hardbound
v0.0.1
Published
Public interface surface for the hardware-bound enterprise trust tier of Web4. TypeScript interfaces an implementation must satisfy to anchor identity, vault, witness chain, and policy in TPM 2.0 / YubiKey / Secure Enclave hardware. The reference closed-s
Maintainers
Readme
hardbound (TypeScript)
Public interface surface for the hardware-bound enterprise trust tier of Web4. This package is the contract; implementations live elsewhere.
import {
TrustedKeyProvider,
SealedVault,
AttestationSigner,
OversightPolicy,
Attestation,
PolicyAction,
PolicyDecision,
HardboundError,
} from "hardbound";What this package is
Four interfaces + supporting types:
| Interface | Replaces in consumer Hestia |
|---|---|
| TrustedKeyProvider | software-derived sovereign LCT |
| SealedVault | passphrase-derived AEAD key |
| AttestationSigner | Phase-1 placeholder signer LCT |
| OversightPolicy | default-allow stub |
What this package is NOT
A working implementation. The reference (closed-source) impl lives at
metalinxx.io. Contact [email protected] for
early access.
See also
@hestia/plugin-sdk— TS SDK for plugging an agent into the OSS Hestia daemonhestiaRust crate — the daemon itselfhttps://github.com/dp-web4/hestia/blob/main/demo/enterprise/README.md— architectural pitch + integration plan
License
AGPL-3.0-or-later. Contact [email protected] if you need a permissive
license for a compatible implementation.
