marchon/secure-messaging
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions 1

S25: npe adapter matches real send/keygen CLI; config key rotate script
Some checks are pending
ci / python (push) Waiting to run
Details
ci / go (push) Waiting to run
Details

Browse source 
Probe reports usable without enabling PFC_REQUIRE_NPE. Fail-closed if
sender .seed or recipient .npeid is missing.
This commit is contained in:
George Lambert 2026-09-15 23:19:37 -04:00
parent 43cbf51d3e
commit a72b4c513d
4 changed files with 109 additions and 14 deletions
Download patch file Download diff file Expand all files Collapse all files

4
README.md
View file

@ -14,6 +14,8 @@ Config must be a signed wrapper. Unsigned files are rejected. Admin changes
append prev + new + unified diff to a `kind=admin-history` JSONL chain.
`crypto.mode`: `npe` | `lab-xor` | `plain-lab` (see signed payload).
Live ns1 lab uses `lab-xor` until `PFC_REQUIRE_NPE=1` is explicitly cut over.
Live ns1 lab uses `lab-xor`. The real NPE CLI is `npe send|keygen|id`
(not `npe seal`). Probe `GET /v1/npe`. Do not set `PFC_REQUIRE_NPE=1` on
pfc-py-admin until every bus client uses `npe send`.
Not a HIPAA/SOC 2/ISO certificate.