cybersecurity automation

Details building a Linux AI security assistant that ingests logs and system telemetry, uses LLMs with retrieval to triage alerts, explain findings, and recommend or automate mitigations. Outlines architecture, data pipelines, sandboxed commands, RBAC, prompt safety, audit trails, and CLI/TUI integration, with incident playbooks and hardening tips.