Watch

Passthrough envelopes, signed config, DataCube admin history, error bundles (Python+Go) | Owner: Scott R00tPiG Security Lindsey (rootpig) — server maintenance & deployment.

TeX 63.7%
JavaScript 14.4%
Python 8.7%
CSS 5.9%
Common Lisp 2.7%
Other 4.4%

Find a file

Repository files (latest commit first)
Filename	Latest commit message	Latest commit date
Scott "R00tPiG Security" Lindsey (r00tpig) 0e77d60917 S14: NPE fail-closed adapter; npe mode never falls back to lab-xor		2026-09-15 22:22:56 -04:00
.forgejo/workflows	S06-S08: Python spec, Go in-process leaf, tests and Forgejo CI	2026-09-15 22:17:19 -04:00
go	S06-S08: Python spec, Go in-process leaf, tests and Forgejo CI	2026-09-15 22:17:19 -04:00
python/secure_messaging	S14: NPE fail-closed adapter; npe mode never falls back to lab-xor	2026-09-15 22:22:56 -04:00
scripts	S14: NPE fail-closed adapter; npe mode never falls back to lab-xor	2026-09-15 22:22:56 -04:00
tests	S14: NPE fail-closed adapter; npe mode never falls back to lab-xor	2026-09-15 22:22:56 -04:00
.gitignore	S06-S08: Python spec, Go in-process leaf, tests and Forgejo CI	2026-09-15 22:17:19 -04:00
LICENSE	S06-S08: Python spec, Go in-process leaf, tests and Forgejo CI	2026-09-15 22:17:19 -04:00
README.md	S06-S08: Python spec, Go in-process leaf, tests and Forgejo CI	2026-09-15 22:17:19 -04:00
requirements.txt	S06-S08: Python spec, Go in-process leaf, tests and Forgejo CI	2026-09-15 22:17:19 -04:00

README.md

secure-messaging

Passthrough NATS envelopes, Ed25519 signed configuration, DataCube admin history, and Network Error Bundles.

Python spec: python/secure_messaging/ (line comments)
Go leaf: go/cmd/sm-leaf (in-process NATS + optional SM_LEAF_HUB)
Catalog: https://git.georgelambert.org/marchon/nats-service-endpoints
Hub: https://git.georgelambert.org/marchon/system-git-sync

Config must be a signed wrapper. Unsigned files are rejected. Admin changes append prev + new + unified diff to a kind=admin-history JSONL chain.

crypto.mode: npe | lab-xor | plain-lab (see signed payload).

Not a HIPAA/SOC 2/ISO certificate. ns1: no deploy until CI review.