amadan

carlos / platform Public

← Branches

instance-moves-p7

P7 of #175: the edge-local door. An app's own processes on a box (Tito's router, relay and import-sync loop) dial /run/carlos/edge-local.sock with Host: <instance> and a door key. The edge serves the request as a request from the box itself, carrying the box's public address over https. It wakes a local instance, backhauls to the box that homes the host, and applies the password gate. Apps stop computing socket paths, so moves (P1 to P4) and the isolated-layout pass (P9) stop breaking their routers.

How it holds together:

  • The door grants nothing a public request from the same box lacks. Paul ruled on 2026-09-28 that no caller-supplied visitor address is believed.
  • The door key says which app is calling, and confines it to that app's hosts. The console's database is the authority for keys. Boxes read a signed, revisioned record that expires after 72 h and is re-signed every 12 h.
  • For a remote host, the door checks the owner that host's box publishes in its edges file, and only for single-owner hostnames.

Status:

  • Tasks 1 to 7 are built and committed. The Fable whole-branch review found no blockers, and three of its notes are fixed.
  • The plan went through six Astra rounds; all findings are committed unedited beside it.
  • Waiting on Paul's copy review of 19 strings, including the docs passage. Then the docs go in and the branch merges.

Dormant until a box sets CARLOS_EDGE_DOOR. Turning it on for carlos-tito-ie needs scoped approval.

Human

P7 of #175: a box-local edge door for app routers, authenticated by an app-scoped console-signed door key.

Commits 15
Discussions 0 0 open
Tasks 11/11 done

Discussions

  • No discussions on this branch yet.

All discussions →

Tasks 11/11 done

  • P7 plan written Done
  • P7 plan: Astra review, fold in findings Done
  • P7 Task 1: doorkey package Done
  • P7 Task 2: console door-key doors Done
  • P7 Task 3: carlos instances door-key Done

All tasks →

Activity