Files
BEHAVE/README.md
anti 315ca0b225 refactor: drop decnet- prefix — BEHAVE is now standalone
Rename packages and imports:
  decnet-behave-core  → behave-core
  decnet-behave-shell → behave-shell
  decnet-behave-text  → behave-text
  decnet_behave_*     → behave_*

BEHAVE is no longer a DECNET sub-project.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
2026-05-10 06:20:01 -04:00

50 lines
1.4 KiB
Markdown

# BEHAVE
Behavioral observation spec for adversarial network attribution.
BEHAVE defines a structured observation envelope (`core`) and two domain registries — shell-session (`BEHAVE-SHELL`) and text/messaging (`BEHAVE-TEXT`) — used to build behavioral signatures over collected operator activity.
## Packages
| Package | Description | Path |
|---|---|---|
| `behave-core` | Shared observation envelope — schema contract used by all registries | [`core/`](core/) |
| `behave-shell` | Shell-session behavioral observation registry | [`BEHAVE-SHELL/`](BEHAVE-SHELL/) |
| `behave-text` | Text/messaging-domain behavioral observation registry | [`BEHAVE-TEXT/`](BEHAVE-TEXT/) |
## Install
Each package is independently installable. Install `core` first as both registries depend on it.
```bash
pip install -e core/
pip install -e BEHAVE-SHELL/
pip install -e BEHAVE-TEXT/
```
For development (includes pytest + ruff):
```bash
pip install -e "core/[dev]"
pip install -e "BEHAVE-SHELL/[dev]"
pip install -e "BEHAVE-TEXT/[dev]"
```
## Test
```bash
pytest core/
pytest BEHAVE-SHELL/
pytest BEHAVE-TEXT/
```
## Licensing
This repository uses a dual license:
| Content | License |
|---|---|
| Code, JSON schemas, tests (`*.py`, `*.json`, `pyproject.toml`) | [GNU GPL v3.0 or later](LICENSE) |
| Spec prose and attribution recipes (`*.md` files) | [CC-BY-SA-4.0](LICENSE.docs) |
SPDX identifiers are present in individual files.