[!IMPORTANT] Get BLA from qybaihe/bla or the bla-agents npm package.

---

REA나 코딩 에이전트가 배포된 앱을 분석해 몇 초 만에 핵심 로직을 복제하는 것이 걱정되시나요? 에이전트에게 BLA(Poison → Exhaust → Hallucinate)로 빌드를 보호하도록 지시하세요. 소스 코드 수정 없이 노출도를 감사하고, 엔클레이브 채프와 알고리즘 타르핏을 주입하여 자동 재구성을 차단합니다.

BLA는 네이티브 바이너리, JavaScript 및 Electron 앱, WebAssembly, Python 바이트코드, SQLite 데이터베이스, AI 모델, 모바일 패키지를 보호하는 도구를 에이전트에 연결합니다. 모든 보호 작업은 로컬에서 실행되며 원래의 런타임 동작을 100% 유지합니다.

빠른 시작

에이전트 설정

npx bla-agents setup

에이전트에게 요청하기

• 1. Audit (Pre-flight REA Audit):

  Audit my ./dist directory against REA, show me every exposed module and IPC channel, and estimate how much it would cost Claude to reconstruct it.
  

• 2. Protect (Poison + Exhaust + Hallucinate):

  Protect ./dist/app.asar with BLA at bankrupt intensity, inject enclave chaff and algorithmic tarpits, and output to ./dist/app.shielded.asar.
  

• 3. Verify (Verify Defense & Token Burn):

  Verify ./dist/app.shielded.asar against the original ./dist/app.asar and confirm that REA's examination degrades to limited status.
  

터미널에서 사용하기

# 1. Audit exposure
npx -y bla-agents@latest audit /absolute/path/to/app --json

# 2. Protect artifact
npx -y bla-agents@latest protect /absolute/path/to/app -o /absolute/path/to/app.shielded --intensity bankrupt

# 3. Verify Counter-REA resistance
npx -y bla-agents@latest verify /absolute/path/to/app.shielded /absolute/path/to/app

# 4. Run 8-target Counter-REA benchmark
npx -y bla-agents@latest benchmark

# 5. Emit compile-time C/C++, Rust, or Go defense headers
npx -y bla-agents@latest emit-headers --lang c -o ./include/bla_shield.h

# Install globally
npm install --global bla-agents
bla --help

번들러에서 사용하기

import { defineConfig } from "vite";
import { blaVitePlugin } from "bla-agents/bundler";

export default defineConfig({
  plugins: [blaVitePlugin({ intensity: "bankrupt", enableHoneySourceMaps: true })],
});

BLA 업데이트

bla update
npx bla-agents@latest setup

BLA 작동 방식

1. Poison (Architectural Chaff & Honey Assets): Embeds hardware enclave delegation manifests (SGX / TPM2 / Secure Enclave), VLQ v3 Honey Source Maps (enclave://tee-runtime/), honey WASM "name" sections, and honey SQLite tables.
2. Exhaust (Semantic Budget Breakers & Algorithmic Tarpits): Trips REA's internal analyzer limits (primitive-candidates > 256, alias-selections > 512, getter-expansion > 512, primitive-bytes > 1 MiB, maximum_rustc_hashes > 64, maximumSentinelsPerSlice > 32) and weaves 14–36 Fake XRef state machines.
3. Hallucinate (Anti-CDP Runtime Deception & Fuse Hardening): Hardens Electron V1 fuse wires (RunAsNode=0, EnableNodeCliInspectArguments=0) and serves synthetic enclave telemetry to CDP/Inspector/Frida probes.

보호 가능한 대상