privatae/privatae-bastion
2
0
Fork 0
Code Issues Actions Packages Projects Releases Wiki Activity

bastion 0.58.1
ci / personal-data (push) Successful in 5s
Details
ci / test (push) Successful in 4m6s
Details
ci / fuzz (push) Failing after 2m58s
Details

Browse Source
This commit is contained in:
Privatae
2026-10-29 21:20:20 +00:00
parent 01889e2a48
commit 4a5c310482
26 changed files with 628 additions and 134 deletions
Download Patch File Download Diff File Expand all files Collapse all files
docs/context.md
+13 -5
View File
@@ -13,7 +13,11 @@ your machine, never on the platform.
Signature-verified store grants for folders you share. The host's verify key is
pinned on first sync (trust on first use) and a later key change is refused.
Every read is sandboxed to the granted path, walks no symlinks out of it, and is
audited on this machine. The vocabulary is reads plus **one write lane**: a
audited on this machine. The grant's excludes hold on every read and move: a
pattern of one name (`.ssh`, `*.key`) matches that name at any depth, and a
pattern with a `/` (`.config/gcloud`) matches that run of folders at any depth.
The bastion agent's own folder, `.agent`, which holds the plaintext of every
file the agent read, is never served or moved, whatever the grant excludes. The vocabulary is reads plus **one write lane**: a
signed move plan that you confirmed on this machine, which archives files and
never deletes them. Dropping a grant removes the grant, not your files.
**No delete op exists.**
@@ -23,7 +27,11 @@ results, read ranges and catalog cards come from the agent's sanitized text,
and each reply says how that text was sanitized: `sanitize_mode` is the mode
in the agent's manifest, `sanitized` is true only for `sterilize`, and
`sanitize_note` says what the mode leaves in. The bastion deploys the agent in
`flag` mode, which replaces e-mail addresses, phone numbers, card, bank and ID
numbers, IP and MAC addresses and keys, and does **not** find names, street
addresses or dates of birth. So a Host reading your folder through search
sees those.
`flag` mode, which replaces only what a pattern can find: e-mail addresses,
phone numbers, card numbers, US social security numbers, IBANs, US bank
routing numbers written after a word like "routing", Bitcoin addresses that
start with 1 or 3, IP and MAC addresses, private keys, and access keys and
tokens of the kinds it knows. It does **not** look for names, street
addresses, dates of birth, passport, licence and other ID numbers, other bank
account numbers or other crypto addresses. So a Host reading your folder
through search sees those.