nsaspy/zara
1
0
Fork 0
Code Issues 95 Pull requests 18 Projects Releases Packages Wiki Activity Actions

RAGE #130: CURVE/ZAP authentication and daemon security controls #144

Closed
lost-rob0t wants to merge 19 commits from rage/130-auth-security into master
pull from: rage/130-auth-security
merge into: nsaspy:master
Conversation 1 Commits 19 Files changed 10 +2018 -31
lost-rob0t commented 2026-08-22 13:15:55 +00:00 (Migrated from github.com)
Copy link

Implements issue #130 under the repository RAGE protocol.

Current state: TDD Slice A red. Research and design are committed; t/test_security.py defines the first security primitive contract before production implementation. This PR intentionally starts red so CI records the expected missing zara.security boundary.

Planned slices:

  1. security registry / capability policy / quotas / bounded audit;
  2. CURVE server/client socket configuration + callback-backed ZAP;
  3. authenticated User-Id -> principal binding and per-message revocation/authorization;
  4. secure TCP listener policy and abuse isolation;
  5. key rotation/lifecycle and exact-head full gate.

Parent epic: #127
Consumed issue: #130
Immutable RAGE start: 2bf0adbca15ea8c161df7cf15c6c9cc4125317dc

Implements issue #130 under the repository RAGE protocol. Current state: **TDD Slice A red**. Research and design are committed; `t/test_security.py` defines the first security primitive contract before production implementation. This PR intentionally starts red so CI records the expected missing `zara.security` boundary. Planned slices: 1. security registry / capability policy / quotas / bounded audit; 2. CURVE server/client socket configuration + callback-backed ZAP; 3. authenticated User-Id -> principal binding and per-message revocation/authorization; 4. secure TCP listener policy and abuse isolation; 5. key rotation/lifecycle and exact-head full gate. Parent epic: #127 Consumed issue: #130 Immutable RAGE start: `2bf0adbca15ea8c161df7cf15c6c9cc4125317dc`
lost-rob0t commented 2026-08-24 03:13:03 +00:00 (Migrated from github.com)
Copy link

Closing as superseded RAGE attempt. Issue #130 shipped through PR #145 and is already closed; this older draft remains preserved as failed/earlier evidence and must not be merged into current master.

Closing as superseded RAGE attempt. Issue #130 shipped through PR #145 and is already closed; this older draft remains preserved as failed/earlier evidence and must not be merged into current master.
nsaspy changed title from WIP: RAGE #130: CURVE/ZAP authentication and daemon security controls to RAGE #130: CURVE/ZAP authentication and daemon security controls 2026-08-28 03:31:15 +00:00

Pull request closed

Please reopen this pull request to perform a merge.
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels   
bug
Something isn't working

  
documentation
Improvements or additions to documentation

  
duplicate
This issue or pull request already exists

  
enhancement
New feature or request

  
good first issue
Good for newcomers

  
help wanted
Extra attention is needed

  
invalid
This doesn't seem right

  
question
Further information is requested

  
wontfix
This will not be worked on

No labels
bug
documentation
duplicate
enhancement
good first issue
help wanted
invalid
question
wontfix
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
nsaspy/zara!144
No description provided.