feat/identity-reconciliation #127

Merged

clawdie merged 3 commits from feat/identity-reconciliation into main 2026-10-07 07:38:59 +02:00

Conversation 0 Commits 3 Files changed 10 +266 -64

clawdie commented 2026-10-07 07:38:43 +02:00

Owner

Copy link

No description provided.

clawdie added 3 commits 2026-10-07 07:38:43 +02:00

feat(identity): reconcile 3-layer identity, socket path parity, and kernel caller check ... eed94f7fb3

Extend PATH-ENV-IDENTITY-UNIFICATION.md with the canonical three-layer identity model (attribution metadata, OS principal/service UID, and credential principal), preventing the invention of arbitrary 4th identity models.

Implement the local socket floor from PRIVILEGE-BOUNDARY-SPEC.md §5.1:
- Add kernel caller check (verify_caller_identity) inspecting peer credentials (SO_PEERCRED on Linux, getpeereid on FreeBSD) on incoming socket connections, rejecting unauthorized callers fail-closed before command dispatch.
- Align colibri-daemon socket path resolution with bherdr light mode: COLIBRI_DAEMON_SOCKET -> <host-root>/run/colibri.sock (when CLAWDIE_HOST_ROOT is set) -> fallback /var/run/colibri/colibri.sock.
- Update host-paths.md socket inventory with colibri daemon (light) and naming-decisions.md with "targeted test" (banning "spike") and "kernel caller check".

Gates: ./scripts/ci-checks.sh — All checks passed.

fix(socket): fail closed on non-unix, document root authorization and Tokio peer_cred ... c073951624

Address review clarifications:
- Fail closed on non-Unix platforms with io::ErrorKind::Unsupported.
- Document operator rationale for explicit root (UID 0) authorization at the control plane socket boundary.
- Document that Tokio's peer_cred() abstraction exposes the underlying kernel mechanisms (SO_PEERCRED on Linux, getpeereid on FreeBSD), noting native FreeBSD validation on Valhala is required before claiming production coverage.

Gates: ./scripts/ci-checks.sh — clean.

docs(naming): record operator consolidation in ledger, glossary, and privilege spec ... 35c0dc7fd7

Record operator consolidation per naming standards §5 (operator:sam on 07.oct.2026):
- Add In-flight ledger row in naming-decisions.md for kernel caller check / caller identity verification (former names 'peer credential check' / 'Unix socket authentication' replaced as too vague).
- Add In-flight ledger row in naming-decisions.md for targeted test (banning 'spike').
- Add kernel caller check / caller identity verification to abbreviations.md glossary under Core local communication.
- Update PRIVILEGE-BOUNDARY-SPEC.md controls matrix and platform divergence to adopt the consolidated terminology.
- Correct contributor identity to canonical antigravity@debby format across frontmatter verified_by fields.

Gates: ./scripts/ci-checks.sh — All checks passed.

clawdie merged commit 2f8e916dec into main 2026-10-07 07:38:59 +02:00

clawdie deleted branch feat/identity-reconciliation 2026-10-07 07:38:59 +02:00

clawdie referenced this pull request from a commit 2026-10-07 07:38:59 +02:00

Merge pull request 'feat/identity-reconciliation' (#127) from feat/identity-reconciliation into main

clawdie referenced this pull request from a commit 2026-10-07 08:03:01 +02:00

docs(spec): post-merge alignment of kernel caller check and socket security

clawdie referenced this pull request 2026-10-07 09:25:36 +02:00

Attestation design: signer, key ownership, and verification (deferred) #125

Sign in to join this conversation.

Reviewers

No reviewers

Labels

Clear labels

No items

No labels

Milestone

Clear milestone

No items

No milestone

Projects

Clear projects

No items

No project

Assignees

Clear assignees

No assignees

1 participant

Notifications

Subscribe

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference

clawdie/colibri!127

No description provided.