Raven Scott
8bde745191
- Add optional Holepunch clone lag gate (holepunch-freshness-gate.json, verify-holepunch-clone-freshness.mjs) and wire into pretest/docs. - Extend stock ctx.bareOsHrpcRequest with disk.os replication routes; bump hrpc_allowlist_sketch proc to schema 2 with stockRoutes list. - Security posture: blindRelayAudit; hyper_multisig_trust_pointer schema 2 + vault multisig continuity env; login/unlock audit hook. - Syscalls schema 9 alignment (JSON schema, compatibility matrix, conformance matrix clock_gettime); boot budget telemetry schema 2 in metrics_live. - Coreutils hostname -s/--short man/options; rebuild kernel bins/man. - POSIX + P2P dashboard section in docs/README; handbook/DOCUMENTATION/ release-checklist/OTA/KERNEL_CONTRACT/PEAR-RUN and related reference updates. - verify-boot-policy-extension-signer-pins: scan kernel init fragments. Note: vendor drift section removed from kernel/lib/bare/README.md (intentional).
45 lines
1.4 KiB
JSON
45 lines
1.4 KiB
JSON
{
|
|
"$schema": "https://json-schema.org/draft/2020-12/schema",
|
|
"$id": "https://bare-os.local/schemas/bare-os-security-posture.schema.json",
|
|
"title": "security_posture.json (subset)",
|
|
"description": "Non-secret snapshot from /proc/bare_os/security_posture.json — peerAdmission audit env pointers only.",
|
|
"type": "object",
|
|
"required": ["schema"],
|
|
"properties": {
|
|
"schema": { "type": "integer", "const": 4 },
|
|
"peerAdmission": {
|
|
"type": "object",
|
|
"properties": {
|
|
"schema": { "type": "integer" },
|
|
"allowlistConfigured": { "type": "boolean" },
|
|
"denylistConfigured": { "type": "boolean" },
|
|
"requireCapsConfigured": { "type": "boolean" },
|
|
"admissionAuditNdjsonEnv": {
|
|
"type": "string",
|
|
"const": "BARE_OS_PEER_ADMISSION_AUDIT_NDJSON"
|
|
},
|
|
"admissionAuditRateMsEnv": {
|
|
"type": "string",
|
|
"const": "BARE_OS_PEER_ADMISSION_AUDIT_RATE_MS"
|
|
},
|
|
"evaluator": { "type": "string" },
|
|
"admissionResultSchema": { "type": "integer" }
|
|
},
|
|
"additionalProperties": true
|
|
},
|
|
"blindRelayAudit": {
|
|
"type": "object",
|
|
"properties": {
|
|
"schema": { "type": "integer" },
|
|
"ndjsonEnvGate": {
|
|
"type": "string",
|
|
"const": "BARE_OS_BLIND_RELAY_AUDIT_NDJSON"
|
|
},
|
|
"armed": { "type": "boolean" }
|
|
},
|
|
"additionalProperties": true
|
|
}
|
|
},
|
|
"additionalProperties": true
|
|
}
|