SSH proxy + governance: ShellClass, ceremony, breach, delegation (Rust)
ece4e2349f
Add breach evaluator that compares posture changes against active sessions and applies BreachResponse policy: - LogOnly/AlertDelegates: log, no session enforcement - ReducePosture: downgrade System -> Application, session continues - SuspendTrust: terminate session immediately - RevokeAccord: terminate session, Accord dead Posture change detection via 30s polling loop on posture-current ConfigMap (matching existing reaper interval pattern). No mid-session upgrade — downgrade only, upgrade requires new ceremony. 9 unit tests for breach evaluation covering all BreachResponse variants. Signed-off-by: Tyler King <tking@guildhouse.dev> Signed-off-by: Tyler J King <tking727@gmail.com> |
||
|---|---|---|
| bascule-agent | ||
| bascule-core | ||
| bascule-filter-core | ||
| bascule-gateway | ||
| bascule-node-agent | ||
| bascule-proto | ||
| bascule-shell | ||
| bascule-tail | ||
| ceremony-engine | ||
| proto/bascule/v1 | ||
| .gitignore | ||
| Cargo.lock | ||
| Cargo.toml | ||