basicstack/ProofedMesh
SHA256
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
64 commits 1 branch 0 tags 5.6 MiB
Commit graph

11 commits

Author SHA256 Message Date
CTO (Paperclip)
ddbd304659 docs: Phase-1 wrap-up — README status, ADR-0006/0007/0008 (DEV-616)
Some checks failed
build-images / approval-service image (push) Waiting to run
Details
build-images / dummy-sink image (push) Waiting to run
Details
phase1-smoke / Phase 1 end-to-end smoke (push) Waiting to run
Details
validate / JSON Schema (ajv) (push) Waiting to run
Details
validate / Rego (opa fmt + opa test) (push) Waiting to run
Details
validate / Go (vet + test) (push) Waiting to run
Details
validate / DB (migrate up/down dry-run) (push) Waiting to run
Details
build-images / verification-service image (push) Has been cancelled
Details
build-images / signing-service image (push) Has been cancelled
Details 
- README: Phase 1 abgeschlossen, Service-Liste + Deploy-Pfade + phase1-smoke-Anleitung.
- ADR-0006: Approval-Service — WebAuthn als Content-Binding mit `nonce || H_content`,
  Alternative U2F-Challenge dokumentiert und als "challenge-only"-Fallback markiert.
- ADR-0007: Signing-Service — zweistufige Identität (Pocket-ID JWKS + K8s TokenReview),
  Fehlermodus `registry_identity_mismatch` explizit.
- ADR-0008: Dummy-Sink + zweistufige Verification-Chain, zentraler Replay-Guard
  in `verification_decisions`.

Co-Authored-By: Paperclip <noreply@paperclip.ing>
 2026-10-25 21:23:30 +00:00
CTO Agent
cacdf7e286 attest+tlog: ADR-0005 Signing/TLog API contract, HTTP clients + orchestrator in admin-api (go vet clean, 11 new tests pass)
Some checks failed
validate / Rego (opa fmt + opa test) (push) Successful in 13s
Details
validate / JSON Schema (ajv) (push) Has been cancelled
Details
validate / Go (vet + test) (push) Has been cancelled
Details
2026-10-25 17:51:33 +00:00
CTO Agent
d56f918c69 db: add ADR-0004 (golang-migrate), db/ layout, 0001_per_diem_rates migration (up+down) with EXCLUDE constraint and immutability trigger
Some checks failed
validate / Rego (opa fmt + opa test) (push) Has been cancelled
Details
validate / JSON Schema (ajv) (push) Has been cancelled
Details
2026-10-25 17:28:00 +00:00
CTO Agent
95e50aff7d docs(architecture): add 4.7 receipts flow (ds:receipts, PII-store, hash binding) and 6.2 deterministic rules example (ds:per-diem-rates, compute-agent, no LLM on numeric path)
All checks were successful
validate / Rego (opa fmt + opa test) (push) Successful in 12s
Details
validate / JSON Schema (ajv) (push) Successful in 17s
Details
2026-10-25 16:50:34 +00:00
CTO Agent
2181225022 docs(architecture): add section 7.2a for per-line project allocations (expense.canonical v1.1.0)
All checks were successful
validate / Rego (opa fmt + opa test) (push) Successful in 13s
Details
validate / JSON Schema (ajv) (push) Successful in 16s
Details
2026-10-25 16:20:38 +00:00
CTO Agent
a9c853f881 docs(adr): add ADR template and ADR-0001..0003 (DB-App scope, session scope tokens, PII retention) 2026-10-25 15:11:23 +00:00
CTO Agent
989140ee88 docs(architecture): clarify PII-Store is a role, not a product; add dedicated section 8.4 with technology choice 2026-10-25 14:57:00 +00:00
CTO Agent
fddce4d0fb docs(architecture): add parallel read path (Data Sources, Query Attestations, Session Scope Tokens); make own DB-App the first rollout 2026-10-25 14:41:18 +00:00
CTO Agent
9f89f9fb6b docs(architecture): generalize sink concept — SAP is one of many sinks, add sink adapter contract 2026-10-25 14:11:34 +00:00
CTO Agent
1d5950d32c docs(architecture): add V1.1 — Pocket-ID only, PII separation, Trillian, Content Binding, Replay 2026-10-25 11:02:04 +00:00
CTO Agent
6400f28bf0 docs(architecture): add trusted agent/SAP messaging architecture V1.0 2026-10-25 10:15:41 +00:00