APERIRE ONE

Aperire One

One pane of glass. Every validator.

Purpose-built monitoring for XRPL validators and stock nodes (rippled, xrpld and their forks). Sign in once and see all of them live: state, consensus, peers, host health, alerts, and an agentic Advisor that acts only with your passkey.

Highlights

01FLEET

Fleet view

  • Every node and validator, one dashboard, one sign-in
  • Per-node State, Health, Alerts and Release badges
  • The roster tells you who needs you
02ADVISOR

An agentic XRPL operator SME

  • Ask about your node in plain language
  • Reads your node, reasons, cites documented knowledge
  • Tells you what needs attention, and why
03CONSENSUS

Live validator panel

  • State, keys, domain verification, ledgers since restart
  • Centred in your peer ring with country flags
  • Ledger ticker sliding underneath
04AUTH

Passkey sign-in

  • Touch ID, Face ID, Windows Hello, hardware key
  • No passwords, no identity provider, no SSO
  • Operators, credentials, sessions stay on your host
05TIERS

P0, P1, P2 on every tab

  • P0 health signals on top, never collapsed
  • P1 live indicators beneath, P2 history graphs below
  • A glance answers "is anything on fire?"
06ALERTS

Alerts that reach you

  • Email, ntfy push, Discord, Slack, webhooks
  • Per-target severity filters
  • Test Fire proves each channel before you need it
07ACTIONS

Upgrades with your passkey

  • Approve an upgrade for any node from one place
  • The node's own Advisor verifies your passkey first
  • Every step streamed back as it runs
08ACTIONS

Restart, assessed first

  • Ask; the Advisor assesses the node first
  • Fleet table with the target starred, confirm by name
  • Then confirm code, passkey, live transcript
09AUDIT

A ledger that names who did it

  • Every approval, step, privileged read, role change
  • Hash-chained, a person on every line
  • Verified on the node that acted
10GOVERNANCE

Amendment intelligence

  • XLS tags and descriptions a hover away
  • Voting progress as the network sees it
  • Warnings before an unsupported amendment bites
11NETWORK

Outbound only

  • No inbound port on your validator
  • Every Aperire service on loopback
  • The dashboard dials out; the node answers
12FLEET

Any node, in place

  • Pick a node; Overview and Consensus swap to it
  • No second sign-in
  • Every reading carries its own age
13INSIGHTS

An alert engine that remembers

  • OK, pending, firing, resolved
  • Firing state survives a restart
  • History, digests, what needs you ranked on top
14OPERATIONS

Break glass

  • The admin's elevation, one button
  • A time-boxed window for forensics and operations
  • Each action still code + passkey, all recorded
15TEAM

Admin and monitor roles

  • Delegate the watching to your team
  • Monitors see everything, approve nothing
  • Admins grant and revoke roles, every change audited
16SECURITY

Identity pinning

  • Each peer pinned on first contact
  • Checked on every read
  • A tunnel re-pointed at the wrong node is refused
17NODES

Fork aware

  • rippled, xrpld, xahaud
  • Renamed binaries and counters detected by capability
  • A rename never blanks a field
18EVERYWHERE

Any device, first-class

  • Every tab works on phone and tablet, not just desktop
  • Checked at four widths before anything ships
  • Same passkey, same dashboard

Why

aperire (ah-peh-REE-reh) is the Latin verb to open. That is the whole idea: open up what your validator is doing, in one place, in terms an operator actually uses, with nothing hidden behind a vendor or a login you do not own.

I run validators. I wanted to see consensus the way the node sees it, catch the slow drift before it becomes a missed ledger, and stop hand-rolling the same checks on every box. Aperire One succeeds my earlier XRPL Validator Dashboard (Python and Grafana) as a ground-up rebuild with a native UI, a fleet view, and an Advisor that can do the next step for me while I keep the only key that matters.

Built on a tier model. Every metric carries a priority, P0, P1 or P2, and that decides where it lives on the page: P0 is what pages you and it is always on top, P1 shows the live shape of things at higher fidelity, P2 is the history beneath. Category picks the tab; tier picks the row. Stock-node operators never see validator-only metrics; detection is automatic.

Read-only by construction, actions by ceremony. Monitoring never touches the node. Anything that does (an upgrade, a restart) runs through a privilege wrapper, an accepted operator compact, a confirm code and a passkey, and lands in a hash-chained audit trail with a name on every line.

How it runs

On the dashboard host

The pane of glass and the Cloudflare tunnel. It reads each node over a private tunnel it dials itself, and approvals travel to the node that owns them, verified there.

On the validator host

aperire-relay pushes host and network metrics to the dashboard; aperire-server reads the node over its admin WebSocket on loopback; the optional Advisor sits beside it under its own account with no Docker access. No Aperire port is open to the network.

On your phone or tablet

The same dashboard, same passkey. Watch a restart come back to full from wherever you are.

The recommended shape: the nodes and validators on their own boxes

One stock node, one validator, or a fleet: the shape is the same, and it scales from a single box to an enterprise running many. Everything that touches a node stays on that node's host, all of it on loopback, with no Aperire port open to the network. The pane of glass lives on a separate machine and reads every node over a tunnel it opens itself; approvals travel to the node they concern and are verified there. A dashboard-host compromise is not a validator compromise, and the Advisor cannot escalate: its one privileged path is a wrapper whose allowed operations are configuration, not code.

Recommended split: the validator host runs rippled, aperire-relay, a loopback-only aperire-server and the optional Advisor, with no Aperire port open to the network; the dashboard host runs the pane of glass and the tunnel and reads the validator over an SSH tunnel it dials itself