eterna2 / kest / 24046067929
91%

DEFAULT BRANCH: main
Ran
Jobs 1
Files 45
Run time 1min
Badge
Embed ▾
README BADGES
x

If you need to use a raster PNG badge, change the '.svg' to '.png' in the link

Markdown

Textile

RDoc

HTML

Rst
coverage: 87.251%. First build
24046067929

push

github

web-flow 
release: v0.3.0 — Zero Trust framework with Rust core, OBO delegation… (#2)

* release: v0.3.0 — Zero Trust framework with Rust core, OBO delegation, and kest-lab

## Breaking Changes
- Package renamed from `kest-core` to `kest` (import path unchanged)
- Terminology: `workload_id` → `identity`, `entry_id` → `resource`
- Inline OPA/Regorus removed from core; use `OPAPolicyEngine` or `CedarLocalEngine`

## Core Library (kest v0.3.0)
- Rust core engine (RFC 8785, ED25519, Merkle DAG) via PyO3
- `@kest_verified` decorator with policy, identity, taint, and OTel integration
- Policy engines: CedarLocalEngine (in-process), OPAPolicyEngine, CedarPolicyEngine, AVP
- Identity providers: SPIRE, AWS, Bedrock, OIDC, Local, AutoDetector, Mock
- `KestIdentityMiddleware`: JWKS JWT verification, OBO (RFC 8693) delegation support
- `kest-viz` CLI: Mermaid DAG + table views of audit logs
- Built-in policy library: Bell-LaPadula, Biba, Brewer-Nash, Clark-Wilson, Goguen-Meseguer
- 94 unit tests passing, 87% coverage

## Kest Lab Showcase
- Containerized 3-hop ZTA: SPIRE + Keycloak + OPA + Cedar + OTel + kest-agent
- RFC 8693 OBO delegation: alice → kest-agent → hop1 → hop2 → hop3
- kest-lab declared as dependent on kest-core-python via moon dependsOn (fixes graph cycle)
- kest editable path dependency in pyproject.toml via [tool.uv.sources]
- 10 live integration tests passing

## Documentation & CI/CD
- Next.js documentation site with global search, Mermaid rendering, dark mode
- GitHub Pages: stable/, v0.3.0/, preview/<branch>/ via peaceiris/actions-gh-pages
- Root splash page (index.html) auto-regenerated listing all versions and PR previews
- PR preview comment with direct link and stable comparison URL

## Bug Fixes
- Fixed OTel baggage stomping in root_handler multi-hop propagation
- Fixed Keycloak token exchange 403 (missing audience mapper on kest-cli client)
- Fixed CedarLocalEngine startup crash (malformed f-string from debug injection)
- Fixed Moonrepo cycle: re... (continued)

1971 of 2259 relevant lines covered (87.25%)

0.87 hits per line

Jobs
ID Job ID Ran Files Coverage
1 24046067929.1 45
87.25
 GitHub Action Run
Source Files on build 24046067929