Part of TunnelMind — the intelligence layer agents call before they trust the internet. Three lenses on one signed corpus: Scry (who is attacking?) · Sigil (who can you trust?) · Tracker Data API (who is watching?). This repo serves: Scry — Familiar is the signed first-party sensor that produces the Scry corpus. See tunnelmind.ai.
Rust sensor binary deployed across a small Vultr fleet. Familiar passively
observes connection attempts on a bounded set of decoy ports, signs each
observation with an Ed25519 device key, and ships canonical records to
ingest.tunnelmind.ai. The signed-observation wire format is frozen at
v1.0.0 — see ADR-2026-05-A3-signed-ingest-contract.md in the
tunnelmind-site repo.
Bootstrap fleet (5 nodes, $25/mo total):
| Label | Region |
|---|---|
| node-us-ewr-01 | New Jersey |
| node-us-lax-01 | Los Angeles |
| node-eu-fra-01 | Frankfurt |
| node-eu-ams-01 | Amsterdam |
| node-apac-sgp-01 | Singapore |
Provision: see terraform/ (Vultr provider). Enrollment helper at
terraform/enroll-fleet.sh walks new nodes through pubkey enrollment against
/api/v1/admin/nodes on the ingest worker.
Identity: each node carries its own Ed25519 keypair; the registry binds
pubkey → node_id and (since OAI Phase 4) optionally pubkey → OAI-SENSOR-…
for jurisdiction-scoped sensor identities under the OAI standard.