alknet

alkdev/alknet

Fork 0

Commit Graph

Author	SHA1	Message	Date
glm-5.2	c62a6adc7b	docs(architecture): resolve review #002 Tiers 1-3 — mechanical and consistency fixes Governance (Tier 2): - Advance ADR-022 and ADR-023 from Proposed to Accepted (specs already depend on their types as source of truth) - Amend ADR-015: mark Decision 3 and Assumption 6 as superseded by ADR-022; update handler_identity type to CompositionAuthority - Amend ADR-002: note handle() signature revised by ADR-007 (BiStream → Connection) - Amend ADR-004: note 'enrich/replace' AuthContext language superseded by ADR-011's immutability model; update to describe set_identity on Connection - Update main README ADR table to show ADR-022/023 as Accepted Spec-ADR consistency (Tier 3): - Add abort_policy: AbortPolicy field to OperationContext struct (ADR-016 Decision 6 mandated this but the spec omitted it) - Define AbortPolicy enum (AbortDependents \| ContinueRunning) with Default impl - Add abort_policy to build_root_context and LocalOperationEnv::invoke() - Define the OperationEnv trait explicitly with invoke() and invoke_with_policy() methods (was referenced as 'must remain a trait' but never defined) - Specify From<StreamError> for HandlerError impl with exact variant mapping - Add Connection::from_quinn() / from_iroh() constructors (was referenced as Connection::new() but never defined) - Remove undefined CertAuthorityEntry placeholder from AuthPolicy v1 (will be added additively when alknet-ssh lands) - Fix config.md key-differences table: rate limits are in DynamicConfig, not StaticConfig Mechanical fixes (Tier 1): - overview.md: 'closes the QUIC stream' → 'closes the connection' (stale from pre-ADR-007 model) - overview.md: OQ-04 entry updated from stale 'defer to implementation' to 'resolved: static at startup' - mnemonic-derivation.md: remove duplicate helper functions block (incomplete first copy, complete second copy) - ADR-003: add iroh (feature-gated) to alknet-core dependency list, added by ADR-010 - ADR-021: fix ambiguous 'W1 drift issue from the vault review' cross-reference - ADR-022: rephrase FromCall 'leaf locally' to 'leaf in the local registry' - ADR-017: add error_schemas to from_call mirror list and services/schema step (inconsistency with ADR-023) - ADR-016: fix self-referential citation ('ADR-016 Assumption 5' → 'Assumption 5') - Add ScopedOperationEnv::empty(), allows(), new() and CompositionAuthority::none(), new() impl blocks (referenced but undefined) - Add call.completed clarification for non-subscription calls - Add services/schema leading-slash normalization note - Crate README ADR tables: add missing ADR-013 (call), ADR-015 (core), ADR-006 + ADR-010 (vault) - Vault README: add consolidated 'Known Source Drift' table tracking all four drift items (OsRng, unwrap, CURRENT_KEY_VERSION, spawn bug) in one place, including the two previously missing from README	2026-06-22 05:46:37 +00:00
glm-5.1	90d5f4eaf9	docs(architecture): spec alknet-core with per-crate subdocs, ADR-010/011 Add alknet-core architecture specs in docs/architecture/crates/core/ with focused subdocuments for core types, endpoint, auth, and config. Write ADR-010 (ALPN Router and Endpoint) defining AlknetEndpoint, HandlerRegistry, accept loop, and graceful shutdown. Write ADR-011 (AuthContext Structure) defining AuthContext fields, immutability in handle(), and IdentityProvider injection pattern. Resolve OQ-04 (static registration), OQ-12 (file paths only for v1). Add OQ-11 (auth observability). Fix remaining alknet-secret references to alknet-vault across ADRs 003/004/005/009.	2026-06-16 12:07:17 +00:00
glm-5.1	f77b515968	docs(architecture): add Phase 0 architecture specs for ALPN-as-service model Foundational architecture documents following the SDD process: ADRs: - 001: ALPN-based protocol dispatch (one endpoint, ALPN negotiation) - 002: ProtocolHandler trait (replaces StreamInterface/MessageInterface) - 003: Crate decomposition (one crate per handler, core provides shared infra) - 004: Auth as shared core (IdentityProvider, hybrid resolution model) - 005: irpc as call protocol foundation - 006: ALPN string convention and connection model (alknet/ prefix, one ALPN per connection) Docs: - overview.md: crate graph, shared types, ALPN registry, failure modes - README.md: index with doc table, ADR table, lifecycle definitions - open-questions.md: 10 OQs across 7 themes (3 resolved, 7 open) Crate spec stubs for all 11 planned crates (alknet-core through alknet CLI). Key decisions resolved during self-review: - AuthContext resolution is hybrid: endpoint resolves TLS-level auth, handlers resolve protocol-level auth (resolves OQ-02) - ALPN is per-connection not per-stream, corrected ADR-001 (resolves OQ-06) - ALPN naming uses alknet/ prefix without versions (resolves OQ-03) - HandlerError return type on ProtocolHandler trait - alknet/secret removed from ALPN registry until OQ-08 resolved	2026-06-15 22:14:58 +00:00

Author

SHA1

Message

Date

glm-5.2

c62a6adc7b

docs(architecture): resolve review #002 Tiers 1-3 — mechanical and consistency fixes

