linux-iceberg-editorial-status-panel
Working copy: not the live site.
No note from L3 yet. The AI working on this pet program writes here how the site is coming along.
linux-penguin-cyberhome-panel
Linux Iceberg v0.1 // 20261019
linux-iceberg-quick-summary-panel
Linux administration, SSH, systemd, packages.
linux-penguin-intelligence-levels-panel
on off checked, works report issues update waiting for your OK not created
linux-penguin-L1-control-panel
3rd party programs · 1
- MacAttackKali Linux on drives in your old MacBook Pro: it tests this farm the way an outsider would, only with your OK.
Linux Penguin manages MacAttack, the Kali drives that test this farm (Astra, 2026-10-18).
planned · its own page is not linked on the System Map yet
Native programs · 0
None on the map yet.
Native tools · 2
- Mac pre-wipe checka read-only report on a Mac before it is wiped for Linux: model, T2 chip, Wi-Fi card, Apple ID and Find My, folder sizes and a "Before you wipe" list. Never runs sudo and sends nothing. Merged.
linux-iceberg-v0.1-mac-prewipe-check-v1.0A tool of Linux Iceberg (Astra, 2026-10-18): a read-only report on a Mac before it is wiped for Linux: model, T2 chip, Wi-Fi card, Apple ID and Find My, folder sizes and a "Before you wipe" list. Never runs sudo and sends nothing. Merged (linux-iceberg PR #2).
works today · its own page is not linked on the System Map yet
- Linux checka read-only look at a Linux computer: which distribution and family it is (from /etc/os-release), which of his tricks fits, updates waiting, failed services, the SSH server, disk, memory and anything listening beyond the computer. Never runs sudo. Merged (linux-iceberg PR #3); Astra's PetOS's Linux package carries it (astras-pet-os PR #109): astras-pet-os penguin.
linux-iceberg-v0.1-linux-check-v1.0A tool of Linux Iceberg (Astra, 2026-10-19): a read-only look at a Linux computer: which distribution and family it is (from /etc/os-release), which of his tricks fits, updates waiting, failed services, the SSH server, disk, memory and anything listening beyond the computer. Never runs sudo. Merged (linux-iceberg PR #3); Astra's PetOS's Linux package carries it (astras-pet-os PR #109): astras-pet-os penguin.
works today · its own page is not linked on the System Map yet
More details
From the System Map. Click a name to open it. Click a light to change it: a bubble says what it means. Something not built yet is off, and a grey maintenance light is not checked yet. ON/OFF and maintenance are saved in this browser only: the core does not enforce them yet (PET-PROGRAM-FRAMEWORK.md, section 4).
linux-penguin-L2-control-panel
Native tricks · 3
- self-audit weeklyThe Friendly Farmer's round checks Linux Iceberg: the Linux computers on the farm, MacAttack first.
works today · its own page is not linked on the System Map yet
- kali-on-a-macwalks the owner through checking, backing up and wiping an old Intel Mac and installing Kali, with the Mac pre-wipe check. The wipe is always the owner's act.
linux-iceberg-v0.1-kali-on-a-mac-trick-v1.0A trick of Linux Iceberg (skills/kali-on-a-mac): walks the owner through checking, backing up and wiping an old Intel Mac and installing Kali, with the Mac pre-wipe check. The wipe is always the owner's act.
works today · its own page is not linked on the System Map yet
- debian-familyhelps someone find their way around Debian, Ubuntu, Kali, Raspberry Pi OS, Mint or Pop!_OS and keep packages, updates and services in order, with the Linux check. One trick per distribution family, picked from /etc/os-release.
linux-iceberg-v0.1-debian-family-trick-v1.0A trick of Linux Iceberg (skills/debian-family): helps someone find their way around Debian, Ubuntu, Kali, Raspberry Pi OS, Mint or Pop!_OS and keep packages, updates and services in order, with the Linux check. One trick per distribution family, picked from /etc/os-release (Astra, 2026-10-19).
works today · its own page is not linked on the System Map yet
linux-penguin-L3-control-panel
L3 asks you · 0
Nothing to ask you about Linux Iceberg right now.
Suggestions for you · 1
- weekly-suggestions weeklyOnce a week the seated agent suggests what to do next for Linux Iceberg.
planned · its own page is not linked on the System Map yet
Seat · 0
- seatEmpty: no farmhand is seated in Linux Iceberg (L3 is not connected).
A farmhand is an AI agent seated here to talk with you about this pet program.
linux-penguin-L4-control-panel
Nothing from the Friendly Farmer's last merged round.
Grants are permissions: what each level may read (R), write (W) and run (X) on Linux Iceberg. They are listed in linux-penguin-rwx-panel, below, with whether each one is in code.
No agent keys yet: Iron Gates will issue them and API Fairy will show them (planned).
- Nothing yellow or orange.
