HBV Portal v3.0 — Secure Operations Dashboard

Live Portal: https://portal.invokehoneybadger.com

Overview

The HoneyBadger Vanguard (iHBV) Portal v3.0 is a security-hardened, static operations dashboard for real-time system monitoring, telemetry visualization, and deployment tracking. Built with zero external dependencies and comprehensive XSS prevention.

Key Features

• 🔒 Security Hardened: CSP headers, input sanitization, schema validation
• 📊 Real-Time Monitoring: System health, node status, deployment tracking
• ⚡ Zero Dependencies: Pure vanilla JavaScript, no third-party libraries
• ♿ Accessible: WCAG 2.1 compliant, ARIA landmarks, screen reader support
• 🎨 HBV v3.0 Branding: Consistent iHBV visual identity and theming
• 📱 Responsive: Mobile-first design with adaptive layouts

---

Architecture

invokehoneybadger-portal/
├── assets/
│   ├── css/
│   │   └── style.css          # HBV v3.0 theme + accessibility
│   ├── img/
│   │   └── hbv-portal-logo.svg # iHBV branding
│   └── js/
│       └── main.js            # Secure dashboard logic (XSS-proof)
├── data/
│   ├── status.json            # Live status data feed
│   └── status.schema.json     # JSON schema validation
├── .github/
│   └── workflows/
│       └── ci.yml             # Automated testing & validation
├── index.html                 # Main dashboard (CSP-protected)
├── SECURITY.md                # Security policy & reporting
├── LICENSE                    # MIT License
└── README.md                  # This file

---

Quick Start

Local Development

1. Clone the repository

   git clone https://github.com/invokehoneybadger/invokehoneybadger-portal.git
   cd invokehoneybadger-portal

2. Install dev dependencies (optional, for linting)

   npm install

3. Serve locally

   # Using Python 3
   python -m http.server 8000
   
   # Using Node.js
   npx serve .
   
   # Using PHP
   php -S localhost:8000

4. Open browser

   http://localhost:8000
   

Updating Status Data

Edit data/status.json to update dashboard metrics:

{
  "healthPct": 98,
  "incidents": 0,
  "lastDeployISO": "2025-12-19T12:00:00Z",
  "nodes": [
    {
      "name": "Node0",
      "status": "OK",
      "cpu": 24,
      "mem": 52
    }
  ]
}

Schema Validation: Data is automatically validated against data/status.schema.json

---

Deployment

GitHub Pages (Recommended)

1. Configure Pages

   • Go to: Settings → Pages
   • Source: Deploy from branch
   • Branch: main (root directory)
   • Click Save

2. Custom Domain (optional)

   portal.invokehoneybadger.com
   

   • Add CNAME file (already included)
   • Configure DNS: CNAME → <username>.github.io
   • Enable Enforce HTTPS ✓

3. Security Headers

   • GitHub Pages automatically serves over HTTPS
   • CSP headers configured in index.html

Alternative Hosting

• Cloudflare Pages: Zero config deployment
• Netlify: Drag & drop or Git integration
• Vercel: Automatic deployments from Git
• AWS S3 + CloudFront: Enterprise CDN hosting

---

Security

Security Features (v3.0)

✅ XSS Prevention: DOM-based rendering, HTML escaping ✅ Content Security Policy: Strict CSP headers block inline scripts ✅ Input Validation: All data validated against JSON schema ✅ DoS Prevention: Node count limits, timeout controls ✅ Secure Headers: X-Frame-Options, X-Content-Type-Options, Referrer-Policy ✅ No External Dependencies: Zero supply chain attack surface

Reporting Vulnerabilities

DO NOT create public issues for security bugs.

📧 Email: security@invokehoneybadger.com

See SECURITY.md for full disclosure policy.

---

Development

Code Quality

# Lint JavaScript
npm run lint

# Auto-fix linting issues
npm run lint:fix

# Format all files
npm run format

# Check formatting
npm run format:check

# Run all validations
npm run validate

Testing

Currently no automated tests. Manual testing checklist:

• Dashboard loads without errors
• Status data fetches and displays correctly
• Fallback mock data displays on fetch failure
• Node list renders with correct CPU/MEM metrics
• Telemetry chart draws without errors
• All links open in new tabs with rel="noopener noreferrer"
• CSP headers don't block legitimate resources
• Mobile responsive layout works correctly

---

Browser Support

Browser	Version	Status
Chrome	90+	✅ Supported
Firefox	88+	✅ Supported
Safari	14+	✅ Supported
Edge	90+	✅ Supported

Requirements: ES2020+ (async/await, optional chaining, nullish coalescing)

---

Branding Guidelines (iHBV/HBV v3.0)

Official Naming

• Full Name: HoneyBadger Vanguard v3.0
• Short Name: HBV v3.0
• Prefix: iHBV (invoke HoneyBadger)
• Domain: invokehoneybadger.com

Color Palette

--hbv-bg:      #0a0a0a  /* Background (near black) */
--hbv-fg:      #fbee00  /* Primary yellow */
--hbv-dim:     #c9bd00  /* Dimmed yellow */
--hbv-accent:  #3aa0ff  /* Blue accent */

Logo Usage

• Use assets/img/hbv-portal-logo.svg for all branding
• Logo displays "HBV · PORTAL" text
• Yellow (#fbee00) on black (#0a0a0a)

---

Project Status

Current Version: 3.0.0 (December 2025)

Changelog

v3.0.0 - 2025-12-19

• ✅ Complete security hardening (XSS prevention, CSP headers)
• ✅ Refactored JavaScript (eliminated code duplication)
• ✅ Added comprehensive documentation
• ✅ Implemented accessibility features (ARIA, semantic HTML)
• ✅ Added MIT license and security policy
• ✅ Updated branding to HBV v3.0 / iHBV standards
• ✅ Added ESLint/Prettier configuration
• ✅ Created CI/CD workflow

---

Contributing

We welcome contributions! Please:

1. Fork the repository
2. Create a feature branch (git checkout -b feature/amazing-feature)
3. Commit with semantic messages (git commit -m 'Add XYZ feature')
4. Push to branch (git push origin feature/amazing-feature)
5. Open a Pull Request

Code Standards:

• Follow existing code style
• Run npm run validate before committing
• Update documentation for new features
• Maintain security best practices

---

License

This project is licensed under the MIT License - see LICENSE file.

Copyright © 2025 HoneyBadger Vanguard (iHBV)

---

Links

• Live Portal: https://portal.invokehoneybadger.com
• Main Site: https://invokehoneybadger.com
• API Gateway: https://api.invokehoneybadger.com
• GitHub: https://github.com/invokehoneybadger
• Issues: https://github.com/invokehoneybadger/invokehoneybadger-portal/issues

---

Support

For questions or support:

• 📧 Email: support@invokehoneybadger.com
• 🐛 Issues: GitHub Issues
• 🔒 Security: security@invokehoneybadger.com

---

Built with ❤️ by the HoneyBadger Vanguard (iHBV) Team