S15: sm-leaf health HTTP, verae.sm.* acks, systemd unit
Some checks are pending
ci / python (push) Waiting to run
ci / go (push) Waiting to run

Loopback GET /health, nats-leaf:// rewrite, subject request-reply tests.
Do not replace pfc-py-admin. NpeRequired stays on the package surface.
This commit is contained in:
George Lambert 2026-09-15 22:40:50 -04:00
parent 9eed0b1942
commit f4da7ff446
7 changed files with 158 additions and 11 deletions

View file

@ -5,6 +5,8 @@ history, and Network Error Bundles.
* Python spec: `python/secure_messaging/` (line comments)
* Go leaf: `go/cmd/sm-leaf` (in-process NATS + optional `SM_LEAF_HUB`)
* Loopback health: `SM_HTTP` default `127.0.0.1:18783` (`GET /health`)
* systemd: `deploy/pfc-sm-leaf.service` (does not replace `pfc-py-admin`)
* Catalog: https://git.georgelambert.org/marchon/nats-service-endpoints
* Hub: https://git.georgelambert.org/marchon/system-git-sync
@ -12,5 +14,6 @@ Config must be a signed wrapper. Unsigned files are rejected. Admin changes
append prev + new + unified diff to a `kind=admin-history` JSONL chain.
`crypto.mode`: `npe` | `lab-xor` | `plain-lab` (see signed payload).
Live ns1 lab uses `lab-xor` until `PFC_REQUIRE_NPE=1` is explicitly cut over.
Not a HIPAA/SOC 2/ISO certificate. ns1: no deploy until CI review.
Not a HIPAA/SOC 2/ISO certificate.