healthcheck

A security audit on an OpenAEON host uses read-only inspections like `openaeon security audit --deep` to assess SSH and firewall posture, then builds a reversible remediation plan that requires explicit approvals and preserves existing access paths before applying any state-changing fixes.

Host hardening and risk posture alignment follow a numbered interactive workflow that infers OS context, network exposure, and update status, highlights gaps versus a target profile, and explains rollback strategies before executing any least-privilege remediation actions.

Yes, the update status check executes `openaeon update status` to report the channel state and available updates, combining that output with host context discovery and deep security audit results to provide a comprehensive view of your current risk posture.

You can schedule deterministic periodic audits using `openaeon cron add` with stable job names, but this optional scheduling is only offered after initial audits and hardening passes complete successfully to ensure the baseline risk posture is established.

Any proposed fix from the OpenAEON security audit is risk-tolerant and reversible, meaning the workflow assesses backup status, encryption posture, and network exposure first, then requires explicit approval and provides rollback-aware execution strategies before applying changes.

No special dependencies are required, but the workflow infers your privilege level during host context discovery to tailor guidance, using read-only OS and OpenAEON inspections for review while requiring appropriate privileges and explicit approval only for state-changing remediation actions.