alkssh

alkdev/alkssh

0 Fork 0

T

glm-5.3-flash 04f48ab9bc docs(research): client host-key policy resolved to a two-case policy seam

- OQ-05 resolved: known-beforehand hosts (assembly-minted/family runners)
  -> pinned, hard-decline on mismatch; unknown-beforehand hosts (rental
  fleets) -> assembly-provided HostKeyPolicy the crate calls — prompt-
  record, provider-metadata match, or learn-and-record. Crate default
  stays fail-closed reject-unknown; crate never decides trust; storage
  of learned pins is assembly detail
- auth-bridge.md: refinement postscript — no-TOFU is a no-trust-decisions-
  -in-crate rule, not pin-everything; alkminer's accept-all was the fleet-
  churn collapse, and the real anchor for ephemeral fleets is hub-held
  key material, not host pins
- reverse-runner.md §5 rewritten with the same nuance

2026-10-26 12:04:41 +00:00

.opencode/agents

docs(agents): de-alkgit the copied process scaffolding

2026-10-25 05:32:24 +00:00

docs

docs(research): client host-key policy resolved to a two-case policy seam

2026-10-26 12:04:41 +00:00

src

chore: initialize crate base (manifest, lib stub, licensing, agents)

2026-10-25 05:32:29 +00:00

tasks/architecture

docs(architecture): scaffolding + ADR-001 (alk/ssh ALPN pin, Proposed)