PerishLab/ensign
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
Identity on keel: the ensign you sail under
27 commits 1 branch 0 tags 606 KiB
  • TypeScript 56.8%
  • Rust 35.7%
  • SCSS 5.7%
  • Dockerfile 0.8%
  • Shell 0.7%
  • Other 0.3%
Find a file
Exact
PerishFire e91ab261f5
All checks were successful
guard / guard (push) Successful in 3m19s
Details
api: grow a lib, so an outage can be tested instead of only observed (#27)
2026-07-21 15:46:12 +00:00
.cargo layout: four delivery planes — api, cli, web, charts (#1) 2026-07-17 03:41:43 +00:00
.forgejo/workflows chart: let the ingress carry TLS, and stop shipping a job to read a log (#23) 2026-07-21 13:04:51 +00:00
.runseal guard: the gate is global, not pinned per repo (#22) 2026-07-21 12:39:46 +00:00
apps/web web: read the outcome off a table instead of walking an if chain (#24) 2026-07-21 13:35:04 +00:00
charts/ensign chart: let the ingress carry TLS, and stop shipping a job to read a log (#23) 2026-07-21 13:04:51 +00:00
crates api: grow a lib, so an outage can be tested instead of only observed (#27) 2026-07-21 15:46:12 +00:00
deploy ship: OCI images, helm chart, :ship version train (I8) (#17) 2026-07-19 03:06:10 +00:00
docs harden: token correctness, ceremony integrity, query scrub (E3/E4/E7) (#11) 2026-07-17 07:57:12 +00:00
packages/components cli: authenticate to ensign, admin over bearer tokens (I7) (#16) 2026-07-18 14:41:58 +00:00
.gitignore tidy: gitignore .playwright-cli scratch artifacts (#13) 2026-07-17 09:17:04 +00:00
AGENTS.md layout: four delivery planes — api, cli, web, charts (#1) 2026-07-17 03:41:43 +00:00
biome.json layout: four delivery planes — api, cli, web, charts (#1) 2026-07-17 03:41:43 +00:00
Cargo.lock deps: take keel 0.4.1, so a restarted postgres stops denying identity (#26) 2026-07-21 15:33:20 +00:00
Cargo.toml deps: take keel 0.4.1, so a restarted postgres stops denying identity (#26) 2026-07-21 15:33:20 +00:00
DESIGN.md web: join/recover/portal/admin views + team claims + authorize bounce (I6) (#15) 2026-07-18 08:37:45 +00:00
docker-compose.yml conform: run the acts on real postgres (compose pg:5435) (#4) 2026-07-17 04:18:08 +00:00
keel.toml layout: four delivery planes — api, cli, web, charts (#1) 2026-07-17 03:41:43 +00:00
negentropy.toml api: grow a lib, so an outage can be tested instead of only observed (#27) 2026-07-21 15:46:12 +00:00
package.json layout: four delivery planes — api, cli, web, charts (#1) 2026-07-17 03:41:43 +00:00
pnpm-lock.yaml web: read the outcome off a table instead of walking an if chain (#24) 2026-07-21 13:35:04 +00:00
pnpm-workspace.yaml web: read the outcome off a table instead of walking an if chain (#24) 2026-07-21 13:35:04 +00:00
README.md layout: four delivery planes — api, cli, web, charts (#1) 2026-07-17 03:41:43 +00:00
runseal.toml layout: four delivery planes — api, cli, web, charts (#1) 2026-07-17 03:41:43 +00:00
vocabulary.toml layout: four delivery planes — api, cli, web, charts (#1) 2026-07-17 03:41:43 +00:00

README.md

ensign

Identity on keel: the ensign you sail under.

The first delivery product of the keel fleet — an IdP shaped by subtracting authentik down to a sovereign personal core: OIDC (code + PKCE) and forward-auth out, password + recovery codes + sudo window at the floor, everything vendor-dependent deferred.

Shape

  • crates/api — the server; the keel caller.
  • crates/cli — the client.
  • apps/web + packages/components — the web face (pnpm workspace).
  • charts/ensign — the helm delivery.