bascule-workspace/bascule-shell/src/governed
Tyler King b1865a0627 initial: bascule v0.1.0
Bascule shell runtime workspace — governed shell access layer
for Substrate/Guildhouse FFC deployments.

Crates:
- bascule-agent: node agent with SSH server + command filtering
- bascule-core: audit, grant engine, ceremony types, session
- bascule-filter-core: log line filtering (stdio protocol)
- bascule-gateway: OIDC auth, session management, SAT validation
- bascule-node-agent: k8s DaemonSet agent (pod watcher, BPF manager)
- bascule-proto: protobuf definitions
- bascule-shell: governed SSH shell (commands, elevation, REPL)
- bascule-tail: chronicle log tail + fanout
- ceremony-engine: ceremony lifecycle (6 types + request/resolution)

172 tests passing.
Implements SBS-SPEC-0001 shell model.
Reference impl for SPEC-SHELLOPS-0001 Layer 1 (root shell).
2026-03-18 16:40:48 -04:00
..
commands initial: bascule v0.1.0 2026-03-18 16:40:48 -04:00
ssh initial: bascule v0.1.0 2026-03-18 16:40:48 -04:00
command_trait.rs initial: bascule v0.1.0 2026-03-18 16:40:48 -04:00
executor.rs initial: bascule v0.1.0 2026-03-18 16:40:48 -04:00
manifest.rs initial: bascule v0.1.0 2026-03-18 16:40:48 -04:00
mod.rs initial: bascule v0.1.0 2026-03-18 16:40:48 -04:00
registry.rs initial: bascule v0.1.0 2026-03-18 16:40:48 -04:00
render.rs initial: bascule v0.1.0 2026-03-18 16:40:48 -04:00
session.rs initial: bascule v0.1.0 2026-03-18 16:40:48 -04:00