marchon/system-git-sync
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions 1
system-git-sync/docs/thesaurus.md
George Lambert 8c09abecae
Some checks are pending
review / inventory (push) Waiting to run
Details
S16-S24: Remaining-Work plan, thesaurus occurrences, deploy docs 
VARIABLES.md, MODULE writer, catalog review covers subjects.json,
deploy rsyncs system HTML/PDF and SM docs.
2026-09-15 23:10:32 -04:00

14 KiB
Raw Blame History

Thesaurus

Canonical term → where it lives. Occurrences are grepped from in-scope repos (docs and code). Banned phrases must not be used as the name of the thing.

This is not a HIPAA/SOC 2/ISO certificate.

Term Use this Not this Occurrences
Untrusted broker NATS secure bus `system-git-sync/System-Git-Sync.MD:116:
Production E2E NPE / HPKE TLS to NATS secure-messaging/README.md:17:Live ns1 lab uses lab-xoruntilPFC_REQUIRE_NPE=1 is explicitly cut over.
`system-git-sync/System-Git-Sync.MD:110:
Lab envelope pfc-lab-xor xor cipher secure-messaging/scripts/sign_config.py:23: "crypto": {"mode": "lab-xor", "system_key_id": "lab-system"},
secure-messaging/README.md:16:crypto.mode: npe`
Dest in clear passthrough plaintext message secure-messaging/scripts/sign_config.py:24: "routing": {"mode": "passthrough"},
system-git-sync/System-Git-Sync.MD:35:> the address is a passthrough make that clear, explain how encrypted
`system-git-sync/System-Git-Sync.MD:116:
Sender handle lookup_id from username on wire `system-git-sync/System-Git-Sync.MD:117:
Config file signed wrapper raw JSON config nats-service-endpoints/scripts/import_pfc_subjects.py:49: return "unsigned wrappers rejected; empty actor rejected"
secure-messaging/README.md:13:Config must be a signed wrapper. Unsigned files are rejected. Admin changes
system-git-sync/scripts/build_thesaurus.py:31: ("Config file", "signed wrapper", "raw JSON config", "signed wrapper"),
peergos-for-compliance-admin/pfc_admin/server.py:693: return 200, {"configured": False, "hint": "set PFC_SIGNED_CONFIG to a signed wrapper"}
peergos-compliance-docs/source/walkthrough.rst:122:signed wrapper.** Admin ``POST /v1/admin/config`` signs and appends
peergos-for-compliance/tests/test_signed_config.py:1:"""Admin GET/POST /v1/admin/config with Ed25519 signed wrapper + history."""
nats-service-endpoints/catalog/endpoints.json:152: "out": "signed wrapper",
system-git-sync/docs/VARIABLES.md:4:live ns1 values live in the **signed wrapper** and systemd units, not git.
Admin audit DataCube admin-history SQL log peergos-compliance-config/MODULE.md:29:Unsigned files rejected at load. Live changes append admin-history.
secure-messaging/scripts/sign_config.py:25: "admin": {"history_cube": "admin-history"},
secure-messaging/scripts/sign_config.py:52: hist = AdminHistory(ROOT / "examples" / "admin-history")
nats-service-endpoints/scripts/import_pfc_subjects.py:29: "verae.admin.history.append": "Append prev + new + unified diff to admin-history cube",
secure-messaging/README.md:14:append prev + new + unified diff to a kind=admin-history JSONL chain.
`system-git-sync/System-Git-Sync.MD:114:
Failure to sender ct_sender email bounce plaintext nats-service-endpoints/scripts/import_pfc_subjects.py:26: "verae.sm.error": "Emit a Network Error Bundle (ct_sender + ct_system)",
`system-git-sync/System-Git-Sync.MD:119:
Ops bounce ct_system / Network Error Bundle log the ciphertext body secure-messaging/MODULE.md:33:- **Errors:** Network Error Bundle: ct_sender(sender only) +ct_system (ops). Never log mail body.
nats-service-endpoints/scripts/import_pfc_subjects.py:26: "verae.sm.error": "Emit a Network Error Bundle (ct_sender + ct_system)",
system-git-sync/scripts/build_thesaurus.py:34: ("Ops bounce", "ct_system / Network Error Bundle", "log the ciphertext body", "ct_system"),
system-git-sync/scripts/write_modules.py:44: err="Network Error Bundle: ct_sender(sender only) +ct_system (ops). Never log mail body.",
