archetech / archon / 24361164228

95%

main: 89%

Pull #408

github

docs: language-agnostic specs for Drawbridge and Herald

Adds spec docs under docs/services/<service>/README.md, same structure
as the existing gatekeeper / keymaster / mediator specs.

- drawbridge — the public-facing paywall + proxy that fronts the
  Gatekeeper, Lightning mediator, and Herald. Covers: L402 challenge
  wire format (HTTP 402 + WWW-Authenticate), macaroons.js caveat
  encoding, subscription-header alternative auth, per-operation pricing
  via env, Redis key schema for macaroons/payments/rate-limit, full
  route table with bypass list, the Herald-CORS exception, and the
  route-normalization rules for metrics.

- herald — the DID-based name service. Covers: challenge-response
  login via Keymaster, stateless Bearer-token name claim, name
  validation rules (3-32 chars, case-insensitive, one per DID),
  credential issue/update/revoke via Keymaster's VC flow, LUD-16
  Lightning address resolution, WebFinger, OAuth 2.0 / OIDC with
  persistent ES256 signing key, IPNS publication, and the three
  storage backends (json/sqlite/redis) with the DatabaseInterface
  shape.

Each spec cross-references Gatekeeper / Keymaster / Lightning-mediator
where relevant. All relative links resolve end-to-end.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

1990 of 2192 branches covered (90.78%)

Branch coverage included in aggregate %.

4231 of 4345 relevant lines covered (97.38%)

1167.44 hits per line