One thing needs you. Nothing has been done in your name.

Household Defense Listener — PROTOTYPE

SIMULATED STORY. Every event on this page is scripted fixture data, labeled SIMULATED on its face. No real network state was read or changed. Simulated producers are marked in the producer list below.

The response ladder — RECORD (silent log) → CHECK (one sense; owner looks) → CONFIRM (two physics-independent senses; latched) → CONTAIN (a proposal only, and only ever against the house's own network, under an owner ruling that has not been made). Decisions from the scripted attack story — RECORD 2 · CHECK 2 · CONFIRM 1.

The ladder, as a diagram:

CONFIRM — latched until owner-verified

• CONFIRM network-metadata · new_device · zone office · 2026-10-31T07:13:05.000Z
  two physics-independent senses agree inside 120s: tripwire + network-metadata
  licensed by evt_26015a5e8c598fdd + evt_93c9e62122cfcf32
  flags: time-unverified

CONTAIN — proposals (simulated; nothing executed)

• CONTAIN — PROPOSED, SIMULATED
  Isolate the unknown device at the house router (quarantine VLAN / MAC hold) and hold the tripped decoy's file for the owner's review
  Proposed against: SIM-DEVICE-0001 · Trigger: CONFIRM dec_68e4bad01d615ef0 (canary_trip · new_device + 2026-10-31T07:13:05.000Z, two physics-independent senses)
  Status: SIMULATED — NOT EXECUTED. Requires: owner ruling R-DL-2 (pre-authorized containment) — not ruled; the owner is the only actuator until he rules otherwise. This prototype executes nothing — no network state was changed in the making of this page.

CHECK — open

• CHECK network-metadata · egress_spike · zone office · 2026-10-31T07:13:40.000Z
  single sense (network-metadata); owner verifies the state himself

All decisions, newest first

• RECORD network-metadata · egress_spike · zone office · 2026-10-31T07:14:30.000Z
  same signature inside its 30-minute cooldown; logged, not re-raised
• CHECK network-metadata · egress_spike · zone office · 2026-10-31T07:13:40.000Z
  single sense (network-metadata); owner verifies the state himself
• CONFIRM network-metadata · new_device · zone office · 2026-10-31T07:13:05.000Z
  two physics-independent senses agree inside 120s: tripwire + network-metadata
  licensed by evt_26015a5e8c598fdd + evt_93c9e62122cfcf32
  flags: time-unverified
• CHECK tripwire · canary_trip · zone office · 2026-10-31T07:12:20.000Z
  single sense (tripwire); owner verifies the state himself
• RECORD radio · census.observation · zone office · 2026-10-31T07:12:00.000Z
  class is RECORD-only under v0.1 policy

Negative control — a single sense, alone

A second scripted story fed the listener one sense only (a tripwire, twice, plus its heartbeat). Result — RECORD 2 · CHECK 1 · CONFIRM 0. One sense cannot confirm, however often it repeats: corroboration is a property of physics, not of volume.

Producers (ears)

• audio-sentry — acoustic sense — LIVE
• canary-desk — tripwire sense — SIMULATED PRODUCER — the Canary Desk's plant register exists; plants are owner-approved per item and owner-run; this prototype simulates a trip event, it does not plant or touch any real decoy
• endpoint-health — endpoint sense — SIMULATED PRODUCER — the Protector's PC Health Check exists as a periodic read; no continuous endpoint agent is deployed in the house
• network-watchdog — network-metadata sense — SIMULATED PRODUCER — the Watchdog's watch (new-device · egress · DNS) is designed and staged (AdGuard Home pilot); no live house.event/1 stream exists yet
• rf-detector — radio sense — LIVE-FILE-CARRIED

What this listener cannot hear (yet)

• camera / Frigate lane — EMPTY SOCKET. What would fill this: a camera producer that sends house events — no camera producer is wired in yet; it arrives when the camera walk is done and that producer starts sending.
• case/tag state (fiducial + NFC Seal/Close audits) — EMPTY SOCKET. What would fill this: the show app reporting its case and tag checks — that app is not built yet; it arrives when the app is built.
• marketplace watcher — EMPTY SOCKET. What would fill this: a watcher that reports only your own missing cards — that watcher is not built yet; it arrives when it is built as a producer.
• money watcher — EMPTY SOCKET. What would fill this: a watcher that flags when a payout and the record disagree — that watcher does not exist yet; it arrives when the exception producer is built.
• show/vendor shell — EMPTY SOCKET. What would fill this: the show app itself, as the surface shows report from — that app is not commissioned yet; it arrives when the app is commissioned and built.
• phone buzz channel (channel 2) — SOCKET — outbox written, no transport. What would fill this: a way to buzz your phone with an alert — the outbox is written but no transport carries it; it arrives when you rule on the buzz transport (R-DL-3).
• watch tap channel (channel 3) — SOCKET — outbox written, no transport. What would fill this: a way to tap your watch with an alert — it rides the same transport as the phone buzz; it arrives with that same ruling (R-DL-3).

Decisions this page sets up

Four rulings would take this further. None has been made; each is printed here so the page ends holding its asks. Full text: the dossier, section 5.

• R-DL-1 · sinkhole-on-CONFIRM — may the house resolver sinkhole a CONFIRM-corroborated destination automatically? — UNRULED
• R-DL-2 · isolate-on-CONFIRM — may the router isolate a CONFIRM-corroborated unknown device automatically? — UNRULED
• R-DL-3 · buzz transport — stand up the phone buzz and watch tap transport the earlier consult cleared with conditions? — UNRULED
• R-DL-4 · continuous endpoint agent — evaluate a continuous endpoint agent for the workstation and the Pavilion? — UNRULED

1 CONFIRM latched — unverified