decern good first issues (Rust)

SPIFFE JWT-SVID verification is ES256-only, which locks out RSA-signed SVIDs about 1 month ago

help wanted

0

Proven authorization: a deterministic kernel whose safety invariants are machine-checked over every input, with a tamper-evident decision ledger. Apache-2.0, pure Rust.

Rust

ext_authz adapter: refuse a duplicated subject header instead of choosing one about 1 month ago

good first issue

anivar/decern

0

Proven authorization: a deterministic kernel whose safety invariants are machine-checked over every input, with a tamper-evident decision ledger. Apache-2.0, pure Rust.

Rust

A runnable example for sender-constrained caller authentication about 1 month ago

help wanted

anivar/decern

0

Proven authorization: a deterministic kernel whose safety invariants are machine-checked over every input, with a tamper-evident decision ledger. Apache-2.0, pure Rust.

Rust

Import an existing directory (Okta/Auth0/OpenFGA/AWS IAM) into decern's graph, conservatively about 1 month ago

help wanted

anivar/decern

0

Proven authorization: a deterministic kernel whose safety invariants are machine-checked over every input, with a tamper-evident decision ledger. Apache-2.0, pure Rust.

Rust

Mission APIs in the client SDKs about 1 month ago

help wanted

anivar/decern

0

Proven authorization: a deterministic kernel whose safety invariants are machine-checked over every input, with a tamper-evident decision ledger. Apache-2.0, pure Rust.

Rust

ext_authz adapter: house-voice README pass and a cargo deny step about 1 month ago

help wanted good first issue

anivar/decern

0

Proven authorization: a deterministic kernel whose safety invariants are machine-checked over every input, with a tamper-evident decision ledger. Apache-2.0, pure Rust.

Rust

AuthZEN metadata discovery: access_evaluation_endpoint about 1 month ago

help wanted

anivar/decern

0

Proven authorization: a deterministic kernel whose safety invariants are machine-checked over every input, with a tamper-evident decision ledger. Apache-2.0, pure Rust.

Rust

Authority-graph export: DOT and Mermaid renderings of the directory about 1 month ago

help wanted

anivar/decern

0

Proven authorization: a deterministic kernel whose safety invariants are machine-checked over every input, with a tamper-evident decision ledger. Apache-2.0, pure Rust.

Rust

asserted_by on mission lifecycle records about 1 month ago

help wanted

anivar/decern

0

Proven authorization: a deterministic kernel whose safety invariants are machine-checked over every input, with a tamper-evident decision ledger. Apache-2.0, pure Rust.

Rust

Annotate the builtin model's policies with @id about 1 month ago

help wanted

anivar/decern

0

Proven authorization: a deterministic kernel whose safety invariants are machine-checked over every input, with a tamper-evident decision ledger. Apache-2.0, pure Rust.

Rust

Bound the subject-audit scan, which holds the append lock about 1 month ago

help wanted

anivar/decern

0

Proven authorization: a deterministic kernel whose safety invariants are machine-checked over every input, with a tamper-evident decision ledger. Apache-2.0, pure Rust.

Rust

SDK clients can send a bearer token about 1 month ago

help wanted

anivar/decern

0

Proven authorization: a deterministic kernel whose safety invariants are machine-checked over every input, with a tamper-evident decision ledger. Apache-2.0, pure Rust.

Rust

Record the asserting caller on the decision record about 1 month ago

help wanted

anivar/decern

0

Proven authorization: a deterministic kernel whose safety invariants are machine-checked over every input, with a tamper-evident decision ledger. Apache-2.0, pure Rust.

Rust

Make the standards registry say when a claim was last checked against the spec about 1 month ago

help wanted good first issue

anivar/decern

0

Proven authorization: a deterministic kernel whose safety invariants are machine-checked over every input, with a tamper-evident decision ledger. Apache-2.0, pure Rust.

Rust

crates.io trusted publishing: nine publisher entries, no stored token about 1 month ago

help wanted

anivar/decern

0

Proven authorization: a deterministic kernel whose safety invariants are machine-checked over every input, with a tamper-evident decision ledger. Apache-2.0, pure Rust.

Rust

examples/mcp: an MCP server that consults decern before it runs a tool about 1 month ago

help wanted

anivar/decern

0

Proven authorization: a deterministic kernel whose safety invariants are machine-checked over every input, with a tamper-evident decision ledger. Apache-2.0, pure Rust.

Rust

decern-serve: validate the bearer token, and bind it to this server as audience about 1 month ago

help wanted

anivar/decern

0

Proven authorization: a deterministic kernel whose safety invariants are machine-checked over every input, with a tamper-evident decision ledger. Apache-2.0, pure Rust.

