Azazel- - Cyber Scapegoat Gateway

Development Status

Azazel is a cyber defense doctrine and tool family built around one principle: do not merely block the attacker; bind them, slow them, observe them, and buy time.

It applies delaying action to cyberspace through detection, deterministic decision loops, controlled friction, and selective redirection toward decoys.

Core Idea: Delaying Action in Cyberspace

In military tactics, delaying action is not passive retreat. It is an intentional operation to shape enemy movement, reduce enemy tempo, and preserve defender initiative.

Azazel translates this into network defense: detect hostile behavior, decide locally, delay attacker progress, and maintain visibility long enough for effective response.

See also: Delaying Action | Go no Sen

Why "Scapegoat Gateway"

Azazel can absorb hostile interaction, draw attacker attention away from valuable assets, and redirect suspicious behavior into controlled decoys.

The objective is not retaliation. The objective is control, observability, and time for defenders.

See also: Cyber Scapegoat Gateway

Design Principles

• Local-first and offline-capable operation
• Deterministic decisions before AI assistance
• Gradual response instead of binary allow/block
• Deception and delay with bounded impact on legitimate users
• Deployability on small edge devices
• Auditable defensive actions and mode transitions

See also: Deterministic Defense | Offline Edge Defense

Tool Family

Project	Designation	Codename	Former Name	Role	Target
Azazel-Edge Gateway	AZ-01	SENTINEL	Azazel-Pi	Field-deployable edge SOC/NOC and scapegoat gateway (deterministic arbiter)	Raspberry Pi 5 / edge networks
Azazel-Gadget Shield	AZ-02	TACMOD	Azazel-Zero	Portable tactical defense on untrusted Wi-Fi	Raspberry Pi Zero 2 W / personal use
Azazel-Boot Probe	AZ-03	—	Azazel-USB	Reserved bootable rapid-response class; no repository yet	Portable USB boot
Azazel-Knowledge Advisor	AZ-04	GRIMOIRE	Azazel-CTI	Advisory-only tactical CTI node (never commands; the edge stays functional if it is absent, slow, or wrong)	Raspberry Pi 4 / on-premises
Azazel-Fabric Contract	AZ-05	COVENANT	Azazel-Common	Shared contracts library — the series' common language, not a decision core (azazel_fabric; Edge is the largest consumer, Gadget fully migrated)	Cross-repository
Azazel (this repository)	—	—	—	Doctrine, architecture, naming, and product-family entry point	Cross-repository

Edge, Gadget, and Boot are the defensive deployment classes; Fabric and Knowledge are the support classes that make the Azazel System work as a series.

Legacy alias mapping: Azazel-Pi -> Azazel-Edge (formerly), Azazel-Zero -> Azazel-Gadget (formerly), Azazel-USB -> Azazel-Boot (same meaning), Azazel-CTI -> Azazel-Knowledge (formerly, working name), Azazel-Common -> Azazel-Fabric (formerly).

Naming rule summary: formal names use Azazel-<Form> <Role>, and external presentation should prefer Azazel-<Form> <Role> - Cyber Scapegoat Gateway.

Which Repository Should I Read?

• Start here if you want doctrine, terminology, and architecture framing.
• Read Azazel-Edge for edge SOC/NOC gateway implementation.
• Read Azazel-Gadget for personal tactical device implementation.

Azazel is the doctrine. Azazel-Edge and Azazel-Gadget are concrete implementations of that doctrine.

Documentation Map

• Philosophy
• Concepts
• Products
• Naming and Terminology
• Existing Architecture Docs
• Contributing
• Security Policy

Conference / Arsenal Visitor Path

• Arsenal booth, conference profile, or social link
• Azazel System overview site
• Doctrine and product selection from this repository
• Implementation deep dive in Azazel-Edge or Azazel-Gadget

Repository Map

• 01rabbit/Azazel: doctrine, philosophy, naming, and shared architecture
• 01rabbit/Azazel-Edge: field-deployable edge SOC/NOC gateway implementation
• 01rabbit/Azazel-Gadget: portable personal tactical defense implementation
• 01rabbit/Azazel-Knowledge (AZ-04, formerly Azazel-CTI): advisory-only, deterministic on-premises tactical CTI node, Azazel-Knowledge Advisor
• 01rabbit/Azazel-Fabric (AZ-05, formerly Azazel-Common): shared contracts library for the series, Azazel-Fabric Contract

License Matrix

• 01rabbit/Azazel: Apache-2.0
• 01rabbit/Azazel-Edge: MIT
• 01rabbit/Azazel-Gadget: MIT
• 01rabbit/Azazel-Knowledge: MIT
• 01rabbit/Azazel-Fabric: MIT