Directories
¶
| Path | Synopsis |
|---|---|
|
cmd
|
|
|
innsegl
command
Command innsegl is the single binary for the innsegl backend: the MCP server, the reconciler, the segment sealer, the orphan-entry reaper and the standalone verification CLI, each selected by subcommand.
|
Command innsegl is the single binary for the innsegl backend: the MCP server, the reconciler, the segment sealer, the orphan-entry reaper and the standalone verification CLI, each selected by subcommand. |
|
internal
|
|
|
event
Package event defines the innsegl event envelope, its canonical serialization and its hash construction.
|
Package event defines the innsegl event envelope, its canonical serialization and its hash construction. |
|
ledger
Package ledger implements the innsegl hash chain: the append rule, the verification walk, and corrections by supersession (doc 02 §4, IP I4).
|
Package ledger implements the innsegl hash chain: the append rule, the verification walk, and corrections by supersession (doc 02 §4, IP I4). |
|
mcp
Package mcp is the Innsegl MCP server: the remote HTTP transport, the seam the five tools bind themselves to, and the structured error every tool returns.
|
Package mcp is the Innsegl MCP server: the remote HTTP transport, the seam the five tools bind themselves to, and the structured error every tool returns. |
|
reconciler
Package reconciler closes IP §6.5's two crash windows.
|
Package reconciler closes IP §6.5's two crash windows. |
|
rundir
Package rundir is the shipped run directory: the ledger-backed answer to "does this run exist, what is its identity, and has it been retired?".
|
Package rundir is the shipped run directory: the ledger-backed answer to "does this run exist, what is its identity, and has it been retired?". |
|
segment
Package segment seals a contiguous run of ledger events into a content-addressed object with a deterministic Merkle root, and reads that object back with the tampering check the seal exists for.
|
Package segment seals a contiguous run of ledger events into a content-addressed object with a deterministic Merkle root, and reads that object back with the tampering check the seal exists for. |
|
signing
Package signing writes the commit trailers that carry an agent run's claim, and holds the I6 gate on who a signed commit may be authored by.
|
Package signing writes the commit trailers that carry an agent run's claim, and holds the I6 gate on who a signed commit may be authored by. |
|
spire
Package spire is the SPIRE side of Innsegl: the admin client the MCP uses to create and delete one registration entry per agent run, and the workload-side credential fetch a run uses to obtain its own SVID.
|
Package spire is the SPIRE side of Innsegl: the admin client the MCP uses to create and delete one registration entry per agent run, and the workload-side credential fetch a run uses to obtain its own SVID. |
|
spire/svidprobe
command
Command svidprobe fetches the calling workload's own SVID from the SPIRE Workload API and prints the classified outcome as one line of JSON.
|
Command svidprobe fetches the calling workload's own SVID from the SPIRE Workload API and prints the classified outcome as one line of JSON. |
|
verify
Package verify performs IP §1's three checks on a signed commit, using nothing but git, Fulcio and Rekor.
|
Package verify performs IP §1's three checks on a signed commit, using nothing but git, Fulcio and Rekor. |
|
version
Package version reports the build identity of the innsegl binary.
|
Package version reports the build identity of the innsegl binary. |
|
Package migrations carries the ledger's SQL schema as embedded files.
|
Package migrations carries the ledger's SQL schema as embedded files. |
|
test
|
|
|
contract
Package contract holds the MCP tool × error-class contract matrix: doc 07 MCP-006 and MCP-010 (RM-028, #36).
|
Package contract holds the MCP tool × error-class contract matrix: doc 07 MCP-006 and MCP-010 (RM-028, #36). |
|
e2e
Package e2e holds doc 07's TC-GH cases: the two halves of I6, the one invariant this system cannot prove with cryptography.
|
Package e2e holds doc 07's TC-GH cases: the two halves of I6, the one invariant this system cannot prove with cryptography. |
|
failure
Package failure holds the cross-component failure-injection suite: the layer-F cases of doc 07 that cannot live inside the package they are about, because proving them means pulling a dependency out from under it.
|
Package failure holds the cross-component failure-injection suite: the layer-F cases of doc 07 that cannot live inside the package they are about, because proving them means pulling a dependency out from under it. |
|
load
Package load holds doc 07's TC-OPS load cases: the layer-F work that can only be observed by running the real components together for long enough that their steady state, rather than their first call, is what is measured.
|
Package load holds doc 07's TC-OPS load cases: the layer-F work that can only be observed by running the real components together for long enough that their steady state, rather than their first call, is what is measured. |
|
smoke
Package smoke holds OPS-004, the fresh-clone contract (RM-054, #62).
|
Package smoke holds OPS-004, the fresh-clone contract (RM-054, #62). |
Click to show internal directories.
Click to hide internal directories.