Rust

A worked example for each thing decern can prove about 1 month ago

help wanted good first issue

anivar/decern

0

Proven authorization: a deterministic kernel whose safety invariants are machine-checked over every input, with a tamper-evident decision ledger. Apache-2.0, pure Rust.

Rust

Make the builds reproducible, or say why they cannot be about 1 month ago

help wanted

anivar/decern

0

Proven authorization: a deterministic kernel whose safety invariants are machine-checked over every input, with a tamper-evident decision ledger. Apache-2.0, pure Rust.

Rust

Fail the build when a link in the docs points at nothing about 1 month ago

help wanted good first issue

anivar/decern

0

Proven authorization: a deterministic kernel whose safety invariants are machine-checked over every input, with a tamper-evident decision ledger. Apache-2.0, pure Rust.

Rust

Verify a release without trusting us: a script that checks signatures and provenance about 1 month ago

help wanted good first issue

anivar/decern

0

Proven authorization: a deterministic kernel whose safety invariants are machine-checked over every input, with a tamper-evident decision ledger. Apache-2.0, pure Rust.

Rust

Enforcement adapter: put decern behind an HTTP/gRPC gateway about 1 month ago

help wanted

anivar/decern

0

Proven authorization: a deterministic kernel whose safety invariants are machine-checked over every input, with a tamper-evident decision ledger. Apache-2.0, pure Rust.

Rust

Anchoring for sharded deployments about 1 month ago

enhancement help wanted

anivar/decern

0

Proven authorization: a deterministic kernel whose safety invariants are machine-checked over every input, with a tamper-evident decision ledger. Apache-2.0, pure Rust.

Rust

decern anchor: fetch and store a published tree head about 1 month ago

enhancement help wanted

anivar/decern

0

Proven authorization: a deterministic kernel whose safety invariants are machine-checked over every input, with a tamper-evident decision ledger. Apache-2.0, pure Rust.

Rust

SDKs buffer an unbounded error body before truncating the preview about 1 month ago

enhancement help wanted good first issue

anivar/decern

0

Proven authorization: a deterministic kernel whose safety invariants are machine-checked over every input, with a tamper-evident decision ledger. Apache-2.0, pure Rust.

Rust

SDK: a Go client for the AuthZEN PDP about 2 months ago

help wanted good first issue

anivar/decern

0

Proven authorization: a deterministic kernel whose safety invariants are machine-checked over every input, with a tamper-evident decision ledger. Apache-2.0, pure Rust.

Rust

CLI: verify a ledger file against an external anchor about 2 months ago

help wanted

anivar/decern

0

Proven authorization: a deterministic kernel whose safety invariants are machine-checked over every input, with a tamper-evident decision ledger. Apache-2.0, pure Rust.

Rust

Real-time revocation + a signed kill-switch feed about 2 months ago

enhancement help wanted

anivar/decern

0

Proven authorization: a deterministic kernel whose safety invariants are machine-checked over every input, with a tamper-evident decision ledger. Apache-2.0, pure Rust.

Rust

Authority-graph tooling: revocation blast-radius + graph export about 2 months ago

enhancement help wanted

anivar/decern

0

Proven authorization: a deterministic kernel whose safety invariants are machine-checked over every input, with a tamper-evident decision ledger. Apache-2.0, pure Rust.

Rust

`decern explain` — a "why" for any decision about 2 months ago

enhancement help wanted

anivar/decern

0

Proven authorization: a deterministic kernel whose safety invariants are machine-checked over every input, with a tamper-evident decision ledger. Apache-2.0, pure Rust.

Rust

Expand README with a getting-started walkthrough about 2 months ago

documentation good first issue

anivar/decern

0

Proven authorization: a deterministic kernel whose safety invariants are machine-checked over every input, with a tamper-evident decision ledger. Apache-2.0, pure Rust.

Rust

TypeScript client SDK for the /decide PDP about 2 months ago

help wanted sdk

anivar/decern

0

Proven authorization: a deterministic kernel whose safety invariants are machine-checked over every input, with a tamper-evident decision ledger. Apache-2.0, pure Rust.

Rust

Python client SDK for the /decide PDP about 2 months ago

help wanted sdk

anivar/decern

0

Proven authorization: a deterministic kernel whose safety invariants are machine-checked over every input, with a tamper-evident decision ledger. Apache-2.0, pure Rust.

Rust

Add a negative-control test for each of the 9 invariants about 2 months ago

good first issue proof testing

anivar/decern

0

Proven authorization: a deterministic kernel whose safety invariants are machine-checked over every input, with a tamper-evident decision ledger. Apache-2.0, pure Rust.

Rust

anivar/decern

Open Issues Need Help