ASIMP :: Security Platform
ANSIBLE SYSTEM INTEGRITY MANAGEMENT PLATFORM // baselines & hardening
MODE:

Documentation

Home Gitbook & dsom summary index Asimp for ai agents: deep state of mind (dsom) protocol integration Ansible best practices & fqcn standards Ansible playbook and document architecture map Architecture & design Configuration & variables Review & adoption of dsom ansible configuration guide (v3.6.2) Diátaxis documentation framework Deep state of mind (dsom) governance framework System architecture & security posture Operational recipes index Execute tool workflows Legal notice & disclaimer Asimp local testing matrix & telemetry spec Lynis auditing & playbook analysis Openscap integration & playbook analysis Rootless podman 5+ & quadlet orchestration Asimp standard footer patcher reference Google okf frontmatter patcher reference Ansible config parameters reference Component & tool index Sovereign feedback collector reference Llm xml context compiler reference Role lynis ansible reference Mock scanning utility reference Openwiki emulator specification Sovereign os role patcher reference System core playbooks reference Jekyll pre processor reference Role reporting asimp reference Suse/sled sysctl hardening role reference Role update ubuntu asimp reference Sitemap & link integrity validator reference Local knowledge first & metadata discovery Troubleshooting & fallback behaviors Quickstart onboarding guide

Reports & SPA

Output of ASIMP Output of Lynis Output of OpenSCAP SPA Requirement Checklist

About ASIMP

ASIMP is an automated framework built with Ansible to assess host compliance, configure OS parameters, secure SSH, and verify integrity.

Execute Tool Workflows

Ansible >= 9.0.0 OpenSCAP: CIS L2 Lynis: Enabled debsums: Enabled

Execute Tool Workflows

This guide provides concrete, problem-solving procedures for executing ASIMP’s system and workspace utilities.

🧭 How to Patch File Footers Idempotently

To enforce standard corporate and protocol attributions across all Markdown files (excluding docs/ files):

Prerequisites

  • Active Python virtual environment.

Command Block

python3 scripts/add_asimp_footer.py

Expected Output

Successfully appended standard footer to: ./README.md
No update needed (already has footer): ./AGENTS.md

🗂️ How to Enforce Google OKF v0.1 Frontmatter

To scan and update workspace .md documents with the five mandatory YAML fields (okf_version, type, title, timestamp, topics):

Command Block

python3 scripts/add_okf_frontmatter.py

Expected Output

Updated OKF v0.1 frontmatter in README.md with: ['okf_version: "0.1"']
No OKF v0.1 updates needed for docs/index.md

⚙️ How to Patch Third-Party Roles for Sandbox Compatibility

If you install fresh external Galaxy roles and need to patch systemd services or Jinja templates on-the-fly for unprivileged Google Jules runs:

Command Block

python3 scripts/patch_roles.py

Expected Output

Starting ASIMP Sovereign OS Role Compatibility Patcher...
Patched SSH template: roles/dev-sec.ssh-hardening/templates/opensshd.conf.j2 (1 replacements)
Patched YAML file: roles/dev-sec.ssh-hardening/tasks/hardening.yml
ASIMP Patcher finished successfully.

🌐 How to Compile High-Density XML Context for LLM Agents

To parse the llms.txt file and generate a single XML document containing embedded Markdown contents for Anthropic Claude or other models:

Command Block

python3 scripts/llms_txt2ctx.py llms.txt --optional=false > compiled_context.xml

To ensure that both root sitemaps and deployed sitemaps match perfectly and that all relative URLs point to valid on-disk markdown sources:

Command Block

python3 scripts/verify_sitemap_links.py

Expected Output

[*] Starting Sitemap and Link Integrity Verification...
[+] Deployed copy docs/sitemap.txt is perfectly synchronized with root sitemap.txt (txt sitemap).
[+] Structural check passed: sitemap.txt and sitemap.xml URL lists match perfectly.
[+] GitHub Pages URL OK (Source exists on disk, pre-merge): https://linuxmalaysia.github.io/ASIMP/architecture.html -> docs/architecture.md
[+] All verified sitemap links and inventory URLs are fully operational and synchronized!