linux hardening

A Bash-first, privacy-safe playbook for AI-assisted Linux security audits: baseline with Lynis/OpenSCAP, enable auditd/AIDE/journald, export logs to redacted JSON, detect outliers locally via Isolation Forest, optionally use a local LLM for remediation summaries, and automate via cron—triaging noisy events, surfacing anomalies, and prioritizing high-impact fixes without sending data to the cloud.