Aaron D. Lee 490f9d4a1d Rebrand SooSeF to FieldWitness

Complete project rebrand for better positioning in the press freedom
and digital security space. FieldWitness communicates both field
deployment and evidence testimony — appropriate for the target audience
of journalists, NGOs, and human rights organizations.

Rename mapping:
- soosef → fieldwitness (package, CLI, all imports)
- soosef.stegasoo → fieldwitness.stego
- soosef.verisoo → fieldwitness.attest
- ~/.soosef/ → ~/.fwmetadata/ (innocuous data dir name)
- SOOSEF_DATA_DIR → FIELDWITNESS_DATA_DIR
- SoosefConfig → FieldWitnessConfig
- SoosefError → FieldWitnessError

Also includes:
- License switch from MIT to GPL-3.0
- C2PA bridge module (Phase 0-2 MVP): cert.py, export.py, vendor_assertions.py
- README repositioned to lead with provenance/federation, stego backgrounded
- Threat model skeleton at docs/security/threat-model.md
- Planning docs: docs/planning/c2pa-integration.md, docs/planning/gtm-feasibility.md

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

2026-04-02 15:05:13 -04:00

1.6 KiB

Raw Blame History

FieldWitness Threat Level Configuration Presets

Select a preset based on your operational environment. Copy the appropriate JSON file to ~/.fwmetadata/config.json (or let the setup wizard choose one).

Presets

low-threat.json — Press Freedom Country

Nordics, New Zealand, Canada. Risk is accidental data loss, not adversarial seizure.

No killswitch or dead man's switch
Relaxed session timeouts (30 min)
Backup reminders every 14 days
Chain enabled for provenance integrity

medium-threat.json — Restricted Press

Turkey, Hungary, India. Risk of legal pressure, device seizure at borders.

Killswitch available, dead man's switch at 48h/4h grace
USB monitoring enabled
Cover name: "Office Document Manager"
Backup reminders every 7 days

high-threat.json — Active Conflict Zone

Syria, Myanmar, Ethiopia, Iran. Risk of raids, equipment seizure, physical coercion.

5-minute session timeout
Dead man's switch at 12h/1h grace
Tamper monitoring enabled
Cover name: "Local Inventory Tracker"
Daily backup reminders

critical-threat.json — Targeted Surveillance

Specific journalist or org targeted by state actor (Pegasus-level).

Web UI bound to 127.0.0.1 only (access via SSH tunnel)
3-minute session timeout
Dead man's switch at 6h/1h grace
Cover name: "System Statistics"
All monitoring enabled
Consider: full-disk encryption, remove SSH after setup, Tor hidden service

Usage

# Copy preset to config location
cp deploy/config-presets/high-threat.json ~/.fwmetadata/config.json

# Or via CLI (future: fieldwitness init --threat-level high)

1.6 KiB Raw Blame History