secure-messaging/source/index.rst:36:Network Error Bundle: ``ct_sender`` (sender-only status) and ``ct_system```<br>nats-service-endpoints/source/tracing.rst:17: 4. Sender opens ct_sender; ops opens ct_system.<br>nats-service-endpoints/source/endpoints.rst:14:* verae.sm.error -- emit bundle: ct_sender + ct_system.<br>peergos-compliance-docs/source/walkthrough.rst:143:ct_sender is sender-only; ct_system is the ops bounce report.`
Inspect officers share names Google accounts peergos-for-compliance-admin/HOWTOSTART.md:18:k-of-n officer presence.
peergos-compliance-architecture/README.md:10: Author HSM Officers (k-of-n WebAuthn)
nats-service-endpoints/scripts/import_pfc_subjects.py:33: "verae.inspect.open": "Start k-of-n inspect; log-before-reveal",
nats-service-endpoints/scripts/import_pfc_subjects.py:47: return "k-of-n officers; author cannot be officer; TOTP session; log-before-reveal"
system-git-sync/scripts/build_thesaurus.py:35: ("Inspect officers", "share names", "Google accounts", "k-of-n"),
peergos-for-compliance-admin/README.md:5:Creates cubes with fail-closed profiles, stores ciphertext objects, opens k-of-n inspect sessions, and **refuses bytes
system-git-sync/scripts/write_modules.py:63: filt="PFC_REQUIRE_AUTH=1; TOTP for hipaa; k-of-n inspect; unsigned config rejected.",
peergos-for-compliance/apps/inspect/peergos-app.json:5: "description": "k-of-n inspect via cryptree outbox. No NATS in the iframe.",
Console SSO PFC TOTP/Google Peergos Drive login peergos-for-compliance-admin/HOWTOSTART.md:11:Production console (https://pfc.georgelambert.org) sets PFC_REQUIRE_AUTH=1.
peergos-compliance-docs/scripts/capture_ui.py:46: env["PFC_REQUIRE_AUTH"] = "1"
system-git-sync/scripts/build_thesaurus.py:36: ("Console SSO", "PFC TOTP/Google", "Peergos Drive login", "PFC_REQUIRE_AUTH"),
system-git-sync/scripts/write_modules.py:63: filt="PFC_REQUIRE_AUTH=1; TOTP for hipaa; k-of-n inspect; unsigned config rejected.",
peergos-for-compliance-admin/pfc_admin/server.py:43:REQUIRE_AUTH = os.environ.get("PFC_REQUIRE_AUTH", "0") == "1"
peergos-for-compliance-admin/MODULE.md:29:PFC_REQUIRE_AUTH=1; TOTP for hipaa; k-of-n inspect; unsigned config rejected.
peergos-compliance-docs/source/remaining.rst:12:* Open JSON cube APIs return 401 when ``PFC_REQUIRE_AUTH=1``.
peergos-compliance-docs/source/walkthrough.rst:6:with ``PFC_REQUIRE_AUTH=1``.
NPE sidecar npe seal --to HPKE in Python system-git-sync/scripts/build_thesaurus.py:37: ("NPE sidecar", "npe seal --to", "HPKE in Python", "npe_adapter"),
secure-messaging/python/secure_messaging/envelope.py:79: from .npe_adapter import seal_npe # fail-closed import
secure-messaging/python/secure_messaging/__init__.py:6:from .npe_adapter import NpeRequired # fail-closed NPE
`system-git-sync/docs/thesaurus.md:20:
Review gate cicd/GATE.md auto-deploy to ns1 system-git-sync/scripts/build_thesaurus.py:38: ("Review gate", "cicd/GATE.md", "auto-deploy to ns1", "GATE.md"),
system-git-sync/TODO.md:20:- [x] S13 CI-CD: Forgejo workflows + cicd/run-review.sh + GATE.md (REVIEW PASS, no deploy)
system-git-sync/TODO.md:22:- [x] S15 Promote SHAs in cicd/GATE.md; deploy sm-leaf + signed config to ns1 (NPE live cutover remains UserReview)
`system-git-sync/docs/thesaurus.md:21:
sm-leaf health GET 127.0.0.1:18783/health WAN NATS ports secure-messaging/README.md:8:* Loopback health: SM_HTTPdefault127.0.0.1:18783 (GET /health)
secure-messaging/source/index.rst:11:* Loopback health: ``127.0.0.1:18783/health```<br>secure-messaging/deploy/pfc-sm-leaf.service:7:Environment=SM_HTTP=127.0.0.1:18783<br>secure-messaging/deploy/pfc-sm-leaf.service:8:ExecStart=/opt/pfc/bin/sm-leaf -hub nats://10.10.10.21:7422 -http 127.0.0.1:18783<br>system-git-sync/scripts/build_thesaurus.py:39: ("sm-leaf health", "GET 127.0.0.1:18783/health", "WAN NATS ports", "18783"),<br>system-git-sync/cicd/deploy-ns1.sh:114:curl -sS -m 5 http://127.0.0.1:18783/health; echo<br>system-git-sync/docs/VARIABLES.md:35:

Certification

In-scope documentation uses the Use this column. passthrough means destination in the clear, not a plaintext message body. NATS is the untrusted broker. Production E2E is NPE/HPKE.