mosaicstack/stack
1
0
Fork 0
Code Issues 81 Pull Requests 1 Actions Packages Projects Releases 15 Wiki Activity

WI-1: Authenticated external lease broker — SO_PEERCRED identity + broker-minted session_id #828

New Issue
Closed
opened 2026-07-17 23:55:06 +00:00 by jason.woltje · 0 comments
jason.woltje commented 2026-07-17 23:55:06 +00:00
Owner
Copy Link

OPUS-SECREV MANDATORY (broker/identity/socket surface — no GPT/terra substitute).

Deliverable 1 (BUILD-BRIEF §3.1). Authenticated external lease broker bound to kernel SO_PEERCRED (pid, starttime, runtime_generation) — the only unforgeable identity on a same-uid tmux fleet. Broker MINTS the logical session_id at first peercred contact (NEVER caller-asserted). Distinct-principal / protected socket (A-v5-2: broker mints cryptographically-random single-use tokens + persists cycle binding; NOT model/Math.random).

ACs: peercred returns true (pid,starttime); caller-asserted session_id refused; socket authenticity posture enforced. Gated on WI-0 probes 1 & 4.

Authority (build AGAINST these, do not re-derive): BUILD-BRIEF 89fdbc27, SPEC-v5 a6d07ade, RATIFICATION bac58319, sol red-team 3da326a4. Coder MUST re-verify sha256 before build. Target: framework-native packages/mosaic/ in mosaicstack/stack (NOT jarvis-brain, NOT ~/.config/mosaic/ directly). M1 = Claude + Pi only.

Review discipline: red-first TDD; author≠reviewer; no self-merge; exact-head RoR (reviewed-SHA=merged-SHA); closes #<this>; full 40-char head; never edit tests to pass / never force-merge red / never --no-verify. Mos merges after review + green suite + (for security surfaces) Opus-SECREV.

**OPUS-SECREV MANDATORY (broker/identity/socket surface — no GPT/terra substitute).** Deliverable 1 (BUILD-BRIEF §3.1). Authenticated external **lease broker** bound to kernel `SO_PEERCRED` `(pid, starttime, runtime_generation)` — the only unforgeable identity on a same-uid tmux fleet. Broker **MINTS** the logical `session_id` at first peercred contact (NEVER caller-asserted). Distinct-principal / protected socket (A-v5-2: broker mints cryptographically-random single-use tokens + persists cycle binding; NOT model/`Math.random`). **ACs:** peercred returns true `(pid,starttime)`; caller-asserted session_id refused; socket authenticity posture enforced. Gated on WI-0 probes 1 & 4. **Authority (build AGAINST these, do not re-derive):** BUILD-BRIEF `89fdbc27`, SPEC-v5 `a6d07ade`, RATIFICATION `bac58319`, sol red-team `3da326a4`. Coder MUST re-verify sha256 before build. Target: framework-native `packages/mosaic/` in `mosaicstack/stack` (NOT jarvis-brain, NOT `~/.config/mosaic/` directly). M1 = Claude + Pi only. **Review discipline:** red-first TDD; author≠reviewer; no self-merge; exact-head RoR (reviewed-SHA=merged-SHA); `closes #<this>`; full 40-char head; never edit tests to pass / never force-merge red / never `--no-verify`. **Mos merges** after review + green suite + (for security surfaces) Opus-SECREV.
jason.woltje added this to the Compaction-Refresh Mechanism (M1: Claude+Pi) milestone 2026-07-17 23:55:06 +00:00
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
fleet-enhancement
Fleet-wide reliability/speed/cost improvements surfaced by the nightly enhance pass
No Label
Milestone
No items
No Milestone Compaction-Refresh Mechanism (M1: Claude+Pi)
Projects
Clear projects
No project
Assignees
Clear assignees
jason.woltje
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: mosaicstack/stack#828
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?