jpmschweitzer/odysseus
1
0
Fork 0
mirror of https://github.com/pewdiepie-archdaemon/odysseus.git synced 2026-10-09 00:12:21 +02:00
Code Issues Packages Projects Releases Wiki Activity

docs(runtime): record Wave 3 closure evidence and contracts

Browse Source
This commit is contained in:
Alexandre Teixeira
2026-10-03 00:20:15 +01:00
parent 55d5b1d10a
commit 6cd6ee43c3
4 changed files with 109 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
specs/auth-security.md
+4
View File
@@ -78,6 +78,10 @@ Missing-owner values remain state-dependent at legacy call sites, but new storag
loopback connection without proxy forwarding, cross-site indicators, or an
internal-tool header. Remote/proxied anonymous traffic remains denied at
these controls. Auth-enabled administration still requires a human admin.
This mode trusts local programs as well as the local operator: a headerless
loopback request cannot identify which local program sent it. Agent program
launches retain inherited networking; this is not protection against hostile
local code. Use authenticated mode when local programs are outside that trust.
Local Cookbook tools use a separate one-use capability for an admitted exact
request/operation/native backend and resolved launch body; that capability
cannot administer shell, PID, SSH-key, or arbitrary Cookbook state routes.