thePR0M3TH3AN/SeedPass

0 Fork 0

mirror of https://github.com/PR0M3TH3AN/SeedPass.git synced 2026-10-29 08:52:04 +00:00

Files

T

History

thePR0M3TH3ANandClaude Fable 5 5873ce8127 docs: state the agent trust boundary explicitly

Written after a security review had to infer the intended boundary from the
code. Records the principals and how each proves itself, what the capability
file does and does not defend against (nothing, against a same-uid
attacker), what each token scope grants, and the honest limit of the `use`
scope: a holder that chooses the sink command can read the secret, so `use`
buys containment only with an exec allowlist, and accountability always.

Also names the limits rather than burying them: no memory scrubbing, and the
two protocol-level issues shared with Python that cannot be fixed in one
implementation without breaking convergence.

Co-Authored-By: Claude Fable 5 <[email protected]>

2026-08-14 23:26:15 -04:00

..

.github/workflows

update

2025-07-10 19:37:30 -04:00

docs: add supply-chain verification and operational runbooks

2026-03-02 09:14:00 -05:00

Fix XSS vulnerability in docs search highlighting

2026-02-16 18:06:19 +00:00

Add TUI v2 scaffold, plan docs, and discovery command hints

2026-03-01 16:03:04 -05:00

.gitattributes

update

2025-07-10 19:37:30 -04:00

.gitignore

update

2025-07-10 19:37:30 -04:00

agent_autonomy_security_plan.md

Add agent autonomy controls, docs updates, and landing page agent section

2026-03-01 01:02:11 -05:00

agent_security_model.md

docs: state the agent trust boundary explicitly

2026-08-14 23:26:15 -04:00

agent_test_format.md

Strengthen determinism gates and add TUI v2 agent testing workflow

2026-03-01 17:35:39 -05:00

agent_testing_roadmap.md

Add robust AI TUI harness, docs roadmap, and lock/unlock fix

2026-02-23 14:35:40 -05:00

ai_agent_tui_testing.md

ci: enforce tui2 and core api coverage thresholds

2026-03-02 09:03:53 -05:00

ARCHITECTURE.md

docs: align development docs with current code behavior

2026-02-25 21:45:14 -05:00

atlas_search_graph_integration_plan_2026-03-05.md

Improve v3 grid navigation and graph browsing

2026-03-06 07:10:36 -05:00

auth_lock_unlock_access_review.md

Close security item 6 with unlock throttling and policy gates

2026-02-25 18:32:06 -05:00

beta_hardening_2026-03-02.md

docs: add beta hardening report and session notes

2026-03-02 08:10:59 -05:00

ci-health-2026-02-19.md

chore(scheduler): Execute ci-health-agent daily run

2026-02-19 21:40:32 +00:00

crypto_key_management_review.md

Complete security item 3 hardening and redaction sweep

2026-02-25 18:23:40 -05:00

dev_control_center.md

docs: update dev control center and v3 plan for 2026-03-10 shipped work

2026-03-10 21:15:54 -04:00

entropy_audit_2026-07-31.md

Offer a 24-word master seed, and put the entropy draw beyond reach of any handler

2026-07-31 17:43:24 -04:00

entry_graph.md

Add document workflows, entry graph links, and discovery/docs updates

2026-03-01 15:43:43 -05:00

entry_types.md

Add document workflows, entry graph links, and discovery/docs updates

2026-03-01 15:43:43 -05:00

index0_atlas_execution_plan_2026-03-05.md

Advance v3 search, atlas, and comms planning

2026-03-05 23:26:05 -05:00

index0_phase0_spec_2026-03-05.md

Advance v3 search, atlas, and comms planning

2026-03-05 23:26:05 -05:00

installer_testing.md

Add agent mode, hardened TUI harness, coverage gates, and cross-platform installer smoke CI

