Cross-platform network security app with AI agent monitoring

GOAL: You're building "Bastion": a free, open-source desktop app for macOS and Windows. MOTION: It hunts down the backdoors in my home Wi-Fi router, shows me where my traffic actually goes, makes my Wi-Fi faster, and puts AI agents on watch over my network. Start in this empty folder. Use Opus 5.5. DESIGN BEFORE CODE 1. Don't write a single line of code yet. First, mock up 4 distinct UI concepts as web pages: dark, premium, Apple-grade polish, built around speed + security. I'll choose one. 2. Then keep iterating on the chosen concept until it feels like Apple shipped it: a real 3D (Three.js) router on the home screen, bloom + anamorphic lens flare, glass panels, Apple-style sliders with a glow that travels around the edge, and a living ambient background behind every screen. WHAT IT ACTUALLY HAS TO DO (zero fake data, ever) - Locate my router and probe it from inside the network: TR-069/CWMP (port 7547), UPnP port-forwards (read the real mappings), Telnet, SSH, admin page served over plain HTTP. - Find out if my DNS lookups are encrypted and who's resolving them. - Read my Wi-Fi: channel, band, signal strength, security; scan the neighbour networks and suggest a less crowded channel. - Show every device on my network and which apps on this machine are talking to the internet. - Run a real speed test. - Check whether my Wi-Fi name ends in _nomap and whether this machine uses a private MAC address. - Give my network a 0–100 score with plain-English, step-by-step fixes. - Anything that can't be measured from inside my network gets marked "unknown" with the reason why. No guessing. AI AGENTS - Let me connect Claude, ChatGPT or Grok with my own API key (encrypted in the OS keychain). - Also let me skip the API key and use the subscription I already have: Claude through my Claude Code login, ChatGPT through my Codex login. - Nothing leaves my machine until MAC addresses, device names, Wi-Fi names and the tail of my public IP are stripped out. - Agents advise only. They can't run commands, can't log in to my router and can't change any setting. SAFETY RULES - Never log in to my router. Never try a password. - Only shell out with fixed arguments; anything I type goes through stdin, never into a command line. - Every CLI an agent touches runs read-only, with zero tools, inside an empty folder, with a timeout. HOW TO BUILD IT - One Electron codebase for both macOS and Windows. Start by writing a short internal contract (IPC surface + data types) so the modules can be built in parallel. - Split the work across parallel agents: network scanner, Wi-Fi + speed test, AI agents, 3D hero, UI kit, screens, packaging. Every agent gets a reviewer, every reviewer gets a fixer. - Spin up a separate security agent whose only job is to attack every line that runs commands or sends data out. - Add a design-critic agent that screenshots each screen and asks: "would Apple ship this?" If the answer is no, it goes back. - Run the sca