- Microchip
- not signed yet
- Pedigree
- findastra/linux-iceberg (private), added 2026-10-19
- App
- no app wired up yet
- Stamps
- Data
- yours, in this browser only
- Last entry
- none yet
- Updated
- page spawned 20261018; version v0.1 (from linux-iceberg's pet.json)
- Seat
- empty
- Last check
- 2026-10-20: “To fix: add "entry" to pet.json”
- On the map
- program-58
- Vaccination card
- no security patches recorded
- Vet records
- vet-clinic tickets (private repo)
linux-penguin-rwx-panel
Should be: what each level may read (R), write (W) and run (X) on Linux Iceberg. Then whether that is in code:
✓ In code A test, setting or script makes it true, and the grant names that proof (its evidence).⚠︎ Rule only A rule agents agree to follow (AGENTS.md or a skill). Nothing stops someone who breaks it.○ Not built Designed, not built yet.
Who may use Linux Iceberg
L1Should beRWXa program or tool · its own folder⚠︎ Rule only
RWXItself: its own repo folder and its declared data folder⚠︎ Rule only
Written only: farm-security, section 2. Hub scripts refuse a path outside the pet's folder (scripts/animal-guard-20261013.mjs), but a pet's own program runs as you, so it could reach further.
Next (planned): The Police Station watches every write and every key use.
L1Should beRWXa program or tool · everything else⚠︎ Rule only
RWXKernel Koala (Kernel Grove: process-sweep, service-host-explainer, leftover-watch)⚠︎ Rule only
Written only: Kernel Grove reads through WMI, the IP Helper API and the registry, and writes only its own data folder (its farm event log, saved reports without command lines, its menu and mood files). Nothing enforces this: it runs as you. Asked for on 2026-10-21; Astra approves it by merging.
Next (planned): Iron Gates issues the grant; The Police Station watches that Kernel Grove writes only its own folder.
RWXInference Iguana (Benchmark Rock: gpu-watch, busy-watch)⚠︎ Rule only
Written only: Benchmark Rock reads Windows' GPU performance counters and DXGI, and writes only its own data folder (its farm event log, saved reports with names and numbers only, its menu and mood files); it never stops or changes a program, a driver or a card setting. Nothing enforces this: it runs as you. Asked for on 2026-10-23; Astra approves it by merging.
Next (planned): Iron Gates issues the grant; The Police Station watches that Benchmark Rock writes only its own folder.
RWXLog Lynx (Log Den: crash-catcher, windows-log-reader, heartbeat-checker)⚠︎ Rule only
Written only: Log Den’s own code only reads, and on a .NET crash window presses Details and nothing else (log-den-20261018.cs). It writes only its own data folder. Nothing enforces this: it runs as you. Asked for on 2026-10-18; Astra approves it by merging.
Next (planned): Iron Gates issues the grant; The Police Station watches that Log Den writes only its own folder.
RWXForensic Ferret (Evidence Locker: evidence-collector)⚠︎ Rule only
Written only: evidence-locker-20261018.cs reads and copies into its own cases folder only; it never changes or deletes what it investigates. Nothing enforces this: it runs as you. Asked for on 2026-10-18; Astra approves it by merging.
Next (planned): Iron Gates issues the grant; Cipher Owl signs each case so a rewritten case shows.
L2Should beRWXa pet program · its own folder⚠︎ Rule only
RWXItself: its own repo folder and its declared data folder⚠︎ Rule only
Written only: farm-security, section 2. Hub scripts refuse a path outside the pet's folder (scripts/animal-guard-20261013.mjs), but a pet's own program runs as you, so it could reach further.
Next (planned): The Police Station watches every write and every key use.
L2Should beRWXa pet program · everything else⚠︎ Rule only
RWXKernel Koala (Kernel Grove: process-sweep, service-host-explainer, leftover-watch)⚠︎ Rule only
Written only: Kernel Grove reads through WMI, the IP Helper API and the registry, and writes only its own data folder (its farm event log, saved reports without command lines, its menu and mood files). Nothing enforces this: it runs as you. Asked for on 2026-10-21; Astra approves it by merging.
Next (planned): Iron Gates issues the grant; The Police Station watches that Kernel Grove writes only its own folder.
RWXInference Iguana (Benchmark Rock: gpu-watch, busy-watch)⚠︎ Rule only
Written only: Benchmark Rock reads Windows' GPU performance counters and DXGI, and writes only its own data folder (its farm event log, saved reports with names and numbers only, its menu and mood files); it never stops or changes a program, a driver or a card setting. Nothing enforces this: it runs as you. Asked for on 2026-10-23; Astra approves it by merging.
Next (planned): Iron Gates issues the grant; The Police Station watches that Benchmark Rock writes only its own folder.
RWXLog Lynx (Log Den: crash-catcher, windows-log-reader, heartbeat-checker)⚠︎ Rule only
Written only: Log Den’s own code only reads, and on a .NET crash window presses Details and nothing else (log-den-20261018.cs). It writes only its own data folder. Nothing enforces this: it runs as you. Asked for on 2026-10-18; Astra approves it by merging.
