marchon/system-git-sync
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions 1

S26: deploy generates nats.env PSK, FORBID_PLAIN, rebuilt pfc-repl
Some checks are pending
review / inventory (push) Waiting to run
Details

Browse source 
PDF bundle rsync so relative PDF links resolve on docs.pfc.
This commit is contained in:
George Lambert 2026-09-15 23:29:25 -04:00
parent aa7c837493
commit 185cdaabdb
4 changed files with 49 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

6
Historical-Information.MD
View file

@ -109,6 +109,12 @@ After a context reset: read this file, then `Remaining-Work.MD`.
- `sync.pfc.georgelambert.org` Caddy (DNS already pointed at 138).
- Deep links: console footer, hub `links.html`, `https://georgelambert.org/pfc/` (one page; 70 website repos not rewritten).
## S26 (certification-ready controls, still not a certificate)
- NATS remains **untrusted**. Bodies: `pfc-lab-xor` with host PSK (`PFC_NATS_KEY` + `PFC_FORBID_PLAIN=1`). Python and Go envelopes round-trip the same vector. Production E2E remains NPE/HPKE (`PFC_REQUIRE_NPE` still unset).
- PDFs link to **sibling PDFs** (`nats-service-endpoints.pdf`, `secure-messaging.pdf`, `peergos-for-compliance.pdf`) — no `.md` hrefs.
- Controls / custody / variables chapters in the system PDF.
Go `pfc-repl` now serves loopback `GET 127.0.0.1:18784/health`; admin `PFC_REPL_URL` points there. Ingest replicas a/b do not bind HTTP.
## Do not