED. Requires: owner ruling R-DL-2 (pre-authorized containment) — not ruled; the owner is the only actuator until he rules otherwise. This prototype executes nothing — no network state was changed in the making of this page.

CHECK — open

• CHECK network-metadata · egress_spike · zone office · 2026-10-31T07:13:40.000Z
  single sense (network-metadata); owner verifies the state himself

All decisions, newest first

• RECORD network-metadata · egress_spike · zone office · 2026-10-31T07:14:30.000Z
  same signature inside its 30-minute cooldown; logged, not re-raised
• CHECK network-metadata · egress_spike · zone office · 2026-10-31T07:13:40.000Z
  single sense (network-metadata); owner verifies the state himself
• CONFIRM network-metadata · new_device · zone office · 2026-10-31T07:13:05.000Z
  two physics-independent senses agree inside 120s: tripwire + network-metadata
  licensed by evt_26015a5e8c598fdd + evt_93c9e62122cfcf32
  flags: time-unverified
• CHECK tripwire · canary_trip · zone office · 2026-10-31T07:12:20.000Z
  single sense (tripwire); owner verifies the state himself
• RECORD radio · census.observation · zone office · 2026-10-31T07:12:00.000Z
  class is RECORD-only under v0.1 policy

Negative control — a single sense, alone

A second scripted story fed the listener one sense only (a tripwire, twice, plus its heartbeat). Result — RECORD 2 · CHECK 1 · CONFIRM 0. One sense cannot confirm, however often it repeats: corroboration is a property of physics, not of volume.

Producers (ears)

• audio-sentry — acoustic sense — LIVE
• canary-desk — tripwire sense — SIMULATED PRODUCER — the Canary Desk's plant register exists; plants are owner-approved per item and owner-run; this prototype simulates a trip event, it does not plant or touch any real decoy
• endpoint-health — endpoint sense — SIMULATED PRODUCER — the Protector's PC Health Check exists as a periodic read; no continuous endpoint agent is deployed in the house
• network-watchdog — network-metadata sense — SIMULATED PRODUCER — the Watchdog's watch (new-device · egress · DNS) is designed and staged (AdGuard Home pilot); no live house.event/1 stream exists yet
• rf-detector — radio sense — LIVE-FILE-CARRIED

Empty sockets (named absences, by design)

• camera / Frigate lane — EMPTY SOCKET
• case/tag state (fiducial + NFC Seal/Close audits) — EMPTY SOCKET
• marketplace watcher — EMPTY SOCKET
• money watcher — EMPTY SOCKET
• show/vendor shell — EMPTY SOCKET
• phone buzz channel (channel 2) — SOCKET — outbox written, no transport
• watch tap channel (channel 3) — SOCKET — outbox written, no transport