Blame for index.html

<!doctype html>
<html lang="en">
<head>
  <meta charset="utf-8">
  <meta name="viewport" content="width=device-width, initial-scale=1, viewport-fit=cover">
  <meta name="description" content="Arx: a free security audit for your Mac, Windows or Linux computer. 70 checks in about a minute, offline, mapped to ISO 27001, GDPR and the EU AI Act, with one-click fixes on Mac and Linux. Nothing is uploaded.">
  <meta name="theme-color" content="#ed2939">
  <title>Arx · Security audit for your computer</title>
  <link rel="icon" href="app/build/icon.png">
  <link rel="apple-touch-icon" href="app/build/icon.png">
  <link rel="preconnect" href="https://fonts.googleapis.com">
  <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
  <link rel="stylesheet" href="https://fonts.googleapis.com/css2?family=Inconsolata:wght@400;500;600;700;800&display=swap">
  <link rel="stylesheet" href="site/site.css">
  <script>try { const t = localStorage.getItem('devseis.theme'); if (t) document.documentElement.dataset.theme = t; } catch { /* ignore */ }</script>
</head>
<body>
  <header class="nav">
    <div class="wrap nav-inner">
      <a class="brand" href="index.html"><img src="app/build/icon.png" alt=""><b>Arx</b></a>
      <nav class="nav-links">
        <a href="#checks">Checks</a><a href="#how">How it works</a><a href="#about">About</a>
      </nav>
      <div class="nav-actions">
        <button type="button" class="icon-btn" id="themeToggle" aria-label="Light or dark" title="Light or dark">◐</button>
        <a class="btn btn-primary btn-sm" href="#install">Install</a>
      </div>
    </div>
  </header>

  <!-- ===== Landing ===== -->
  <main id="landing">
    <section class="wrap hero">
      <p class="eyebrow"><img src="app/build/icon.png" alt="">Arx - Fine-tuned AI Model</p>
      <h1>Is your computer secure?<br><span class="grad">Find out in a minute.</span></h1>
      <p class="lead">A free audit of your Mac, Windows or Linux computer: <b><span data-count>70</span> checks</b> mapped to <b>ISO 27001</b>, <b>GDPR</b> and the <b>EU AI Act</b>. A small AI on your computer writes the report, and on Mac and Linux Arx can <b>fix problems for you</b>. It runs offline. <u>Nothing is uploaded.</u></p>

      <div class="device-card" id="deviceCard">
        <span class="device-icon" id="deviceIcon">💻</span>
        <div class="device-text"><span class="tiny muted" id="deviceLabel">Detected</span><b id="deviceName">Your computer</b></div>
        <div class="seg" id="osSeg" aria-label="Choose your system">
          <button type="button" data-os="mac">macOS</button>
          <button type="button" data-os="windows">Windows</button>
          <button type="button" data-os="linux">Linux</button>
        </div>
      </div>

      <div class="phone-note hidden" id="phoneNote">
        <b>📱 Arx checks computers, not phones.</b>
        <span class="muted">Open this page on your Mac, Windows or Linux computer to install it.</span>
        <button type="button" class="btn btn-sm" id="copyLink">Copy link</button>
      </div>

      <div class="cmd-hero" id="heroInstall">
        <span class="tiny muted cmd-where" id="heroWhere">Paste in Terminal and press Return</span>
        <div class="cmd-box"><code id="heroCmd">curl -fsSL https://devseis-arx.static.hf.space/install.sh | bash</code><button type="button" class="btn btn-primary" data-copy-cmd="hero">Copy</button></div>
      </div>
      <div class="cta">
        <a class="btn" href="#install">How to install</a>
        <label class="btn" for="reportFile" title="Open the …-evidence.json file Arx saves next to each report">Open a report</label>
        <input type="file" id="reportFile" accept=".json,application/json" hidden>
      </div>
      <p class="tiny muted" id="heroMeta">Free · open source · version 0.5.6</p>
    </section>

    <section class="wrap">
      <div class="stats">
        <div class="stat c-red"><span class="tiny muted">Checks</span><b data-count>70</b><span class="tiny muted">settings &amp; controls</span></div>
        <div class="stat c-blue"><span class="tiny muted">Time</span><b>~1 min</b><span class="tiny muted">for the whole audit</span></div>
        <div class="stat c-green"><span class="tiny muted">Uploaded</span><b>0 bytes</b><span class="tiny muted">runs offline</span></div>
        <div class="stat c-violet"><span class="tiny muted">Frameworks</span><b>3</b><span class="tiny muted">ISO · GDPR · AI Act</span></div>
      </div>
    </section>

    <section class="wrap section" id="checks">
      <div class="section-head"><h2>High-risk checks</h2><a class="tiny muted link" href="#all-checks">See all <span data-count>70</span> →</a></div>
      <div class="rail" id="riskRail"></div>
    </section>

