feat: Phase 1 close-out + Phase 2 SOPS stubs + protocol v1 reconciliation by reverb256 · Pull Request #3 · reverb256/secretspec-provider-sops

docs: 2026-07-23 verification sweep audit (no new findings)

reverb256

committed

ci: add secretspec check --profile production step

reverb256

committed

chore(gitignore): ignore fixtures/*.key defense-in-depth

reverb256

committed

docs: 2026-07-23 lib.fakeHash SRI upstream precondition check (deferred)

reverb256

committed

feat(ci+fixtures): provider-rust end-to-end SOPS bridge \u2014 plaintext fixture + ci step

reverb256

committed

docs: tighten lib.fakeHash SRI audit ledger entry + apply Recommended next step

reverb256

committed

docs: draft cachix/secretspec PR body in cachix-pr-body.md + cross-reference from CONTEXT.md

reverb256

committed

docs(pr-body): correct test-count breakdown in cachix-pr-body.md

reverb256

committed

docs(context): align verification-sweep test-count with knowledge.md canonical

reverb256

committed

docs(context+knowledge): record lib.fakeHash SRI fallback application

reverb256

committed

fix(workflows): correct dtolnay/rust-toolchain action ref @1.78 -> @master

reverb256

committed

fix(ci): wrap inline-`$VAR`-quoted `run:` scalars in YAML single quotes

reverb256

committed

fix(workflows): pass toolchain+components via `with:` to dtolnay/rust-toolchain

reverb256

committed

fix(ci): drop nixpkgs#age-keygen (legacy attr; sub-binary of nixpkgs#age)

reverb256

committed

style(provider-rust): cargo fmt --check pass (manual transform)

reverb256

committed

style(provider-rust): cargo fmt --check pass (rustfmt 1.78.0 auto-format)

reverb256

committed

fix(deps): pin clap to ~4.5.0 to suppress clap_derive edition2024 on rust 1.78

reverb256

committed

chore: vendor cachix/secretspec#98 protocol-v1 spec for reference

reverb256

committed

feat(protocol): NDJSON request/response types for cachix/secretspec#98

reverb256

committed

feat(plugin): rewrite src/main.rs as NDJSON protocol dispatcher

reverb256

committed

refactor: remove SopsFileProvider SCAFFOLD (superseded by NDJSON plugin)

reverb256

committed

fix(deps): drop clap dependency (kills clap_lex 1.1.0 edition2024 transitive)

reverb256

committed

test(protocol): subprocess-driven Hello/Get/Bye round-trip integration

reverb256

committed

chore: cleanup main.rs + SetRequest per code-reviewer feedback

reverb256

committed

fix(deps): pin indexmap to 2.10.0 (last edition2021 release)

reverb256

committed

fix: add pub mod protocol declaration + tokio io-util feature

reverb256

committed

fix(protocol): close Response::hello helper brace properly

reverb256

committed

fix(test): close .into() call inside get_response_serializes_string_for_hit

reverb256

committed

test(protocol): add diagnostic failure messages + clean-room syntax repair

reverb256

committed

feat: Domen #1+#2 — credentials chain + URI/redaction + cli binary

reverb256

committed

feat: protocol.rs ↔ schema.json reconciliation (v1 conformance)

reverb256

committed

feat: Phase 2 SOPS target stubs (9 per-category files)

reverb256

committed

feat: secretspec runtime recipe + bootstrap regression guard

reverb256

committed

fix: CI gate — fmt + clippy + clap 4.6.4 test alignment

reverb256

committed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

feat: Phase 1 close-out + Phase 2 SOPS stubs + protocol v1 reconciliation - #3

feat: Phase 1 close-out + Phase 2 SOPS stubs + protocol v1 reconciliation#3
reverb256 wants to merge 34 commits into
mainfrom
feat/close-out-phase-1-2

Commits on Jul 23, 2026

docs: 2026-07-23 verification sweep audit (no new findings)

ci: add secretspec check --profile production step

chore(gitignore): ignore fixtures/*.key defense-in-depth

docs: 2026-07-23 lib.fakeHash SRI upstream precondition check (deferred)

feat(ci+fixtures): provider-rust end-to-end SOPS bridge \u2014 plaintext fixture + ci step

docs: tighten lib.fakeHash SRI audit ledger entry + apply Recommended next step

docs: draft cachix/secretspec PR body in cachix-pr-body.md + cross-reference from CONTEXT.md

docs(pr-body): correct test-count breakdown in cachix-pr-body.md

docs(context): align verification-sweep test-count with knowledge.md canonical

docs(context+knowledge): record lib.fakeHash SRI fallback application

fix(workflows): correct dtolnay/rust-toolchain action ref @1.78 -> @master

fix(ci): wrap inline-`$VAR`-quoted `run:` scalars in YAML single quotes

fix(workflows): pass toolchain+components via `with:` to dtolnay/rust-toolchain

fix(ci): drop nixpkgs#age-keygen (legacy attr; sub-binary of nixpkgs#age)

style(provider-rust): cargo fmt --check pass (manual transform)

style(provider-rust): cargo fmt --check pass (rustfmt 1.78.0 auto-format)

fix(deps): pin clap to ~4.5.0 to suppress clap_derive edition2024 on rust 1.78

chore: vendor cachix/secretspec#98 protocol-v1 spec for reference

feat(protocol): NDJSON request/response types for cachix/secretspec#98

feat(plugin): rewrite src/main.rs as NDJSON protocol dispatcher

refactor: remove SopsFileProvider SCAFFOLD (superseded by NDJSON plugin)

fix(deps): drop clap dependency (kills clap_lex 1.1.0 edition2024 transitive)

test(protocol): subprocess-driven Hello/Get/Bye round-trip integration

chore: cleanup main.rs + SetRequest per code-reviewer feedback

fix(deps): pin indexmap to 2.10.0 (last edition2021 release)

fix: add pub mod protocol declaration + tokio io-util feature

fix(protocol): close Response::hello helper brace properly

fix(test): close .into() call inside get_response_serializes_string_for_hit

test(protocol): add diagnostic failure messages + clean-room syntax repair

feat: Domen #1+#2 — credentials chain + URI/redaction + cli binary

feat: protocol.rs ↔ schema.json reconciliation (v1 conformance)

feat: Phase 2 SOPS target stubs (9 per-category files)

feat: secretspec runtime recipe + bootstrap regression guard

fix: CI gate — fmt + clippy + clap 4.6.4 test alignment