Developers

Developer Guide

Local Setup

cd SPECTRUMv2
python -m venv .venv
source .venv/bin/activate
pip install -r requirements.txt

Recommended Workflow

1. Run ingestion/build scripts from SPECTRUMv2 root.
2. Keep graph/ and gui/ viewer files synchronized when making UI changes.
3. Verify Python syntax on modified modules (python -m py_compile ...).
4. Verify module script syntax for viewer edits (node --check on extracted script when needed).
5. Commit generated artifacts only when intentional.

Key Areas

• graph/build_graph.py: source normalization, node/edge generation, export
• graph/ace_t_spectrum_3d.html: main visualization behavior and rendering
• graph/live_threat_api.py: live submission API
• src/runners/ingest_tiered_feeds.py: ingestion entrypoint

Security Practices

• Do not return raw exception strings in API responses.
• Use hostname-aware URL/domain checks instead of substring checks.
• Keep pinned dependencies updated in requirements.txt and requirements.lock.txt.