Anti-nuke

The budget

Anti-nuke watches the audit log. Each change costs points:

Every admin and bot has a budget of 12 points that refills at 1 point every 2 minutes.

Why a budget

A budget catches an attacker who paces themselves. A rule like three deletes in five seconds never fires on one delete every six seconds. A budget fills up in under half a minute at that pace.

When the budget runs out

Astri strips every role it can from them and stores the list, so undo puts them back. A rogue bot has its own role's permissions set to none instead.

Things that skip the budget

• @everyone getting a dangerous permission. Astri also pauses invites and puts @everyone back as it was.
• Astri's role losing permissions, or a role moved above it, by anyone but the owner.
• A bot added with Administrator by someone who isn't trusted.
• Pruning more than 20 members at once.

Trusted admins and bots

Admins and bots that make big changes as part of their job can be marked trusted, up to 25 per server. They get twice the budget, never an exemption. The owner is never acted against, only reported. A trusted member doing something for the first time in 90 days loses that headroom for it, in case the account was taken over, except for emoji cleanup.

Full whitelist

Up to 5 people the owner would hand the server to. Astri never times them out, bans, kicks, quarantines or strips their roles, whatever they do, and only reports them once they pass five times the budget. If one of them wipes the server, the owner's DM has a Roll back button. Only the owner can add someone, from /config in Discord or the Trusted page of the dashboard: Astri asks if you're sure, then DMs you a code to type back.