Governance (Tier 2):
- Advance ADR-022 and ADR-023 from Proposed to Accepted (specs already
  depend on their types as source of truth)
- Amend ADR-015: mark Decision 3 and Assumption 6 as superseded by ADR-022;
  update handler_identity type to CompositionAuthority
- Amend ADR-002: note handle() signature revised by ADR-007 (BiStream → Connection)
- Amend ADR-004: note 'enrich/replace' AuthContext language superseded by
  ADR-011's immutability model; update to describe set_identity on Connection
- Update main README ADR table to show ADR-022/023 as Accepted

Spec-ADR consistency (Tier 3):
- Add abort_policy: AbortPolicy field to OperationContext struct (ADR-016
  Decision 6 mandated this but the spec omitted it)
- Define AbortPolicy enum (AbortDependents | ContinueRunning) with Default impl
- Add abort_policy to build_root_context and LocalOperationEnv::invoke()
- Define the OperationEnv trait explicitly with invoke() and
  invoke_with_policy() methods (was referenced as 'must remain a trait'
  but never defined)
- Specify From<StreamError> for HandlerError impl with exact variant mapping
- Add Connection::from_quinn() / from_iroh() constructors (was referenced
  as Connection::new() but never defined)
- Remove undefined CertAuthorityEntry placeholder from AuthPolicy v1 (will
  be added additively when alknet-ssh lands)
- Fix config.md key-differences table: rate limits are in DynamicConfig,
  not StaticConfig

Mechanical fixes (Tier 1):
- overview.md: 'closes the QUIC stream' → 'closes the connection' (stale
  from pre-ADR-007 model)
- overview.md: OQ-04 entry updated from stale 'defer to implementation'
  to 'resolved: static at startup'
- mnemonic-derivation.md: remove duplicate helper functions block (incomplete
  first copy, complete second copy)
- ADR-003: add iroh (feature-gated) to alknet-core dependency list, added
  by ADR-010
- ADR-021: fix ambiguous 'W1 drift issue from the vault review' cross-reference
- ADR-022: rephrase FromCall 'leaf locally' to 'leaf in the local registry'
- ADR-017: add error_schemas to from_call mirror list and services/schema
  step (inconsistency with ADR-023)
- ADR-016: fix self-referential citation ('ADR-016 Assumption 5' → 'Assumption 5')
- Add ScopedOperationEnv::empty(), allows(), new() and
  CompositionAuthority::none(), new() impl blocks (referenced but undefined)
- Add call.completed clarification for non-subscription calls
- Add services/schema leading-slash normalization note
- Crate README ADR tables: add missing ADR-013 (call), ADR-015 (core),
  ADR-006 + ADR-010 (vault)
- Vault README: add consolidated 'Known Source Drift' table tracking all
  four drift items (OsRng, unwrap, CURRENT_KEY_VERSION, spawn bug) in one
  place, including the two previously missing from README

2026-06-22 05:46:37 +00:00

glm-5.1

90d5f4eaf9

docs(architecture): spec alknet-core with per-crate subdocs, ADR-010/011

Add alknet-core architecture specs in docs/architecture/crates/core/ with
focused subdocuments for core types, endpoint, auth, and config. Write
ADR-010 (ALPN Router and Endpoint) defining AlknetEndpoint, HandlerRegistry,
accept loop, and graceful shutdown. Write ADR-011 (AuthContext Structure)
defining AuthContext fields, immutability in handle(), and IdentityProvider
injection pattern. Resolve OQ-04 (static registration), OQ-12 (file paths
only for v1). Add OQ-11 (auth observability). Fix remaining alknet-secret
references to alknet-vault across ADRs 003/004/005/009.

2026-06-16 12:07:17 +00:00

glm-5.1

f77b515968

docs(architecture): add Phase 0 architecture specs for ALPN-as-service model

Foundational architecture documents following the SDD process:

ADRs:
- 001: ALPN-based protocol dispatch (one endpoint, ALPN negotiation)
- 002: ProtocolHandler trait (replaces StreamInterface/MessageInterface)
- 003: Crate decomposition (one crate per handler, core provides shared infra)
- 004: Auth as shared core (IdentityProvider, hybrid resolution model)
- 005: irpc as call protocol foundation
- 006: ALPN string convention and connection model (alknet/ prefix, one ALPN per connection)

Docs:
- overview.md: crate graph, shared types, ALPN registry, failure modes
- README.md: index with doc table, ADR table, lifecycle definitions
- open-questions.md: 10 OQs across 7 themes (3 resolved, 7 open)

Crate spec stubs for all 11 planned crates (alknet-core through alknet CLI).

Key decisions resolved during self-review:
- AuthContext resolution is hybrid: endpoint resolves TLS-level auth,
  handlers resolve protocol-level auth (resolves OQ-02)
- ALPN is per-connection not per-stream, corrected ADR-001 (resolves OQ-06)
- ALPN naming uses alknet/ prefix without versions (resolves OQ-03)
- HandlerError return type on ProtocolHandler trait
- alknet/secret removed from ALPN registry until OQ-08 resolved

2026-06-15 22:14:58 +00:00

3 Commits