unibus

T

egutierrez 89e0d0e64a Merge issue/0001b-ctrl-auth: signed control-plane auth + anti-replay

Phase 0001b of issue 0001. The control plane (membershipd HTTP) now supports
the bus-auth rollout off->soft->enforce: clients sign every request with their
Ed25519 identity (headers over method/path/ts/nonce/sha256(body)); the server
verifies the signature, clock skew (+/-30s), nonce replay (60s TTL cache), and
the user allowlist. Revocation denies access on the next request without a
restart. Default stays off so master keeps working.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

2026-06-07 12:32:06 +02:00

android

feat(android): app Kotlin/Compose sobre el binding gomobile

2026-06-06 18:43:10 +02:00

cmd

feat(membershipd): --bus-auth flag selects control-plane auth mode

2026-06-07 12:31:58 +02:00

deploy

feat(deploy): systemd user unit + install script for membershipd

2026-06-06 18:05:53 +02:00

dev

feat(flags): declare bus-auth and bus-tls feature flags (off)