feat(attest): confidential messages delivered only to hash-verified modules - #10

Merged

senamakel merged 92 commits into

mainfrom

confidential-messages

Aug 14, 2026

Commits on Aug 13, 2026

chore(tinybus): move hash module to crate root

senamakel
and
medullabot
committed
ffb21cc
chore: add hash module

senamakel
and
medullabot
committed
27efe0b
fix(module): remove unused import of `std::sync::Arc`

senamakel
and
medullabot
committed
37653d7
fix(host): restore module host shutdown on drop

senamakel
and
medullabot
committed
1cc522b
fix(attest): restore missing attestation verification

senamakel
and
medullabot
committed
14403ca
fix(error): derive Clone for BusError

senamakel
and
medullabot
committed
20840f2
fix(error): derive Clone for BusError

senamakel
and
medullabot
committed
f0c5aef
fix(error): derive Clone for BusError

senamakel
and
medullabot
committed
fbb71a0
fix(error): derive Clone for BusError

senamakel
and
medullabot
committed
13a5eab
fix(message): restore missing doc comments on public types

senamakel
and
medullabot
committed
cbdf9c9
fix(message): set confidential flag on outgoing messages

senamakel
and
medullabot
committed
aed1142
fix(message): restore missing doc comments on public types

senamakel
and
medullabot
committed
e4cf3ac
fix(message): restore missing doc comments on public types

senamakel
and
medullabot
committed
3de7d28
chore: files changed crates/tinybus/src/message/mod.rs

senamakel
and
medullabot
committed
1494cba
fix(message): restore missing doc comments on public items

senamakel
and
medullabot
committed
bb291ef
fix(message): restore missing doc comments on public types

senamakel
and
medullabot
committed
0d264e1
fix(transport): restore dropped message handling

senamakel
and
medullabot
committed
9277b1c
fix(transport): restore unix socket cleanup on drop

senamakel
and
medullabot
committed
7d20b2e
fix(transport): restore unix socket cleanup on drop

senamakel
and
medullabot
committed
1fbddc5
fix(transport): restore unix socket cleanup on drop

senamakel
and
medullabot
committed
54fd6ec
fix(transport): restore memory transport after refactor

senamakel
and
medullabot
committed
53ac942
fix(router): restore handler removal on unsubscribe

senamakel
and
medullabot
committed
fca5cc6
fix(router): restore handler removal on unsubscribe

senamakel
and
medullabot
committed
eeecd1a
fix(router): restore handler removal on unsubscribe

senamakel
and
medullabot
committed
2613fc6
fix(router): restore handler removal on unsubscribe

senamakel
and
medullabot
committed
28a79ae
fix(router): restore handler removal on unsubscribe

senamakel
and
medullabot
committed
93d791b
fix(router): restore handler removal on unsubscribe

senamakel
and
medullabot
committed
08ec06e
fix(router): restore handler removal on unsubscribe

senamakel
and
medullabot
committed
7947bb2
fix(broker): restore message delivery after subscriber removal

senamakel
and
medullabot
committed
df4c37a
fix(broker): restore message delivery after subscriber removal

senamakel
and
medullabot
committed
4ddb70f
fix(broker): restore message delivery after subscriber removal

senamakel
and
medullabot
committed
5fd71dc
fix(broker): restore message delivery after subscriber removal

senamakel
and
medullabot
committed
1901c99
fix(broker): restore message delivery after subscriber removal

senamakel
and
medullabot
committed
7e37a4d
fix(broker): restore message delivery after subscriber removal

senamakel
and
medullabot
committed
3eee0a0
fix(broker): restore message delivery after subscriber removal

senamakel
and
medullabot
committed
47f94ce
fix(broker): restore message delivery after subscriber removal

senamakel
and
medullabot
committed
dd3eb60
chore: remove unused import in lib.rs

senamakel
and
medullabot
committed
2ec49c2
chore: update lib.rs formatting

senamakel
and
medullabot
committed
9c841b5
fix(proxy): restore dropped method call forwarding

senamakel
and
medullabot
committed
1dc7916
feat(connection): add attestation query for confidential messages

senamakel
and
medullabot
committed
69bd23b
fix(broker): restore message delivery after subscriber removal

senamakel
and
medullabot
committed
4810be3
chore: files changed crates/tinybus/src/module/host.rs

senamakel
and
medullabot
committed
324c4d3
fix(host): restore module host shutdown on drop

senamakel
and
medullabot
committed
d762386
fix(broker): restore message delivery after subscriber removal

senamakel
and
medullabot
committed
498c14a
fix(router): restore handler removal on unsubscribe

