Aira Antivirus
WordPress security system with AI-assisted remediation
I engineered Aira Antivirus as a WordPress security plugin that bridges deterministic local malware detection with advisory AI treatment planning. The system combines read-only threat scanning and official WordPress Core checksum verification with reversible file quarantine and atomic code remediation backed by automatic pre-mutation backups and one-click rollback.
KEY CAPABILITIES
Authoritative Threat Detection & Core Checksums
Executes deterministic signature matching, rule-based PHP threat analysis, and official WordPress Core checksum validation in bounded batches in strict read-only mode.
Strict Treatment Plan Contract via AI Gateway
Transmits bounded, untrusted threat contexts to an isolated backend enforcing a strict JSON schema and a closed set of allowed actions so AI suggestions remain advisory.
Atomic Remediation & Rollback Vault
Performs bounded code repairs on eligible PHP files using strict SHA-256 fingerprint matching with execution-blocked pre-mutation backups and one-click rollback.
Scheduled Scan Coordination
Features automated background scans via WP-Cron coordinated by database-backed mutex locks to guarantee scans never run concurrently.
Safe malware remediation without site breakage
Automated malware remediation in WordPress carries severe operational risks: uncoordinated file deletion or aggressive heuristics can break production sites. Conversely, introducing generative AI into code remediation creates dangerous hallucination and prompt-injection vectors if granted direct filesystem write access.
Strict local authority with advisory AI boundary
I established an uncompromising security boundary: local detection is 100% authoritative, while AI is strictly advisory. I designed a formal Treatment Plan Contract binding every fix to exact finding IDs, source SHA-256 hashes, and specific byte offsets. Filesystem changes require explicit administrator authorization with mandatory atomic write replacement, pre-mutation backup, and instant rollback protection.
From fast check to safe quarantine.
Security pipeline overview: fast check, behavior analysis, AI treatment, and safe quarantine.
ENGINEERING HIGHLIGHTS
Cryptographically Signed Updates
Implements private update delivery using Ed25519 public-key signature verification for release manifests and ZIP archives.
Custom Database Telemetry
Database architecture managing scan states, finding fingerprints, quarantine metadata, and rollback snapshots.
Zero-Dependency Architecture
Landing architecture engineered with semantic HTML5, CSS Custom Properties, and ES modules with zero third-party tracking.
TECHNOLOGIES
Let's discuss how I can help.
I'm always open to new projects, custom solutions and long-term collaborations.