Background watchers for untrusted Wi‑Fi, DNS mismatches, after-hours traffic, and connection flapping. When something trips, you get an alert and a Demon log entry. You choose the response.
Tripwire responses: ask, warn, or lock
Live status: watching, tripped, or cooldown
Re-arm tripped ArchAngels from the live card
Seraphim
Protection hub inside War Room—heuristic package and public-file risk today. We are still building toward a fuller AV layer; completed work ships in later builds for lifetime buyers (same key).
Apps — scan packages, review risk, Seal into Abyss