Passthrough envelopes, signed config, DataCube admin history, error bundles (Python+Go)

Find a file

George Lambert 94919185a9 Some checks are pending ci / python (push) Waiting to run Details ci / go (push) Waiting to run Details S27: HPKE-Base content wrap + public-key directory; reject xor on send Routing/error fields stay clear. Content is X25519-HKDF-SHA256-ChaCha20.		2026-09-15 23:43:01 -04:00
.forgejo/workflows	S06-S08: Python spec, Go in-process leaf, tests and Forgejo CI	2026-09-15 22:17:19 -04:00
build	S26: LaTeX relative links to system and catalog PDFs	2026-09-15 23:29:23 -04:00
deploy	S15: sm-leaf health HTTP, verae.sm.* acks, systemd unit	2026-09-15 22:40:50 -04:00
go	S27: HPKE-Base content wrap + public-key directory; reject xor on send	2026-09-15 23:43:01 -04:00
python/secure_messaging	S27: HPKE-Base content wrap + public-key directory; reject xor on send	2026-09-15 23:43:01 -04:00
scripts	S25: npe adapter matches real send/keygen CLI; config key rotate script	2026-09-15 23:19:37 -04:00
source	S26: LaTeX relative links to system and catalog PDFs	2026-09-15 23:29:23 -04:00
tests	S27: HPKE-Base content wrap + public-key directory; reject xor on send	2026-09-15 23:43:01 -04:00
.gitignore	S06-S08: Python spec, Go in-process leaf, tests and Forgejo CI	2026-09-15 22:17:19 -04:00
LICENSE	S06-S08: Python spec, Go in-process leaf, tests and Forgejo CI	2026-09-15 22:17:19 -04:00
Makefile	S17/S18: send success and failure routes; Sphinx HTML/PDF	2026-09-15 23:10:15 -04:00
MODULE.md	S17/S18: send success and failure routes; Sphinx HTML/PDF	2026-09-15 23:10:15 -04:00
README.md	S25: npe adapter matches real send/keygen CLI; config key rotate script	2026-09-15 23:19:37 -04:00
requirements.txt	S06-S08: Python spec, Go in-process leaf, tests and Forgejo CI	2026-09-15 22:17:19 -04:00

README.md

secure-messaging

Passthrough NATS envelopes, Ed25519 signed configuration, DataCube admin history, and Network Error Bundles.

Python spec: python/secure_messaging/ (line comments)
Go leaf: go/cmd/sm-leaf (in-process NATS + optional SM_LEAF_HUB)
Loopback health: SM_HTTP default 127.0.0.1:18783 (GET /health)
systemd: deploy/pfc-sm-leaf.service (does not replace pfc-py-admin)
Catalog: https://git.georgelambert.org/marchon/nats-service-endpoints
Hub: https://git.georgelambert.org/marchon/system-git-sync

Config must be a signed wrapper. Unsigned files are rejected. Admin changes append prev + new + unified diff to a kind=admin-history JSONL chain.

crypto.mode: npe | lab-xor | plain-lab (see signed payload). Live ns1 lab uses lab-xor. The real NPE CLI is npe send|keygen|id (not npe seal). Probe GET /v1/npe. Do not set PFC_REQUIRE_NPE=1 on pfc-py-admin until every bus client uses npe send.

Not a HIPAA/SOC 2/ISO certificate.