feat: integrate Arti with Jerboa SQLite storage #1

Merged

ober merged 72 commits from feat/tor-everywhere into master 2026-09-23 16:51:28 -04:00

Conversation 0 Commits 72 Files changed 55 +10439 -2193

ober commented 2026-09-23 14:23:47 -04:00

Owner

Copy link

Implements the Arti fork integration with Jerboa SQLite as the only persistent storage backend.

Highlights:

• Adds the vendored Arti storage seam and fail-closed Jerboa SQLite store adapter.
• Adds authenticated, private Unix IPC for the Jerboa SQLite service and supervised storage proxy.
• Adds authenticated Arti stream IPC with bounded requests, stream quotas, and capability checks.
• Routes Jerboa transport/client adapters through explicit fail-closed capability callbacks.
• Adds persistent consensus/authcert/microdesc storage tests, tombstone deletion coverage, and restart checks.
• Adds dependency/artifact policy audits and capability evidence documentation.
• Bumps the synchronized project version to 0.2.0.

Verification:

• make test
• make check-deps
• make check-artifacts
• make binary
• python3 tests/storage-service.py ./jtor
• python3 tests/storage-proxy.py
• python3 tests/engine-ipc.py

Known blocked capability gates remain explicitly disabled in config/capabilities.json: production-reviewed Rust-only TLS, complete Arti Store expiry/recommendation coverage, controlled Tor network canary, onion service/key manager integration, and directory/descriptor parser wiring.

Implements the Arti fork integration with Jerboa SQLite as the only persistent storage backend. Highlights: - Adds the vendored Arti storage seam and fail-closed Jerboa SQLite store adapter. - Adds authenticated, private Unix IPC for the Jerboa SQLite service and supervised storage proxy. - Adds authenticated Arti stream IPC with bounded requests, stream quotas, and capability checks. - Routes Jerboa transport/client adapters through explicit fail-closed capability callbacks. - Adds persistent consensus/authcert/microdesc storage tests, tombstone deletion coverage, and restart checks. - Adds dependency/artifact policy audits and capability evidence documentation. - Bumps the synchronized project version to 0.2.0. Verification: - `make test` - `make check-deps` - `make check-artifacts` - `make binary` - `python3 tests/storage-service.py ./jtor` - `python3 tests/storage-proxy.py` - `python3 tests/engine-ipc.py` Known blocked capability gates remain explicitly disabled in `config/capabilities.json`: production-reviewed Rust-only TLS, complete Arti Store expiry/recommendation coverage, controlled Tor network canary, onion service/key manager integration, and directory/descriptor parser wiring.

