Gu is Datab's protection infrastructure. It protects the Node, DatabStudio, Atlas, Orula, CRM runtime, DDSN sync, databases, files, identities, and sessions. Health, security, backup, audit, and resource signals all flow through Gu, and disruptive actions require explicit human approval.

How it ships

• Runs as datab-app.gu on 127.0.0.1:11445.
• Wraps Wazuh Agent (when installed) for security signals.
• Wraps Prometheus exporters (when installed) for system metrics.
• Falls back to /proc-based metrics when neither is present.

What Gu requires approval for

• Node lock mode.
• App suspension or container shutdown.
• Process termination or network isolation.
• Remote-support session approval.
• Credential / session revocation, firewall changes.

Gu is a conservative immune system, not a destructive auto-remediator. Disruptive actions are recommended; admins act.