HawkinsOperations Website

Public proof codex and website rendering layer for HawkinsOperations, the governed successor architecture for detection engineering.

Owner identity: Raylee Hawkins, Detection Engineer | SOC Automation | Detection-as-Code | Security Automation.

Official links: Raylee Hawkins on LinkedIn · Raylee Hawkins on GitHub · HawkinsOps detection engineering portfolio · HawkinsOperations GitHub organization · RayleeOps public operating journal

Purpose

This repository renders the public explanation for HawkinsOperations: governed detection engineering, truth boundaries, proof promotion, public claim control, and reviewer routing.

This repo is website rendering only. It is not the source of detection truth, runtime truth, signal truth, evidence truth, or external-use authorization.

Framework and Deploy Model

• Framework: Astro + Tailwind CSS + TypeScript
• Output mode: static
• Primary deploy target: Cloudflare Pages
• Build command: npm run build
• Output directory: dist
• Workers required: no
• SSR required: no
• Fake dynamic APIs: none

Cloudflare Pages should build from the repository root and publish dist.

HawkinsOperations Closed SOC Loop 001

• GitHub Projects: pending access / attachment. Current org project route: https://github.com/orgs/HawkinsOperations/projects
• Reviewer entry point: https://github.com/HawkinsOperations/.github/blob/main/profile/START_HERE.md
• Repository authority map: https://github.com/HawkinsOperations/.github/blob/main/architecture/REPO_AUTHORITY_MAP.md
• HO-DET-001 public proof route: https://github.com/HawkinsOperations/hawkinsoperations-proof/blob/main/proof/records/HO-DET-001.md
• Current HO-DET-001 public label: CONTROLLED_TEST_VALIDATED
• HawkinsOperations is the governed successor system; HawkinsOps and older surfaces are legacy/reference unless revalidated.
• Sprint thesis: speed with enforcement through deterministic validation, CI/CD gates, evidence records, proof contracts, and bounded public claims.
• AI is labor. Governance is authority.
• Build loud. Verify hard. Claim tight. Ship receipts.
• Website/public pages route to proof records; they do not replace proof.
• Platform runtime contract enforcement exists for HO-DET-001 through an internal platform route as a non-promotional guardrail.
• Platform contract status: it preserves CONTROLLED_TEST_VALIDATED, NOT_PUBLIC_SAFE, and BLOCKED; it does not prove runtime-active status, signal-observed public proof, public-safe runtime proof, live Splunk fired, Splunk-proven Runtime Signal 001, Cribl-routed status, Wazuh-routed public proof, production-ready status, fleet-wide coverage, AWS-live status, autonomous SOC operation, AI-approved disposition, or analyst-approved disposition.
• Next gates: evidence-backed runtime or signal promotion only after separate proof review, privacy review, stale review, wording review, and Raylee approval.

Blocked Claims

This repository does not claim: runtime-active, signal-observed, evidence-linked public proof, public-safe, live Splunk firing, production triage, analyst-approved disposition, private model host runtime-active, Cribl-routed, Wazuh-routed, AWS-live, autonomous SOC, production-ready SOC, fleet-wide deployment, or AI-approved disposition.

Scope

• External-use project narrative after review
• Reviewer routing between public surfaces
• Repository map and system overview
• Links to successor source and proof repositories
• Static public proof codex routes for reviewer inspection

Out of Scope

• Host-level operational state
• Internal cutover/control docs
• Any non-public secrets or environment details
• Detection implementation authority
• Runtime, signal, evidence, or external-use authorization authority

Repository Contract

• Keep language clear, technical, and evidence-backed.
• Avoid internal plumbing details that do not help external readers.
• Link claims to source/proof artifacts rather than undocumented assertions.
• Do not claim that website text proves runtime behavior, validation, signal observation, evidence linkage, or external-use approval.
• Treat src/data/* as the typed public claim-boundary data layer for this static site.

Truth Boundary

• Website repo: public rendering and routing only
• Detection truth: hawkinsoperations-detections
• Validation truth: hawkinsoperations-validation
• Platform/runtime truth: internal platform route; not a public website or proof surface
• Proof and claim linkage: hawkinsoperations-proof
• Organization-level successor governance: https://github.com/HawkinsOperations

Related Repositories

• Detections: https://github.com/HawkinsOperations/hawkinsoperations-detections
• Validation: https://github.com/HawkinsOperations/hawkinsoperations-validation
• Platform/runtime contracts: internal platform route; not a public reviewer link
• Proof: https://github.com/HawkinsOperations/hawkinsoperations-proof