Knuckles-Team Tunnel And Network Audit Workflow
CONCEPT:INFRA-001
Audit active SSH tunnels and network connectivity alongside system network interface status.
Steps
Step 0: Tunnel Manager
Agent: discovery-agent
Tools: tun_tm_system, tun_tm_hosts
List all active tunnels from the inventory
Expected: tunnel
Step 1: collect-network-statistics [skill: systems-manager]
Agent: deployer-agent
Tools: pt_stack, cnt_cm_compose_operations
Show network interface stats and active connections
Expected: network, interface
Step 2: collect-firewall-rules [skill: systems-manager]
Agent: verifier-agent
Tools: pt_docker, cnt_cm_container_operations
Get the system's firewall rules summary
Expected: firewall, rule
Step 3: KG Persistence [depends_on: Step 1, Step 2]
Agent: verifier-agent
Tools: graph_write
Persist workflow results as nodes and edges in the Knowledge Graph. Create appropriate typed nodes with metadata and link to existing domain entities.
Output
- Tunnel And Network Audit results persisted in KG
- Structured report (MD/PDF)
- Audit trail with timestamps and agent attributions
Execution
Run this workflow as a dependency-ordered DAG. Steps with no unmet depends_on run in parallel; dependents run after their prerequisites complete.
- Run first (in parallel): Step 0 — Tunnel Manager; Step 1 — collect-network-statistics; Step 2 — collect-firewall-rules
- After level 0: Step 3 — KG Persistence
Execution: If graph-os is reachable, offload the whole DAG via graph_orchestrate action=execute_workflow (or the kg-delegate skill) for true parallel/swarm execution. Otherwise execute the steps natively in dependency order: run steps with no unmet depends_on in parallel, then their dependents.