r00tpig/secure-messaging
Watch
1
0
Fork
You've already forked secure-messaging
 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

S06-S08: Python spec, Go in-process leaf, tests and Forgejo CI

Browse source
This commit is contained in:
Scott "R00tPiG Security" Lindsey 2026-09-15 22:17:19 -04:00
commit d58c5ada79
1 changed files with 726 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

16
README.md Normal file
View file

@ -0,0 +1,16 @@
# secure-messaging
Passthrough NATS envelopes, Ed25519 signed configuration, DataCube admin
history, and Network Error Bundles.
* Python spec: `python/secure_messaging/` (line comments)
* Go leaf: `go/cmd/sm-leaf` (in-process NATS + optional `SM_LEAF_HUB`)
* Catalog: https://git.georgelambert.org/marchon/nats-service-endpoints
* Hub: https://git.georgelambert.org/marchon/system-git-sync
Config must be a signed wrapper. Unsigned files are rejected. Admin changes
append prev + new + unified diff to a `kind=admin-history` JSONL chain.
`crypto.mode`: `npe` | `lab-xor` | `plain-lab` (see signed payload).
Not a HIPAA/SOC 2/ISO certificate. ns1: no deploy until CI review.