[AAASM-3569] 🔒 (aa-sdk-client): SDK↔runtime IPC authentication & anti-impersonation#1216

Merged

Chisanan232 merged 27 commits into

masterfrom

v0.0.1/AAASM-3569/sdk_runtime_ipc_auth

Jun 24, 2026

Commits on Jun 23, 2026

🔧 (aa-runtime): Add unix libc dep for IPC peer-credential check

Chisanan232
and
claude
committed
🔒 (aa-runtime): Add ipc::peercred peer-UID allow helper

Chisanan232
and
claude
committed
🔒 (aa-runtime): Reject IPC peers whose UID differs from the runtime

Chisanan232
and
claude
committed
🔒 (aa-runtime): Create IPC socket 0600 via umask, scope to agent id

Chisanan232
and
claude
committed
✅ (aa-runtime): Test IPC socket is 0600 and agent-scoped after bind

Chisanan232
and
claude
committed
🔌 (aa-proto): Add assembly.ipc.v1 handshake messages

Chisanan232
and
claude
committed
🔒 (aa-runtime): Add Handshake IPC message variants

Chisanan232
and
claude
committed
🔒 (aa-runtime): Wire Handshake tags into the IPC codec + round-trip tests

Chisanan232
and
claude
committed
🔧 (aa-runtime): Add ed25519-dalek/getrandom/hex for IPC handshake

Chisanan232
and
claude
committed
🔒 (aa-runtime): Add ipc::handshake nonce + Ed25519 proof verification

Chisanan232
and
claude
committed
🔒 (aa-runtime): Gate IPC connections on the Ed25519 session handshake

Chisanan232
and
claude
committed
🔒 (aa-sdk-client): Expose AgentKeypair::sign for handshake proofs

Chisanan232
and
claude
committed
🔒 (aa-sdk-client): Add handshake frame codec (challenge read, proof write)

Chisanan232
and
claude
committed
🔒 (aa-sdk-client): Complete the session handshake on connect, fail-closed

Chisanan232
and
claude
committed
✅ (aa-runtime): Impersonation & forged-event IPC rejection tests

Chisanan232
and
claude
committed
🔌 (aa-proto): Add RegisterRequest.possession_proof field

Chisanan232
and
claude
committed
🔧 (deps): Lock ed25519-dalek/getrandom/hex for aa-runtime IPC handshake

Chisanan232
and
claude
committed
🔒 (aa-gateway): Require possession proof before minting credential_token

Chisanan232
and
claude
committed
✅ (conformance): Set possession_proof in RegisterRequest round-trip

Chisanan232
and
claude
committed
🔒 (aa-sdk-client): Send possession_proof in the Register request

Chisanan232
and
claude
committed
✅ (aa-gateway): Supply possession_proof in Register lifecycle tests

Chisanan232
and
claude
committed
🔧 (aa-integration-tests): Add aa-sdk-client dev-dep for IPC handshake

Chisanan232
and
claude
committed
🐛 (aa-integration-tests): Perform IPC Ed25519 handshake in runtime↔gateway e2e

Chisanan232
and
claude
committed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

[AAASM-3569] 🔒 (aa-sdk-client): SDK↔runtime IPC authentication & anti-impersonation#1216

[AAASM-3569] 🔒 (aa-sdk-client): SDK↔runtime IPC authentication & anti-impersonation#1216
Chisanan232 merged 27 commits into
masterfrom
v0.0.1/AAASM-3569/sdk_runtime_ipc_auth

Commits on Jun 23, 2026

🔧 (aa-runtime): Add unix libc dep for IPC peer-credential check

🔒 (aa-runtime): Add ipc::peercred peer-UID allow helper

🔒 (aa-runtime): Reject IPC peers whose UID differs from the runtime

🔒 (aa-runtime): Create IPC socket 0600 via umask, scope to agent id

✅ (aa-runtime): Test IPC socket is 0600 and agent-scoped after bind

🔌 (aa-proto): Add assembly.ipc.v1 handshake messages

🔒 (aa-runtime): Add Handshake IPC message variants

🔒 (aa-runtime): Wire Handshake tags into the IPC codec + round-trip tests

🔧 (aa-runtime): Add ed25519-dalek/getrandom/hex for IPC handshake

🔒 (aa-runtime): Add ipc::handshake nonce + Ed25519 proof verification

🔒 (aa-runtime): Gate IPC connections on the Ed25519 session handshake

🔒 (aa-sdk-client): Expose AgentKeypair::sign for handshake proofs

🔒 (aa-sdk-client): Add handshake frame codec (challenge read, proof write)

🔒 (aa-sdk-client): Complete the session handshake on connect, fail-closed

✅ (aa-runtime): Impersonation & forged-event IPC rejection tests

🔌 (aa-proto): Add RegisterRequest.possession_proof field

🔧 (deps): Lock ed25519-dalek/getrandom/hex for aa-runtime IPC handshake

🔒 (aa-gateway): Require possession proof before minting credential_token

✅ (conformance): Set possession_proof in RegisterRequest round-trip

🔒 (aa-sdk-client): Send possession_proof in the Register request

✅ (aa-gateway): Supply possession_proof in Register lifecycle tests

🔧 (aa-integration-tests): Add aa-sdk-client dev-dep for IPC handshake

🐛 (aa-integration-tests): Perform IPC Ed25519 handshake in runtime↔gateway e2e

Commits on Jun 24, 2026

🔒 (aa-runtime): Use random nonce in IPC handshake codec round-trip test

🔧 (aa-sdk-client): Add getrandom dev-dep for random handshake test nonces

🔒 (aa-sdk-client): Use random nonces in mock-runtime handshake tests

🔒 (aa-runtime): Generate IPC nonce from a value-returning CSPRNG (clear CodeQL hard-coded-crypto)