feat(broker): privileged broker over an authenticated local IPC boundary - #12

Merged

undeemed merged 12 commits into

mainfrom

fm/fpsm-broker-0e

Jul 28, 2026

Commits on Jul 28, 2026

feat(broker): privileged broker skeleton and authenticated local IPC boundary
undeemed
committed
030683c
no-mistakes(review): harden broker IPC boundary and fail fast on worker loss
undeemed
committed
d80ed05
no-mistakes(review): bound broker response writes; harden socket and journal paths
undeemed
committed
a04e200
no-mistakes(review): harden broker paths, bound error echoes, tag broker responses
undeemed
committed
a7e24e2
no-mistakes(review): vet all broker paths, restrict journal, scrub ACL rejection
undeemed
committed
d6620ac
no-mistakes(review): vet endpoint parents strictly; fix help flag and README
undeemed
committed
852c981
no-mistakes(review): guard socket bind/unlink, tighten endpoint parents, harden argv
undeemed
committed
181a868
no-mistakes(review): lock single broker instance before journal and socket
undeemed
committed
8b447e6
no-mistakes(review): scope broker instance lock to the private directory
undeemed
committed
2d7e068
no-mistakes(review): document XDG-scoped instance lock; fix README private dir
undeemed
committed
b44f552
no-mistakes(review): fix README systemd RuntimeDirectoryMode and parent ownership wording
undeemed
committed
b1e3873
no-mistakes(document): sync docs with privileged broker and IPC boundary
undeemed
committed
293ee78