2026-02-23 15:47:59 -05:00

INTERACTIVE_AGENT_TESTING.md

docs(test): centralize test infrastructure and add interactive agent harness

2026-03-02 22:26:35 -05:00

kb_scale_validation.md

Add KB scale stress tests and launch mode docs

2026-03-01 18:33:11 -05:00

nostr_comms_reference_and_future_capability_2026-03-05.md

Advance v3 search, atlas, and comms planning

2026-03-05 23:26:05 -05:00

nostr_namespace_reset.md

Add Nostr sync reset/fresh namespace workflow and docs

2026-03-01 01:24:33 -05:00

nostr_setup.md

Add Nostr sync reset/fresh namespace workflow and docs

2026-03-01 01:24:33 -05:00

operational_runbooks.md

docs: add supply-chain verification and operational runbooks

2026-03-02 09:14:00 -05:00

overstory_quick_reference.md

Fix Overstory multi-agent setup and add quick reference docs

2026-03-06 13:12:46 -05:00

packaging.md

Add Briefcase packaging docs and scripts

2025-08-08 09:24:25 -04:00

policy_as_code.md

Add agent autonomy controls, docs updates, and landing page agent section

2026-03-01 01:02:11 -05:00

README.md

docs: add TypeScript web extension port plan

2026-06-05 14:54:17 -04:00

release_protection_policy.md

docs: add supply-chain verification and operational runbooks

2026-03-02 09:14:00 -05:00

release_verification_runbook.md

docs: add supply-chain verification and operational runbooks

2026-03-02 09:14:00 -05:00

secret_handling_local_exposure_review.md

Complete security item 3 hardening and redaction sweep

2026-02-25 18:23:40 -05:00

secret-scanning.md

ci: add secret scanning

2025-08-03 10:27:13 -04:00

security_readiness_checklist.md

docs: add supply-chain verification and operational runbooks

2026-03-02 09:14:00 -05:00

security.md

Add agent autonomy controls, docs updates, and landing page agent section

2026-03-01 01:02:11 -05:00

semantic_vector_index_plan.md

feat: add semantic search modes across cli api and tuis

2026-03-02 12:28:24 -05:00

SPEC.md

Add agent autonomy controls, docs updates, and landing page agent section

2026-03-01 01:02:11 -05:00

staged_rollout_runbook.md

docs: add supply-chain verification and operational runbooks

2026-03-02 09:14:00 -05:00

supply_chain_release_integrity.md

docs: add supply-chain verification and operational runbooks

2026-03-02 09:14:00 -05:00

sync_conflict_contract.md

Add document workflows, entry graph links, and discovery/docs updates

2026-03-01 15:43:43 -05:00

TEST_INVENTORY.md

docs(test): centralize test infrastructure and add interactive agent harness

2026-03-02 22:26:35 -05:00

threat_model.md

improved tests

2026-02-25 18:07:22 -05:00

torch_canopy_prompt_fit_quick_notes_2026-03-06.md

update

2026-03-10 21:39:50 -04:00

tui_v2_cutover_decision.md

docs: refresh tui2 cutover memo and hardening blockers

2026-03-02 09:08:15 -05:00

tui_v2_integration_execution_plan_2026-03-02.md

tui2: harden pane-state flow and dense layout parity

2026-03-02 19:03:21 -05:00

tui_v2_large_vault_validation.md

Add CI-like large-vault validation for TUI v2

2026-03-01 16:39:35 -05:00

tui_v2_legacy_parity_matrix.md

docs: sync ui refresh roadmap and remaining phase5 queue

2026-03-02 11:12:09 -05:00

tui_v2_mockup_gap_audit_2026-03-02.md

docs: add integrated TUI v2 execution plan and mockup gap audit

2026-03-02 16:28:07 -05:00

tui_v2_parity_backlog.md

docs: add semantic vector index integration roadmap

2026-03-02 11:28:42 -05:00

tui_v2_parity_checklist.md

tui2: add full in-app palette command reference

2026-03-02 09:20:04 -05:00

tui_v2_plan.md

Update TUI v3 plan and land parity fixes with smoke tests

2026-03-02 23:43:07 -05:00

tui_v2_ui_refresh_plan.md

fix(tui-v2): handle non-existent entries and tree nav focus feedback

2026-03-02 21:26:30 -05:00

tui_v3_plan.md

docs: update dev control center and v3 plan for 2026-03-10 shipped work

2026-03-10 21:15:54 -04:00

typescript_cutover_plan.md

cutover: close gates 5, 6 and 7

2026-08-14 21:33:28 -04:00

typescript_migration_guide.md

cutover: close gates 5, 6 and 7

2026-08-14 21:33:28 -04:00

typescript_port_compatibility_matrix.md

security: keep secrets off argv, fix packaging, add JS supply-chain CI

2026-08-14 23:13:21 -04:00

typescript_web_extension_port_plan.md

docs: add agent-blind secret lifecycle (provision/reference/use) to TS port plan

2026-08-13 10:03:19 -04:00

README.md

SeedPass Docs

This directory contains SeedPass project documentation.

Start Here

dev_control_center.md (single source to decide what to do next)

Agent and Autonomy Docs

agent_autonomy_security_plan.md
policy_as_code.md
sync_conflict_contract.md

Core Security Docs

security_readiness_checklist.md
threat_model.md
crypto_key_management_review.md
secret_handling_local_exposure_review.md
auth_lock_unlock_access_review.md
supply_chain_release_integrity.md
release_verification_runbook.md
release_protection_policy.md
operational_runbooks.md
staged_rollout_runbook.md

Architecture and Product Docs

ARCHITECTURE.md
SPEC.md
typescript_web_extension_port_plan.md
entry_types.md
entry_graph.md
tui_v3_plan.md (active roadmap for scratch rebuild)
tui_v2_plan.md (legacy logic reference)
tui_v2_parity_checklist.md
tui_v2_parity_backlog.md
tui_v2_legacy_parity_matrix.md
tui_v2_ui_refresh_plan.md
semantic_vector_index_plan.md
tui_v2_cutover_decision.md
tui_v2_large_vault_validation.md
security.md
nostr_setup.md
nostr_namespace_reset.md
packaging.md

QA and Testing Docs

TEST_INVENTORY.md (central index of all tests and runners)
agent_testing_roadmap.md
ai_agent_tui_testing.md
agent_test_format.md
installer_testing.md
kb_scale_validation.md
ci-health-2026-02-19.md
agent-handoffs/README.md

Discoverability Commands

seedpass --help
seedpass
seedpass tui2
seedpass --legacy-tui
seedpass legacy
seedpass <group> --help
seedpass tui2 --help
seedpass tui2 --check
seedpass capabilities --format json
seedpass agent bootstrap-context