AMEVA-Sentinel

Privacy-first Security Observability and Deterministic Threat Scoring Layer for Web Applications

1-Line Quick Installation

Install the official package directly into your runtime:

npm install @ameva/sentinel@alpha @ameva/sentinel-browser@alpha @ameva/sentinel-risk-core@alpha

The Engineering Challenge

Traditional bot mitigation SDKs aggressively collect unhashed keystrokes, absolute mouse coordinates, and intrusive canvas hashes, resulting in severe GDPR/CCPA regulatory liabilities and unpredictable false-positive blocks.

The Architectural Breakthrough

AMEVA Sentinel extracts minimal derived interaction statistics with zero raw coordinate persistence. It compiles declarative policy rules into deterministic 0 to 100 risk scores with transparent evidence logging.

Key Capabilities & Built-in Hardening

Privacy-by-Design Zero Raw Telemetry

Collects only derived interaction intervals and trusted event counters without recording keystrokes or cursor coordinates.

Deterministic Policy Evaluation Engine

Pure function evaluation guaranteeing algebraic score bounds, rule immutability, and transparent reasoning evidence.

Shadow Mode Observability Architecture

Operates safely in shadow mode with LocalStorage persistence and cross-tab real-time event synchronization.

Cross-Browser Verified Deterministic Build Pipeline SDK

E2E automated verification across Chromium, Firefox, and WebKit ensuring identical behavior on all platforms.

Supported Compute Kernels & Operations

Subsystem Category	Operations & Kernels	Status
Client Telemetry Subsystem	Throttled pointermove (100ms), Discrete Click/Touch Observation, Hardware Webdriver Detection	Verified (Chromium, Firefox, WebKit)
Risk Core Engine	Deterministic Rule Scoring, Policy-as-Code Compiler, Evidence Confidence Metric	Verified (100% Quality Gates)
Stateful Enforcement	Fixed-Window Session Burst Limiter, LocalStorage Deduplicated Event Store	Verified (Idempotent v1.0)

Canonical Usage Example

import { createBrowserTelemetry } from '@ameva/sentinel-browser';
import { createSentinel, MemoryFixedWindowCounterStore, LocalStorageRiskEventStore } from '@ameva/sentinel';

// 1. Collect privacy-safe derived interaction signals
const telemetry = createBrowserTelemetry({ autoStart: true });
const signals = telemetry.snapshot();

// 2. Initialize Sentinel Shadow-mode instance
const sentinel = createSentinel({
  mode: 'shadow',
  counterStore: new MemoryFixedWindowCounterStore(),
  eventStore: new LocalStorageRiskEventStore()
});

// 3. Evaluate and inspect transparent risk report
const report = await sentinel.score({ signals });
console.log(`Trace ID: ${report.traceId}, Score: ${report.score}, Action: ${report.action}`);