    <section class="wrap section" id="how">
      <div class="section-head"><h2>How it works</h2></div>
      <ol class="steps">
        <li><span class="step-n">1</span><div><b>Install with one command</b><p class="muted">Copy the command for your system, paste it in Terminal (PowerShell on Windows) and press Return. Arx installs and opens: no warning to get past.</p></div></li>
        <li><span class="step-n">2</span><div><b>Run the audit</b><p class="muted">The audit only reads settings: nothing changes unless you later click Fix. The first run downloads the AI once; after that it works offline.</p></div></li>
        <li><span class="step-n">3</span><div><b>Get your report and fix</b><p class="muted">A score, your biggest gaps and how to fix each one, as a PDF. Click <b>Fix</b> and Arx changes the setting for you, including password and lockout rules (on Mac and Windows it also opens the right Settings page for the rest). Most fixes can be undone. Windows fixes are new and not yet tested on a real PC.</p></div></li>
      </ol>
    </section>

    <section class="wrap section" id="all-checks">
      <div class="section-head"><h2>Everything Arx checks</h2><span class="tiny muted" id="checkCount"></span></div>
      <div class="filters" id="filters"></div>
      <div class="table-card">
        <table class="table" id="checkTable">
          <thead><tr><th class="num">#</th><th>Check</th><th>Risk</th><th class="hide-sm">ISO 27001</th><th class="hide-sm">GDPR</th><th class="hide-xs">Systems</th></tr></thead>
          <tbody></tbody>
        </table>
        <button type="button" class="table-more" id="moreChecks">Show more</button>
      </div>
    </section>

    <section class="wrap section" id="install">
      <div class="section-head"><h2>Install Arx</h2><span class="tiny muted" id="dlVersion">Version 0.5.6</span></div>
      <p class="muted install-why">One command installs Arx and opens it. It downloads Arx from Hugging Face, <b>checks its SHA-256 fingerprint</b> against the published one, and refuses to install if anything differs. Because Terminal downloads it, your computer does not block it: no "Open Anyway", no security warning.</p>
      <div class="dl-grid">
        <article class="dl-card" data-os="mac">
          <span class="ribbon ribbon-you hidden">YOUR SYSTEM</span>
          <div class="dl-top"><span class="dl-icon"></span><div><b>macOS</b><span class="tiny muted">macOS 13+ · Apple chip or Intel</span></div></div>
          <div class="cmd-box"><code id="cmd-mac">curl -fsSL https://devseis-arx.static.hf.space/install.sh | bash</code><button type="button" class="btn btn-sm" data-copy-cmd="mac">Copy</button></div>
          <ol class="paste-steps">
            <li>Press <kbd>⌘</kbd> <kbd>Space</kbd>, type <b>Terminal</b>, press <kbd>Return</kbd>.</li>
            <li>Paste the command (<kbd>⌘</kbd> <kbd>V</kbd>) and press <kbd>Return</kbd>.</li>
            <li>Arx installs in Applications and opens. No password needed.</li>
          </ol>
        </article>
        <article class="dl-card" data-os="windows">
          <span class="ribbon ribbon-you hidden">YOUR SYSTEM</span><span class="ribbon ribbon-beta">BETA</span>
          <div class="dl-top"><span class="dl-icon"></span><div><b>Windows</b><span class="tiny muted">Windows 10 or 11 · 64-bit</span></div></div>
          <div class="cmd-box"><code id="cmd-windows">irm https://devseis-arx.static.hf.space/install.ps1 | iex</code><button type="button" class="btn btn-sm" data-copy-cmd="windows">Copy</button></div>
          <ol class="paste-steps">
            <li>Click <b>Start</b>, type <b>PowerShell</b>, press <kbd>Enter</kbd>.</li>
            <li>Paste the command (right-click, or <kbd>Ctrl</kbd> <kbd>V</kbd>) and press <kbd>Enter</kbd>.</li>
            <li>Arx installs for you and opens. No administrator rights needed.</li>
          </ol>
          <span class="tiny muted">Beta: not yet tested on real Windows PCs.</span>
        </article>
        <article class="dl-card" data-os="linux">
          <span class="ribbon ribbon-you hidden">YOUR SYSTEM</span>
          <div class="dl-top"><span class="dl-icon"></span><div><b>Linux</b><span class="tiny muted">Ubuntu, Debian, Mint, Fedora… · x86-64</span></div></div>
          <div class="cmd-box"><code id="cmd-linux">curl -fsSL https://devseis-arx.static.hf.space/install.sh | bash</code><button type="button" class="btn btn-sm" data-copy-cmd="linux">Copy</button></div>
          <ol class="paste-steps">
            <li>Open a terminal (<kbd>Ctrl</kbd> <kbd>Alt</kbd> <kbd>T</kbd> on Ubuntu).</li>
            <li>Paste the command (<kbd>Ctrl</kbd> <kbd>Shift</kbd> <kbd>V</kbd>) and press <kbd>Enter</kbd>.</li>
            <li>On Ubuntu/Debian it asks for your password to install the package; elsewhere it installs the AppImage.</li>
          </ol>
        </article>
      </div>
      <details class="faq"><summary>What exactly does the command do?</summary><p class="muted">It downloads a short script (<a class="link" href="install.sh">install.sh</a> for macOS and Linux, <a class="link" href="install.ps1">install.ps1</a> for Windows; read them first if you like). The script fetches the current Arx release and its published SHA-256 list from <a class="link" href="https://huggingface.co/datasets/Devseis/endpoint-auditor-releases">Hugging Face</a>, checks the fingerprint, installs Arx and opens it. To update, run the same command again.</p></details>
      <details class="faq"><summary>How do I uninstall Arx?</summary><p class="muted">macOS and Linux: <code>curl -fsSL https://devseis-arx.static.hf.space/install.sh | bash -s -- --uninstall</code>. Windows: Settings › Apps › Installed apps › Arx › Uninstall. Your reports and settings are kept.</p></details>
    </section>

