Cybersecurity-Projects

Commit Graph

Author	SHA1	Message	Date
CarterPerez-dev	a19e8669d2	feat(demo): Tier 1 zero-deps demo + Tier 2 docker-compose scaffold Tier 1 (cre demo): in-memory SQLite + tempfile .env rotator. Walks through inventory -> before -> 4-step rotation -> after -> audit chain verify. Narrates every step event live with green/red glyphs. Runs in under 1 second on commodity hardware, no external deps. Tier 2 (docker/docker-compose.yml): postgres:16, localstack (secretsmanager), hashicorp/vault dev mode, plus a fake-GitHub Flask app that mocks /user, POST/DELETE /user/personal-access-tokens. config/demo-full.cr.example documents env vars for the full stack. Also fixed env_file rotator newline preservation (lines(chomp: true) + explicit \n join) so the rotated file is properly delimited.	2026-04-29 01:16:08 -04:00
CarterPerez-dev	5971cbd33e	feat(persistence): PostgreSQL adapter with append-only audit trigger - All 4 repos mirror the SQLite contracts using PG-native types (UUID, BYTEA, JSONB, BIGSERIAL, TIMESTAMPTZ, SMALLINT) - audit_no_modify() trigger refuses UPDATE/DELETE/TRUNCATE on audit_events - pg_advisory_xact_lock for cross-process row locking - Integration tests verify trigger fires correctly on tamper attempt - Test cleanup helper temporarily disables trigger to reset between specs - 4 integration specs all green against PostgreSQL 16	2026-04-29 00:39:53 -04:00
CarterPerez-dev	8ebdd3fee7	feat(cre): source tree skeleton with empty module dirs and CI workflow - src/cre.cr entry point + version.cr - Empty module dirs: cli, tui, engine, events, rotators, policy, audit, crypto, persistence, notifiers, compliance, config, domain, aws, vault, github, demo - spec/ unit + integration + fixtures structure mirroring src/ - spec_helper.cr with stdlib spec + cre require - GitHub Actions CI: format, unit matrix (Crystal 1.19/1.20/nightly x ubuntu/macos), integration with PG service, build job	2026-04-28 23:54:59 -04:00

Author

SHA1

Message

Date

CarterPerez-dev

a19e8669d2

feat(demo): Tier 1 zero-deps demo + Tier 2 docker-compose scaffold

Tier 1 (cre demo): in-memory SQLite + tempfile .env rotator. Walks
through inventory -> before -> 4-step rotation -> after -> audit chain
verify. Narrates every step event live with green/red glyphs. Runs in
under 1 second on commodity hardware, no external deps.

Tier 2 (docker/docker-compose.yml): postgres:16, localstack
(secretsmanager), hashicorp/vault dev mode, plus a fake-GitHub Flask
app that mocks /user, POST/DELETE /user/personal-access-tokens.
config/demo-full.cr.example documents env vars for the full stack.

Also fixed env_file rotator newline preservation (lines(chomp: true)
+ explicit \n join) so the rotated file is properly delimited.

2026-04-29 01:16:08 -04:00

CarterPerez-dev

5971cbd33e

feat(persistence): PostgreSQL adapter with append-only audit trigger

- All 4 repos mirror the SQLite contracts using PG-native types
  (UUID, BYTEA, JSONB, BIGSERIAL, TIMESTAMPTZ, SMALLINT)
- audit_no_modify() trigger refuses UPDATE/DELETE/TRUNCATE on audit_events
- pg_advisory_xact_lock for cross-process row locking
- Integration tests verify trigger fires correctly on tamper attempt
- Test cleanup helper temporarily disables trigger to reset between specs
- 4 integration specs all green against PostgreSQL 16

2026-04-29 00:39:53 -04:00

CarterPerez-dev

8ebdd3fee7

feat(cre): source tree skeleton with empty module dirs and CI workflow

- src/cre.cr entry point + version.cr
- Empty module dirs: cli, tui, engine, events, rotators, policy, audit, crypto, persistence, notifiers, compliance, config, domain, aws, vault, github, demo
- spec/ unit + integration + fixtures structure mirroring src/
- spec_helper.cr with stdlib spec + cre require
- GitHub Actions CI: format, unit matrix (Crystal 1.19/1.20/nightly x ubuntu/macos), integration with PG service, build job

2026-04-28 23:54:59 -04:00

3 Commits