Alisx/.env.example at main · edik40288-stack/Alisx · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
# === Real target ===
ALISX_TARGET_URL=https://example.com/
ALISX_ALLOWED_HOSTS=example.com,api.example.com

# === Two-account Chrome CDP ===
ALISX_ACTOR_A_CDP_URL=http://127.0.0.1:9222
ALISX_ACTOR_B_CDP_URL=http://127.0.0.1:9333
ALISX_ACTOR_LOW_CDP_URL=
ALISX_CHROME_DEBUG_URL=http://127.0.0.1:9222
ALISX_V10_REQUIRE_ACTOR_B=true
ALISX_V10_REQUIRE_LOW_ACTOR=false

# === Output ===
ALISX_STAGE1_OUTPUT_DIR=out/stage1
ALISX_STAGE1_SESSION_FILE=out/stage1/session_A.secrets.json
ALISX_STAGE2_CONTEXT_PATH=out/stage1/target_context_schema.json
ALISX_STAGE2_OUTPUT_DIR=out/stage2
ALISX_STAGE2_SESSION_STATE_PATH=out/stage1/session_A.secrets.json
ALISX_PRO_SESSION_A_PATH=out/stage1/session_A.secrets.json
ALISX_PRO_SESSION_B_PATH=out/stage1/session_B.secrets.json
ALISX_PRO_SESSION_LOW_PATH=out/stage1/session_LOW.secrets.json
ALISX_STAGE3_OUTPUT_DIR=out/stage3

# === Real workflow capture ===
ALISX_PRO_WORKFLOW_INGEST_ENABLED=true
ALISX_PRO_REAL_WORKFLOW_ONLY=true
ALISX_PRO_REQUIRE_MULTI_ACTOR=true
ALISX_ACTOR_CAPTURE_MAX_RESPONSE_BYTES=524288
ALISX_ACTOR_CAPTURE_WAIT_SECONDS=0

# === Professional real matrix engine ===
ALISX_PROFESSIONAL_REAL_MATRIX_V9_ENABLED=true
ALISX_PROFESSIONAL_REAL_MATRIX_V9_REPLACE_STAGE2=true
ALISX_PROFESSIONAL_V6_ENABLED=false
ALISX_V9_REQUIRE_MULTI_ACTOR=true
ALISX_V9_SELECTOR_MIN_SCORE=75
ALISX_V9_MAX_TARGETS=200
ALISX_V9_MAX_CHECKS_PER_TARGET=160
ALISX_V9_VERIFY_FINDINGS=true
ALISX_V9_VERIFY_REPLAY_COUNT=2
ALISX_V9_MIN_SELECTED_TARGETS=3
ALISX_V9_MIN_RESPONSE_BODY_ENDPOINTS=2
ALISX_V9_MIN_OBJECT_REFS_A=3
ALISX_V9_MIN_OBJECT_REFS_B=3
ALISX_V9_TRUSTED_FIELDS=isAdmin,admin,role,permissions,ownerId,accountId,tenantId,organizationId,isPaid,isVerified,price,amount,balance,status,state,plan

# === Execution ===
ALISX_STAGE2_MODE=run
ALISX_STAGE2_ENABLE_NETWORK=true
ALISX_STAGE2_STORE_RESPONSE_BODIES=true
ALISX_STAGE2_MAX_TOTAL_REQUESTS=5000
ALISX_STAGE2_RATE_LIMIT_RPS=2
ALISX_STAGE2_TIMEOUT_SECONDS=20
ALISX_STAGE2_ALLOWED_METHODS=GET,POST,PUT,PATCH,DELETE,OPTIONS,HEAD
ALISX_STAGE2_CONFIRM_AUTHORIZED_TARGET=true
ALISX_STAGE2_EXECUTION_PROFILE=full
ALISX_STAGE2_ENABLE_EXECUTION_PROFILE_GATES=false
ALISX_STAGE2_ENABLE_STATE_CHANGING_BASELINE=true
ALISX_STAGE2_ENABLE_DESTRUCTIVE_BASELINE=true
ALISX_STAGE2_ENABLE_STATE_CHANGING_MUTATIONS=true
ALISX_STAGE2_ENABLE_DESTRUCTIVE_MUTATIONS=true
ALISX_STAGE2_ALLOW_DESTRUCTIVE=true
ALISX_STAGE2_REQUIRE_DESTRUCTIVE_CONFIRMATION=false
ALISX_STAGE2_EXECUTE_UNCONFIRMED=true

# === Stage 3 verifier ===
ALISX_STAGE3_ENABLE_NETWORK=true
ALISX_STAGE3_ISOLATION_MODE=session
ALISX_STAGE3_REQUIRE_ISOLATION=false
ALISX_STAGE3_PROOF_REPLAY_COUNT=2
ALISX_STAGE3_RATE_LIMIT_RPS=2

# === Legacy fallback disabled ===
ALISX_PROFESSIONAL_V6_REPLACE_LEGACY_STAGE2=false

# === Unified organism command ===
# Run after you manually open/login Chrome A/B and activate .venv:
#   alisx-pipeline organism
# or:
#   .\RUN_ORGANISM_WINDOWS.ps1