## DaemonCore Legion DaemonCore Legion is a local-first Windows security assessment workspace for authorized penetration testing, diagnostics, reconnaissance, and evidence-driven reporting. Define your engagement, confirm the Rules of Engagement, authorize targets, run bounded assessments, review findings, and export professional results—all from one operator-controlled desktop application. ### Features - Scope Vault for authorized domains, CIDR ranges, ports, applications, testing windows, rate limits, permitted techniques, and prohibited techniques. - Authorization confirmation requiring the operator to verify that the engagement and Rules of Engagement are current. - Emergency Stop control that blocks new execution and stops tracked adapter processes. - Local source scanning for secrets, private keys, dependency risks, and other code-security findings. - Target inventory with DNS resolution and bounded common-port checks. - Black-box HTTP assessment for status codes, page titles, content types, and security headers. - OpenAPI import with endpoint inventory and safe GET/HEAD route assessment. - Multi-target assessment planning with selectable DNS, TCP, HTTP, TLS, headers, and cookies modules. - Resumable assessment jobs with progress tracking and recovery of the latest run. - Tool Registry for registering approved local executables and running them through the Warden safety layer. - Evidence Ledger for reviewing normalized observations from scans and assessments. - Unified Findings queue with severity filters, CVSS scores, ownership, resolution, reopening, deletion, and operator-created findings. - JSON findings import. - Export formats including HTML reports, JSON bundles, SARIF, and print/PDF output. - Chained audit ledger recording scope changes, scans, assessments, adapter executions, finding updates, exports, and emergency-stop events. - Local encrypted storage with Windows-protected secrets and redacted evidence handling. - Agent Builder for configuring operator personas, roles, missions, allowed actions, and prohibited actions. - Agent War Room for reviewing configured agents and operator-selected perspectives. - Optional AI provider control for structured planning only; provider output cannot directly execute tools. - DaemonCore, Black, Red, and White visual themes. - Compact, Standard, and Large interface font sizes. - Persistent local display preferences. - Premium dark operator interface with responsive panels, focus states, search, status indicators, and clear safety boundaries. - Windows desktop packaging with NSIS installer and MSIX Store package support. DaemonCore Legion is designed for authorized security work. Every assessment is constrained by scope, authorization, rate limits, prohibited techniques, and the emergency-stop control. It does not perform unrestricted denial-of-service, credential attacks, persistence, destructive payload execution, or out-of-scope activity.