Next (planned): Iron Gates issues the grant; The Police Station watches that Log Den writes only its own folder.
RWXForensic Ferret (Evidence Locker: evidence-collector)⚠︎ Rule only
Written only: evidence-locker-20261018.cs reads and copies into its own cases folder only; it never changes or deletes what it investigates. Nothing enforces this: it runs as you. Asked for on 2026-10-18; Astra approves it by merging.
Next (planned): Iron Gates issues the grant; Cipher Owl signs each case so a rewritten case shows.
L3Should beRWXan AI agent in a seat · its own folder⚠︎ Rule only
RWXItself: its own repo folder and its declared data folder⚠︎ Rule only
Written only: farm-security, section 2. Hub scripts refuse a path outside the pet's folder (scripts/animal-guard-20261013.mjs), but a pet's own program runs as you, so it could reach further.
Next (planned): The Police Station watches every write and every key use.
L3Should beRWXan AI agent in a seat · everything else⚠︎ Rule only
RWXThe agent in the seat⚠︎ Rule only
Written only: Only animals, and only on a claude/ or codex/ branch, never straight on main (AGENTS.md). Hub scripts check the animal part with scripts/animal-guard-20261013.mjs, on the pet’s own GitHub account (github_owner in pets.json); nothing checks the branch part.
Next (planned): Short-lived session keys from Iron Gates.
L4Should beRWXyou, the verified human✓ In code
RWXAstra (you, L4)✓ In code
Enforced: It is your PC and your accounts. You give and take back every other grant in this list.
Proof: Your own Windows account on this PC, and your own GitHub, Discord and AI accounts: only you sign in to them
What Linux Iceberg may use
L1+L2+L3RWXIts own repo folder and its declared data folder⚠︎ Rule only
Written only: farm-security, section 2. Hub scripts refuse a path outside the pet's folder (scripts/animal-guard-20261013.mjs), but a pet's own program runs as you, so it could reach further.
Next (planned): The Police Station watches every write and every key use.
L1+L2RWXShared tools, other people's programs and devices⚠︎ Rule only
Written only: One copy of a shared tool, one owner; other pets get a grant: folders, R W X and limits (TOOLS-AND-TRICKS.md). Until Iron Gates is built, a pet asks Astra and the grant is written in both pets' connection boxes.
Next (planned): Iron Gates issues grants and Astra approves them.
L3RWXFarmhands (ring 4)⚠︎ Rule only
Written only: X on a farmhand means sending it a request and reading the answer. Nobody rewrites a model, and only Astra changes her local farmhands. Only farmhands on the allowlist get keys; today they are Astra's own API keys.
Next (planned): Short-lived keys from Iron Gates, shown in API Fairy's mushroom circle; local farmhands bound to this PC with a key.
L1+L2RWXThe Linux or Mac computer his check runs on: what it is, its packages, services, disk, memory and listening ports (never the contents of your files)⚠︎ Rule only
Written only: His tools only read and print a report: no sudo, no writes, nothing sent (tests/linux-check-test-20261019.sh checks the report against stand-in commands). Nothing enforces this: they run as you. Asked for on 2026-10-19; Astra approves it by merging.
Next (planned): Iron Gates issues the grant; The Police Station watches that Linux Iceberg writes nothing.
More details
Each level has two rows: what it may do inside the pet program’s own folder, and everywhere else. A row shows the most that level is allowed there by any rule; open a row to see every rule behind it and its proof. The row’s mark is the least sure of those rules: one “Rule only” makes the whole row “Rule only”. These are the same rules as the System Map card and PROTECTION-RINGS.md, and the build refuses an “In code” mark that names no proof.
linux-penguin-session-notes-panel
linux-iceberg-backlog in this browser (0)
The backlog is saved in this browser, before anything else happens. This browser keeps each file's name and size, not the file itself yet. Export moves it to another device.
linux-penguin-emotions-panel
More details
The mood Linux Penguin is in now lights up (the page knows idle, awake and sad so far). Awake shows the idle face blinking until a picture with open eyes is drawn. Drawings are drafts unless Astra approved them.
linux-penguin-clicker-training-panel
- one clickShow the current reminder in a dialog box, like BSOD’s blurb.
planned · its own page is not linked on the System Map yet
- two clicksOpen or close Linux Iceberg, this page.
works today · its own page is not linked on the System Map yet
- three clicksA tool you assign: none assigned yet.
unassigned · its own page is not linked on the System Map yet
More details
One and two clicks are the same for every pet. From three clicks on, each number of clicks can run one of Linux Iceberg's tools (code, no AI).
linux-penguin-friends-list-panel
More details
Every pet Linux Penguin plays with on the System Map, hatched or not, most used first. Use is not measured yet, so the order is the map's: links that work today, then planned, then ideas; within each, the pet they share the most with. A plays_with list in pets.json sets the order instead. Click one to open its pet program.