George Lambert
f4da7ff446
Loopback GET /health, nats-leaf:// rewrite, subject request-reply tests. Do not replace pfc-py-admin. NpeRequired stays on the package surface.
870 B
870 B
secure-messaging
Passthrough NATS envelopes, Ed25519 signed configuration, DataCube admin history, and Network Error Bundles.
- Python spec:
python/secure_messaging/(line comments) - Go leaf:
go/cmd/sm-leaf(in-process NATS + optionalSM_LEAF_HUB) - Loopback health:
SM_HTTPdefault127.0.0.1:18783(GET /health) - systemd:
deploy/pfc-sm-leaf.service(does not replacepfc-py-admin) - Catalog: https://git.georgelambert.org/marchon/nats-service-endpoints
- Hub: https://git.georgelambert.org/marchon/system-git-sync
Config must be a signed wrapper. Unsigned files are rejected. Admin changes
append prev + new + unified diff to a kind=admin-history JSONL chain.
crypto.mode: npe | lab-xor | plain-lab (see signed payload).
Live ns1 lab uses lab-xor until PFC_REQUIRE_NPE=1 is explicitly cut over.
Not a HIPAA/SOC 2/ISO certificate.