ober added 20 commits 2026-09-23 14:23:47 -04:00

fix: harden policy and transactional tombstones 866b194ff1

fix: report configuration validation status 0e7b764852

feat: persist Arti certificates and microdescriptors externally 011d2831b9

fix: fail closed when storage expiry is unavailable 8c6d15ae9b

feat: run authenticated engine IPC listener 8480c1b5e8

feat: supervise Jerboa SQLite over Unix IPC 80a7a81413

feat: connect Arti streams to authenticated engine IPC 9ae472fa97

test: cover the Arti-enabled engine build 0f56fc405a

fix: forbid unconfigured Arti storage paths 6d3fec1544

feat: complete consensus promotion and deletion paths 61e26bcea1

fix: preserve consensus flavor during promotion 57de7ab862

fix: batch Arti storage mutations transactionally 7733643a25

fix: keep storage batch API portable ebdaff65ce

docs: update capability evidence for engine integration 3b077a4804

docs: record external storage integration status bc0b84297e

fix: enforce stream and request quotas in Arti IPC 96cafacd7c

feat: route Jerboa transport through authenticated capabilities 3cb9a5ad52

fix: require an explicit readiness capability cb7068c399

test: cover persistent tombstone deletion aac90ea8ab

chore: bump version to 0.2.0 2c95cf463f

ober added 6 commits 2026-09-23 14:31:44 -04:00

fix: harden state root and document adapter gates af8f6e8df8

feat: validate onion targets and wire parser policy 9f6a634069

test: prove dependency policy rejects forbidden native crates 61fc19fdaa

test: cover symlinked state roots 1745321d76

feat: persist Arti protocol recommendations fd203e2340

feat: complete bounded Arti stream operations a31532762e

ober added 1 commit 2026-09-23 14:33:09 -04:00

test: compile the Arti onion client feature a15910ec76

ober added 1 commit 2026-09-23 14:34:34 -04:00

build: exclude vendored Arti workspace members dd1e1429ea

ober added 1 commit 2026-09-23 14:37:26 -04:00

chore: remove obsolete storage fallback helper 874c5f2d25

ober added 1 commit 2026-09-23 14:42:25 -04:00

feat: add bounded storage prefix scans for expiry 453740d01b

ober added 1 commit 2026-09-23 14:43:46 -04:00

fix: filter bounded storage scans safely b36a51aa9e

ober added 1 commit 2026-09-23 14:45:15 -04:00

feat: retain expiry metadata for Arti documents f5e6ebabc3

ober added 1 commit 2026-09-23 14:48:26 -04:00

fix: bound storage prefix scans ea05816532

ober added 1 commit 2026-09-23 14:49:01 -04:00

docs: refresh storage capability gate 0dab33dc02

ober added 1 commit 2026-09-23 14:52:40 -04:00

feat: add opt-in RustCrypto TLS provider 32b6b8c031

ober added 1 commit 2026-09-23 14:53:43 -04:00

fix: install TLS provider once per engine 1ef1870b68

ober added 1 commit 2026-09-23 14:57:04 -04:00

fix: require storage authentication per connection d776405c69

ober added 1 commit 2026-09-23 14:57:33 -04:00

docs: clarify client capability evidence 0e3bbccb1f

ober added 1 commit 2026-09-23 14:58:11 -04:00

docs: specify storage connection authentication 2a14f1eccc

ober added 1 commit 2026-09-23 14:59:22 -04:00

feat: expose fail-closed connect and onion commands 30335f7184

ober added 1 commit 2026-09-23 15:00:41 -04:00

test: add opt-in Arti bootstrap canary 04d5724f4e

ober added 1 commit 2026-09-23 15:01:50 -04:00

build: add explicit Arti canary target adfb7eaf32

ober added 1 commit 2026-09-23 15:02:19 -04:00

docs: record onion service storage seam 121530c445

ober added 1 commit 2026-09-23 15:03:34 -04:00

test: include leak and sandbox checks 31c07356b1

ober added 1 commit 2026-09-23 15:04:45 -04:00

build: generate reproducible cargo SBOM fe81abccff

ober added 1 commit 2026-09-23 15:05:07 -04:00

test: verify SBOM generation in default target 6f41939a8f

ober added 1 commit 2026-09-23 15:05:46 -04:00

fix: include audited feature graphs in SBOM 82877a9a9a

ober added 1 commit 2026-09-23 15:07:12 -04:00

test: assert Arti connection fails closed without storage b04f6495be

ober added 1 commit 2026-09-23 15:09:45 -04:00

docs: record pure-rust directory compression choice 5e6f4639ec

ober added 1 commit 2026-09-23 15:16:03 -04:00

fix: bound directory decompression expansion fe5df77b20

ober added 1 commit 2026-09-23 15:20:40 -04:00

feat: add Arti hostile document parser seam f24071231a

ober added 1 commit 2026-09-23 15:31:38 -04:00

feat: install pinned WASM directory parser 22d16e2c78

ober added 1 commit 2026-09-23 15:37:16 -04:00

feat: validate original document spans in WASM guest c062e8cf16

ober added 2 commits 2026-09-23 15:41:57 -04:00

fix: reject ambiguous numeric destinations 4fa1db8900

feat: bound typed document parser records 0eb43d0839

ober added 1 commit 2026-09-23 15:44:46 -04:00

chore: remove WASM guest build warnings 3570d3705a

ober added 1 commit 2026-09-23 15:46:39 -04:00

fix: require private IPC socket directories 3f500d217c

ober added 1 commit 2026-09-23 15:50:05 -04:00

feat: require WASM parsing before Arti stream dials c3ac0db42e

ober added 1 commit 2026-09-23 15:52:15 -04:00

fix: bound Arti stream operations by deadlines 77c4b23ffb

ober added 1 commit 2026-09-23 15:54:47 -04:00

fix: exclude filesystem state from release builds 3ae6bcea6a

ober added 1 commit 2026-09-23 15:56:46 -04:00

fix: enforce private Arti socket parent f911dab0a5

ober added 1 commit 2026-09-23 15:59:27 -04:00

fix: enforce Tor policy before capability dials 99846e3b51

ober added 1 commit 2026-09-23 16:01:54 -04:00

fix: enforce hostname policy for localhost and onion case 52700bbd0c

ober added 1 commit 2026-09-23 16:03:57 -04:00

fix: preserve isolation generations across renewals bcd5a12c39

ober added 1 commit 2026-09-23 16:04:54 -04:00

test: make IPC startup probe deterministic dcaa43adf7

ober added 1 commit 2026-09-23 16:08:47 -04:00

feat: route resolver and TLS through capabilities d57f1b71a9

ober added 2 commits 2026-09-23 16:11:14 -04:00

fix: reject explicit false config values 01912f32a5

feat: route onion lifecycle through capabilities 70a57297d1

ober added 1 commit 2026-09-23 16:11:57 -04:00

feat: route events through client capabilities 3d96e3c2ad

ober added 1 commit 2026-09-23 16:13:56 -04:00

fix: validate stream buffer ranges 614192fb60

ober added 1 commit 2026-09-23 16:15:43 -04:00

fix: bind transport contexts to their client bf4ceb1472

ober added 1 commit 2026-09-23 16:17:36 -04:00

fix: keep unavailable engine launches stopped 329564ada3

ober merged commit dcd7e41668 into master 2026-09-23 16:51:28 -04:00

ober referenced this pull request from a commit 2026-09-23 16:51:29 -04:00

Merge pull request 'feat: integrate Arti with Jerboa SQLite storage' (#1) from feat/tor-everywhere into master

Sign in to join this conversation.

Reviewers

No reviewers

Labels

Clear labels

No items

No labels

Milestone

Clear milestone

No items

No milestone

Projects

Clear projects

No items

No project

Assignees

Clear assignees

No assignees

1 participant

Notifications

Subscribe

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference

ober/jerboa-tor!1

No description provided.