Build notes · Goh Kun Ming
Sentinel Endpoint Framework (SEF)
Security · Public project
Jun 2025 – Jun 2026
Project overview
A local endpoint watchdog with physical-key checks, PIN controls, audit records and user-controlled recovery.
A Rust-based local endpoint watchdog and control dashboard using physical-key presence, PIN-protected controls and audit records. It supports reversible maintenance and user-controlled recovery, with a Python fallback during migration. Advanced protection modules remain preview designs beyond the implemented user-mode watchdog.
Inside this build
- Implemented key-presence polling, grace periods and fail-safe locking requests.
- Added salted PIN verification, short authorisation sessions and lock-first recovery requiring the physical key.
- Built a localhost dashboard for trusted-key enrolment, protection state and maintenance controls.
- Recorded key transitions, configuration changes, authorisation and recovery events.
- Packaged reversible Windows startup controls and bounded long-running policy state.
- Separated seven preview control families from implemented features through an explicit threat model.