Initial release: ghost_protocol privacy toolkit

opsec/docs/OPSEC-CHECKLIST.md

@@ -0,0 +1,39 @@
+# OPSEC Checklist
+
+## Pre-Session Setup
+- [ ] Fresh VM snapshot taken
+- [ ] MAC address randomized: `randomize-mac`
+- [ ] System timezone set appropriately
+- [ ] DNS configured for privacy
+- [ ] Verify no personal accounts logged in
+- [ ] Disable WiFi/Bluetooth if not needed
+- [ ] Configure VPN/proxy settings
+- [ ] Test kill switches
+
+## During Session
+- [ ] Use workspace isolation (separate VM/container)
+- [ ] All traffic through VPN/Tor
+- [ ] Monitor connections: `opsec-monitor`
+- [ ] Use encrypted communications
+- [ ] No personal browsing/email
+- [ ] Regular history clearing
+- [ ] Avoid saving sensitive data locally
+- [ ] Use in-memory tools when possible
+
+## Post-Session
+- [ ] Export necessary data
+- [ ] Clear all logs: `clear-logs`
+- [ ] Clear shell history: `clear-history`
+- [ ] Wipe free space
+- [ ] Secure delete files: `shred-file <files>`
+- [ ] Revert to clean VM snapshot
+
+## Emergency Procedures
+- [ ] Kill network connections
+- [ ] Emergency wipe if necessary
+
+## Communication OPSEC
+- [ ] Use encrypted channels
+- [ ] Avoid real names/identifiers
+- [ ] Use dedicated accounts
+- [ ] Regular key rotation