Oliver Kieselbach
3ed38f5001
H-3: Dockerfile drops root — `USER node` before HEALTHCHECK/CMD (after npm ci so the build stays root) + chown /app/.hf-cache (the only runtime write path: the boot fallback downloads the model there). All read paths are already world-readable; a recursive chown of /app is avoided to not bloat the layer. NOTE: not verified by a real docker build (no local docker) — verify on deploy that `id`=uid 1000 and the boot log says "(precomputed)", not the fuse fallback. Role gating: new "role catalog snapshot — privilege-leak guard" test pins the exact per-role tool set from one GA master list minus named diff lists (RAW_GA_STRICT / PLATFORM_ONLY / DELEGATED_HIDDEN), mirroring the backend EndpointAccessPolicyCatalog discipline. A tool added with a wrong/copy-pasted role guard now fails the GA master or a derived-role assertion instead of silently leaking. Consolidates the prior scattered contains/not-contains role tests into this one source of truth. Event-type drift: add a canonical.size>40 plausibility floor so a silently broken C# extraction heuristic fails loudly instead of passing vacuously. Test-only + Dockerfile; no production code touched. vitest 330 passed/41 skipped, tsc --noEmit clean. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Autopilot Monitor
Advanced monitoring and troubleshooting solution for Windows Autopilot deployments. Gain full visibility into every enrollment session with a detailed event timeline, fleet health dashboards, and session reporting. Define custom analysis rules to automatically detect issues and gather rules to collect targeted evidence. Retrieve diagnostics packages on demand, configure agent settings like auto-reboot behavior and automatic timezone adjustment — all managed centrally from the web dashboard.
Private Preview
Autopilot Monitor is currently running as a Private Preview. Visit autopilotmonitor.com to request access and learn more.
Overview
Autopilot Monitor provides real-time tracking, intelligent diagnostics, and automated troubleshooting for Windows Autopilot enrollment processes. It consists of:
- Bootstrap Script — PowerShell script deployed via Intune that starts monitoring early in the enrollment process
- Monitoring Agent — Lightweight .NET application that collects telemetry and evidence during enrollment
- Backend API — Azure Functions-based ingestion and processing pipeline
- Web Dashboard — Next.js application for real-time monitoring and fleet analytics
Architecture
For detailed information about the system architecture, components, and data flow, see Architecture Documentation.
Documentation
Full documentation is available at autopilotmonitor.com/docs
License
This project uses a split licensing model:
- MIT License — Agent (
src/Agent/) and Shared library (src/Shared/) — unrestricted use on end-user devices - AGPL-3.0 — Backend (
src/Backend/), Web Dashboard (src/Web/), and MCP Server (src/McpServer/) — server-side components remain open source
See LICENSE for full details.