S00-S04: hub inventory, signed-config design, prompts saved

This commit is contained in:
George Lambert 2026-09-15 22:17:15 -04:00
commit 257405ca61
9 changed files with 304 additions and 0 deletions

17
docs/thesaurus.md Normal file
View file

@ -0,0 +1,17 @@
# Thesaurus
Canonical term → where it lives. Use this to rename later.
| Term | Use this | Not this | Where |
|---|---|---|---|
| Untrusted broker | NATS | "secure bus" | nats-service-endpoints |
| Production E2E | NPE / HPKE | "TLS to NATS" | secure-messaging |
| Lab envelope | pfc-lab-xor | "xor cipher" alone | peergos-for-compliance |
| Dest in clear | passthrough | "plaintext message" | envelope.py |
| Sender handle | lookup_id | "from username on wire" | envelope.py |
| Config file | signed wrapper | raw JSON config | signed_config.py |
| Admin audit | DataCube admin-history | SQL log | admin_history.py |
| Failure to sender | ct_sender | "email bounce plaintext" | error_bundle.py |
| Ops bounce | ct_system / Network Error Bundle | "log the ciphertext body" | error_bundle.py |
| Inspect officers | share names | Google accounts | peergos-for-compliance |
| Console SSO | PFC TOTP/Google | Peergos Drive login | pfc_admin |