No description

Find a file

Snider 13b459a361 Some checks failed Security Scan / security (push) Failing after 9s Details Test / test (push) Failing after 3m51s Details fix: update stale import paths and dependency versions from extraction Resolve stale forge.lthn.ai/core/cli v0.1.0 references (tag never existed, earliest is v0.0.1) and regenerate go.sum via workspace-aware go mod tidy. Co-Authored-By: Virgil <virgil@lethean.io>		2026-03-14 13:38:59 +00:00
.core	chore: add .core/ build and release configs	2026-03-06 18:52:36 +00:00
.forgejo/workflows	ci: add Forgejo Actions test and security scan workflows	2026-02-23 03:28:02 +00:00
auth	refactor: swap pkg/{io,log,i18n} imports to go-io/go-log/go-i18n	2026-03-06 12:35:41 +00:00
cmd	refactor: migrate cobra → cli.Command, update CLAUDE.md	2026-03-13 13:42:49 +00:00
crypt	security: use constant-time comparison for auth credentials	2026-03-09 08:27:38 +00:00
docs	docs: add human-friendly documentation	2026-03-11 13:02:40 +00:00
trust	chore: fmt.Errorf(static) → errors.New	2026-02-24 16:30:08 +00:00
.editorconfig	chore: add Go repo norms (badges, contributing, lint, taskfile, editorconfig)	2026-02-23 06:45:33 +00:00
.golangci.yml	chore: add Go repo norms (badges, contributing, lint, taskfile, editorconfig)	2026-02-23 06:45:33 +00:00
CLAUDE.md	refactor: migrate cobra → cli.Command, update CLAUDE.md	2026-03-13 13:42:49 +00:00
CONTRIBUTING.md	chore: add Go repo norms (badges, contributing, lint, taskfile, editorconfig)	2026-02-23 06:45:33 +00:00
go.mod	fix: update stale import paths and dependency versions from extraction	2026-03-14 13:38:59 +00:00
go.sum	fix: update stale import paths and dependency versions from extraction	2026-03-14 13:38:59 +00:00
README.md	chore: add Go repo norms (badges, contributing, lint, taskfile, editorconfig)	2026-02-23 06:45:33 +00:00

README.md

go-crypt

Cryptographic primitives, authentication, and trust policy engine for the Lethean agent platform. Provides symmetric encryption (ChaCha20-Poly1305 and AES-256-GCM with Argon2id KDF), OpenPGP challenge-response authentication with online and air-gapped courier modes, Argon2id password hashing, RSA-OAEP key generation, RFC-0004 deterministic content hashing, and a three-tier agent trust policy engine with an audit log and approval queue.

Module: forge.lthn.ai/core/go-crypt Licence: EUPL-1.2 Language: Go 1.25

Quick Start

import (
    "forge.lthn.ai/core/go-crypt/crypt"
    "forge.lthn.ai/core/go-crypt/auth"
    "forge.lthn.ai/core/go-crypt/trust"
)

// Encrypt with ChaCha20-Poly1305 + Argon2id KDF
ciphertext, err := crypt.Encrypt(plaintext, passphrase)

// OpenPGP authentication
a := auth.New(medium, auth.WithSessionStore(auth.NewSQLiteSessionStore(dbPath)))
session, err := a.Login(userID, password)

// Trust policy evaluation
engine := trust.NewPolicyEngine(registry)
decision := engine.Evaluate("Charon", "repo.push", "core/go-crypt")

Documentation

Architecture — crypt primitives, auth protocol, trust tiers, policy engine
Development Guide — building, testing, security standards
Project History — completed phases and known limitations

Build & Test

go test ./...
go test -race ./...
go build ./...

Licence

European Union Public Licence 1.2 — see LICENCE for details.