mara/hyperhive
mara/hyperhive
Watch
0
0
Fork
You've already forked hyperhive
 0
Code Activity

docs: the trust-boundary pages keep the operator guidance, the mechanism moves to implementation

Browse source 
boundary.md keeps the model, the design rule, why network isolation
matters and host admin socket access; the hive-priv socket activation and
the per-agent socket directory move to 4-implementation/trust-boundary.
security.md keeps the agent trust model and the path-name rule; the nix
builds mode with its threat model, and the hive-c0re privilege separation,
move to their own pages there. Headings and text move as they were, with
one level shaved off the heading depth. Links, code and nix pointers, and
the docs index follow the moves.
This commit is contained in:
iris 2026-11-06 19:07:29 +01:00 • committed by mara
commit 30a8f71bb5
1 changed files with 338 additions and 307 deletions
Download patch file Download diff file Expand all files Collapse all files

2
hive-priv-sock/README.md
View file

@ -17,5 +17,5 @@ admin socket.
Serde-derived request/response types only — no server or client logic. Both
sides import them so the shapes stay in sync. See `docs/2-handbook/trust-boundary/boundary.md` +
`docs/2-handbook/trust-boundary/security.md` for the privilege boundary these types sit on, and
`docs/4-implementation/trust-boundary/hive-c0re-privilege.md` for the privilege boundary these types sit on, and
`hive-priv/README` for the helper itself.