senamakel
and
medullabot
committed
0911619
feat(tinybus): add confidential messaging and trust store support

senamakel
and
medullabot
committed
2aca199
fix(bus): restore missing newline in usage output

senamakel
and
medullabot
committed
0c68549
fix(tinybus): update attach calls and CLI test expectations

senamakel
and
medullabot
committed
5d50141
fix(bus): restore missing newline in usage output

senamakel
and
medullabot
committed
b1feb12
feat(message): add confidential flag to message headers

senamakel
and
medullabot
committed
1fc86bc
test(router): cover confidential routing and attestation lifetime

senamakel
and
medullabot
committed
ba4a39f
test(broker): cover confidential calls and attestation

senamakel
and
medullabot
committed
ccd5460
chore: apply rustfmt formatting across tinybus crate

senamakel
and
medullabot
committed
b62740f
docs(attest): document attestation module usage

senamakel
and
medullabot
committed
bd9ab4d
docs: document confidential message delivery guarantees

senamakel
and
medullabot
committed
a4b7057
docs(protocol): document the confidential message flag

senamakel
and
medullabot
committed
4bc9be1
docs(protocol): document GetAttestation method

senamakel
and
medullabot
committed
c7b1c5a
fix(attest): restore missing attestation verification

senamakel
and
medullabot
committed
c3178a5
fix(attest): restore missing attestation verification

senamakel
and
medullabot
committed
2c01568
refactor(tinybus): move hash module under module loader

senamakel
and
medullabot
committed
7dc079e
fix(attest): restore missing attestation verification

senamakel
and
medullabot
committed
92d06e8
refactor(transport): remove peer_process attestation hook

senamakel
and
medullabot
committed
d73188c
refactor(broker): drop transport-level attestation

senamakel
and
medullabot
committed
be34507
fix(tests): attest modules directly instead of via trust store

senamakel
and
medullabot
committed
ff2f78c
fix(broker): restore message delivery after subscriber removal

senamakel
and
medullabot
committed
ba8221b
chore(tinybus): remove trust store option from serve command

senamakel
and
medullabot
committed
1ee9982
fix(host): drop source field from module attestation

senamakel
and
medullabot
committed
0b5d311
chore(tinybus): remove redundant attestation source field

senamakel
and
medullabot
committed
99ecf1f
fix(tests): assert attestation stays with the verified peer

senamakel
and
medullabot
committed
ae17f64
test(module): cover allowlisted artifact loading with ignored integration tests

senamakel
and
medullabot
committed
cf704b7
test(module): use load_file in host allowlist tests

senamakel
and
medullabot
committed
5dedfa1
fix(test): stage modules inside the crate instead of /tmp

senamakel
and
medullabot
committed
c89db91
docs(attest): document attestation module usage

senamakel
and
medullabot
committed
a08f9c0
docs(protocol): clarify confidential delivery is limited to attested modules

senamakel
and
medullabot
committed
6978e94
chore(tinybus): remove trailing blank line in transport trait

senamakel
and
medullabot
committed
f7c8a4b
chore(router): gate attestation code behind modules feature

senamakel
and
medullabot
committed
57a6c28
Merge remote-tracking branch 'upstream/main' into confidential-messages
senamakel
committed
18a133a
docs(attest): record that bulk streams have no confidential mode

senamakel
and
medullabot
committed
ea2229d
fix(error): derive Clone for BusError

senamakel
and
medullabot
committed
59f13e8
fix(error): derive Clone for BusError

senamakel
and
medullabot
committed
a9f425b
docs(attest): document attestation module usage

senamakel
and
medullabot
committed
896a9f0

Commits on Aug 14, 2026

fix(error): derive Clone for BusError

senamakel
and
medullabot
committed
76d0ce8
fix(error): derive Clone for BusError

senamakel
and
medullabot
committed
325d9b3
fix(broker): restore message delivery after subscriber removal

senamakel
and
medullabot
committed
a1bf274
docs(attest): document attestation module usage

senamakel
and
medullabot
committed
1d9f58c
fix(host_test): restore missing test module

senamakel
and
medullabot
committed
a56cbc4
fix(broker): restore message delivery after subscriber removal

senamakel
and
medullabot
committed
0347bc1
fix(broker): collapse confidential method call condition

senamakel
and
medullabot
committed
c665d8d
fix(host_test): restore missing test module

senamakel
and
medullabot
committed
df8cead
fix(host_test): restore missing test module

senamakel
and
medullabot
committed
901a178
test(host): gate allowlist loader tests to unix

senamakel
and
medullabot
committed
eb7d270
fix(host_test): restore missing test module

senamakel
and
medullabot
committed
a24049f