RAGBAZ
Grounded locomotion, tactical AI, procedural choreography, and per-bone keyframe timelines in a deterministic in-browser studio.
A secure WordPress gateway, Next.js storefront, multi-tenant provisioning, DNS automation, mail, and GraphQL edge surface.
Rule-driven IMAP and SMTP inspection with quarantine buckets, audited rule edits, event hooks, and operator review.
Disposable browser and payload analysis environments for watching hostile web behavior without exposing the operator surface.
The documentation and operations surface for RAGBAZ products, specs, status checks, deployment notes, and design-system references.
runtimes reproduce. same seed, same frame. choreography is data, not chance.
hostile inputs run in isolation. observe the payload, never the blast radius.
copy reads like kernel log lines. labels are identifiers. numbers are mono, tabular.
one warm dark system across engine, studio, decks, and pages. borders, not shadows.
real-time 3d scene renderer. webgl2 viewport with orbit controls, selection, transform gizmos. multi-camera layout (perspective, top, front).
per-bone keyframe editor. dope sheet and curve editor. blend modes, easing presets, frame-stepping. deterministic replay.
goal-oriented action planner. perception system (sight, sound, damage). stance state machine, formation logic, cover evaluation.
embedded domain-specific language for choreography. syntax-highlighted editor with live preview. seed-based determinism for reproducible playback.
locomotion blending, ragdoll transitions, procedural wind/react. constraint solver for foot-planting and hand-placement.
secure ingress proxy. authenticates and routes requests to tenant wordpress instances. handles custom domain ssl, rate limiting, waf rules.
next.js 16 headless frontend. app router, tailwind v4, stripe payments, oauth (google/facebook/microsoft/apple). courses, shop, events, digital downloads.
multi-tenant lifecycle manager. creates wordpress instances via docker-compose, manages dns (cloudflare), mail users, ssl certs. stripe webhook integration for billing.
federated graphql gateway (strawberry + fastapi). aggregates wp graphql, storefront data, and tenant management into a single endpoint. mcp server for ai-driven operations.
tenant email infrastructure. dovecot imap, postfix smtp, dkim signing, alias management, mailbox provisioning per tenant.
pattern-match pipeline. header, body, attachment analysis. allow/block/reject actions, scoring, tag injection. hot-reloadable rule sets.
quarantine and archive buckets. sqlite-backed with litestream replication. time-based retention policies, manual release or delete.
propose-apply-revert cycle for rule changes. full diff history per rule. operator approvals, rollback on failure. immutable event log.
event-driven delivery for matched mail. configurable endpoints, retry with backoff, delivery receipts, secret signing.
transparent smtp/imap intercept. sits between mta and mailbox. inspects in transit, no client config changes required.
hardened browser or headless runtime in a disposable container. no network egress except to capture sinks. memory and filesystem snapshots.
captures all i/o: http requests, dom mutations, canvas reads, clipboard access, storage writes. structured event stream, not just video.
static and dynamic analysis. payload deobfuscation, call graph extraction, data-flow tracking. ioc and signature generation.
url or attachment ingestion queue. pulls from rss feeds, mailroute buckets, api submissions. dedup and priority scheduling.
multi-source literature fetcher. pubmed, arxiv, crossref, openalex adapters. full-text and metadata extraction, dedup, canonical id resolution.
structured assessment over source texts. claim extraction, evidence grading, citation-network analysis. outputs machine-readable verdicts.
sqlite with fts5 full-text search over ingested papers. normalized schema for authors, affiliations, funders. export to json/bibtex/csl.
graphql and rest endpoints for querying the corpus. faceted search, citation graph traversal, batch export. api-key auth with usage tracking.
i2s digital microphone input or bluetooth a2dp source. 16khz/16bit mono pipeline, configurable gain and noise gate. ringbuffer with dma.
on-device speech-to-text via esp-sr or whisper.cpp (q4 quantized). streaming inference, voice-activity detection, keyword spotting.
local nllb or tiny-llm translation model. phrase cache for low-latency repeat translations. configurable source/target language pair.
serial/uart text out, i2s tts playback, or ble gatt characteristic. lcd display for standalone mode. wifi or bt transport.
leaflet-based interactive map of the swedish coast. clustered wreck markers with depth contours, exclusion zones, and maritime navigation layers.
curated registry with per-wreck provenance. coordinates, depth, cargo, sinking date, discovery story. photos, sonar scans, and diver reports.
fastapi data server with sqlite. geo queries (radius, bounding-box), full-text search, image serving. admin interface for curators.