alkdev/alkssh

0 Fork 0

Files

T

glm-5.3-flash 4d4da6651c docs(architecture): ADR-002 amended — rsa off, ed25519-first (review revert)

- enabling the rsa feature is reverted: no other family location uses
  RSA, ed25519 is the suggested path everywhere; the tree drops
  rsa 0.10.0-rc.18 + pkcs1 0.8.0-rc.4 entirely (verified: aws-lc-rs-only
  scratch build clean and RC-free except ssh-key =0.7.0-rc.11, which
  russh exact-pins itself on the russh::keys path)
- RSA user keys decline fail-closed (russh fails RSA signing explicitly
  when the feature is absent — 0.63.2 fix); assembly registration policy
  (alkforge: register ed25519) noted as assembler territory
- README ADR table title updated

2026-10-26 14:12:27 +00:00

3.0 KiB

Raw Blame History

status, last_updated

status	last_updated
draft	2026-10-26

Architecture index

Current State

Phase 1 (architecture) — in progress. Phase 0 is closed: all three POCs passed (121 checks; docs/research/poc-{1,2,3}-*.md) and the research docs record their corrections. This directory is being populated: ADR-001 (the alk/ssh ALPN pin) is drafted for review, the OQ tracker is seeded from the POC findings, and the spec documents below are being written. No implementation until specs reach reviewed (per docs/sdd_process.md).

Architecture Documents

Document	Status	Scope
open-questions.md	draft	Centralized OQ tracker (seeded from phase 0 findings)
decisions/001	Proposed	The `alk/ssh` ALPN pin (ledger rule 1)

Planned documents (not yet written)

Planned doc	Scope
`overview.md`	Crate purpose, exports, dependency posture, bounded-resources policy
`mapping.md`	The spine — server-direction channel-type/request→family-seam rows (absorbs the validated `mapping-table.md`)
`client.md`	Client-direction surface: dial rows, the forwarded-channel acceptor, reverse-runner shape
`auth.md`	Server auth bridge + client-side vault key custody

ADR Table

ADR	Title	Status
ADR-001	The `alk/ssh` ALPN pin — edge-termination contract for `SshAdapter`	Accepted
ADR-002	The russh pin — 0.65.0, aws-lc-rs, no compression, ed25519-only	Accepted
ADR-003	The capability feature graph — flat, independent, two-direction	Accepted
ADR-004	Auth dispositions — publickey-only, fail-closed, fingerprint identity	Accepted
ADR-005	At-rest key custody — vault-wrapped OpenSSH-PEM, decrypt-at-use	Accepted

Open Questions

Tracked in open-questions.md — OQ-01 … OQ-13, seeded from the phase 0 POC findings and research docs.

Document Lifecycle

Status	Meaning	Transitions
`draft`	Under active development; may change significantly	→ `reviewed` when its open questions are resolved
`reviewed`	Final; implementation may begin; changes require review	→ `stable` when implementation is complete and verified
`stable`	Locked; changes require review and may warrant an ADR	→ `deprecated` when superseded
`deprecated`	Superseded; kept for reference	Removed when unreferenced

References

docs/sdd_process.md — the SDD process
docs/research/ — phase 0 (vision, POC plans + findings, russh inventory, auth bridge, mapping table, reverse-runner extraction)
Family: /workspace/@alkdev/alkfamily/docs/architecture/decisions/001..003 (ADR-003 is the alkssh structural decision)
Sibling: alkcall ADRs 002/004/009/034/042/051, alkhttp ADR-014/016/073-analogs

3.0 KiB Raw Blame History