    <section class="wrap section" id="about">
      <div class="section-head"><h2>Why trust it</h2></div>
      <div class="trust-grid">
        <div class="card c-red"><b>🔒 You stay in control</b><p class="muted">The audit only reads. Arx changes a setting only when you click Fix: it shows exactly what will change, asks for your password, and can undo most changes. The AI never runs commands.</p></div>
        <div class="card c-blue"><b>📴 Offline and private</b><p class="muted">The audit and the AI run on your computer. The report stays there unless you share it.</p></div>
        <div class="card c-green"><b>🧾 Grounded report</b><p class="muted">The AI writes only from what the audit found and the Devseis library, and each answer is checked against both. If a check fails, Arx uses a fixed template instead.</p></div>
        <div class="card c-violet"><b>📖 Open source</b><p class="muted">Code Apache-2.0, data CC BY 4.0. <a class="link" href="https://huggingface.co/spaces/Devseis/Arx/tree/main">Read the source</a>.</p></div>
      </div>
      <details class="faq"><summary>Is this a certification?</summary><p class="muted">No. ISO 27001 certification needs an accredited auditor, and much of GDPR and AI Act compliance is organisational. Arx collects evidence from the computer and flags the gaps.</p></details>
      <details class="faq"><summary>I'm setting this up for a company</summary><p class="muted">Before running, edit <code>baseline.conf</code> (approved admins, approved AI tools, limits) and <code>organisational.conf</code> (8 company questions). They are in <code>~/Library/Application Support/Devseis Endpoint Auditor</code> on Mac, <code>%APPDATA%\Devseis Endpoint Auditor</code> on Windows and <code>~/.config/Devseis Endpoint Auditor</code> on Linux.</p></details>
      <details class="faq"><summary>What does "Open a report" do?</summary><p class="muted">Arx saves an <code>…-evidence.json</code> file next to each PDF report. Open it here to see the results and fixes in your browser. The file is read on this page only; it is never uploaded.</p></details>
    </section>
  </main>

  <!-- ===== Results: from the app's "Ask Arx about this report" (#audit), or an opened evidence file ===== -->
  <main id="results" class="hidden">
    <section class="wrap section">
      <a class="tiny muted link" href="index.html">← Arx home</a>
      <div class="result-head">
        <div><p class="eyebrow" id="resDevice"></p><h1 id="resTitle">Your audit</h1><p class="tiny muted" id="resWhen"></p></div>
        <div class="result-actions"><button type="button" class="btn btn-sm" id="printBtn">Save as PDF</button><label class="btn btn-sm" for="reportFile2">Open another</label><input type="file" id="reportFile2" accept=".json,application/json" hidden></div>
      </div>
      <div class="stats" id="resStats"></div>
      <div class="card summary-card"><span class="tiny muted">Summary</span><p id="resSummary"></p><span class="tiny muted">Do next</span><ol id="resNext"></ol></div>
    </section>
    <section class="wrap section">
      <div class="section-head"><h2>Gaps to fix</h2><span class="tiny muted" id="gapCount"></span></div>
      <div id="gapList" class="findings"></div>
    </section>
    <section class="wrap section">
      <details class="card other-results"><summary><b>Other results</b> <span class="tiny muted" id="otherCount"></span></summary><div id="otherList" class="findings"></div></details>
      <p class="tiny muted">This page reads the report in your browser only; nothing is uploaded. Not legal advice or a certification.</p>
    </section>
  </main>

  <footer class="foot">
    <div class="wrap foot-inner">
      <div><b>Arx</b> <span class="muted">· a free security audit for your computer</span></div>
      <div class="foot-links"><a href="#install">Install</a><a href="https://huggingface.co/spaces/Devseis/Arx/tree/main">Source</a><a href="https://huggingface.co/datasets/Devseis/endpoint-auditor-releases">Releases</a><a href="https://huggingface.co/Devseis/endpoint-auditor-0.5b">AI model</a><a href="CITATION.cff">Cite</a></div>
    </div>
  </footer>
  <div class="toast hidden" id="toast" role="status"></div>
  <script type="module" src="site/site.js"></script>
</body>
</html>