foxl-ai Host Healthcheck
Assess and harden the host running Pilot.
Workflow
1. Establish Context (read-only)
Determine:
- OS and version
- Privilege level (root/admin vs user)
- Access path (local, SSH, RDP)
- Network exposure (public IP, tunnel)
- Backup status
- Disk encryption status
- Auto security updates status
2. Run Security Audits
pilot security audit
pilot security audit --deep
pilot security audit --json
3. Check Version Status
pilot update status
4. Determine Risk Tolerance
Profiles:
- Home/Workstation Balanced - Firewall on, remote access restricted to LAN
- VPS Hardened - Deny-by-default, key-only SSH, no root login
- Developer Convenience - More local services, explicit warnings
- Custom - User-defined constraints
5. Produce Remediation Plan
Include:
- Target profile
- Current posture summary
- Gaps vs target
- Step-by-step remediation
- Rollback strategy
- Risks and lockout scenarios
6. Execute with Confirmations
For each step:
- Show exact command
- Explain impact and rollback
- Confirm access remains available
- Stop on unexpected output
Required Confirmations
Always require approval for:
- Firewall rule changes
- Opening/closing ports
- SSH/RDP configuration
- Installing/removing packages
- Enabling/disabling services
- User/group modifications
- Scheduling tasks
- Update policy changes
Periodic Checks
Schedule via cron:
pilot security auditpilot update status