Passthrough envelopes, signed config, DataCube admin history, error bundles (Python+Go)
Find a file
George Lambert f4da7ff446
Some checks are pending
ci / python (push) Waiting to run
ci / go (push) Waiting to run
S15: sm-leaf health HTTP, verae.sm.* acks, systemd unit
Loopback GET /health, nats-leaf:// rewrite, subject request-reply tests.
Do not replace pfc-py-admin. NpeRequired stays on the package surface.
2026-09-15 22:40:50 -04:00
.forgejo/workflows S06-S08: Python spec, Go in-process leaf, tests and Forgejo CI 2026-09-15 22:17:19 -04:00
deploy S15: sm-leaf health HTTP, verae.sm.* acks, systemd unit 2026-09-15 22:40:50 -04:00
go S15: sm-leaf health HTTP, verae.sm.* acks, systemd unit 2026-09-15 22:40:50 -04:00
python/secure_messaging S15: sm-leaf health HTTP, verae.sm.* acks, systemd unit 2026-09-15 22:40:50 -04:00
scripts S14: NPE fail-closed adapter; npe mode never falls back to lab-xor 2026-09-15 22:22:56 -04:00
tests S15: sm-leaf health HTTP, verae.sm.* acks, systemd unit 2026-09-15 22:40:50 -04:00
.gitignore S06-S08: Python spec, Go in-process leaf, tests and Forgejo CI 2026-09-15 22:17:19 -04:00
LICENSE S06-S08: Python spec, Go in-process leaf, tests and Forgejo CI 2026-09-15 22:17:19 -04:00
README.md S15: sm-leaf health HTTP, verae.sm.* acks, systemd unit 2026-09-15 22:40:50 -04:00
requirements.txt S06-S08: Python spec, Go in-process leaf, tests and Forgejo CI 2026-09-15 22:17:19 -04:00

secure-messaging

Passthrough NATS envelopes, Ed25519 signed configuration, DataCube admin history, and Network Error Bundles.

Config must be a signed wrapper. Unsigned files are rejected. Admin changes append prev + new + unified diff to a kind=admin-history JSONL chain.

crypto.mode: npe | lab-xor | plain-lab (see signed payload). Live ns1 lab uses lab-xor until PFC_REQUIRE_NPE=1 is explicitly cut over.

Not a HIPAA/SOC 2/ISO certificate.