forgejoadmin

0 followers · 0 following

• Joined on 2026-06-28

Repositories Projects Packages Public activity Starred repositories

forgejoadmin pushed to main at basicstack/ProofedMesh 2026-10-25 18:11:48 +00:00

5d338dd725 signing-service: public pkg/httpapi test surface + admin-api interop test (DEV-599)

forgejoadmin pushed to main at basicstack/ProofedMesh 2026-10-25 18:10:09 +00:00

9f1eb84032 admin-api: Pocket-ID session-cookie verifier (OIDC Authorization-Code + PKCE, JWKS, group check)

forgejoadmin pushed to main at basicstack/ProofedMesh 2026-10-25 18:09:30 +00:00

69b3f3012f services: add transparency-log Go service (ADR-0005 POST /api/v1/log/entries)

forgejoadmin pushed to main at basicstack/ProofedMesh 2026-10-25 18:06:46 +00:00

2e44147a71 services: add attest-reconciler Go service (periodic worker re-signs per_diem_rates rows without rate_change_attestation_ref via Signer+TLog, 11/11 go tests pass, go vet clean)

forgejoadmin pushed to main at basicstack/ProofedMesh 2026-10-25 18:04:07 +00:00

be3ac9cdb8 admin-api: Pocket-ID client_credentials TokenSource with OIDC discovery + cache (replaces StaticToken in prod)

forgejoadmin pushed to main at basicstack/ProofedMesh 2026-10-25 18:02:46 +00:00

d9fa1c55b9 services: add signing-service (real Ed25519 DSSE, in-memory keyring, AllowAll+Static validators as DEV; OpenBao/OPA/Pocket-ID as stubs). Interop with admin-api attest.HTTPSigner verified: 19 Go-Tests + end-to-end content_hash equality.

forgejoadmin pushed to main at basicstack/ProofedMesh 2026-10-25 17:51:55 +00:00

ca62108f70 admin-api: wire Signer+TLog into Create/Retire handlers; on tlog outage row stays attestation-pending (26/26 tests pass, go vet clean)

forgejoadmin pushed to main at basicstack/ProofedMesh 2026-10-25 17:51:35 +00:00

cacdf7e286 attest+tlog: ADR-0005 Signing/TLog API contract, HTTP clients + orchestrator in admin-api (go vet clean, 11 new tests pass)

forgejoadmin pushed to main at basicstack/ProofedMesh 2026-10-25 17:30:20 +00:00

e3698de492 ci: fix Go job — golang:1.23-trixie does not exist on Docker Hub, use golang:1.23-alpine3.21 (git 2.47+, sha256-capable)

forgejoadmin pushed to main at basicstack/ProofedMesh 2026-10-25 17:28:35 +00:00

eeaceb07ed ci+readme: add Go CI job (golang:1.23-trixie, vet + test for every services/**/go.mod); README reflects db/, admin-api, go-test commands

forgejoadmin pushed to main at basicstack/ProofedMesh 2026-10-25 17:28:17 +00:00

65514559dc services: add admin-api Go service (per-diem rates CRUD, in-memory + Postgres stub store, HTML templates, 13/13 go tests pass, go vet clean)

forgejoadmin pushed to main at basicstack/ProofedMesh 2026-10-25 17:28:02 +00:00

d56f918c69 db: add ADR-0004 (golang-migrate), db/ layout, 0001_per_diem_rates migration (up+down) with EXCLUDE constraint and immutability trigger

forgejoadmin pushed to main at basicstack/ProofedMesh 2026-10-25 17:07:57 +00:00

3f466dfae8 services: add per-diem-calculator Go skeleton (deterministic compute core + 5 unit tests, HTTP wire stubbed); README reflects new layout

forgejoadmin pushed to main at basicstack/ProofedMesh 2026-10-25 17:07:40 +00:00

c0472691c8 policies: add receipts + per_diem_rates data-source policies, per_diem transformation policy, extend expense.rego for v1.2.0 (54/54 tests pass)

forgejoadmin pushed to main at basicstack/ProofedMesh 2026-10-25 17:07:22 +00:00

27c45b356a schemas: add ds/receipts v1.0.0, ds/per_diem v1.0.0, expense.canonical v1.2.0, sink.db.expense v1.2.0 (+ examples)

forgejoadmin pushed to main at basicstack/ProofedMesh 2026-10-25 16:50:35 +00:00

95e50aff7d docs(architecture): add 4.7 receipts flow (ds:receipts, PII-store, hash binding) and 6.2 deterministic rules example (ds:per-diem-rates, compute-agent, no LLM on numeric path)

forgejoadmin pushed to main at basicstack/ProofedMesh 2026-10-25 16:20:39 +00:00

2181225022 docs(architecture): add section 7.2a for per-line project allocations (expense.canonical v1.1.0)

forgejoadmin pushed to main at basicstack/ProofedMesh 2026-10-25 16:19:38 +00:00

5d309e16c1 policies+ci: v1.1.0 allocation support — expense.rego enforces per-item sum invariant, 5 new tests (25/25 pass), CI validates examples per schema version

forgejoadmin pushed to main at basicstack/ProofedMesh 2026-10-25 16:19:23 +00:00

81e5f334b5 schemas: add expense.canonical v1.1.0 and sink.db.expense v1.1.0 — per-line project allocations (percentage or absolute)

forgejoadmin pushed to main at basicstack/ProofedMesh 2026-10-25 15:41:19 +00:00

36aa391e59 ci: POSIX-safe example-validation loop (trixie-slim sh is dash, no shopt)