macOS / Linux host-security telemetry collector with an LLM threat judge and a single-page web dashboard.